last executing test programs:

14.067088448s ago: executing program 2 (id=375):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00')
writev(r0, &(0x7f0000001100)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2)

14.036903093s ago: executing program 2 (id=376):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r7, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)
r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400080, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(r9, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f00000001c0)=0x28)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r8], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})
ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='veth1_to_hsr\x00')
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000958283ef2047e8b98de00030073797a32000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a300000000048000480440001800a0001006c696d6974000000340002800c000240000000000000000908000440000000010c0001400000000000000008080005400000000108000340000000091400000011000100000000"], 0xe4}}, 0x44840)
syz_usb_control_io$hid(r0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r8, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r10, {0x8000}}, './file0\x00'})
io_uring_enter(r8, 0x6894, 0x4ad4, 0x80, &(0x7f0000000200)={[0xfffffffffffffff9]}, 0x8)

12.60088163s ago: executing program 2 (id=383):
syz_emit_ethernet(0x1019, &(0x7f0000000000)={@empty, @random="f49e8f4b3ba7", @val={@val={0x88a8, 0x4, 0x1, 0x3}, {0x8100, 0x2, 0x0, 0x4}}, {@x25={0x805, {0x2, 0x3, 0x23, "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"}}}}, &(0x7f0000001040)={0x0, 0x2, [0xfd, 0xa6f, 0x7ec, 0xf80]})
syz_emit_ethernet(0x74, &(0x7f0000001080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@llc_tr={0x11, {@llc={0xf0, 0x1, "01fe", "faf8876edab6af90af5994d7e09151388c128a7ab10cabacd8e360099dcd19e0e274b571a1e8e241708e4ed0730b0269b0fb1406c26852947ce02cb835ad01747504f026744c355e77172cd9b6c58528b2d08193e40bd0025d27e7ecc851"}}}}}, &(0x7f0000001100)={0x1, 0x4, [0x969, 0xa01, 0x56f, 0x4fc]})
r0 = syz_mount_image$fuse(&(0x7f0000001140), &(0x7f0000001180)='./file0\x00', 0x40000, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@dont_measure}, {@context={'context', 0x3d, 'sysadm_u'}}]}}, 0x0, 0x0, &(0x7f0000001300)="9a3003ca40c1fe85c7ac0b1b58a80ae461d95012c2ff84a8bb76c7c09136d1e27af6c1d7cb7b3dd22e4d99110c0c2f7954b4159649c0f22ec621ebd2433b0c")
execveat(r0, &(0x7f0000001340)='./file0\x00', &(0x7f0000001500)={[&(0x7f0000001380)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f00000013c0)='\x00', &(0x7f0000001400)='\x00', &(0x7f0000001440)='\xbb\xbb\xbb\xbb\xbb\xbb', &(0x7f0000001480)='\'+[}\x00', &(0x7f00000014c0)='&n.(+*\x00']}, &(0x7f00000015c0)={[&(0x7f0000001540)='\x00', &(0x7f0000001580)='\x00']}, 0x1000)
pipe2$watch_queue(&(0x7f0000001600)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000001640)={r1, 0x0, 0x0, r1})
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000001680)={0x6, <r2=>r1, 0x1})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000016c0)={0xdb, 0x0, 0x5})
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_elf64(r3, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x3, 0x8, 0x2, 0x2, 0x2, 0x6, 0x0, 0x10, 0x40, 0x5f, 0x0, 0xf180, 0x38, 0x4, 0x4, 0x3, 0x1}, [{0x70000007, 0x5, 0x1, 0x0, 0x973, 0x6, 0x5, 0x80}, {0x60000000, 0x10000, 0xd, 0xb18, 0x8, 0x3, 0x0, 0x91c}, {0x1, 0xffffffff, 0x9, 0x2e2, 0x8, 0x9, 0x9, 0x6}, {0x5, 0x400, 0x0, 0xfffffffffffffff8, 0x101, 0x5, 0x5, 0x6c5}], "fcaf85acc174dbe1c3799a051f54967f3aa3da987279a08be2a08e47ba73bfd3447c31d7db5114d0ec3a924c90a275de8592ec7d3de7f4f371a2a561fee2b15b3a8547f9021fcdc4acd6e4fa2a38992f29575bc865c42cdb77a22e1304f93981ef905ee43f705d8ca84fcd8addde2eeb252c2313144efc8ab4f6fd057a024692cf00a9d84f21185ef24fc25015b811b3618ce580833619d1f06e8715ac15de", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6bf)
connect(r2, &(0x7f0000001e00)=@phonet={0x23, 0xd1, 0x84, 0x2}, 0x80)
mknod(&(0x7f0000001e80)='./file0\x00', 0x8000, 0x10001)
close(r0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000001ec0)={@loopback, 0xfffffff8, 0x2, 0x1, 0xf, 0x9465, 0x6}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001f00)={<r5=>0x0, 0x5d, "43bdaef65f4be5539382f6d8b08ab96c29922a826f2e8efa2e1dc036ff25b7fcc5676b0664a3ee7c2755cb5348fa5033f9d9ab9a5cca8884f7e297bf4790ca5afe8611628ccde890faa008b5b93752216e14bbf22682f666620256b389"}, &(0x7f0000001f80)=0x65)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000001fc0)=@assoc_value={r5, 0x80}, 0x8)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000002000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x37a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xa, 0x10, 0x5, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0xfd1}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x1, 0x80}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x3}}]}}}]}}]}}, &(0x7f00000025c0)={0xa, &(0x7f0000002040)={0xa, 0x6, 0x300, 0xa, 0x1, 0x4, 0x8, 0xf6}, 0xce, &(0x7f0000002080)={0x5, 0xf, 0xce, 0x6, [@ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0xa5, 0x10, 0x2, "60dbc445677ee274b7403aa4b7e50be01ecbfa316676be9dc88eda071cef02d610e039d004440b9345a20ee0fd15671cb3386ce190b4c3f3cd1d28cc34a5d999c8cfd25294216dd0dc0ca44f0a0bcf85ed12aa5b1a3534d2ca4f40391f85153326ae2d9883ac7550bde72fb1c50f0a573f52019044ef57a2519b983daf63425326f7ae9aba84dbc09b2e6e635f24f28b7070d2c0b0b389c264d6de0dac6d14f0da1f"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x8, 0xf, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "9b5518619f01726253cf974b40f0c35e"}]}, 0x9, [{0x46, &(0x7f0000002180)=@string={0x46, 0x3, "c517bc72c3bb625cd7c8483afc1aa21ac4c5a70751737fd74df31bc83b1d58a7f6a5d4d5d5d254b28cfce9f0dc153f24f4140f6f03f93f155a6b443ef6d634d1a1829151"}}, {0x17, &(0x7f0000002200)=@string={0x17, 0x3, "4a75a9e188491978ad6a12ee783b7b660eb6165007"}}, {0xc, &(0x7f0000002240)=@string={0xc, 0x3, "f7d4248446374db68c27"}}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0xe4b1525d451122bf}}, {0x101, &(0x7f0000002340)=@string={0x101, 0x3, "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"}}, {0xde, &(0x7f0000002480)=@string={0xde, 0x3, "6bb97823d5403dbd1e76f729abd3242756d753db5fcbf1c3122e2db2975c13b87fcba549e8075eea988f752bb0a46bb64e76b82c099fcd23f3bd38d360d2e45f6e764dc5481c750ba53e81443f48a4ececbf901ce51945f5c574272bda3d557f018278eec469a6ad75b9a2e3f90e52ee145a4b2ed3da6f8d3b7a3cf9374a064d6dac895827316f6e8e4f85ce4e640ecd28fc6242e969dae9a51eed0e69bb58f3b1eca79f56a2d2880773453ab12b9bde524e3f4f95624580bf3a39ad6b855b6dea623189e5ee4df08fd53c708e0ea71001f0aea1fd571819e6767aed"}}, {0x4, &(0x7f0000002580)=@lang_id={0x4, 0x3, 0xc0c}}]})
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002680)={0x18c, 0xff, 0x4, 0xc5e, 0x9, 0x3, 0x7fffffff, 0x8, r5}, 0x20)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000002740)={'veth0_virt_wifi\x00', &(0x7f00000026c0)=@ethtool_regs={0x4, 0x80, 0x5f, "e13dea6cffd529b1ed9b2d45549389d2c1946ebac5c5fe6433db678222e76ff1d1687396cb9e0fa238ab2e5937994b3a5273c777ac4d1a12434e54172ffcc9c94010b5835be23ea0da0dbe11622ffe5a747ab9a10dbaacd84c29e9d54945c5"}})
landlock_restrict_self(r1, 0x6)
setxattr$security_ima(&(0x7f0000002780)='./file0\x00', &(0x7f00000027c0), &(0x7f0000002800), 0x1, 0x2)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000a)
socket$inet6(0xa, 0xa, 0x0)
syz_usb_connect(0x0, 0x7d4, &(0x7f0000002840)={{0x12, 0x1, 0x201, 0xcb, 0x62, 0xb5, 0x8, 0x45e, 0x471, 0x51c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c2, 0x2, 0xa2, 0x2, 0x40, 0xfa, "", [{{0x9, 0x4, 0xd8, 0x4, 0x7, 0x22, 0x4b, 0xef, 0x3, [@generic={0x54, 0x31, "cffdc5d882eaf1f510c8c4030450a2b2bdf6b485bfa4bf687311715b7f4e9ca59c9d1f2ce16a1dabfe3cc360a48d67c8921e6aefc665798b868d25285c5e6880255ed4bf0599dde8973d1e8de66158b53b66"}], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x10, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x4}, @generic={0x60, 0x23, "67a9d62e32c8666f93703a433c8a760a3c3bb9b8370090b1dc8ae18d60f725f1f96b32461d3c8ca2dd539a193a7bbf7bcbc588c2c7d9556d66f682aa6ab6159523daa7ed05a0dbca2fd11166e3cc504724eec955c638a34dbbead2c812b5"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc, 0x4}, @generic={0x5, 0x23, "2b2514"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x8, 0x28, 0x9, [@generic={0x9f, 0xb, "0505c68843753a32981e00c0c66d6c4e252760a4312cd7edc79f43223a3b5179862745d78e5c3a021486866713df73564df6b61c111860b122d3b4adc738f0e6959a7a0f78dbcad400b95d1725730d7aed248349f862385db14af8bfe55949dd15c6764863c0af37fe5b470204e09ed1b75b2ff385d268e1e85272d31b307e58e9ad1f2d2e0dee886fd0f61fc8406bce94828f0c8d9f8fb96bb8e4e0b6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x4}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x0, 0x7, 0x7, [@generic={0xf8, 0x5, "1768b827cd1e8da2f263f60b414dd26e2a3f5809383fb3ee17342060eeef5d8ce1603ceccb23ba9cdff712b1d22df8725e83171bb1b50d3ddf712c19af9453eced1a6a829637445173eefe859eef563f1a3728683531288f7a5c39d6c0faf539ef9b5748e9db889eb922248740c1dd74f9f5f3df72bdee18eb66d318b7fe556021210834a038293c80dfbcebe579a757d5bcc06885499ab667855ee8adf2d5f4a8ff3ef99313a14faba96176f7faba20514a61e44523d322ff4e0bb4608e6da49fee62acc8bb341f0e491d1330ea41fdc64bf67b2110cafda7425bebf3d9a43a119ca44f802ad45b6ec7dcaca19ae241fb2460138062"}, @generic={0xec, 0x30, "94ea67d9e7e89b43b20699100db8b66acb18f9b74483569f2ff486bfb33d2f3016283562e2a5c422127c01cd460cc338f4cb8c168baf515dc96eedd055bd130d951ee906c369eb64685886a81a5a4245ab377cb89e7e1c9a96082cf61fd450853188adad06548d4a42b548d36e0d287e3011f0c2c36325713ab014b1caeb4ae9191e905c0ddb18e2c21c88fd4ed6c0e2045b27a9657d6fd3d0473d40a62957349fcfb87aeeed3f721139f989c099392679fd39808e9b33952728d513bc41e94d48b1d76e5c7a45f646a6d7ac1543a44623081eae673e779dbbee7d256f9021aad76680104359b47ec114"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x8a, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}, @generic={0xfb, 0xe, "d94e2485ff4ea70645e313100ae8d967765129b10bb23cd40782989230e332bb7576bcbf17dd9efdb99b2f81a51b93557eaac93bae95b0643b10984793c350a93baa7e6c39c3a035df6b9caa3d896c2301612123f45cc706b63e9441385aea68345cfc850a12722dae8f86df0d19a826629d18425b77a2a777be912520a28eb516fe6b13cef175912cfbb4b32444363bc64419ae73b906e0e2231e67028b96326080942f60689990c97776bb33e14afa9afc02c7c241a6ca4ece38340f310daac5cc42faa7452927e20876a0d93ccd3910540ac802ad234178c9a24e35299a544ed5a70ac5986aef539377a007d5d804e6c3b70594a388d3d3"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x20, 0xa, 0x5, 0x1, [@generic={0x25, 0x23, "0db12a3452692bcdeb1d4fe02388ad6dee9eab0e6716109f001202fe1139fe4ac927e9"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x20, 0x1, 0xc, 0x7}}]}}, {{0x9, 0x4, 0x4a, 0x0, 0x4, 0x1d, 0xdd, 0xce, 0x2, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "3174f895"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x9, 0x3}, [@country_functional={0x12, 0x24, 0x7, 0xfd, 0x868, [0x2, 0x3, 0x4, 0x9, 0x9, 0x81]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x100}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xa, 0x81, 0x45, 0x2, 0x9}, @obex={0x5, 0x24, 0x15, 0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}]}, @generic={0xa1, 0x3, "9fc9dde89545d011ffb66b12e44d19e69cf65cf7d10aae90c7d7945197abb96e6bfac0e73babedb410cc03d6ddf735e6b5f2031852e986391b389c774f452240d79c910f77cbb38a62dc7200ad318d9b49b7847dd28d9cc8c99e31aa768c24fa07cd4ce7adad867615982c39c1c8cc4615b4782abe728ae29dea87fec62d440e9289f0f59ca731b7acceee95e1990c81926be14f68a8adb2594311a8ba75a9"}], [{{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x4, 0x3, [@generic={0x1c, 0xf, "b394613b0d09d7b27dd9ec7acdf5ca146ef5b3fd27419387fa14"}, @generic={0x8b, 0xe, "5aec987d38cc601b8a5806ff8c1f5242b87c16fc629e9b0a344c1f3d3f1f6012db82b75c88a08fe17001425c8014d782914897d4405c3560b3864df6ce0307bc9e4ca9370c01bb349f225a47a7c8faf790b6b6b7beef444fa69a841bde8c5867289190feb3a38ccae2bdc347ac7496f63b82b81e066545d49d88dd2093734b871b306b3e6cce9eec47"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x10, 0xb, 0x8, [@generic={0x6a, 0xc, "ff5db3b8d0b8bed0eda61b98564bba5559895f6d0ad96fb2a9f590c9f5f9e3922db27668d949b256cf3abf8b7993961d49d46d496985e966a8d499ad6f70e0e239278cf62d5ea1ffb15adad8ca1bf0b412536c5eac888611ed0b7795320a78e7885d9e9e03e3c9e2"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0xff, 0xfb, 0x6}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x3f, 0x80, 0xf, [@generic={0xbd, 0x5, "69435e243b5d60195f4e72e6007207e14f0d4991e746f024b198fdcb9c17510a5c8c249509dbc64d826f89194993ed8424d37c8a445535abf743d2be6549a6b5a82affafd613a16cf7b9fbb20fc2f10e719c58df32960361b8916b3388ad448fb24e8e40accb103d1aad2abf7d1f34b7e10ed03727e7252837a90a1a29361a8bd1c346ca40da39ec7d7276ec17970606a02e0cc1dbbb5e50e7540de82cd519a83ff961d67ee15944a2fb4c36e14b665b6b35fd401cbb001eb7ef9a"}]}}]}}]}}]}}, &(0x7f0000003400)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x250, 0x1, 0x7f, 0x10, 0xff, 0x6}, 0x16, &(0x7f0000003080)={0x5, 0xf, 0x16, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0xf, 0x80, 0x5, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x7b, &(0x7f00000030c0)=@string={0x7b, 0x3, "f4d97616c2ed0df135bf271f8e2caaa4c3c8a7803a388dac0c199366dda0fc179b235e21c3cbbf7afd193b7af3d78347e2a1dfe304448ef2046b00fd50f2f9a767c95824b5a94002b55d762a5029b0475b2794606b34f8fd6a6a08d75fc32436e74ec85c211370931ba711d775811bbe43179167a378a80670"}}, {0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x809}}, {0x4, &(0x7f0000003180)=@lang_id={0x4, 0x3, 0x2c01}}, {0xbb, &(0x7f00000031c0)=@string={0xbb, 0x3, "b15b670db93e0358b71fa38e750b7cb0cba5702d603332992afc61cc3addfce3bda7258a56c97c290bf826a243255c2caa1b2f82057be344c6adcf339e842beb95ed8a9634987076fd182cd5f31a82a4099e2b4a7f63c07c0906861d5c8568c2c8b83f30d666753b66164008f22d6a18455eaf050639e15877be94aeadd77c3b5d4fcabdd713c177a1c3348c98de6dd96c64a82e514a3e9d109f2eee36117c66cb430af0cab87f1387dc48a1dc9a41629bd908f1360b893034"}}, {0x4, &(0x7f0000003280)=@lang_id={0x4, 0x3, 0x81a}}, {0x95, &(0x7f00000032c0)=@string={0x95, 0x3, "2e56088028a6969ca9b20997ac8373e210f6377fd92c5e37d0104f75c795fcf4cd00fd35d037e53a5c03819fcce55400c571f4ef0fd43a61def1ad261b75c94933c02065b7dfe10bb504984ec54eb3474050426511488bd61723500c631934b1da2c4370b4d82621495911b3c4cb775db23defa560b50240cb793fe8fd6d61fac2e0b5cfc23923bb4b358b328cc3f94b72f0f7"}}, {0x4, &(0x7f0000003380)=@lang_id={0x4, 0x3, 0x445}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x80c}}]})
io_uring_enter(r2, 0x15d, 0x4c13, 0x22, &(0x7f0000003480)={[0x3]}, 0x8)
syz_usb_connect$uac1(0x6, 0xc3, &(0x7f00000034c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x9008, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x80, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x3, 0x9, 0x10}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x1ff, 0x4, 0x8, "e3dba436f8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4d9e, 0x10ac, 0x9, 0xf}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6f, 0x1, 0x13, 0x7}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xcb, 0x5, 0x6, 0x6, 0x18}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x40, 0x1, 0xf6, 0x7f, 0x8}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xe6, 0x6, {0x7, 0x25, 0x1, 0xc, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0xfe, 0x6b, "82"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x81, 0x9, "6fe2d9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x5, 0x1, {0x7, 0x25, 0x1, 0x8, 0x1, 0x40}}}}}}}}]}}, &(0x7f0000003800)={0xa, &(0x7f00000035c0)={0xa, 0x6, 0x201, 0x0, 0x6, 0xb, 0x10, 0x4}, 0xf, &(0x7f0000003600)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xd, 0x1, 0x2}]}, 0x2, [{0xa5, &(0x7f0000003640)=@string={0xa5, 0x3, "ecf8885ac61b510324b44d9423f755eee0b6aa59e4f74b44b211489a3604cd09df39120411e6655546660b9df56308ff7be1ffd0982057ba96279469fbda4e8a403b1203ccdb5af66bd8f7be708add1804060a8c786caec027a11ae7abaf4f74e3b13b4a386e1c288f5ac46ed4197ffb0a8d791da925e7271500d460ef78854cbc04de601ef2d8f692fae8caca221a85394fea890426723541c54b4ecba810d78873c3"}}, {0xfc, &(0x7f0000003700)=@string={0xfc, 0x3, "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"}}]})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000003840), &(0x7f0000003880)=0x14)
connect(r1, &(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x1, @mcast1, 0x9a8d, 0x4}, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000003a00)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000003940)="5b531cba7e14df4792cb25e01ab5457343cee9244b69050cf86eb22db890248a4e902978ed152897bc5e70893f3eba9a52945f99778c5dc589502c940955ff58cdb50b2fc9cd758c4d01db9e405c8aff91c9cda7c58cc083d070a3b64e579fb7d3c351c9eb95f4598e84b6d819c3d27ade17050fc18762d89763635e47f9c5ea9e55153f712a9ae45e3a38b747b530725c2f04c33eb2cfed8af222e2f876c025fc5232ac4f9421b70bf628e8f7159b", 0xaf, r2}, 0x68)

9.501067173s ago: executing program 2 (id=404):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x84)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x6d, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2})
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@x86={0x2, 0x7, 0x3, 0x0, 0x8, 0x2, 0xff, 0x63, 0x3, 0x2, 0xd, 0x7, 0x0, 0x1, 0xfffffffb, 0xfa, 0x9, 0x2, 0x0, '\x00', 0x25, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000100)=0x9000)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010101, @in6=@empty, 0x0, 0x56, 0x2, 0x0, 0x2}, {0x0, 0x5, 0x1, 0x5, 0xfffffffffffffff6, 0x1fffffc, 0xfffffffffffffffc, 0x8}, {0x4, 0x40000, 0x4}, 0x4000006, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x4d2, 0x33}, 0xa, @in=@loopback, 0x3500, 0x4, 0x0, 0x0, 0xffffffff, 0x8, 0x1}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x2e, "d412be40b532cc37d442bd95cb06448a5e6a76691230ec0a86c3069b91ea70597f000000000000005377714fd11d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.602077989s ago: executing program 1 (id=421):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
connect$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x48, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x5, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x4c840)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
r5 = syz_open_pts(r2, 0x721100)
r6 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x2, 0x0, 0x42474752, 0x0, 0x0, 0x1, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}})
dup3(r5, r2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @multicast1}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000000, 0x4, &(0x7f0000001080))
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x50)
socket$nl_xfrm(0x10, 0x3, 0x6)

6.038605601s ago: executing program 2 (id=423):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181e01, 0x0)
open(0x0, 0x143042, 0x1a8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000000f3b832332d26dcbf49ac63aa1345035cf5172fe8a0df44138980ba80cc3ac9842a03d6e14379e3dd", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x6004840)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket(0x1e, 0x4, 0x0)
recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/127, 0x7f}], 0x1}, 0x8000}, {{0x0, 0x0, 0x0}, 0xfffffff7}], 0x2, 0x12000, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd020000", 0x5}], 0x1, 0x0, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0xe3, 0x8f, 0x7, 0x10, 0xa5c, 0x2033, 0x3b3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xbd, 0x50, 0x3, "", [{{0x9, 0x4, 0xc1, 0x6, 0x0, 0x50, 0xbf, 0x4b, 0x3}}]}}]}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x41f4b933dac26385}, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x283, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bridge0\x00'})
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})

5.557100909s ago: executing program 4 (id=427):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="3d0200007d00000005fc000000000000000000000000000000000000000000000000040000000000000000820000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa673effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11d00cfc200100000f0ffffff000062bce0e622be2666fac8470000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d92ee6891ed6d980049d3b19fd85619879a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00003de6aefecdac1a7d8569d12ca715ee65d5d95b4dbed341322d4662482a8fc0cf289faa8f905248c43afde27d6f2dc350e09d1ef652df89df9e916612cb07c7211e7860b0ed811d282ceda2a3b6e2c3d8f490b2b47d5915a6dc7dea21abbe2d01acf561525f914e6ac232a12aa2d429241fe07bfbf28ab88d2ee121408533cbb476c385c53f2a47c549731bf1c46526f67691921820e0ad77eee62f1dd5eb75", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x23d)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffe})
fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r6})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r6, 0x0, &(0x7f0000003000/0x1000)=nil, 0x1000, 0x7ffffffe})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x26})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="00812be361cf71bf7e", @ANYRES16=r3, @ANYBLOB="0100000000000000000018000000"], 0x14}}, 0x0)

5.172470341s ago: executing program 4 (id=431):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00')
writev(r0, &(0x7f0000001100)=[{0x0}, {0x0}], 0x2)

5.052795119s ago: executing program 4 (id=432):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x3000005, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_int(r1, 0x1, 0x8, 0x0, &(0x7f0000000040)=0x36)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000014c0)=0xc0db522b6cda1052)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="2b637075736574206a873ec8b55e3af77f71212f2a257b7a8501a7d600afacdd5903c38ba64d646912d7d1c251f5a9204a7720e615f5f9b44e8e258c9c681f7843d97e1df9746c678bdfccc6ae339365518c5384ca2c55110787acdaea8ff3c56882a57a516e2b094dbc76474821eccaa305021fdc7805b33c7ab7dfab7a293b29c9a4d0721a687d0865018dc826797150643e4ce8071e6f927ae2f26811d983c73cb111e289721f205ffb7c9c8c6c16cc40a2c319a6f703bf23dcf226b881e0541de603ed1b3f14a708e3f6d7d2ab823d59eb4b4e40a78e03bc41c2"], 0x8)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x404, 0x4, 0x0, 'queue1\x00', 0x1})
write$sndseq(r7, &(0x7f0000000340)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick=0x8, {0xfd, 0x40}, {0x3}, @connect={{0x4, 0x2}, {0x3, 0x9}}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @raw8={"93ec0ccdd44e1cfec21c2b14"}}, {0xf7, 0x81, 0x1, 0xaf, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}, {0x2, 0xff, 0x81, 0xc0, @time={0xd1a, 0xc88}, {0xc, 0x9}, {0x48, 0x5}, @result={0xa80, 0x9f92}}], 0x8c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc0200001800dd8d0000000000000000020000000000000500000000060015000500000098021680ab0101"], 0x2bc}}, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
listen(r10, 0x4)
listen(r9, 0x0)
shutdown(r6, 0x0)
connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7d)
r11 = accept(r9, 0x0, 0x0)
sendto$inet6(r11, &(0x7f0000000080)=':', 0x1, 0x140d3, 0x0, 0x61)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r11, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x49}})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000eb2d14116cfbdbdf2500000000319794b15e2760c7296da2230ff408d36091d2d79a8cbaaab174f03bc7fc0b35b94ff628c9291affec01759a360018aeb68cc73236aa5de0ad7fa941d6313cc52544ca5189cc6b7d1a162282799349ff7715c279a5f3012cef3e51e596a48762f166f373327086257c7374fdabb03d78fd98e8a0de23ee23ed9d8d7c7fe924cc365daffd80270ebbfbbcd1439e75e64d79e53ca37bb1753ff11dd9f74b3f69a3610b2baabadfed8bf4ec763bf43921541284ee4a", @ANYRES8=r0, @ANYBLOB="5d580000000000001c001a8018000a8014000700fc0100000000000000000000000000001400030077673200"/56], 0x50}}, 0x800000000004001)

4.77930153s ago: executing program 1 (id=434):
r0 = socket$inet6(0xa, 0x1, 0x100)
listen(r0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0xff, 0x7ffc0002}]})
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0)
r1 = syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
symlink(0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x9, 0x6, 0x0, 0xb49, 0x800000000009, 0x8, 0x2, 0x3}, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54040000020601030000000000000000020000000c000780a4000800000000400500010006000000050005000200000073797a3100b88c1dfcb126b07c68790000000d0003006c6900fc00"/84], 0x54}}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8)
sendmmsg$inet_sctp(r5, &(0x7f0000000240), 0x0, 0xc5)
r6 = socket(0x23, 0xb, 0x9)
connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000001c0)={'macvtap0\x00'})
write$tun(r7, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], 0xfd1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(r6, &(0x7f0000000000), 0x0, 0x1)

4.113426809s ago: executing program 4 (id=441):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x18, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x20000000, 0x0})

4.063059057s ago: executing program 3 (id=442):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00')
writev(r0, &(0x7f0000001100)=[{0x0}, {0x0}], 0x2)

4.034500266s ago: executing program 3 (id=443):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20)
ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f00000031c0)={0x0, [{0x0, 0x4f0, 0x5, &(0x7f0000000140)="79c85c0a311e071ec4bc90c49ce666f73f640ccd8e3cc1f718c0cbf247f80b44e5751e9288ca23e764fe8555993711f0829a742f392ac70153841768941d57b85d877fb0448a2ba27e8ded85c01d1d7fa439b9d721fb5fee9d5509429dafb31601914c5b5159a141ccdad8c0937ec24c71df5ef5702ce1871d04acc74c3c71cc8bc16305db02143651e827d72cb562ec1fc7a5cd91066a9df29ea0a6bf19"}, {0x2, 0x8000, 0xe379, &(0x7f0000000880)="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"}, {0x2, 0x7a0, 0x8, &(0x7f0000001880)="d3bb50d613f087d9c76eeaa4307fbf8bb8f173208a10493ac9eb87b833d9f9b954f944f5e36f9a38d5f19dfe747e2db686ffe42efc5bba0580b77446cd05a723996423eca27b586b6f6c8f28436ec9740a9c3d302857f07bbaed8a45c14995cd0dccd3799889679315dc154c7e4b9d4c135c8ba347e368538f9c20d5e54674f6ef2715e982053d413447c08f6017156df449e3d478ad580513d8434e2ed4e2e1350afc465258a79f63001e0b4776bd166d240fb0b419ce7458ee6d0c9dbd450bc12055172627543812d40109010b985810ce165587d810563ae9346be2d47b23c360bc7664ffdc6490de3ebc4dd653f880f794bc"}, {0x1, 0x268, 0x2f, &(0x7f0000001980)="9779eadb1fb8b1a0f2272de21c7ab0bf056609aef341c85253bb0d134e47287b7cd3b4e030a2853bdd77c9b786f97dab97fe5ed3e12d06600c8d34c4f0683144663170ab9aa4d2b8a75237d0a4"}, {0x2, 0x480, 0xe, &(0x7f0000001a00)="81b66dc7c98c7ea5bb80f5eff924e0569e399e0558a251c3b4459c736a0549ac60fb485e9f65a03e3b49b9f8bc958dfb9d0642440739e409cf946ed99a59218aac505460893a26498645168160bb15064234c2fefd1ae46db469bc5204e81b7d4675a122dd96349182bb219b46afff46187ca9d5c930e5a3b662b0d9bca17df3a3a0316d9d3b388078f32c4e16bf8325"}, {0x2, 0x590, 0x8, &(0x7f0000001ac0)="25499e64e0c27323608caa013740a4a6078dfdfa7367c298d5e28df0ee2a7c82f654b8f82a88e4aef18dd4e50af1142ca854e1d88ae159ce9f5872277238504ef0cb143571466d9607bbc472ca3ba0c2d77eb7e39e0e88e73f8b5e328f778e097e6527577d48115215d607d2f1c9e8d7e83b9ad9bb80584f81c0589f74d5ee34ee084ff0d70f8fa25616d0f06bcb9c589902a567657c00d2e532a5e55ee21e1ca93708530976aed4307d53d3439e0b16cb82"}, {0x0, 0x298, 0x2, &(0x7f0000001b80)="e355d9539f6ed6499f134a992f0b007c19dea82ffee69a053d42b37b7b0679ab49b12f31058459b1f0965991fcb82456fabd91192a4ba9b409b0eb6a0d625a28364b5c12dbcc88f81ca19e3a3850b7f92c4462"}, {0x1, 0x7c8, 0x1, &(0x7f0000001c00)="61fabd2db45132863bc3a1d7ee2648fff893d77e2dc94f65721919d4614f09cd52d1a30c53bd3c1bc0988aec2ec620f22fe40acb99b9f4d85c2d1a04f401bb828882391a2aeaeaeba602d11baa16e32f6ab6376081a2083c4d775cc4ca499b441da4e4fc89e20237fd2c0462f1fa25afb266fea68e496d83a68e002af8fdf7cbd8298d5df20d98aae2314391cd4ab7178a705379db89f671e8545b42e364caa766bda15b0330e8efd4ce6975b6efd4424c08352ff2d80cdba141650d4e74a874e71e285490fa2ff8a5a2e3f1b7c5c07168df3e2bcf0cc69eb82a7b63609027fdf154de1cc67b9f093e43d635f05279dc88f26163540f8f86f6"}, {0x7, 0x7d0, 0x9c67, &(0x7f0000001d00)="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"}, {0x2, 0x0, 0x9, &(0x7f0000001e00)}, {0x2, 0x598, 0x9cd, &(0x7f0000001e40)="a341242f957de2f5614dee936e45b3fb99082f911508b22e492dbb05b51326a25ae6bdc38847258d702553d285549839f389df38b9a9119d0605136681b4a28d8014d24d83112f84f38f88b23eaa56625a086ecbcccfd9ec0834b33ec65845c11ac7cad32f2b7dc223633d67b8a68c2dfc5869581dd9961e7e20c2f4acb0194b58634c821e36f6ad6d44b880bc39db772976e29ece8d4d8e2a7e235033f585186e5adf13db54a059610f1ba3d38e2c324ee18b"}, {0x2, 0x6f0, 0x7, &(0x7f0000001f00)="05fb70004f1f2abf64054510fbd559f5b484ed21bc7a56886c1b3a989a110c4f3e9a15190d5d3624b09725be697ab7b6d4c148442208b1758206a505a5783f2404d82ce759de347b4fb210f9e8516a2303c9755fef3d0bc7bc66b254eb03f5834f76fa1969e1225c7654d304530107b466134b579f5fbbfd0c879fd4ddc7365dd1de384ead166c0c00fcb888b19e454937d6aac3fab96a08b86e5129fede7181d8013f08c24900f9073d8e0748c30448c6815d83516cc9e75f891151292096e292fb4af1bb43e4efafd91a5b88bd9f5e68673d7343c0146c8d13c916a020"}, {0x0, 0x4a8, 0x6, &(0x7f0000002000)="d44e3b255c5d4ba17d0e69f431406161b4cae5e8f24c9938c21eb140209721f9acfe2e74ecb203c17a83f3c8364dd86a04328766deb7cbcf25800ec2aa9390ff66f92d51df1aea8fc3b083bee744016657c454fc1601683e98cace8789374b57d2b468eb0677a398529f19fd9c71ce53a237585457ae0c496e419438f0b737be2315d5f45373a3d76fed20f8bf6694c92e56a18740"}, {0x3, 0x8000, 0x4, &(0x7f00000020c0)="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"}, {0x3, 0xd8, 0x8, &(0x7f00000030c0)="a4fd265357f3025041a4b9802f2f70ad82f70aeb8ec2fc88670826"}, {0x1, 0x490, 0x101, &(0x7f0000003100)="a1c0ede92c503accec614b71efa5d1a9eedff3cfc5d376f947247c2db4466c22319aea12fa9cc720d5477817e647561bfb5820e1ec1e5ee519d3ba2a6e9317142d4fe818e2aaa665ec25ed1ee81ee076715b02f1cd2080a0f22a87aa4c805ec7c289f3ac3cbe1a44f45a05806734d8b9e0118298eb282545ba4e008f9893095f63d72c671bc1d633960c9f6864550a39a3f4"}]})
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0, 0x0, 0x10})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.972713255s ago: executing program 4 (id=444):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
fsopen(0x0, 0x1)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = io_uring_setup(0x2ea5, &(0x7f0000000080)={0x0, 0x537b, 0x8, 0x3d, 0x279})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$char_usb(r1, &(0x7f0000000040)="b8", 0x1)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)

3.782378334s ago: executing program 1 (id=445):
futex(&(0x7f000000cffc)=0x1, 0xd, 0x101, 0x0, 0x0, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = epoll_create1(0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x24008840)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
close(r3)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000008})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$loop(0x0, 0xffff, 0x14f600)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_misc(r5, 0x0, 0x0)
r6 = accept$inet(r5, &(0x7f0000000180)={0x2, 0x0, @initdev}, &(0x7f00000001c0)=0x10)
accept4$inet(r6, &(0x7f0000000200)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x80800)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1123, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, 0x2, {0x9, 0x21, 0x9fe5, 0x1, 0x1, {0x22, 0xf55}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x31, 0x7}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x310, 0xd4, 0x40, 0x9, 0xff, 0xdf}, 0x39, &(0x7f0000000500)={0x5, 0xf, 0x39, 0x3, [@ptm_cap={0x3}, @generic={0x1d, 0x10, 0xa, "4f67595a14f08c7d1b56f87b0fa38b254a8310d0a7c72fe0fed7"}, @ssp_cap={0x14, 0x10, 0xa, 0x7c, 0x2, 0x8, 0xff0f, 0x6, [0x0, 0xffff30]}]}, 0x3, [{0xb0, &(0x7f0000000780)=@string={0xb0, 0x3, "70f510c4b6e43865b604c88fd244508933eedf2850cd7cd71b6fbaa258c0d3cbc4af60050008fcb47aec27b16680813166f362b00cf7dd5ab410a3f29dfb157d73bd078cca0487dbdfff6bf07dd8db189b1d8451ddb006f9ef9aaf710c58b080d92fd1ae58e43e441ede5a31a3a906a1ee4e16dbf10202ee4f26add245c49a46f19a68f38f67775ef516bd2d18600e25b7c5565a204c7090b62b686978f0971a4d96293d144a26b7784b3fa99e14"}}, {0xbd, &(0x7f0000000840)=@string={0xbd, 0x3, "22feabf87daf1a1152befd6322c1b5af62529ed738519963ebe80002da0203ab5c41a01ec60b3a205fd54667ac6d6eeb200867b3dc3924f0b59cd9989882c58b07af43ad34037e61033348ae755a0c4bbd7dbaf99e154703ec5ef71c177c6a0deee9d0ca63e229c30764bce2972dad0a1047ef199e0c9a60a85e23cb9b738597c94154d6bb3e1307ae0db269ae26770700c9dcd54b556acbb30eb0fac6e18453ef0044d81162fbe007f4cecb9714e2fa9444272955d594ab5ccae1"}}, {0xf0, &(0x7f0000000900)=@string={0xf0, 0x3, "fb6f8f80d73c7fff0741f61e1dae7b3d8ae258d35734948b93b594e83c0c575fd922488a0bdc81eb69c4a5e4972db47669f3357be6d6f87fa6440cad0a195e06862e89784f4c2c75d326d780e8f8373faa7e0767e3bc25c26aff2279b57cd6db4308eded20012c2973c220c7307df7c6229f6587331b9c6c844a4e892ef6f83837fabe84e2a63d766f33f68144fab9e02eaff892148e5e935290b063046ed61bef48a2047dafe5eeca1b3ff5f4dc037c60feecc8e3f80a2c38571cf31659c9ca20aa4302e92217eeba54b29fcfd1089e8a43627220e5ee20f24b60391520cc858429c9196c39ae4e86cde3b06abc"}}]})
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xe, 0x4000080000000700, 0x0, 0x0, 0x19, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000004000", [0xfffffffffffffffc, 0x31]}})
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0xc)
close(r0)
futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2fffffc)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x17, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xb9, 0x6, 0xc, 0x5, 0x8}, @alu={0x7, 0x0, 0xb, 0xb, 0x9, 0x40, 0x10}, @ldst={0x2, 0x2, 0x4, 0x8, 0xa, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x7, 0x0, 0xa, 0x0, 0xa, 0x50, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

3.780302409s ago: executing program 3 (id=446):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x3b94, &(0x7f0000000140)="28000000000000001cafceadde0300000005c10c518baf85c453387ed0a3cacd44169b0da13647d4a0f8")

3.754636417s ago: executing program 3 (id=447):
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000700)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x0, 0x53, &(0x7f0000000100)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000200)=0x28)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000400)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8101, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0xfffffffe, 0x0, "0062ba7d82000000000000000000f7fffeff00"})
r3 = syz_open_pts(r2, 0x8182)
r4 = dup3(r3, r2, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r5 = syz_usb_connect$midi(0x5, 0x5c, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x8, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x80, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x40, 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x70, 0xd}, @midi_out_jack={0xf, 0x24, 0x3, 0x346c040d557adb45, 0x9, 0x4, [{0x7, 0x40}, {0x4, 0xcc}, {0x5, 0x3}, {0x2, 0x5}], 0x1}], [{{0x9, 0x5, 0xb, 0x1, 0x200, 0xf5, 0x1f, 0x2, {0xe, 0x25, 0x1, 0xa, "cec3524aeb84dbbb5752"}}}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x5, 0x2, 0x7, 0xff}, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="050f0f000a1003000500ff01f7ff"], 0x1, [{0x1d, &(0x7f0000000140)=@string={0x1d, 0x3, "56139783280ab9c5c109ddbe857c93210475eeec6486d8b11def37"}}]})
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x20, 0x4, 0xfc, {0xfc, 0xf, "3c889626b37a58da3fa3dd1e8ef08d331aa891110dbced42bf8de1243f679ef7849f502b46ee2b46b5b4df7d88b08d310db09e64e763f1a26cfdd926529c290e77a6a832d5d010744c812d998c293386e093bf19c6e053a5b2382bc8294d33cf5393d835cb0de1a06ef9ddcaee7c42b78ad9385faf48ea6f26cb4b52f28571abe6d7219b61fef7d21dd9910452375df5c56983e16ac98c195b8e3e78005bf9104d8cdfc44bacea644ab0006beb907aa50cf04c8b50f43eedfd476406a93df3f1163afe9cfd82ba0ebc392e5bfbf31add4bfa091a603e94d02ad7bfa3c17143783e191d48d84a5bdd4eb2d7bea37479d1823065b0b61dd44fcfb1"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000580)={0x1c, &(0x7f0000000440)={0x40, 0x18, 0x91, "f7f94690b4e883c9ce52a78ecab07481c4c3436dac67891d2eaa2977d787595425088b0915f386907895153ab4e676ca84b08575343b0c2075ea5acc8c9a0925918e8e1181e0948db1500f0f301fe626422a6f38bdbdb1186979dd2f1ba51f78e9bf7f588363329d54cb04f5cd1628b33974497f0b99012eacfe03413a7feef2d5bbab7bc654d0e52256e4adcd8597ab60"}, &(0x7f0000000500)={0x0, 0xa, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}})
syz_emit_ethernet(0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000021001122334455000a424203"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x4)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r6, @ANYBLOB="05"], 0x0)

3.555727561s ago: executing program 0 (id=448):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2)

3.518717106s ago: executing program 0 (id=449):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r1 = signalfd(r0, &(0x7f0000000380)={[0x9ac]}, 0x8)
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f00000003c0))
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x4, 0x400, 0x0, 0x14}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040), 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902"], 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, 0x0, 0x0, 0x0)
socket(0x2d, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0803, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.590680315s ago: executing program 2 (id=450):
syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e18000400800a927000000009b6d3e4685e6e9030df08a2d1157d0bd5ad39e0589c8cb4b1700d490aa62ad64b6f743fd43116137297a99cfad8654a9be49e988f303ccae4591c162f47f31407db4a152bea68c704f48a731c39a3241748b5e7bc8c4ef2d3d49af579684c88a9fbc9e1fb814144482ef6456ab080b864cc34b3a45dbc063d87b12b78a932b54d15cc9cfd53f2471f8bf5c8fa03d84966d9464f47450875bce5c722af2ab7faef60d805bc400244f99ebd0c9e4b43169bb2f9dac3f2dc792fec7a2c7d859154ea471685d638a909d5027ad5d6cba4ecfe070dc7d5b4928e4a9206214a750f6ad4561"], 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fffffe, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$rds(0x15, 0x5, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0)
close(r2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', <r3=>0x0, 0x29, 0x5, 0x8, 0xffff, 0x11, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2, 0x8, 0x1, 0x7}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x41100, 0x65, '\x00', r3, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400900}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff0000000000000000000005"], 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000080)={0x7fff, 0x32315241, 0x1, @discrete={0x5, 0x5}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x28)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28)
setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000040), 0x44)
r6 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='addr\x00\xde\xbc\x1fB\x82\xff\x1ef\xfan\xcc\xa4\xcc~-3\x8dZ\xdd\x06(\xbeG\xd8\x00\x0f\x95_\xd0\xf5\xbc\xfc\xa1\x02a\xd9\xf9q\xb2j\x0f\xfel\x9a\xc0\xae8\x8bT\xaa\xde\xbe\x98E\xf3-\xab\xc2\n\x13\xe9X\x89\t\fC\xbc\xd5\n\xe1r\x0eq\xb6\xdc\xc9M:Y6F\xf13\x90\x1dO[P,\x8csKv\xdbJ\xf9\x00r`C\f)\"\x10\xb2\x8f\x876\xcd\x86\x95\x8dV\x0eF\x12\xf7\x89s\x98\xa5\xed\xfb\xc5\x86\x85\x9e\xf0Ee\xc4\x11\xc0\xc7%#\x95D\x84rq\xedb\xc4h\xd7\x05\x00\x04\x009\x96\x1d\xd2+\x1ay\x86N\xe3\xf4\xedw\xd7\xa3\xbe\xd7\x800\x0f\xa1\x90c%\xb1\x0e\xb2\x80C\xb3\x13`\x88\x13mH\x86[F4\x97)\r\x9e$\x934(\x7f\xa5 &\xabb\x00\x00\x00\x00\x00', &(0x7f0000000200)='127\x9b\xe5\x8e\x18.1B\xe8\x0e\xcf+W\x1fz\x9ch\b\xb0\xba_*bm\xfd\xa6\xc89%\x95\x82(\xf5Sk\x113\x04\x0f\xf4v\x8c\x18\xc0\x903\x9e\xc6\xd3\x04\b`\x80\xe2\x05\xfe\x82\x91\xa5c\xfa\xac\xf8\xdfh\xb2\xae\xbb1L\x1e\x06`\xb5IK\xa5u:\xab\xbcz\x99\x86\xd3%o\\\"\x93\xf5\xb8\x01Y\xf3<\xe9\xbdJ.2\x9d\xc9\tj\xaf\x9a\xa9\xef\xd1\xec\x8f5\xd8\xecO\x86\xa1ua\xfa\xd3M\x9eBQ\xe7\xb1_s\xef\x9c\x19\x89 \xd3\xc23\x06l\xb1]*SD\x0e', 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4)
r7 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000002c0)=0x12)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r8, 0x8008af83, &(0x7f00000000c0))
r9 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_THP_DISABLE(0x44, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)

2.011500328s ago: executing program 0 (id=451):
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r5, &(0x7f0000000400)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x56, &(0x7f0000000180)=[{&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x8}}, @ip_tos_u8={{0x11, 0x29, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002102, 0x1, {0x3}})
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000500)={0x53, 0xffffffffffffffff, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="4d9b6cc40327", 0x0, 0x9, 0x20, 0x10, 0x0})
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa9daaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe800000000000000000000000030000000000000000000000000000000000aa2c000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$sock(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="640000001000010600000045d93cb400000000007fff0000000000000000000010003f00f8ff0700af2d4c7a59d6fc582400120008000100766574681800020014000100000000007fff00000f000000000066279b0f2300001000030000657468590000", 0x64}], 0x1}, 0x400400c)

1.900729681s ago: executing program 0 (id=452):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80400)
getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=<r2=>0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
bind$packet(r3, &(0x7f0000000240)={0x11, 0x8, 0x1, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r3, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}, 0x80)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c)
write(r3, &(0x7f0000000000)="01000000", 0x4)
r4 = syz_clone(0x10010000, &(0x7f00000004c0)="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", 0x1000, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="b6aa037162c2fc2a7d8c3857e46cfe05ab85eb59ab96e76300de213391e4c0db50c31a373a58220307bc873a3bacd583a2f3fd478b474568200176d152fd4e392038124bd9300218e37b238243a5e632865a416d6a46e4a95dbd96a0581b294056364b4e094c256669e3cedd0e1a05e1061545f3499267715602d4a32dbe7a2b445bd23c388adffffc0b6891101ffca14f91591f3ad9133659c0804ea299caa2a99d3184f47eacb0f10bddadf7d43fd28f44c11f342ed6e1d1d75c026e35501e5b11e372c944ae72a8d177c1c9bcc7c70a27624de2276e194e15c0e8c5999cee627d054f7c7520595e7acf8e6bd09f1d98166fe633959c5d")
sendmsg$nl_netfilter(r1, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001640)={0x480, 0xe, 0x4, 0x201, 0x70bd26, 0x25dfdbfe, {}, [@generic="c37868458257ba81286e22fbb99f1cd803681bf4ac100732a40aa0aed43ea1861dd871b262a004622afa8e1cd41515cad38b11960fe8a44224cf97f24a79515960995648ba4717bc35e2db891bb5", @nested={0x95, 0x16, 0x0, 0x1, [@nested={0x4, 0x152}, @nested={0x4, 0x78}, @nested={0x4, 0x123}, @nested={0x4, 0xfd}, @typed={0x8, 0xbc, 0x0, 0x0, @uid=r2}, @generic="20c1092081ec426e8e7368f15f8af6118eca9e5a41b23788bbc990c074c4065aacfee730b4a1256524c7b91c696912db6632c938069daf777c159c6ad9544089842aaafb7282ea8bb4c5e304db1c0f7dcd5917e3f300ae3af3608557dfade020bd3275aeb84c9e3f8ac48adaeeecd52191b83aa50a", @nested={0x4, 0x123}]}, @typed={0x8, 0x16b, 0x0, 0x0, @pid=r4}, @nested={0x149, 0x167, 0x0, 0x1, [@generic="7b61e2d39334083d661c1bdb0d938a3fe040fd494473d9de2a5c2d8604595807ce47a050d4ac1f657ab7d2eea97f19591ea5f8d10c9daecd1e5919b243bdda5796f1e2832ec6f75430809e775253daf67abee2147e3948cc403693c9969bbdc90cd67f3884300f430265fc", @typed={0x4, 0x125}, @generic="108ffb8cb170391e65db", @typed={0x14, 0x168, 0x0, 0x0, @ipv6=@private1}, @generic="46d4a7b57eb2ca9f9664f54c1c7e0c34ba1b23f9684ca445a19147c7145400e0a9c08d197919fb2477a85ae394a5b5078fd311cd5cce089c3e8830c91b63445070553d35012bdb566d139d6ff8b16a5e7e3a6830421f35418d8c0389370177c0e95a7944c02808390330d172bfc4f1b443ce9cce31db1627407e8b9942f09778156de74ffdc28c78a3f4ccac3871717102263061a09e2f71825b57617d3e22633e627720a6649fe45b51b0e926d704d9", @typed={0x5, 0x104, 0x0, 0x0, @str='\x00'}]}, @generic="3af8eb374d77c521ed742d8321c9ebf8b2ca68f0eb93c67f34f1676cea028cae650bae08f13a1b237ef6384f79affc0383c2376d9ffcd85a44e0c7f34b2bebd6c60a97e3e62171cf116d56ef5d0d036b480e99dc0af6ccaf445668a3729e9dea01088351854cb6d73b11a7bc7137ac95304638932669d27a971c1e84b5039a3ca2de7bcaa9eccfe14f03f4777ba930d58cd79af67dff0b442263765e1b508a181627165e08d0d14d22be65d85992c1b77bb2f57827951513443c0372635c14465e97eea3de3268e0d97b6a5fb1c72a2ecf14975f7bdb21f91b28ae92cad07cf5becc713d4d0a98ca3d9513db7f290ed18a14121bf278", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @generic="91a364542f4571503aadd2c962aaa54c2647cc345268693ccd5ee9ce6aa365b429b30bc18a90fa5eba02b97c264b53cd673bd190e66a927f3249ba8b9d1f9b50ad97babe6d0a0e0055ff5363231cb53a66ad2b1ffb348c3cef791edcdf6ff383be8d3d637399c86ded34761b79ac8322c7452136b8fee81dcf4fac14336e62d912875066f46847622d9f9115e13790d2f15ab8a5be5051e6543ea23a8ce1f45861a070ab193774838162cc5c009917996277be4682191f", @nested={0xe, 0xad, 0x0, 0x1, [@generic='7m', @nested={0x4, 0x152}, @nested={0x4, 0xf6}]}, @nested={0x6c, 0xeb, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @pid}, @generic="a4d389a3864fd72def60cab2a0a798c0f9823adc6a9d2dc04efd3a4b6d5677528498b83e377999cbdc6b8e5b51c5fac73268d66effed071a041ea19ed878fc3df43f40aa0cd05c1101540cab9679a3ab2ac2e7bf33740048f84037a0dbe93ea2"]}]}, 0x480}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.802977671s ago: executing program 0 (id=453):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='gid_map\x00')
writev(r0, &(0x7f0000001100)=[{&(0x7f0000000040)}, {0x0}], 0x2)

1.801001289s ago: executing program 4 (id=454):
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80e00000c001600040000000000000005001400f8000000"], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="000a04000000d5620963"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, r9, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$uac1(r4, &(0x7f0000000680)={0x14, &(0x7f0000000500)={0x40, 0xb, 0x9b, {0x9b, 0x6, "fb74c1dfdc0b4b4ee44750359ee7825770269032ee78360b0b8ffcd0beb72f8f8218111084207077087bc4f7de061c39bc7637c1feff496281aca12462689b49c97abe55ca37cd642ee44dd542c44bf3d6bbe90e7cfaf42365a594304856c0060df857736443c6acc47c099a5a2b26f20def49b1f49b9befd24a4125b569abefff98afb82ae291cfc185708394dceda98acdc6052f9176edd3"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44}}}, &(0x7f0000000b80)={0x44, &(0x7f00000006c0)={0x20, 0x12, 0x41, "91928e0c1b73b7889716241508db83d35493a720580d4f3f168e2bf1529e5b84c6f77a39b45c0fbcbcc5d89f79df45b66141bb5cbbc03412da3f60a5b08d389f8a"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x79}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "23d5"}, &(0x7f0000000a80)={0x20, 0x82, 0x1, "ae"}, &(0x7f0000000ac0)={0x20, 0x83, 0x1, "d6"}, &(0x7f0000000b00)={0x20, 0x84, 0x3, "3ef7a2"}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "aea5c8"}})
r12 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r12, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r12, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r13 = dup(r11)
syz_ublk_setup_queues(r13, r10, &(0x7f0000000180)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r13}, <r14=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0}, 0x94)
r15 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r15, 0x84, 0x71, &(0x7f00000002c0)="1a00000002000000", 0x8)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r14, 0x119, 0x1, &(0x7f0000000000), 0x4)

1.779707857s ago: executing program 0 (id=455):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d328", 0xfffffefd}], 0x1)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000540)="ebe3a0e9796cfd164781f4a75803e2be", 0x10}], 0x1, 0x0, 0x0, 0x20048044}], 0x1, 0x20040045)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/3, 0x3}, {&(0x7f0000000180)=""/181, 0xb5}], 0x2}, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000a00), 0x0, &(0x7f000001be80)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000000000001400000000000000290000003e0000000080000000000000300000000000000029000000370000000602000000000000040105c2040000000105020007c2040000000400010000001400000000000000290000"], 0x200}}, {{&(0x7f0000000100)={0xa, 0x4e20, 0x231, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff25}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="10ff1a5ece7974162c584b03e5696fc9546282d60d141e2c87b1f8938bc9426622c5c2a20f003a13f3351354d019d4d9c915d1af4b68a57eb3b0ea59edb9639984eec3327c4cdb0a5ed19e81ac52b57841d4a6821d04116e40f30924e846a109fe8baaef98e5ad821d52e2f491cd6a0dd991d03b0cdb7f3216e5a84e3a06455a329be544fb457faeacd454193d25be1fd32186e2a8832edcbcb90d9f62e2df3a83f3c0e69d2dec3acd1d3526c4af532fd9a7a773f25269282151021c5ce2946b12a868e349f38b78e7c88c270c4477be371595909570", 0xd6}], 0x1}}], 0x3, 0x0)
shutdown(r1, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000200000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000050000000900030073797a31000000000900010073797a310000000028000480080002401886c3010800014000000005140003006d61637674617030000000000000000028000000000a05000000000000000000010000080900010073797a310000000008000240"], 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r5 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r5, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}})
syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e155038aad51c1ee170"])
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0)
r6 = userfaultfd(0x0)
ioctl$UFFDIO_CONTINUE(r6, 0xc028aa05, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1000000})

769.278267ms ago: executing program 1 (id=456):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
process_madvise(r3, &(0x7f0000000140), 0x0, 0x13, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0xfffffffffffffffe, 0x10001, 0x800, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x800, 0x0, 0x0, 0x80000, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070025bd7000fddbff2505000000180001801400020073797a5f74756e0000000000000015000c0003800400038004000100080005001027"], 0x40}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0)

615.106579ms ago: executing program 1 (id=457):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl(r0, 0x3b94, &(0x7f0000000140)="28000000000000001cafceadde0300000005c10c518baf85c453387ed0a3cacd44169b0da13647d4a0")

594.141229ms ago: executing program 1 (id=458):
openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x12, 0x0, 0x5, "2a161d2d71"}})
syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000300000020392a8c3f4000010203010902a500030104007f080b0101010a20020904000000010120000924010700063500b20724dd04cfa80a0924070503000103000c2403010403830500150022102446054d2fc0691e13564c8c020101040907936f0000000307010904010000010220000904010101010220001024010505000400000005050000004409050109000206998008250101181c00000904020000015fbf"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) (async)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e04023920"], 0x7)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000500), 0x800000000ffff, 0x14f600) (async)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad00013100102030109"], 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x80002, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r2], 0x24}}, 0x4000000) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x96, 0x0, 0x0, 0xa, "fd0f09a2"}, 0x5, 0x2, {}, 0x80000}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
write$binfmt_misc(r3, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89df3b7fbebffe60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}})
socket$netlink(0x10, 0x3, 0x400000000000004) (async)
syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) (async, rerun: 32)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) (rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x801)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x7, 0xe9, 0x0, 0x2, 0x0, 0x0, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x80, '\x00', 0xfd, 0x8f}) (async)
syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403412785600010000000109027b000201008032080b0002010020000904000000010120000924010002082a0000112402010101000302030000000000000008240b030104010008240a040101000009040100000102200009040101010102200010240101000101000000020300000000062402010210070501054000010825010000000000"], 0x0)
close_range(0xffffffffffffffff, r4, 0x0)

312.061299ms ago: executing program 3 (id=459):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0xc81c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2)

0s ago: executing program 3 (id=460):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
io_setup(0x4, &(0x7f00000014c0)=<r1=>0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)
io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x71e, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0xfffffff8, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x8, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x0, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x103, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0x3, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x80, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x9, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffbfc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0x2ffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x7, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xffffffff}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0xe1f, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x3}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x7ffffffd}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'rose0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r11, @ANYBLOB="080005", @ANYRES32=r11], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4)
socket$inet6_sctp(0xa, 0x5, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10)
io_uring_setup(0x1195, &(0x7f0000000180)={0x0, 0x2150, 0x20, 0x0, 0xc4})

kernel console output (not intermixed with test programs):

]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.606348][ T6274] RIP: 0033:0x7efd3235e98e
[  103.606373][ T6274] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  103.606388][ T6274] RSP: 002b:00007efd33220fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  103.606413][ T6274] RAX: ffffffffffffffda RBX: 00007efd332216c0 RCX: 00007efd3235e98e
[  103.606427][ T6274] RDX: 000000000000000f RSI: 00007efd332210a0 RDI: 0000000000000003
[  103.606440][ T6274] RBP: 00007efd33221090 R08: 0000000000000000 R09: 0000000000000000
[  103.606459][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  103.606470][ T6274] R13: 00007efd32626038 R14: 00007efd32625fa0 R15: 00007efd3274fa48
[  103.606502][ T6274]  </TASK>
[  103.656826][ T5663] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  103.861881][ T1697] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  103.891617][ T1697] usb 5-1: device descriptor read/8, error -71
[  103.904427][ T5663] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  103.906021][ T5663] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  103.906043][ T5663] usb 4-1: config 0 has no interface number 0
[  103.906081][ T5663] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  103.906105][ T5663] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  103.958573][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.958587][ T5663] usb 4-1: Product: syz
[  103.958595][ T5663] usb 4-1: Manufacturer: syz
[  103.958602][ T5663] usb 4-1: SerialNumber: syz
[  103.964439][ T5663] usb 4-1: config 0 descriptor??
[  103.965517][ T6270] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  103.974153][ T5663] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  104.008591][ T1697] usb usb5-port1: unable to enumerate USB device
[  104.030484][ T5663] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  104.180420][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  104.953848][ T5690] em28xx 2-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[  104.953890][ T5690] em28xx 2-1:1.0: board has no eeprom
[  105.015598][ T5690] em28xx 2-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44)
[  105.015627][ T5690] em28xx 2-1:1.0: dvb set to bulk mode.
[  105.054704][ T5690] em28xx 2-1:1.0: Binding DVB extension
[  105.088414][ T5690] em28xx 2-1:1.0: writing to i2c device at 0x1e failed (error=-5)
[  105.088454][ T5690] zl10353_read_register: readreg error (reg=127, ret==-5)
[  105.088507][ T5690] em28xx 2-1:1.0: frontend initialization failed
[  105.137527][ T5690] em28xx 2-1:1.0: Remote control support is not available for this card.
[  105.215280][ T5719] usb 4-1: USB disconnect, device number 20
[  105.239139][ T5719] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  105.239490][ T5719] cyberjack 4-1:0.69: device disconnected
[  105.602576][ T6307] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  105.893601][ T6312] netlink: Invalid conntrack timeout
[  105.893644][ T6312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  105.957513][ T6317] batadv_slave_1: entered promiscuous mode
[  106.255641][ T5719] usb 2-1: USB disconnect, device number 8
[  106.260743][ T5719] em28xx 2-1:1.0: Disconnecting em28xx
[  106.260844][ T5719] em28xx 2-1:1.0: Closing input extension
[  106.296546][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.296798][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.449799][ T6323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  106.458761][ T6323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  106.486714][ T5690] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  106.625395][ T5690] usb 4-1: device descriptor read/64, error -71
[  106.749229][ T5719] em28xx: Freeing device
[  106.867700][ T6334] syzkaller0: entered promiscuous mode
[  106.867723][ T6334] syzkaller0: entered allmulticast mode
[  106.877332][ T5690] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  106.949645][ T6334] netlink: Conntrack attr has 1 unknown bytes
[  106.949667][ T6334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  106.951566][   T31] audit: type=1326 audit(1790923819.966:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.951594][   T31] audit: type=1326 audit(1790923819.966:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.953198][   T31] audit: type=1326 audit(1790923819.966:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.953487][   T31] audit: type=1326 audit(1790923819.966:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.954199][   T31] audit: type=1326 audit(1790923819.966:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.954573][   T31] audit: type=1326 audit(1790923819.966:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  106.955699][   T31] audit: type=1326 audit(1790923819.976:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6332 comm="syz.1.140" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  107.023095][ T5690] usb 4-1: device descriptor read/64, error -71
[  107.149283][ T5690] usb usb4-port1: attempt power cycle
[  107.149741][ T6314] batadv_slave_1: left promiscuous mode
[  107.495324][ T5690] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  107.519628][ T5690] usb 4-1: device descriptor read/8, error -71
[  107.766224][ T5690] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  107.785858][ T5690] usb 4-1: device descriptor read/8, error -71
[  107.895926][ T5690] usb usb4-port1: unable to enumerate USB device
[  107.987538][ T5710] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  108.084573][ T6373] FAULT_INJECTION: forcing a failure.
[  108.084573][ T6373] name failslab, interval 1, probability 0, space 0, times 0
[  108.084606][ T6373] CPU: 1 UID: 0 PID: 6373 Comm: syz.2.147 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  108.084633][ T6373] Tainted: [L]=SOFTLOCKUP
[  108.084639][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  108.084649][ T6373] Call Trace:
[  108.084656][ T6373]  <TASK>
[  108.084664][ T6373]  dump_stack_lvl+0xe8/0x150
[  108.084696][ T6373]  should_fail_ex+0x410/0x560
[  108.084723][ T6373]  ? dup_task_struct+0x52/0xa00
[  108.084748][ T6373]  should_failslab+0xa8/0x100
[  108.084775][ T6373]  ? dup_task_struct+0x52/0xa00
[  108.084797][ T6373]  kmem_cache_alloc_node_noprof+0xa1/0x610
[  108.084821][ T6373]  ? dup_task_struct+0x52/0xa00
[  108.084852][ T6373]  dup_task_struct+0x52/0xa00
[  108.084878][ T6373]  ? _raw_spin_unlock_irq+0x23/0x50
[  108.084906][ T6373]  copy_process+0x7e0/0x4400
[  108.084959][ T6373]  ? rcu_is_watching+0x16/0xb0
[  108.084987][ T6373]  ? __pfx_copy_process+0x10/0x10
[  108.085020][ T6373]  ? mutex_init_lockdep+0xdf/0x110
[  108.085048][ T6373]  vhost_task_create+0x1f9/0x380
[  108.085079][ T6373]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  108.085101][ T6373]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  108.085123][ T6373]  ? __pfx_vhost_task_create+0x10/0x10
[  108.085141][ T6373]  ? register_lock_class+0x31/0x2e0
[  108.085169][ T6373]  ? __pfx_vhost_task_fn+0x10/0x10
[  108.085198][ T6373]  ? kasan_quarantine_put+0xbb/0x1f0
[  108.085227][ T6373]  kvm_mmu_post_init_vm+0x147/0x2b0
[  108.085255][ T6373]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  108.085294][ T6373]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  108.085322][ T6373]  kvm_vcpu_ioctl+0xa61/0xfd0
[  108.085349][ T6373]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  108.085368][ T6373]  ? hook_file_ioctl+0x1f2/0x600
[  108.085413][ T6373]  ? __fget_files+0x2a/0x420
[  108.085444][ T6373]  ? __fget_files+0x2a/0x420
[  108.085470][ T6373]  ? __fget_files+0x3a2/0x420
[  108.085496][ T6373]  ? __fget_files+0x2a/0x420
[  108.085527][ T6373]  ? bpf_lsm_file_ioctl+0x9/0x20
[  108.085555][ T6373]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  108.085576][ T6373]  __se_sys_ioctl+0xfc/0x170
[  108.085600][ T6373]  do_syscall_64+0x166/0x520
[  108.085626][ T6373]  ? trace_irq_disable+0x3b/0x140
[  108.085646][ T6373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.085666][ T6373]  ? clear_bhb_loop+0x70/0xc0
[  108.085690][ T6373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.085709][ T6373] RIP: 0033:0x7efd3239e159
[  108.085726][ T6373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  108.085742][ T6373] RSP: 002b:00007efd33200028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  108.085762][ T6373] RAX: ffffffffffffffda RBX: 00007efd32626090 RCX: 00007efd3239e159
[  108.085777][ T6373] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  108.085788][ T6373] RBP: 00007efd33200090 R08: 0000000000000000 R09: 0000000000000000
[  108.085800][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  108.085812][ T6373] R13: 00007efd32626128 R14: 00007efd32626090 R15: 00007efd3274fa48
[  108.085843][ T6373]  </TASK>
[  108.159907][ T5710] usb 2-1: Using ep0 maxpacket: 32
[  108.171057][ T5710] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  108.196307][ T5710] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  108.196322][ T5710] usb 2-1: config 0 has no interface number 0
[  108.196345][ T5710] usb 2-1: config 0 interface 12 has no altsetting 0
[  108.258963][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.258986][ T5710] usb 2-1: Product: syz
[  108.259001][ T5710] usb 2-1: Manufacturer: syz
[  108.259016][ T5710] usb 2-1: SerialNumber: syz
[  108.260102][ T5690] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  108.374691][ T5710] usb 2-1: config 0 descriptor??
[  108.506653][ T5690] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  108.506691][ T5690] usb 1-1: too many configurations: 253, using maximum allowed: 8
[  108.507655][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.507684][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.510074][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.510102][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.511283][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.511312][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.514104][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.514121][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.544072][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.544126][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.608568][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.608597][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.651182][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.651207][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.682653][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.682674][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.682714][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.718513][ T5690] usb 1-1: config 0 descriptor??
[  108.938489][ T5690] usbhid 1-1:0.0: can't add hid device: -71
[  108.938611][ T5690] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  108.982054][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'.
[  108.984945][ T5690] usb 1-1: USB disconnect, device number 17
[  109.425321][ T6384] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  109.466148][ T5690] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  109.616436][ T5690] usb 1-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  109.617781][ T5690] usb 1-1: config 4 has an invalid interface number: 44 but max is 0
[  109.617804][ T5690] usb 1-1: config 4 has no interface number 0
[  109.617839][ T5690] usb 1-1: config 4 interface 44 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  109.617895][ T5690] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x8D has invalid maxpacket 256, setting to 64
[  109.617919][ T5690] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  109.617943][ T5690] usb 1-1: config 4 interface 44 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.619406][   T31] audit: type=1326 audit(1790923822.636:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.2.152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3239e159 code=0x7ffc0000
[  109.622429][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.622452][ T5690] usb 1-1: Product: syz
[  109.622754][ T5690] usb 1-1: Manufacturer: syz
[  109.622794][ T5690] usb 1-1: SerialNumber: syz
[  109.624032][   T31] audit: type=1326 audit(1790923822.636:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.2.152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7efd3239e159 code=0x7ffc0000
[  109.624506][   T31] audit: type=1326 audit(1790923822.636:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.2.152" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd3239e159 code=0x7ffc0000
[  109.895206][ T1697] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  110.047186][ T1697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  110.068246][ T1697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  110.068277][ T1697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.068312][ T1697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.070018][ T1697] usb 4-1: config 0 descriptor??
[  110.127043][ T5710] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  110.127125][ T5710] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  110.127142][ T5710] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  110.127247][ T5710] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  110.167594][ T5710] usb 2-1: USB disconnect, device number 9
[  110.200139][ T5690] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  110.216329][ T5690] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  110.218002][ T5690] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  110.218077][ T5690] usb 1-1: media controller created
[  110.223123][ T5690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.322961][ T5690] DVB: Unable to find symbol dib7000p_attach()
[  110.322987][ T5690] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  110.445160][ T5690] rc_core: IR keymap rc-dib0700-rc5 not found
[  110.445266][ T5690] Registered IR keymap rc-empty
[  110.445676][ T5690] dvb-usb: could not initialize remote control.
[  110.445682][ T5690] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  110.482014][ T5690] dib0700: rc submit urb failed
[  110.508380][ T1697] konepure 0003:1E7D:2DBE.0002: unknown main item tag 0x4
[  110.528569][ T1697] konepure 0003:1E7D:2DBE.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.3-1/input0
[  110.692976][    T9] usb 1-1: USB disconnect, device number 18
[  110.710379][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  110.710989][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  110.751293][ T5663] usb 4-1: USB disconnect, device number 25
[  110.843103][    T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  111.467503][ T6403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'.
[  111.485571][ T6403] tipc: Started in network mode
[  111.485603][ T6403] tipc: Node identity ac14140f, cluster identity 4711
[  111.486317][ T6403] tipc: New replicast peer: 255.255.255.255
[  111.492988][ T6403] tipc: Enabled bearer <udp:syz2>, priority 10
[  111.680315][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'.
[  111.706815][ T6414] FAULT_INJECTION: forcing a failure.
[  111.706815][ T6414] name failslab, interval 1, probability 0, space 0, times 0
[  111.706846][ T6414] CPU: 0 UID: 0 PID: 6414 Comm: syz.4.160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.706872][ T6414] Tainted: [L]=SOFTLOCKUP
[  111.706879][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.706889][ T6414] Call Trace:
[  111.706897][ T6414]  <TASK>
[  111.706905][ T6414]  dump_stack_lvl+0xe8/0x150
[  111.706937][ T6414]  should_fail_ex+0x410/0x560
[  111.706969][ T6414]  should_failslab+0xa8/0x100
[  111.706997][ T6414]  __kmalloc_cache_node_noprof+0xaa/0x620
[  111.707021][ T6414]  ? __get_vm_area_node+0x155/0x2f0
[  111.707047][ T6414]  ? __get_vm_area_node+0x155/0x2f0
[  111.707081][ T6414]  __get_vm_area_node+0x155/0x2f0
[  111.707115][ T6414]  __vmalloc_node_range_noprof+0x343/0x1540
[  111.707145][ T6414]  ? copy_process+0x7e0/0x4400
[  111.707174][ T6414]  ? percpu_ref_get_many+0x19/0x140
[  111.707201][ T6414]  ? percpu_ref_get_many+0x19/0x140
[  111.707233][ T6414]  ? __memcg_slab_post_alloc_hook+0x487/0xd90
[  111.707267][ T6414]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.707297][ T6414]  ? dup_task_struct+0x52/0xa00
[  111.707320][ T6414]  ? trace_kmem_cache_alloc+0x29/0xe0
[  111.707340][ T6414]  ? memcpy_and_pad+0x48/0x80
[  111.707363][ T6414]  __vmalloc_node_noprof+0xc2/0x100
[  111.707393][ T6414]  ? copy_process+0x7e0/0x4400
[  111.707416][ T6414]  ? copy_process+0x7e0/0x4400
[  111.707443][ T6414]  dup_task_struct+0x2c6/0xa00
[  111.707475][ T6414]  copy_process+0x7e0/0x4400
[  111.707536][ T6414]  ? rcu_is_watching+0x16/0xb0
[  111.707568][ T6414]  ? __pfx_copy_process+0x10/0x10
[  111.707601][ T6414]  ? mutex_init_lockdep+0xdf/0x110
[  111.707635][ T6414]  vhost_task_create+0x1f9/0x380
[  111.707656][ T6414]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  111.707679][ T6414]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  111.707703][ T6414]  ? __pfx_vhost_task_create+0x10/0x10
[  111.707722][ T6414]  ? register_lock_class+0x31/0x2e0
[  111.707751][ T6414]  ? __pfx_vhost_task_fn+0x10/0x10
[  111.707781][ T6414]  ? kasan_quarantine_put+0xbb/0x1f0
[  111.707809][ T6414]  kvm_mmu_post_init_vm+0x147/0x2b0
[  111.707837][ T6414]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  111.707876][ T6414]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  111.707902][ T6414]  kvm_vcpu_ioctl+0xa61/0xfd0
[  111.707929][ T6414]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.707949][ T6414]  ? hook_file_ioctl+0x1f2/0x600
[  111.707993][ T6414]  ? __fget_files+0x2a/0x420
[  111.708023][ T6414]  ? __fget_files+0x2a/0x420
[  111.708050][ T6414]  ? __fget_files+0x3a2/0x420
[  111.708075][ T6414]  ? __fget_files+0x2a/0x420
[  111.708106][ T6414]  ? bpf_lsm_file_ioctl+0x9/0x20
[  111.708133][ T6414]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.708155][ T6414]  __se_sys_ioctl+0xfc/0x170
[  111.708179][ T6414]  do_syscall_64+0x166/0x520
[  111.708205][ T6414]  ? trace_irq_disable+0x3b/0x140
[  111.708225][ T6414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.708245][ T6414]  ? clear_bhb_loop+0x70/0xc0
[  111.708269][ T6414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.708288][ T6414] RIP: 0033:0x7ff4b679e159
[  111.708306][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.708322][ T6414] RSP: 002b:00007ff4b75a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.708342][ T6414] RAX: ffffffffffffffda RBX: 00007ff4b6a26090 RCX: 00007ff4b679e159
[  111.708356][ T6414] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  111.708368][ T6414] RBP: 00007ff4b75a7090 R08: 0000000000000000 R09: 0000000000000000
[  111.708380][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.708392][ T6414] R13: 00007ff4b6a26128 R14: 00007ff4b6a26090 R15: 00007ff4b6b4fa48
[  111.708424][ T6414]  </TASK>
[  111.727113][ T6414] syz.4.160: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  111.727295][ T6414] CPU: 0 UID: 0 PID: 6414 Comm: syz.4.160 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  111.727321][ T6414] Tainted: [L]=SOFTLOCKUP
[  111.727327][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  111.727338][ T6414] Call Trace:
[  111.727345][ T6414]  <TASK>
[  111.727352][ T6414]  dump_stack_lvl+0xe8/0x150
[  111.727383][ T6414]  warn_alloc+0x24d/0x270
[  111.727403][ T6414]  ? __kasan_kmalloc+0x22/0xb0
[  111.727429][ T6414]  ? __pfx_warn_alloc+0x10/0x10
[  111.727448][ T6414]  ? __get_vm_area_node+0x155/0x2f0
[  111.727482][ T6414]  ? __get_vm_area_node+0x2a9/0x2f0
[  111.727517][ T6414]  __vmalloc_node_range_noprof+0x36b/0x1540
[  111.727550][ T6414]  ? percpu_ref_get_many+0x19/0x140
[  111.727576][ T6414]  ? percpu_ref_get_many+0x19/0x140
[  111.727606][ T6414]  ? __memcg_slab_post_alloc_hook+0x487/0xd90
[  111.727647][ T6414]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  111.727676][ T6414]  ? dup_task_struct+0x52/0xa00
[  111.727699][ T6414]  ? trace_kmem_cache_alloc+0x29/0xe0
[  111.727718][ T6414]  ? memcpy_and_pad+0x48/0x80
[  111.727743][ T6414]  __vmalloc_node_noprof+0xc2/0x100
[  111.727772][ T6414]  ? copy_process+0x7e0/0x4400
[  111.727794][ T6414]  ? copy_process+0x7e0/0x4400
[  111.727819][ T6414]  dup_task_struct+0x2c6/0xa00
[  111.727850][ T6414]  copy_process+0x7e0/0x4400
[  111.727900][ T6414]  ? rcu_is_watching+0x16/0xb0
[  111.727927][ T6414]  ? __pfx_copy_process+0x10/0x10
[  111.727958][ T6414]  ? mutex_init_lockdep+0xdf/0x110
[  111.727985][ T6414]  vhost_task_create+0x1f9/0x380
[  111.728004][ T6414]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  111.728027][ T6414]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  111.728051][ T6414]  ? __pfx_vhost_task_create+0x10/0x10
[  111.728069][ T6414]  ? register_lock_class+0x31/0x2e0
[  111.728096][ T6414]  ? __pfx_vhost_task_fn+0x10/0x10
[  111.728123][ T6414]  ? kasan_quarantine_put+0xbb/0x1f0
[  111.728150][ T6414]  kvm_mmu_post_init_vm+0x147/0x2b0
[  111.728177][ T6414]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  111.728214][ T6414]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  111.728240][ T6414]  kvm_vcpu_ioctl+0xa61/0xfd0
[  111.728264][ T6414]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.728281][ T6414]  ? hook_file_ioctl+0x1f2/0x600
[  111.728322][ T6414]  ? __fget_files+0x2a/0x420
[  111.728350][ T6414]  ? __fget_files+0x2a/0x420
[  111.728376][ T6414]  ? __fget_files+0x3a2/0x420
[  111.728401][ T6414]  ? __fget_files+0x2a/0x420
[  111.728431][ T6414]  ? bpf_lsm_file_ioctl+0x9/0x20
[  111.728460][ T6414]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  111.728482][ T6414]  __se_sys_ioctl+0xfc/0x170
[  111.728506][ T6414]  do_syscall_64+0x166/0x520
[  111.728533][ T6414]  ? trace_irq_disable+0x3b/0x140
[  111.728552][ T6414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.728570][ T6414]  ? clear_bhb_loop+0x70/0xc0
[  111.728593][ T6414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.728610][ T6414] RIP: 0033:0x7ff4b679e159
[  111.728636][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  111.728651][ T6414] RSP: 002b:00007ff4b75a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  111.728670][ T6414] RAX: ffffffffffffffda RBX: 00007ff4b6a26090 RCX: 00007ff4b679e159
[  111.728683][ T6414] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  111.728694][ T6414] RBP: 00007ff4b75a7090 R08: 0000000000000000 R09: 0000000000000000
[  111.728705][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.728715][ T6414] R13: 00007ff4b6a26128 R14: 00007ff4b6a26090 R15: 00007ff4b6b4fa48
[  111.728745][ T6414]  </TASK>
[  111.770460][ T6414] Mem-Info:
[  111.770470][ T6414] active_anon:7165 inactive_anon:0 isolated_anon:0
[  111.770470][ T6414]  active_file:0 inactive_file:54761 isolated_file:0
[  111.770470][ T6414]  unevictable:0 dirty:259 writeback:0
[  111.770470][ T6414]  slab_reclaimable:12512 slab_unreclaimable:92198
[  111.770470][ T6414]  mapped:31693 shmem:922 pagetables:1308
[  111.770470][ T6414]  sec_pagetables:3 bounce:0
[  111.770470][ T6414]  kernel_misc_reclaimable:0
[  111.770470][ T6414]  free:1313058 free_pcp:14224 free_cma:0
[  111.770520][ T6414] Node 0 active_anon:28660kB inactive_anon:0kB active_file:0kB inactive_file:218852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:126772kB dirty:1036kB writeback:0kB shmem:3688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12544kB pagetables:5080kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  111.770572][ T6414] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  111.770630][ T6414] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.770686][ T6414] lowmem_reserve[]: 0 2487 2487 2487 2487
[  111.770720][ T6414] Node 0 DMA32 free:1296044kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28660kB inactive_anon:0kB active_file:0kB inactive_file:218852kB unevictable:0kB writepending:1036kB zspages:0kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:56896kB local_pcp:34504kB free_cma:0kB
[  111.770775][ T6414] lowmem_reserve[]: 0 0 0 0 0
[  111.770807][ T6414] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.770859][ T6414] lowmem_reserve[]: 0 0 0 0 0
[  111.770890][ T6414] Node 1 Normal free:3940828kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  111.770944][ T6414] lowmem_reserve[]: 0 0 0 0 0
[  111.770975][ T6414] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  111.771115][ T6414] Node 0 DMA32: 1745*4kB (UME) 1209*8kB (UME) 684*16kB (UME) 367*32kB (UME) 204*64kB (UME) 51*128kB (UM) 45*256kB (UME) 18*512kB (UME) 2*1024kB (UM) 5*2048kB (M) 294*4096kB (UM) = 1296172kB
[  111.771260][ T6414] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  111.771352][ T6414] Node 1 Normal: 3*4kB (UM) 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 5*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3940828kB
[  111.771505][ T6414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.771520][ T6414] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.771539][ T6414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  111.771554][ T6414] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  111.771568][ T6414] 55675 total pagecache pages
[  111.771579][ T6414] 0 pages in swap cache
[  111.771585][ T6414] Free swap  = 124996kB
[  111.771592][ T6414] Total swap = 124996kB
[  111.771599][ T6414] 2097051 pages RAM
[  111.771606][ T6414] 0 pages HighMem/MovableOnly
[  111.771612][ T6414] 428719 pages reserved
[  111.771625][ T6414] 0 pages cma reserved
[  111.938717][ T1697] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  112.168004][ T1697] usb 1-1: Using ep0 maxpacket: 32
[  112.222629][ T1697] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  112.343992][ T1697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.344018][ T1697] usb 1-1: Product: syz
[  112.344031][ T1697] usb 1-1: Manufacturer: syz
[  112.344044][ T1697] usb 1-1: SerialNumber: syz
[  112.623477][    T9] tipc: Node number set to 2886997007
[  112.631022][   T31] kauditd_printk_skb: 6 callbacks suppressed
[  112.631046][   T31] audit: type=1326 audit(1790923825.646:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  112.639222][   T31] audit: type=1326 audit(1790923825.656:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  112.706488][ T5663] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  112.708138][   T31] audit: type=1326 audit(1790923825.726:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f962af5e98e code=0x7ffc0000
[  112.708180][   T31] audit: type=1326 audit(1790923825.726:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f962af5e98e code=0x7ffc0000
[  112.708216][   T31] audit: type=1326 audit(1790923825.726:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  112.708251][   T31] audit: type=1326 audit(1790923825.726:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6417 comm="syz.3.164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  112.835285][ T5663] usb 2-1: device descriptor read/64, error -71
[  113.096098][ T5663] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  113.129370][ T1697] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  113.163233][ T6427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.166'.
[  113.225244][ T5663] usb 2-1: device descriptor read/64, error -71
[  113.335413][ T5663] usb usb2-port1: attempt power cycle
[  113.606454][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.606867][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.660482][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.660903][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.676543][ T5663] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  113.692375][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.692794][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.696953][ T5663] usb 2-1: device descriptor read/8, error -71
[  113.700966][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.701368][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.722420][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  113.722815][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  113.759121][ T6443] fuse: fd is not a fuse device
[  113.936165][ T5663] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  113.957029][ T5663] usb 2-1: device descriptor read/8, error -71
[  114.065559][ T5663] usb usb2-port1: unable to enumerate USB device
[  114.660110][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'.
[  114.829768][   T31] audit: type=1326 audit(1790923827.846:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  114.833165][   T31] audit: type=1326 audit(1790923827.846:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  114.833371][   T31] audit: type=1326 audit(1790923827.846:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  114.833727][   T31] audit: type=1326 audit(1790923827.846:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.178" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  115.017553][ T5710] usb 1-1: USB disconnect, device number 19
[  115.169217][ T6461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'.
[  115.231057][ T6477] loop0: detected capacity change from 0 to 6
[  115.283960][ T6477] Dev loop0: unable to read RDB block 6
[  115.284002][ T6477]  loop0: unable to read partition table
[  115.285468][ T6477] loop0: partition table beyond EOD, truncated
[  115.285496][ T6477] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  115.425294][    T9] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  115.590493][    T9] usb 4-1: descriptor type invalid, skip
[  115.590515][    T9] usb 4-1: descriptor type invalid, skip
[  115.590527][    T9] usb 4-1: descriptor type invalid, skip
[  115.590638][    T9] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  115.590669][    T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  115.590701][    T9] usb 4-1: too many configurations: 58, using maximum allowed: 8
[  115.595518][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  115.595548][    T9] usb 4-1: can't read configurations, error -61
[  115.725264][    T9] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  115.735051][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.736662][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.863484][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.878684][    T9] usb 4-1: descriptor type invalid, skip
[  115.878702][    T9] usb 4-1: descriptor type invalid, skip
[  115.878722][    T9] usb 4-1: descriptor type invalid, skip
[  115.878735][    T9] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  115.878765][    T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  115.878797][    T9] usb 4-1: too many configurations: 58, using maximum allowed: 8
[  115.882056][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  115.882088][    T9] usb 4-1: can't read configurations, error -61
[  115.882398][    T9] usb usb4-port1: attempt power cycle
[  115.936089][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.996248][ T6196] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.996277][ T6196] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.996295][ T6196] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  115.996313][ T6196] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  116.057429][ T6496] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.058482][ T6496] 8021q: adding VLAN 0 to HW filter on device team0
[  116.061601][ T6496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.098998][ T6496] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.099063][ T6496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.101340][ T6496] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.101418][ T6496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.114209][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.115356][ T5719] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  116.121415][ T6496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.134976][ T6496] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  116.217732][    T9] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  116.237510][    T9] usb 4-1: descriptor type invalid, skip
[  116.237527][    T9] usb 4-1: descriptor type invalid, skip
[  116.237540][    T9] usb 4-1: descriptor type invalid, skip
[  116.237552][    T9] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  116.237582][    T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  116.237615][    T9] usb 4-1: too many configurations: 58, using maximum allowed: 8
[  116.239313][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  116.239345][    T9] usb 4-1: can't read configurations, error -61
[  116.265684][ T5719] usb 2-1: Using ep0 maxpacket: 32
[  116.266308][ T5719] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  116.267347][ T5719] usb 2-1: config 0 has an invalid interface number: 146 but max is 0
[  116.267369][ T5719] usb 2-1: config 0 has no interface number 0
[  116.267405][ T5719] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  116.267425][ T5719] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  116.267449][ T5719] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  116.267473][ T5719] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  116.267496][ T5719] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  116.267519][ T5719] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.267539][ T5719] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  116.267561][ T5719] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  116.267581][ T5719] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  116.270497][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.270520][ T5719] usb 2-1: Product: syz
[  116.270534][ T5719] usb 2-1: Manufacturer: syz
[  116.270548][ T5719] usb 2-1: SerialNumber: syz
[  116.276308][ T5719] usb 2-1: config 0 descriptor??
[  116.277049][ T6491] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  116.283372][ T5719] usb 2-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  116.283392][ T5719] usb 2-1: couldn't find an output bulk endpoint. Bailing out.
[  116.365599][    T9] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  116.392822][    T9] usb 4-1: descriptor type invalid, skip
[  116.392840][    T9] usb 4-1: descriptor type invalid, skip
[  116.392851][    T9] usb 4-1: descriptor type invalid, skip
[  116.392863][    T9] usb 4-1: LPM exit latency is zeroed, disabling LPM.
[  116.392892][    T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  116.392925][    T9] usb 4-1: too many configurations: 58, using maximum allowed: 8
[  116.394667][    T9] usb 4-1: unable to read config index 0 descriptor/start: -61
[  116.394698][    T9] usb 4-1: can't read configurations, error -61
[  116.394999][    T9] usb usb4-port1: unable to enumerate USB device
[  116.497459][ T6497] raw_sendmsg: syz.1.186 forgot to set AF_INET. Fix it!
[  116.667688][ T5705] usb 2-1: USB disconnect, device number 14
[  116.754194][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'.
[  117.161044][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.287257][ T6518] loop0: detected capacity change from 0 to 6
[  117.333041][ T6518] Dev loop0: unable to read RDB block 6
[  117.334193][ T6518]  loop0: unable to read partition table
[  117.334306][ T6518] loop0: partition table beyond EOD, truncated
[  117.334317][ T6518] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  117.755495][ T5719] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  117.886276][ T5719] usb 5-1: device descriptor read/64, error -71
[  118.091854][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.201'.
[  118.126106][ T5719] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  118.255759][ T5719] usb 5-1: device descriptor read/64, error -71
[  118.368817][ T5719] usb usb5-port1: attempt power cycle
[  118.559380][   T31] kauditd_printk_skb: 98 callbacks suppressed
[  118.559392][   T31] audit: type=1326 audit(1790923831.576:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.559416][   T31] audit: type=1326 audit(1790923831.576:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.560255][   T31] audit: type=1326 audit(1790923831.576:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.560286][   T31] audit: type=1326 audit(1790923831.576:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.560311][   T31] audit: type=1326 audit(1790923831.576:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.571924][   T31] audit: type=1326 audit(1790923831.586:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.571949][   T31] audit: type=1326 audit(1790923831.586:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.571972][   T31] audit: type=1326 audit(1790923831.586:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.735537][ T5719] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  118.736130][   T31] audit: type=1326 audit(1790923831.756:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.758600][ T5719] usb 5-1: device descriptor read/8, error -71
[  118.759778][   T31] audit: type=1326 audit(1790923831.776:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6550 comm="syz.3.203" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  118.933440][ T6557] =======================================================
[  118.933440][ T6557] WARNING: The mand mount option has been deprecated and
[  118.933440][ T6557]          and is ignored by this kernel. Remove the mand
[  118.933440][ T6557]          option from the mount to silence this warning.
[  118.933440][ T6557] =======================================================
[  118.998227][ T5719] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  119.016077][ T5719] usb 5-1: device descriptor read/8, error -71
[  119.125554][ T5719] usb usb5-port1: unable to enumerate USB device
[  119.485664][ T5719] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  119.615192][ T5719] usb 3-1: device descriptor read/64, error -71
[  119.689385][ T5690] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  119.835158][ T5690] usb 1-1: Using ep0 maxpacket: 32
[  119.835991][ T5690] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  119.837437][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.837480][ T5690] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.844240][ T5690] usb 1-1: config 0 descriptor??
[  119.873606][ T5719] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  120.005277][ T5719] usb 3-1: device descriptor read/64, error -71
[  120.117765][ T5719] usb usb3-port1: attempt power cycle
[  120.345247][ T5690] hid (null): report_id 0 is invalid
[  120.345269][ T5690] hid (null): unknown global tag 0xe
[  120.369376][ T5690] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0003/input/input9
[  120.455367][ T5719] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  120.475793][ T5719] usb 3-1: device descriptor read/8, error -71
[  120.499522][ T6572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'.
[  120.531380][ T5690] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0003/input/input10
[  120.559842][ T6570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.560221][ T6570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.641818][ T5690] uclogic 0003:5543:0042.0003: input,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0
[  120.715163][ T5719] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  120.719926][ T5690] usb 1-1: USB disconnect, device number 20
[  120.743199][ T5719] usb 3-1: device descriptor read/8, error -71
[  120.848176][ T5719] usb usb3-port1: unable to enumerate USB device
[  120.910900][ T6577] fido_id[6577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  121.487652][ T5719] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  121.493643][ T6592] batman_adv: batadv0: Adding interface: gretap1
[  121.493658][ T6592] batman_adv: batadv0: The MTU of interface gretap1 is too small (1294) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  121.493687][ T6592] batman_adv: batadv0: Interface activated: gretap1
[  121.685322][ T5719] usb 2-1: Using ep0 maxpacket: 16
[  121.685881][ T5719] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  121.689362][ T5719] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  121.689387][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.689431][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.693534][ T5719] usb 2-1: config 0 descriptor??
[  121.746507][ T5719] pxrc 2-1:0.0: Could not find endpoint
[  122.083142][ T5663] usb 2-1: USB disconnect, device number 15
[  122.238500][ T6610] Cannot find set identified by id 0 to match
[  122.436798][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.2.221'.
[  122.575289][ T5663] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  122.716005][ T6624] loop0: detected capacity change from 0 to 6
[  122.747103][ T5663] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[  122.748704][ T5663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  122.748747][ T5663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.750780][ T5663] usb 4-1: config 0 descriptor??
[  122.775959][ T6624] Dev loop0: unable to read RDB block 6
[  122.775998][ T6624]  loop0: unable to read partition table
[  122.776196][ T6624] loop0: partition table beyond EOD, truncated
[  122.776213][ T6624] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  122.821415][ T5663] smsusb:smsusb_probe: board id=8, interface number 0
[  122.822977][ T5663] smsusb:smsusb_probe: Device initialized with return code -19
[  123.054943][ T5690] usb 4-1: USB disconnect, device number 30
[  123.514085][ T6654] netlink: 'syz.0.233': attribute type 1 has an invalid length.
[  123.565350][ T5690] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  123.628858][   T31] kauditd_printk_skb: 261 callbacks suppressed
[  123.628869][   T31] audit: type=1326 audit(1790923836.646:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.3.220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f962af5e98e code=0x7ffc0000
[  123.630075][ T6656] binder_alloc: 6655: binder_alloc_buf size 4294966880 failed, no address space
[  123.630122][ T6656] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  123.669163][   T31] audit: type=1326 audit(1790923836.686:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.0.234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a9cd9e159 code=0x0
[  123.675117][    T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  123.695462][ T5690] usb 2-1: device descriptor read/64, error -71
[  123.729224][   T31] audit: type=1326 audit(1790923836.746:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.3.220" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  123.878592][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  123.879147][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  123.879178][    T9] usb 5-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  123.880207][    T9] usb 5-1: config 4 has an invalid interface number: 135 but max is 0
[  123.880231][    T9] usb 5-1: config 4 has no interface number 0
[  123.880260][    T9] usb 5-1: config 4 interface 135 has no altsetting 0
[  123.884971][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.884996][    T9] usb 5-1: Product: syz
[  123.885011][    T9] usb 5-1: Manufacturer: syz
[  123.885024][    T9] usb 5-1: SerialNumber: syz
[  123.935480][ T5690] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  123.962993][ T6663] FAULT_INJECTION: forcing a failure.
[  123.962993][ T6663] name failslab, interval 1, probability 0, space 0, times 0
[  123.963032][ T6663] CPU: 1 UID: 0 PID: 6663 Comm: syz.3.235 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  123.963058][ T6663] Tainted: [L]=SOFTLOCKUP
[  123.963063][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  123.963074][ T6663] Call Trace:
[  123.963081][ T6663]  <TASK>
[  123.963089][ T6663]  dump_stack_lvl+0xe8/0x150
[  123.963132][ T6663]  should_fail_ex+0x410/0x560
[  123.963160][ T6663]  should_failslab+0xa8/0x100
[  123.963187][ T6663]  __kmalloc_noprof+0xfe/0x720
[  123.963208][ T6663]  ? mutex_init_lockdep+0xdf/0x110
[  123.963231][ T6663]  ? security_task_alloc+0x4d/0x330
[  123.963251][ T6663]  ? security_task_alloc+0x4d/0x330
[  123.963279][ T6663]  security_task_alloc+0x4d/0x330
[  123.963305][ T6663]  copy_process+0x1c49/0x4400
[  123.963347][ T6663]  ? copy_process+0xd16/0x4400
[  123.963386][ T6663]  ? __pfx_copy_process+0x10/0x10
[  123.963426][ T6663]  ? mutex_init_lockdep+0xdf/0x110
[  123.963453][ T6663]  vhost_task_create+0x1f9/0x380
[  123.963473][ T6663]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  123.963494][ T6663]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  123.963518][ T6663]  ? __pfx_vhost_task_create+0x10/0x10
[  123.963536][ T6663]  ? register_lock_class+0x31/0x2e0
[  123.963565][ T6663]  ? __pfx_vhost_task_fn+0x10/0x10
[  123.963594][ T6663]  ? kasan_quarantine_put+0xbb/0x1f0
[  123.963623][ T6663]  kvm_mmu_post_init_vm+0x147/0x2b0
[  123.963651][ T6663]  kvm_arch_vcpu_ioctl_run+0x7c/0x19c0
[  123.963690][ T6663]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  123.963716][ T6663]  kvm_vcpu_ioctl+0xa61/0xfd0
[  123.963743][ T6663]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  123.963762][ T6663]  ? hook_file_ioctl+0x1f2/0x600
[  123.963804][ T6663]  ? __fget_files+0x2a/0x420
[  123.963830][ T6663]  ? __fget_files+0x2a/0x420
[  123.963848][ T6663]  ? __fget_files+0x3a2/0x420
[  123.963866][ T6663]  ? __fget_files+0x2a/0x420
[  123.963890][ T6663]  ? bpf_lsm_file_ioctl+0x9/0x20
[  123.963915][ T6663]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  123.963933][ T6663]  __se_sys_ioctl+0xfc/0x170
[  123.963954][ T6663]  do_syscall_64+0x166/0x520
[  123.963976][ T6663]  ? trace_irq_disable+0x3b/0x140
[  123.963992][ T6663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.964010][ T6663]  ? clear_bhb_loop+0x70/0xc0
[  123.964031][ T6663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.964049][ T6663] RIP: 0033:0x7f962af9e159
[  123.964074][ T6663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  123.964089][ T6663] RSP: 002b:00007f962bf14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.964107][ T6663] RAX: ffffffffffffffda RBX: 00007f962b226090 RCX: 00007f962af9e159
[  123.964119][ T6663] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  123.964130][ T6663] RBP: 00007f962bf14090 R08: 0000000000000000 R09: 0000000000000000
[  123.964142][ T6663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  123.964151][ T6663] R13: 00007f962b226128 R14: 00007f962b226090 R15: 00007f962b34fa48
[  123.964175][ T6663]  </TASK>
[  124.065239][ T5690] usb 2-1: device descriptor read/64, error -71
[  124.175451][ T5690] usb usb2-port1: attempt power cycle
[  124.515307][ T5690] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  124.523581][ T6665] loop0: detected capacity change from 0 to 6
[  124.541834][ T5690] usb 2-1: device descriptor read/8, error -71
[  124.566978][ T6651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.573000][    T9] go7007 5-1:4.135: The Lifeview TV Walker Ultra is not supported. Sorry!
[  124.596817][    T9] usb 5-1: USB disconnect, device number 23
[  124.614920][ T6665] Dev loop0: unable to read RDB block 6
[  124.614959][ T6665]  loop0: unable to read partition table
[  124.618332][ T6665] loop0: partition table beyond EOD, truncated
[  124.618353][ T6665] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  124.775595][ T5690] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  124.795805][ T5690] usb 2-1: device descriptor read/8, error -71
[  124.905480][ T5690] usb usb2-port1: unable to enumerate USB device
[  125.395157][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  125.485215][ T5683] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  125.546586][    T9] usb 5-1: Using ep0 maxpacket: 32
[  125.552598][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  125.552643][    T9] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  125.553576][    T9] usb 5-1: config 14 has an invalid interface number: 57 but max is 1
[  125.553598][    T9] usb 5-1: config 14 has an invalid interface number: 228 but max is 1
[  125.553617][    T9] usb 5-1: config 14 has no interface number 0
[  125.553633][    T9] usb 5-1: config 14 has no interface number 1
[  125.553700][    T9] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  125.553722][    T9] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  125.553746][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  125.553778][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  125.553804][    T9] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  125.553829][    T9] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  125.553854][    T9] usb 5-1: config 14 interface 57 has no altsetting 0
[  125.553872][    T9] usb 5-1: config 14 interface 228 has no altsetting 0
[  125.557367][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.557389][    T9] usb 5-1: Product: syz
[  125.557402][    T9] usb 5-1: Manufacturer: syz
[  125.557416][    T9] usb 5-1: SerialNumber: syz
[  125.594431][ T6690] FAULT_INJECTION: forcing a failure.
[  125.594431][ T6690] name failslab, interval 1, probability 0, space 0, times 0
[  125.594461][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.2.246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  125.594487][ T6690] Tainted: [L]=SOFTLOCKUP
[  125.594494][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  125.594506][ T6690] Call Trace:
[  125.594516][ T6690]  <TASK>
[  125.594523][ T6690]  dump_stack_lvl+0xe8/0x150
[  125.594554][ T6690]  should_fail_ex+0x410/0x560
[  125.594581][ T6690]  should_failslab+0xa8/0x100
[  125.594606][ T6690]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  125.594635][ T6690]  kmem_cache_alloc_noprof+0xa1/0x600
[  125.594654][ T6690]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  125.594680][ T6690]  ? kmem_cache_alloc_noprof+0x156/0x600
[  125.594699][ T6690]  ? __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  125.594733][ T6690]  __kvm_mmu_topup_memory_cache+0x1b2/0x600
[  125.594780][ T6690]  mmu_topup_memory_caches+0x21/0x170
[  125.594803][ T6690]  kvm_mmu_load+0x9d/0x21e0
[  125.594824][ T6690]  ? kvm_msr_allowed+0x9a/0x490
[  125.594843][ T6690]  ? kvm_msr_allowed+0x9a/0x490
[  125.594862][ T6690]  ? kvm_msr_allowed+0x9a/0x490
[  125.594879][ T6690]  ? kvm_msr_allowed+0x3f4/0x490
[  125.594897][ T6690]  ? kvm_msr_allowed+0x9a/0x490
[  125.594915][ T6690]  ? kvm_apic_has_interrupt+0x740/0x770
[  125.594952][ T6690]  vcpu_run+0x4f7e/0x7aa0
[  125.594999][ T6690]  ? update_se+0x90/0x1080
[  125.595062][ T6690]  ? __pfx_vcpu_run+0x10/0x10
[  125.595079][ T6690]  ? lock_acquire+0x115/0x350
[  125.595115][ T6690]  kvm_arch_vcpu_ioctl_run+0xe87/0x19c0
[  125.595148][ T6690]  ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0
[  125.595179][ T6690]  ? kvm_vcpu_ioctl+0xe8f/0xfd0
[  125.595203][ T6690]  kvm_vcpu_ioctl+0xa61/0xfd0
[  125.595230][ T6690]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  125.595248][ T6690]  ? hook_file_ioctl+0x1f2/0x600
[  125.595291][ T6690]  ? __fget_files+0x2a/0x420
[  125.595320][ T6690]  ? __fget_files+0x2a/0x420
[  125.595345][ T6690]  ? __fget_files+0x3a2/0x420
[  125.595371][ T6690]  ? __fget_files+0x2a/0x420
[  125.595400][ T6690]  ? bpf_lsm_file_ioctl+0x9/0x20
[  125.595428][ T6690]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  125.595448][ T6690]  __se_sys_ioctl+0xfc/0x170
[  125.595473][ T6690]  do_syscall_64+0x166/0x520
[  125.595499][ T6690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.595518][ T6690]  ? clear_bhb_loop+0x70/0xc0
[  125.595542][ T6690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.595561][ T6690] RIP: 0033:0x7efd3239e159
[  125.595578][ T6690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  125.595594][ T6690] RSP: 002b:00007efd33221028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  125.595615][ T6690] RAX: ffffffffffffffda RBX: 00007efd32625fa0 RCX: 00007efd3239e159
[  125.595628][ T6690] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b
[  125.595640][ T6690] RBP: 00007efd33221090 R08: 0000000000000000 R09: 0000000000000000
[  125.595652][ T6690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  125.595664][ T6690] R13: 00007efd32626038 R14: 00007efd32625fa0 R15: 00007efd3274fa48
[  125.595694][ T6690]  </TASK>
[  125.648923][ T5683] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  125.650022][ T5683] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  125.650045][ T5683] usb 1-1: config 0 has no interface number 0
[  125.650086][ T5683] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  125.650140][ T5683] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  125.660212][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.660240][ T5683] usb 1-1: Product: syz
[  125.660254][ T5683] usb 1-1: Manufacturer: syz
[  125.660268][ T5683] usb 1-1: SerialNumber: syz
[  125.685651][ T5683] usb 1-1: config 0 descriptor??
[  125.689052][ T6685] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  125.701055][ T5683] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  125.720726][ T5683] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  125.907663][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  125.942728][ T6696] xt_hashlimit: size too large, truncated to 1048576
[  125.968810][ T6694] C: renamed from veth1_to_team (while UP)
[  125.979525][    T9] legousbtower 5-1:14.57: interrupt endpoints not found
[  125.981772][ T6694] netlink: 'syz.3.247': attribute type 2 has an invalid length.
[  125.981790][ T6694] netlink: 156 bytes leftover after parsing attributes in process `syz.3.247'.
[  125.981804][ T6694] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  126.141522][ T6698] all: renamed from bridge_slave_0 (while UP)
[  126.172859][ T6699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.388066][    T9] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[  126.392437][    T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  126.460846][ T5690] usb 1-1: USB disconnect, device number 21
[  126.464987][ T5690] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  126.466193][ T5690] cyberjack 1-1:0.69: device disconnected
[  126.816936][ T5719] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  126.972916][ T6716] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  126.973754][ T6716] block device autoloading is deprecated and will be removed.
[  126.975687][ T5719] usb 2-1: Using ep0 maxpacket: 32
[  126.978664][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short
[  126.978770][ T5719] usb 2-1: New USB device found, idVendor=0572, idProduct=1349, bcdDevice=ac.54
[  126.980470][ T5719] usb 2-1: config 0 has an invalid interface number: 170 but max is 0
[  126.980555][ T5719] usb 2-1: config 0 has no interface number 0
[  126.980592][ T5719] usb 2-1: config 0 interface 170 altsetting 128 has an invalid descriptor for endpoint zero, skipping
[  126.980620][ T5719] usb 2-1: config 0 interface 170 has no altsetting 0
[  126.991347][ T5719] usb 2-1: string descriptor 0 read error: -22
[  126.991531][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.011046][ T5719] usb 2-1: config 0 descriptor??
[  127.032203][ T6719] netlink: Invalid conntrack helper
[  127.032231][ T6719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.076949][ T6721] warning: `syz.2.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  127.292810][ T6725] netlink: 40 bytes leftover after parsing attributes in process `syz.3.254'.
[  127.707246][ T6197] IPVS: starting estimator thread 0...
[  127.795634][ T6733] IPVS: using max 54 ests per chain, 129600 per kthread
[  127.803198][    T9] usb 5-1: USB disconnect, device number 24
[  127.864556][    T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected
[  128.090235][ T6738] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  128.093123][ T6738] netlink: 60 bytes leftover after parsing attributes in process `syz.4.259'.
[  128.104111][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.4.259'.
[  128.115990][ T5683] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  128.275234][ T5683] usb 1-1: Using ep0 maxpacket: 16
[  128.276969][ T5683] usb 1-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  128.280334][ T5683] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  128.280358][ T5683] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.280375][ T5683] usb 1-1: config 0 has no interface number 0
[  128.282693][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.282713][ T5683] usb 1-1: Product: syz
[  128.282720][ T5683] usb 1-1: Manufacturer: syz
[  128.282728][ T5683] usb 1-1: SerialNumber: syz
[  128.292591][ T5683] usb 1-1: config 0 descriptor??
[  128.309193][ T5683] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[  128.385583][ T5663] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  128.545215][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  128.546034][ T5663] usb 5-1: Using ep0 maxpacket: 8
[  128.549391][ T5663] usb 5-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40
[  128.550575][ T5663] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  128.550603][ T5663] usb 5-1: config 1 interface 0 has no altsetting 0
[  128.569267][ T5663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.569290][ T5663] usb 5-1: Product: ᠉
[  128.569305][ T5663] usb 5-1: Manufacturer: ࡠ
[  128.569318][ T5663] usb 5-1: SerialNumber: ᒯ儆㱍㔊舮售ἲ茭确ᆻⵜ
[  128.706921][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  128.710943][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  128.710965][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  128.710979][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  128.710990][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  128.711029][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.725237][    T9] usb 4-1: config 0 descriptor??
[  128.870668][ T5663] usbhid 5-1:1.0: can't add hid device: -71
[  128.870759][ T5663] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  128.873933][ T5663] usb 5-1: USB disconnect, device number 25
[  128.943060][    T9] hdpvr 4-1:0.0: firmware version 0x12 dated �@�2�7�B���D�^jvi0�
[  128.943060][    T9] �����pY
[  129.151454][ T6743] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  129.215693][ T5705] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  129.365222][ T5705] usb 3-1: Using ep0 maxpacket: 32
[  129.365915][ T5705] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  129.367020][ T5705] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  129.367044][ T5705] usb 3-1: config 0 has no interface number 0
[  129.371230][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.371254][ T5705] usb 3-1: Product: syz
[  129.371269][ T5705] usb 3-1: Manufacturer: syz
[  129.371283][ T5705] usb 3-1: SerialNumber: syz
[  129.381366][ T5705] usb 3-1: config 0 descriptor??
[  129.444960][ T5705] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  129.445001][ T5705] usb 3-1: selecting invalid altsetting 1
[  129.445017][ T5705] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  129.461227][ T5663] usb 2-1: USB disconnect, device number 20
[  129.508537][ T5705] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  129.508897][ T5705] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  129.508944][ T5705] usb 3-1: media controller created
[  129.577169][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.616077][ T6747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.262'.
[  129.804489][ T5705] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  129.804547][ T5705] zl10353_read_register: readreg error (reg=127, ret==-71)
[  129.830169][ T5705] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  130.004022][ T5705] usb 3-1: USB disconnect, device number 23
[  130.099135][ T6762] syzkaller0: entered promiscuous mode
[  130.099166][ T6762] syzkaller0: entered allmulticast mode
[  130.645872][ T1697] usb 1-1: USB disconnect, device number 22
[  130.822491][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.268'.
[  131.114246][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.0.272'.
[  132.007678][    T9] hdpvr 4-1:0.0: device init failed
[  132.007758][    T9] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12
[  132.031177][    T9] usb 4-1: USB disconnect, device number 31
[  132.708550][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[  132.708619][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  132.855356][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  133.008224][    T9] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  133.010952][    T9] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[  133.010978][    T9] usb 1-1: config 0 has no interface number 0
[  133.011018][    T9] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  133.011043][    T9] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  133.015885][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.015907][    T9] usb 1-1: Product: syz
[  133.015921][    T9] usb 1-1: Manufacturer: syz
[  133.015935][    T9] usb 1-1: SerialNumber: syz
[  133.092527][    T9] usb 1-1: config 0 descriptor??
[  133.094709][ T6793] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.100912][    T9] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  133.130614][ T6815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  133.131433][    T9] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  133.246358][ T6811] loop8: detected capacity change from 0 to 7
[  133.287772][ T6811] Dev loop8: unable to read RDB block 7
[  133.287816][ T6811]  loop8: unable to read partition table
[  133.288055][ T6811] loop8: partition table beyond EOD, truncated
[  133.288072][ T6811] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  133.431877][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  133.644784][ T6826] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  134.285317][ T5683] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  134.370877][ T5663] usb 1-1: USB disconnect, device number 23
[  134.376563][ T5663] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  134.377132][ T5663] cyberjack 1-1:0.69: device disconnected
[  134.427182][ T5683] usb 3-1: device descriptor read/64, error -71
[  134.665624][ T5683] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  134.807510][ T5683] usb 3-1: device descriptor read/64, error -71
[  134.917757][ T5683] usb usb3-port1: attempt power cycle
[  135.269415][ T5683] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  135.301260][ T5683] usb 3-1: device descriptor read/8, error -71
[  135.404641][ T6839] ip_tables: iptables: counters copy to user failed while replacing table
[  135.565323][ T5683] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  135.592671][ T5683] usb 3-1: device descriptor read/8, error -71
[  135.702028][ T5683] usb usb3-port1: unable to enumerate USB device
[  137.891638][ T6837] tipc: Started in network mode
[  137.891670][ T6837] tipc: Node identity ac14140f, cluster identity 4711
[  137.891915][ T6837] tipc: New replicast peer: 255.255.255.255
[  137.892694][ T6837] tipc: Enabled bearer <udp:syz2>, priority 10
[  138.067961][ T6851] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.288' resets device
[  138.469749][ T5690] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  138.616475][ T5690] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  138.617535][ T5690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  138.617565][ T5690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  138.619777][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.619801][ T5690] usb 1-1: Product: syz
[  138.619814][ T5690] usb 1-1: Manufacturer: syz
[  138.619829][ T5690] usb 1-1: SerialNumber: syz
[  138.684043][ T5690] ums-onetouch 1-1:1.0: USB Mass Storage device detected
[  138.710121][ T5690] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  138.713209][ T5690] input input11: usb_submit_urb failed
[  138.748185][ T5690] input: failed to attach handler kbd to device input11, error: -5
[  138.782640][ T4968] input input11: usb_submit_urb failed
[  138.783695][ T4968] input input11: usb_submit_urb failed
[  138.812023][ T5690] scsi host1: usb-storage 1-1:1.0
[  138.892864][ T5690] usb 1-1: USB disconnect, device number 24
[  139.181649][ T1697] tipc: Node number set to 2886997007
[  139.445727][ T5690] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  139.601471][ T5690] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01
[  139.603147][ T5690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  139.603179][ T5690] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  139.643108][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.643133][ T5690] usb 1-1: Manufacturer: ᐿ
[  139.643147][ T5690] usb 1-1: SerialNumber: syz
[  139.676835][ T5690] ums-onetouch 1-1:1.0: USB Mass Storage device detected
[  139.703711][ T5690] input: ᐿ as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12
[  139.703758][ T5690] input input12: usb_submit_urb failed
[  139.753084][ T5690] input: failed to attach handler kbd to device input12, error: -5
[  139.766275][ T4968] input input12: usb_submit_urb failed
[  139.768352][ T5690] scsi host1: usb-storage 1-1:1.0
[  139.802480][ T4968] input input12: usb_submit_urb failed
[  139.880198][ T5690] usb 1-1: USB disconnect, device number 25
[  140.885583][    T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  141.027341][    T9] usb 1-1: device descriptor read/64, error -71
[  141.104587][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.298'.
[  141.105955][ T6892] macvlan0: entered promiscuous mode
[  141.106979][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'.
[  141.277772][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  141.354591][ T6897] openvswitch: netlink: ct_state flags 0001010a unsupported
[  141.354818][ T6896] openvswitch: netlink: ct_state flags 0001010a unsupported
[  141.406698][    T9] usb 1-1: device descriptor read/64, error -71
[  141.485639][ T5683] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  141.517513][    T9] usb usb1-port1: attempt power cycle
[  141.658780][ T5683] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  141.661938][ T5683] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  141.661983][ T5683] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  141.662009][ T5683] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  141.664751][ T6899] batman_adv: batadv0: Adding interface: dummy0
[  141.664766][ T6899] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  141.664796][ T6899] batman_adv: batadv0: Interface activated: dummy0
[  141.671602][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.671625][ T5683] usb 3-1: Product: syz
[  141.671639][ T5683] usb 3-1: Manufacturer: syz
[  141.671653][ T5683] usb 3-1: SerialNumber: syz
[  141.708508][ T5683] cdc_mbim 3-1:1.0: skipping garbage
[  141.865235][    T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  141.888790][    T9] usb 1-1: device descriptor read/8, error -71
[  141.891777][ T6894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  141.891907][ T6894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  142.135738][    T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  142.169130][    T9] usb 1-1: device descriptor read/8, error -71
[  142.285675][    T9] usb usb1-port1: unable to enumerate USB device
[  142.521854][ T6894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  142.522640][ T6894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  142.522717][ T6894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  142.523653][ T5683] cdc_mbim 3-1:1.0: dwNtbInMaxSize=11 is too small. Using 2048
[  142.523668][ T5683] cdc_mbim 3-1:1.0: setting rx_max = 2048
[  142.744053][ T6894] team0: entered allmulticast mode
[  142.744078][ T6894] team_slave_0: entered allmulticast mode
[  142.744096][ T6894] team_slave_1: entered allmulticast mode
[  142.744696][ T6894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  142.784723][ T5683] cdc_mbim 3-1:1.0: setting tx_max = 16384
[  142.816503][ T5683] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  142.818500][ T5683] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  142.820491][ T5683] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  142.831269][ T5683] usb 3-1: USB disconnect, device number 28
[  143.084092][ T6912] netlink: 'syz.3.305': attribute type 4 has an invalid length.
[  143.635205][ T5683] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  143.732151][ T6921] process 'syz.2.308' launched './file1' with NULL argv: empty string added
[  143.786220][ T6921] trusted_key: encrypted_key: master key parameter 'defx��(' is invalid
[  143.805234][ T5683] usb 4-1: Using ep0 maxpacket: 16
[  143.808175][ T5683] usb 4-1: New USB device found, idVendor=19f7, idProduct=0011, bcdDevice= 0.40
[  143.813546][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.813570][ T5683] usb 4-1: Product: 臁磖⌃i퐈﫯‸땶㹮ꘪ殭࠲ⴇ暼酛
[  143.813587][ T5683] usb 4-1: Manufacturer: Т
[  143.813602][ T5683] usb 4-1: SerialNumber: ф
[  144.069582][ T5683] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  144.087113][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  144.236454][ T5683] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  144.257172][    T9] usb 3-1: Using ep0 maxpacket: 32
[  144.273237][    T9] usb 3-1: New USB device found, idVendor=056a, idProduct=00fa, bcdDevice= 0.00
[  144.278047][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.278078][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.278117][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.285640][ T5683] usb 4-1: USB disconnect, device number 32
[  144.306914][    T9] usb 3-1: config 0 descriptor??
[  144.413004][ T5723] udevd[5723]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  144.522401][ T6938] ip_tables: iptables: counters copy to user failed while replacing table
[  144.695367][ T1236] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  144.728589][    T9] wacom 0003:056A:00FA.0004: unknown main item tag 0x7
[  144.729301][    T9] wacom 0003:056A:00FA.0004: unbalanced collection at end of report description
[  144.733573][    T9] wacom 0003:056A:00FA.0004: parse failed
[  144.733632][    T9] wacom 0003:056A:00FA.0004: probe with driver wacom failed with error -22
[  144.869907][ T1236] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  144.872535][ T1236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.872550][ T1236] usb 5-1: Product: syz
[  144.872557][ T1236] usb 5-1: Manufacturer: syz
[  144.872565][ T1236] usb 5-1: SerialNumber: syz
[  144.884644][ T1236] usb 5-1: config 0 descriptor??
[  144.946749][    T9] usb 3-1: USB disconnect, device number 29
[  145.130450][ T6941] bond1: option lacp_rate: invalid value (5)
[  145.168903][ T6941] bond1 (unregistering): Released all slaves
[  145.301235][ T1236] usb 5-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213)
[  145.395094][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  145.509544][ T1236] usb 5-1: failed to fetch extended address, random address set
[  145.509562][ T1236] usb 5-1: atusb_probe: initialization failed, error = -524
[  145.509835][ T1236] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  145.781530][ T6948] netlink: 28 bytes leftover after parsing attributes in process `syz.3.317'.
[  145.848537][ T1236] usb 5-1: USB disconnect, device number 26
[  146.059863][ T6757] syz.1.264 (6757) used greatest stack depth: 15328 bytes left
[  146.107601][ T6958] fuse: fd is not a fuse device
[  146.295781][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  146.450489][    T9] usb 4-1: device descriptor read/64, error -71
[  146.598330][ T6964] netlink: 'syz.4.321': attribute type 4 has an invalid length.
[  146.648716][ T6968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'.
[  146.687950][    T9] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  146.763620][ T6968] 8021q: adding VLAN 0 to HW filter on device bond1
[  146.815483][    T9] usb 4-1: device descriptor read/64, error -71
[  146.926429][    T9] usb usb4-port1: attempt power cycle
[  147.011750][ T6977] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  147.045597][ T6977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.325'.
[  147.081458][ T6977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'.
[  147.275969][    T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  147.296049][    T9] usb 4-1: device descriptor read/8, error -71
[  147.345266][ T5683] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  147.401672][ T6982] netlink: 'syz.4.328': attribute type 1 has an invalid length.
[  147.495136][ T5683] usb 1-1: Using ep0 maxpacket: 8
[  147.496656][ T5683] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40
[  147.497639][ T5683] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  147.497668][ T5683] usb 1-1: config 1 interface 0 has no altsetting 0
[  147.499811][ T5683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.499836][ T5683] usb 1-1: Product: ᠉
[  147.499851][ T5683] usb 1-1: Manufacturer: ࡠ
[  147.499866][ T5683] usb 1-1: SerialNumber: ᒯ儆㱍㔊舮售ἲ茭确ᆻⵜ
[  147.555202][    T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  147.580360][    T9] usb 4-1: device descriptor read/8, error -71
[  147.606562][ T6982] 8021q: adding VLAN 0 to HW filter on device bond1
[  147.701058][    T9] usb usb4-port1: unable to enumerate USB device
[  147.806536][ T5683] usbhid 1-1:1.0: can't add hid device: -71
[  147.806638][ T5683] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  147.816313][ T5683] usb 1-1: USB disconnect, device number 30
[  148.397541][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.327'.
[  148.421076][   T31] audit: type=1326 audit(1790923861.436:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.421125][   T31] audit: type=1326 audit(1790923861.436:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.430679][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'.
[  148.430757][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'.
[  148.452519][   T31] audit: type=1326 audit(1790923861.446:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452567][   T31] audit: type=1326 audit(1790923861.446:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452605][   T31] audit: type=1326 audit(1790923861.446:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452646][   T31] audit: type=1326 audit(1790923861.446:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452684][   T31] audit: type=1326 audit(1790923861.446:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452720][   T31] audit: type=1326 audit(1790923861.446:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452755][   T31] audit: type=1326 audit(1790923861.446:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.452787][   T31] audit: type=1326 audit(1790923861.446:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6984 comm="syz.1.327" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  148.678961][ T5690] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  148.729624][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'.
[  148.815232][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  148.825674][ T5690] usb 5-1: device descriptor read/64, error -71
[  148.966882][    T9] usb 1-1: Using ep0 maxpacket: 32
[  148.968346][    T9] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58
[  148.972450][    T9] usb 1-1: config index 0 descriptor too short (expected 3659, got 75)
[  148.972474][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.977614][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.977636][    T9] usb 1-1: Product: syz
[  148.977650][    T9] usb 1-1: Manufacturer: syz
[  148.977663][    T9] usb 1-1: SerialNumber: syz
[  148.980415][    T9] usb 1-1: config 0 descriptor??
[  148.994601][    T9] gspca_main: sunplus-2.14.0 probing 08ca:2060
[  149.065982][ T5690] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  149.195718][ T5690] usb 5-1: device descriptor read/64, error -71
[  149.279670][ T7023] program syz.2.341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.305859][ T5690] usb usb5-port1: attempt power cycle
[  149.425861][ T5710] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  149.535212][ T5663] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  149.575603][ T5710] usb 2-1: Using ep0 maxpacket: 32
[  149.576228][ T5710] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  149.578342][ T5710] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  149.578372][ T5710] usb 2-1: config 0 interface 0 has no altsetting 0
[  149.578411][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.581745][ T5710] usb 2-1: config 0 descriptor??
[  149.646812][ T5690] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  149.666548][ T5690] usb 5-1: device descriptor read/8, error -71
[  149.715145][ T5663] usb 4-1: Using ep0 maxpacket: 16
[  149.715995][ T5663] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  149.718387][ T5663] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  149.718411][ T5663] usb 4-1: config 0 has no interface number 0
[  149.721057][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.721080][ T5663] usb 4-1: Product: syz
[  149.721095][ T5663] usb 4-1: Manufacturer: syz
[  149.721132][ T5663] usb 4-1: SerialNumber: syz
[  149.739892][ T5663] usb 4-1: config 0 descriptor??
[  149.785747][ T5663] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  149.907617][ T5690] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[  149.926136][ T5690] usb 5-1: device descriptor read/8, error -71
[  150.035743][ T5690] usb usb5-port1: unable to enumerate USB device
[  150.125570][ T5705] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  150.255577][ T5705] usb 3-1: device descriptor read/64, error -71
[  150.346877][ T5710] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  150.346910][ T5710] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  150.346938][ T5710] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  150.346965][ T5710] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  150.346989][ T5710] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0
[  150.352992][ T5710] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0
[  150.495604][ T5705] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  150.626333][ T5705] usb 3-1: device descriptor read/64, error -71
[  150.666417][ T5710] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-110)
[  150.668947][ T5710] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -110
[  150.674460][ T5710] usb 2-1: USB disconnect, device number 21
[  150.735977][ T5705] usb usb3-port1: attempt power cycle
[  150.812595][ T5663] gspca_spca1528: reg_w err -71
[  150.812690][ T5663] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  150.829775][ T5663] usb 4-1: USB disconnect, device number 37
[  151.075541][ T5705] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  151.096329][ T5705] usb 3-1: device descriptor read/8, error -71
[  151.195000][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.348'.
[  151.195021][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'.
[  151.207297][ T7045] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  151.288929][ T7049] loop0: detected capacity change from 0 to 6
[  151.336843][ T7049] Dev loop0: unable to read RDB block 6
[  151.336883][ T7049]  loop0: unable to read partition table
[  151.337060][ T7049] loop0: partition table beyond EOD, truncated
[  151.337094][ T7049] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  151.340014][ T5705] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  151.360469][ T5705] usb 3-1: device descriptor read/8, error -71
[  151.454729][ T7051] syzkaller1: entered promiscuous mode
[  151.454752][ T7051] syzkaller1: entered allmulticast mode
[  151.466848][ T5705] usb usb3-port1: unable to enumerate USB device
[  151.717245][ T5705] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  151.803534][ T7073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  151.803789][ T7073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.865867][ T5705] usb 2-1: Using ep0 maxpacket: 8
[  151.866745][ T5705] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  151.867581][ T5705] usb 2-1: config 64 interface 0 has no altsetting 0
[  151.872686][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.872701][ T5705] usb 2-1: Product: syz
[  151.872709][ T5705] usb 2-1: Manufacturer: syz
[  151.872716][ T5705] usb 2-1: SerialNumber: syz
[  151.894463][ T5705] snd_usb_toneport 2-1:64.0: Line 6 TonePort UX2 found
[  152.086796][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.087077][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.090509][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.094535][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.100991][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.101488][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.106797][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.107296][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.114940][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.118888][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.277150][ T5705] snd_usb_toneport 2-1:64.0: Line 6 TonePort UX2 now disconnected
[  152.283050][ T5705] snd_usb_toneport 2-1:64.0: probe with driver snd_usb_toneport failed with error -22
[  152.332064][ T5663] logitech-hidpp-device 0005:046D:B012.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1
[  152.462796][ T5663] usb 2-1: USB disconnect, device number 22
[  152.833819][ T1697] usb 1-1: USB disconnect, device number 31
[  152.901427][ T7102] loop0: detected capacity change from 0 to 6
[  152.917619][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'.
[  152.949840][ T7102] Dev loop0: unable to read RDB block 6
[  152.951466][ T7102]  loop0: unable to read partition table
[  152.951642][ T7102] loop0: partition table beyond EOD, truncated
[  152.951659][ T7102] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  153.036000][ T5705] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  153.165609][ T5705] usb 4-1: device descriptor read/64, error -71
[  153.255442][ T7116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.405718][ T1697] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  153.407180][ T5705] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  153.535761][ T5705] usb 4-1: device descriptor read/64, error -71
[  153.556606][ T1697] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  153.557121][ T1697] usb 1-1: config 0 has no interfaces?
[  153.559007][ T1697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.559030][ T1697] usb 1-1: Product: syz
[  153.559044][ T1697] usb 1-1: Manufacturer: syz
[  153.559058][ T1697] usb 1-1: SerialNumber: syz
[  153.561019][ T1697] usb 1-1: config 0 descriptor??
[  153.646092][ T5705] usb usb4-port1: attempt power cycle
[  153.758037][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.758052][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.796484][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.796498][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.798379][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.798391][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.799433][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.799456][ T7135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.803781][ T5663] usb 1-1: USB disconnect, device number 32
[  153.806085][ T6185] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  153.806121][ T6185] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  153.806153][ T6185] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  153.806666][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.370'.
[  153.823631][ T6185] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  153.985635][ T5705] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  154.010344][ T5705] usb 4-1: device descriptor read/8, error -71
[  154.205185][ T5683] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  154.245426][ T5705] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  154.265772][ T5705] usb 4-1: device descriptor read/8, error -71
[  154.295158][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  154.355262][ T5683] usb 2-1: Using ep0 maxpacket: 32
[  154.355831][ T5683] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  154.356792][ T5683] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  154.356818][ T5683] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  154.356832][ T5683] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  154.356846][ T5683] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  154.358959][ T5683] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.358973][ T5683] usb 2-1: Product: syz
[  154.358980][ T5683] usb 2-1: Manufacturer: syz
[  154.358988][ T5683] usb 2-1: SerialNumber: syz
[  154.368533][    C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  154.372465][ T5683] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input13
[  154.392133][ T5705] usb usb4-port1: unable to enumerate USB device
[  154.435301][    T9] usb 5-1: device descriptor read/64, error -71
[  154.586335][ T5683] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  154.586356][ T5683]  (id 0x00)
[  154.628656][ T7148] loop0: detected capacity change from 0 to 6
[  154.669466][ T7148] Dev loop0: unable to read RDB block 6
[  154.669508][ T7148]  loop0: unable to read partition table
[  154.669694][ T7148] loop0: partition table beyond EOD, truncated
[  154.669730][ T7148] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  154.675198][    T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  154.695421][ T5683] rc_core: IR keymap rc-imon-pad not found
[  154.695436][ T5683] Registered IR keymap rc-empty
[  154.695507][ T5683] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  154.695524][ T5683] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  154.798624][ T5683] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0
[  154.800073][ T5683] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input14
[  154.803260][ T5683] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:23> initialized
[  154.826278][    T9] usb 5-1: device descriptor read/64, error -71
[  154.926047][    T9] usb usb5-port1: attempt power cycle
[  154.927057][ T5663] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  155.086347][ T5663] usb 3-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  155.087714][ T5663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.087743][ T5663] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.087764][ T5663] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  155.087791][ T5663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.089658][ T5663] usb 3-1: config 0 descriptor??
[  155.267026][    T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  155.285885][    T9] usb 5-1: device descriptor read/8, error -71
[  155.299918][ T7152] binder: 7151:7152 ioctl c0306201 2000000001c0 returned -14
[  155.311149][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.314050][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.535186][    T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  155.558678][ T5663] usbhid 3-1:0.0: can't add hid device: -71
[  155.558778][ T5663] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  155.560232][    T9] usb 5-1: device descriptor read/8, error -71
[  155.579820][ T5663] usb 3-1: USB disconnect, device number 34
[  155.675981][    T9] usb usb5-port1: unable to enumerate USB device
[  155.759042][ T5705] usb 2-1: USB disconnect, device number 23
[  155.771498][ T7162] imon:send_packet: packet tx failed (-71)
[  155.785807][ T7162] imon:vfd_write: send packet #2 failed
[  156.050874][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.052341][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.153430][ T7183] sctp: [Deprecated]: syz.2.383 (pid 7183) Use of struct sctp_assoc_value in delayed_ack socket option.
[  156.153430][ T7183] Use struct sctp_sack_info instead
[  156.386860][ T5705] usb 3-1: new low-speed USB device number 35 using dummy_hcd
[  156.536021][ T5705] usb 3-1: Invalid ep0 maxpacket: 32
[  156.665568][ T5705] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[  156.816486][ T5705] usb 3-1: Invalid ep0 maxpacket: 32
[  156.816747][ T5705] usb usb3-port1: attempt power cycle
[  156.877762][ T7191] loop0: detected capacity change from 0 to 6
[  156.920196][ T7191] Dev loop0: unable to read RDB block 6
[  156.920235][ T7191]  loop0: unable to read partition table
[  156.920408][ T7191] loop0: partition table beyond EOD, truncated
[  156.920425][ T7191] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  157.156146][ T5705] usb 3-1: new low-speed USB device number 37 using dummy_hcd
[  157.197867][ T5705] usb 3-1: Invalid ep0 maxpacket: 32
[  157.325854][ T5705] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  157.349497][ T5705] usb 3-1: Invalid ep0 maxpacket: 32
[  157.349853][ T5705] usb usb3-port1: unable to enumerate USB device
[  157.372861][ T7208] loop5: detected capacity change from 0 to 7
[  157.384372][ T7208] Dev loop5: unable to read RDB block 7
[  157.384409][ T7208]  loop5: AHDI p1 p2 p3
[  157.384429][ T7208] loop5: partition table partially beyond EOD, truncated
[  157.384876][ T7208] loop5: p1 start 1869376613 is beyond EOD, truncated
[  157.384896][ T7208] loop5: p3 start 335544320 is beyond EOD, truncated
[  157.585198][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  157.757998][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0047, bcdDevice= 0.40
[  157.759688][    T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  157.760329][    T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  157.763979][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.764002][    T9] usb 4-1: Product: syz
[  157.764017][    T9] usb 4-1: Manufacturer: syz
[  157.764030][    T9] usb 4-1: SerialNumber: syz
[  158.051098][    T9] usb 4-1: cannot setup if 1: error -71
[  158.054519][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  158.074546][    T9] usb 4-1: cannot setup if 1: error -71
[  158.074773][    T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71
[  158.096975][    T9] usb 4-1: cannot setup if 1: error -71
[  158.126252][ T5690] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  158.160622][    T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71
[  158.163231][    T9] usb 4-1: USB disconnect, device number 42
[  158.232219][ T5723] udevd[5723]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  158.255446][ T5690] usb 5-1: device descriptor read/64, error -71
[  158.495818][ T5690] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  158.628141][ T5690] usb 5-1: device descriptor read/64, error -71
[  158.629775][ T7235] __nla_validate_parse: 8 callbacks suppressed
[  158.629791][ T7235] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'.
[  158.735852][ T5690] usb usb5-port1: attempt power cycle
[  158.948214][ T5705] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  159.075541][ T5690] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  159.096669][ T5690] usb 5-1: device descriptor read/8, error -71
[  159.096712][ T5705] usb 4-1: Using ep0 maxpacket: 16
[  159.097198][ T5705] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  159.100654][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.100677][ T5705] usb 4-1: Product: syz
[  159.100691][ T5705] usb 4-1: Manufacturer: syz
[  159.100705][ T5705] usb 4-1: SerialNumber: syz
[  159.102799][ T5705] usb 4-1: config 0 descriptor??
[  159.335783][ T5690] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  159.356117][ T5690] usb 5-1: device descriptor read/8, error -71
[  159.466575][ T5690] usb usb5-port1: unable to enumerate USB device
[  159.509788][ T5705] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  159.512314][ T5705] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.512933][ T5705] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  159.512965][ T5705] usb 4-1: media controller created
[  159.528432][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.576344][ T1697] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  159.726404][ T1697] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  159.727972][ T1697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  159.728005][ T1697] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  159.728018][ T1697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  159.728030][ T1697] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  159.728051][ T1697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.732846][ T1697] usb 3-1: config 0 descriptor??
[  159.774053][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.402'.
[  160.052185][ T1697] hdpvr 3-1:0.0: firmware version 0x12 dated �@�2�7�B���D�^jvi0�
[  160.052185][ T1697] �����pY
[  160.086985][ T5705] zl10353_read_register: readreg error (reg=127, ret==0)
[  160.087045][ T5705] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  160.087049][ T7239] dtv5100: wlen = 119, aborting.
[  160.087060][ T5705] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  160.096804][ T5705] usb 4-1: USB disconnect, device number 43
[  160.149782][ T5705] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  161.362901][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.414'.
[  161.416216][ T5690] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  161.479850][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  161.565708][ T5690] usb 5-1: Using ep0 maxpacket: 32
[  161.568768][ T5690] usb 5-1: unable to get BOS descriptor or descriptor too short
[  161.568799][ T5690] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=27.24
[  161.570893][ T5690] usb 5-1: config 68 has too many interfaces: 236, using maximum allowed: 32
[  161.570909][ T5690] usb 5-1: config 68 has an invalid descriptor of length 165, skipping remainder of the config
[  161.570919][ T5690] usb 5-1: config 68 has 0 interfaces, different from the descriptor's value: 236
[  161.574916][ T5690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.574930][ T5690] usb 5-1: Product: syz
[  161.574938][ T5690] usb 5-1: Manufacturer: syz
[  161.574946][ T5690] usb 5-1: SerialNumber: syz
[  161.844030][ T5690] usb 5-1: USB disconnect, device number 39
[  162.149360][ T7279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.415'.
[  162.151178][   T31] kauditd_printk_skb: 51 callbacks suppressed
[  162.151194][   T31] audit: type=1326 audit(1790923875.166:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.151335][   T31] audit: type=1326 audit(1790923875.166:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.151573][   T31] audit: type=1326 audit(1790923875.166:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.152036][   T31] audit: type=1326 audit(1790923875.166:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.152079][   T31] audit: type=1326 audit(1790923875.166:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.152116][   T31] audit: type=1326 audit(1790923875.166:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.152153][   T31] audit: type=1326 audit(1790923875.166:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.152188][   T31] audit: type=1326 audit(1790923875.166:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.335661][   T31] audit: type=1326 audit(1790923875.346:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.3.415" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f962af9e159 code=0x7ffc0000
[  162.534035][ T7304] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  162.610451][ T1697] hdpvr 3-1:0.0: device init failed
[  162.610502][ T1697] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  162.633645][ T1697] usb 3-1: USB disconnect, device number 39
[  163.255749][ T7324] loop0: detected capacity change from 0 to 6
[  163.285275][    T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  163.292798][ T7324] Dev loop0: unable to read RDB block 6
[  163.292824][ T7324]  loop0: unable to read partition table
[  163.292930][ T7324] loop0: partition table beyond EOD, truncated
[  163.292940][ T7324] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  163.350283][ T7325] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  163.445588][    T9] usb 3-1: Using ep0 maxpacket: 16
[  163.446137][    T9] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3
[  163.448414][    T9] usb 3-1: config 1 has an invalid interface number: 193 but max is 0
[  163.448438][    T9] usb 3-1: config 1 has no interface number 0
[  163.448465][    T9] usb 3-1: config 1 interface 193 has no altsetting 0
[  163.450555][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.450578][    T9] usb 3-1: Product: syz
[  163.450592][    T9] usb 3-1: Manufacturer: syz
[  163.450606][    T9] usb 3-1: SerialNumber: syz
[  163.732648][ T7335] netlink: 232 bytes leftover after parsing attributes in process `syz.4.432'.
[  163.939949][   T31] audit: type=1326 audit(1790923876.956:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.1.434" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd1159e159 code=0x7ffc0000
[  164.107838][ T5663] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  164.276025][ T5663] usb 1-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90
[  164.278207][ T5663] usb 1-1: config 255 has an invalid interface number: 97 but max is 1
[  164.278233][ T5663] usb 1-1: config 255 has an invalid interface descriptor of length 2, skipping
[  164.278252][ T5663] usb 1-1: config 255 has an invalid interface number: 227 but max is 1
[  164.278272][ T5663] usb 1-1: config 255 has no interface number 0
[  164.278312][ T5663] usb 1-1: config 255 has no interface number 1
[  164.278360][ T5663] usb 1-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.278388][ T5663] usb 1-1: config 255 interface 97 has no altsetting 0
[  164.278406][ T5663] usb 1-1: config 255 interface 227 has no altsetting 0
[  164.283146][ T5663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.283172][ T5663] usb 1-1: Product: syz
[  164.283186][ T5663] usb 1-1: Manufacturer: syz
[  164.283221][ T5663] usb 1-1: SerialNumber: syz
[  164.418497][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'.
[  164.617228][ T5663] rndis_host 1-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  164.677634][ T5663] usb 1-1: USB disconnect, device number 33
[  165.045240][ T5676] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  165.217227][ T5676] usb 5-1: Using ep0 maxpacket: 32
[  165.217378][ T5663] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  165.218536][ T5676] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  165.219877][ T5676] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  165.219921][ T5676] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  165.219947][ T5676] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.219973][ T5676] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  165.222286][ T5676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.222310][ T5676] usb 5-1: Product: syz
[  165.222324][ T5676] usb 5-1: Manufacturer: syz
[  165.222361][ T5676] usb 5-1: SerialNumber: syz
[  165.297160][ T1236] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  165.329300][    C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  165.330723][ T5676] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input15
[  165.415840][ T5663] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  165.420136][ T5663] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.420150][ T5663] usb 4-1: Product: syz
[  165.420157][ T5663] usb 4-1: Manufacturer: syz
[  165.420165][ T5663] usb 4-1: SerialNumber: syz
[  165.456008][ T5690] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  165.475863][ T1236] usb 2-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40
[  165.476762][ T1236] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  165.476784][ T1236] usb 2-1: config 1 interface 0 has no altsetting 0
[  165.478510][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.478524][ T1236] usb 2-1: Product: 濻肏㳗ｿ䄇Ỷ긝㵻퍘㑗讔떓఼彗⋙詈쑩⶗皴笵훦翸䒦괌ᤊٞ⺆碉䱏甬⛓胗㼷纪朇볣숥ｪ礢粵ࡃĠ⤬쉳유細웷鼢蝥ᬳ沜䪄襎㣸嘆蒾ꛢ瘽㍯臶梅꼮鋸踔鍞遒掰渄ᯖ䣯Ң꽽ᯊ簃﹠죬Ⰺ圸外쫉ꨠɃ⋩咺龲퇏鸈䎊牢⃮䯲㥠―藌⦄ᧉ㥬亮춆냣뱪
[  165.478540][ T1236] usb 2-1: Manufacturer: ︢꽽ᄚ빒揽섢꾵剢힞儸掙Ȁ˚ꬃ䅜Ạெ›핟杆涬ࠠ덧㧜鲵飙芘诅꼇굃̴慾㌃깈婵䬌綽了ᖞ͇廬᳷簗൪쫐쌩搇⶗ભ䜐᧯ಞ悚庨쬣玛鞅䇉화㺻ܓථ榲⚮ݷ준헜啋쭪ຳ練厄ï我쯎ᒗ﫢䒔⤧핕ꮔ쩜
[  165.478555][ T1236] usb 2-1: SerialNumber: syz
[  165.491128][ T7368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.491856][ T7368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.559508][ T5676] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  165.559526][ T5676]  (id 0x00)
[  165.606991][ T5690] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  165.607495][ T5690] usb 1-1: config 0 has no interfaces?
[  165.609529][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.609553][ T5690] usb 1-1: Product: syz
[  165.609567][ T5690] usb 1-1: Manufacturer: syz
[  165.609581][ T5690] usb 1-1: SerialNumber: syz
[  165.613953][ T5690] usb 1-1: config 0 descriptor??
[  165.667113][ T5676] rc_core: IR keymap rc-imon-pad not found
[  165.667128][ T5676] Registered IR keymap rc-empty
[  165.667229][ T5676] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  165.667247][ T5676] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  165.692626][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  165.693726][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.757163][ T5676] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0
[  165.763916][ T5676] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input16
[  165.791219][ T5676] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:40> initialized
[  165.863376][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  165.863470][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  165.882505][ T5676] usb 1-1: USB disconnect, device number 34
[  166.052834][    T9] usb 3-1: USB disconnect, device number 40
[  166.152440][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  166.208888][ T7368] imon:send_packet: packet tx failed (-71)
[  166.210007][ T5690] usb 5-1: USB disconnect, device number 40
[  166.231142][ T7368] imon:vfd_write: send packet #0 failed
[  166.243916][ T7390] imon:display_open: display port is already open
[  166.283097][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  166.714450][ T7398] netlink: 'syz.0.451': attribute type 63 has an invalid length.
[  166.714466][ T7398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.451'.
[  167.074870][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  167.166710][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  167.283107][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.283632][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.325611][    T9] usb 5-1: Using ep0 maxpacket: 16
[  167.327402][    T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  167.330327][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.330349][    T9] usb 5-1: Product: syz
[  167.330387][    T9] usb 5-1: Manufacturer: syz
[  167.330395][    T9] usb 5-1: SerialNumber: syz
[  167.355381][ T5676] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  167.375643][    T9] r8152-cfgselector 5-1: Unknown version 0x0000
[  167.375674][    T9] r8152-cfgselector 5-1: config 0 descriptor??
[  167.535786][ T5676] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  167.538784][ T5676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.538823][ T5676] usb 1-1: Product: syz
[  167.538831][ T5676] usb 1-1: Manufacturer: syz
[  167.538853][ T5676] usb 1-1: SerialNumber: syz
[  167.573236][ T5676] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  167.693188][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.693957][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.929536][ T1236] usbhid 2-1:1.0: can't add hid device: -71
[  167.929684][ T1236] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  167.935614][ T1236] usb 2-1: USB disconnect, device number 24
[  168.150182][   T52] Bluetooth: hci3: unexpected event for opcode 0x2039
[  168.198622][    T9] usb 1-1: USB disconnect, device number 35
[  168.220433][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.246936][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.251479][ T7425] loop3: detected capacity change from 0 to 7
[  168.281379][ T7425]  loop3: p1 p4
[  168.281401][ T7425] loop3: partition table partially beyond EOD, truncated
[  168.367416][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO
[  168.370995][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  168.371049][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  168.371819][ T5663] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  168.387165][ T1236] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  168.441157][ T5663] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  168.470441][ T5663] usb 4-1: USB disconnect, device number 44
[  168.565145][ T1236] usb 2-1: device descriptor read/64, error -71
[  168.790111][ T5676] usb 1-1: Service connection timeout for: 256
[  168.790135][ T5676] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  168.790913][ T5676] ath9k_htc: Failed to initialize the device
[  168.791361][    C0] ==================================================================
[  168.791375][    C0] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x103/0x490
[  168.791410][    C0] Read of size 8 at addr ffff88807c539158 by task kworker/u8:11/6185
[  168.791427][    C0] 
[  168.791448][    C0] CPU: 0 UID: 0 PID: 6185 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  168.791476][    C0] Tainted: [L]=SOFTLOCKUP
[  168.791484][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  168.791497][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  168.791529][    C0] Call Trace:
[  168.791538][    C0]  <IRQ>
[  168.791549][    C0]  dump_stack_lvl+0xe8/0x150
[  168.791577][    C0]  print_address_description+0x55/0x1e0
[  168.791605][    C0]  ? tasklet_action_common+0x103/0x490
[  168.791632][    C0]  print_report+0x58/0x70
[  168.791657][    C0]  kasan_report+0x117/0x150
[  168.791683][    C0]  ? tasklet_action_common+0x103/0x490
[  168.791716][    C0]  tasklet_action_common+0x103/0x490
[  168.791747][    C0]  handle_softirqs+0x226/0x860
[  168.791774][    C0]  ? do_softirq+0x77/0xd0
[  168.791802][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  168.791822][    C0]  do_softirq+0x77/0xd0
[  168.791847][    C0]  </IRQ>
[  168.791854][    C0]  <TASK>
[  168.791861][    C0]  __local_bh_enable_ip+0x100/0x140
[  168.791887][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  168.791906][    C0]  __dev_queue_xmit+0x1efb/0x3920
[  168.791926][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  168.791950][    C0]  ? rcu_is_watching+0x16/0xb0
[  168.791975][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  168.791996][    C0]  ? skb_release_data+0x2f7/0xa80
[  168.792034][    C0]  ? skb_push+0x8e/0xe0
[  168.792053][    C0]  ? batadv_skb_head_push+0x187/0x200
[  168.792083][    C0]  batadv_send_skb_packet+0x3ff/0x650
[  168.792115][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x590/0x740
[  168.792148][    C0]  ? process_scheduled_works+0x97a/0x1630
[  168.792175][    C0]  process_scheduled_works+0xc3d/0x1630
[  168.792214][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  168.792243][    C0]  ? assign_work+0x3cf/0x5d0
[  168.792269][    C0]  worker_thread+0xa47/0xfb0
[  168.792304][    C0]  kthread+0x38b/0x480
[  168.792323][    C0]  ? __pfx_worker_thread+0x10/0x10
[  168.792348][    C0]  ? __pfx_kthread+0x10/0x10
[  168.792367][    C0]  ret_from_fork+0x514/0xb70
[  168.792386][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  168.792404][    C0]  ? __switch_to+0xc89/0x1420
[  168.792440][    C0]  ? __pfx_kthread+0x10/0x10
[  168.792461][    C0]  ret_from_fork_asm+0x1a/0x30
[  168.792498][    C0]  </TASK>
[  168.792505][    C0] 
[  168.792511][    C0] Allocated by task 5676:
[  168.792521][    C0]  kasan_save_track+0x3e/0x80
[  168.792543][    C0]  __kasan_kmalloc+0x93/0xb0
[  168.792564][    C0]  __kmalloc_cache_noprof+0x321/0x600
[  168.792584][    C0]  ath9k_init_wmi+0x4f/0x2b0
[  168.792607][    C0]  ath9k_htc_probe_device+0x1e5/0x2370
[  168.792628][    C0]  ath9k_htc_hw_init+0x32/0x70
[  168.792648][    C0]  ath9k_hif_usb_firmware_cb+0x214/0x4b0
[  168.792670][    C0]  request_firmware_work_func+0xf7/0x2d0
[  168.792690][    C0]  process_scheduled_works+0xc3d/0x1630
[  168.792714][    C0]  worker_thread+0xa47/0xfb0
[  168.792737][    C0]  kthread+0x38b/0x480
[  168.792753][    C0]  ret_from_fork+0x514/0xb70
[  168.792769][    C0]  ret_from_fork_asm+0x1a/0x30
[  168.792796][    C0] 
[  168.792801][    C0] Freed by task 5676:
[  168.792810][    C0]  kasan_save_track+0x3e/0x80
[  168.792830][    C0]  kasan_save_free_info+0x40/0x50
[  168.792857][    C0]  __kasan_slab_free+0x5c/0x80
[  168.792877][    C0]  kfree+0x1c5/0x650
[  168.792903][    C0]  ath9k_htc_probe_device+0x11a9/0x2370
[  168.792923][    C0]  ath9k_htc_hw_init+0x32/0x70
[  168.792941][    C0]  ath9k_hif_usb_firmware_cb+0x214/0x4b0
[  168.792963][    C0]  request_firmware_work_func+0xf7/0x2d0
[  168.792981][    C0]  process_scheduled_works+0xc3d/0x1630
[  168.793005][    C0]  worker_thread+0xa47/0xfb0
[  168.793028][    C0]  kthread+0x38b/0x480
[  168.793045][    C0]  ret_from_fork+0x514/0xb70
[  168.793061][    C0]  ret_from_fork_asm+0x1a/0x30
[  168.793087][    C0] 
[  168.793092][    C0] The buggy address belongs to the object at ffff88807c539000
[  168.793092][    C0]  which belongs to the cache kmalloc-2k of size 2048
[  168.793111][    C0] The buggy address is located 344 bytes inside of
[  168.793111][    C0]  freed 2048-byte region [ffff88807c539000, ffff88807c539800)
[  168.793132][    C0] 
[  168.793137][    C0] The buggy address belongs to the physical page:
[  168.793147][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c538
[  168.793167][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  168.793184][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  168.793202][    C0] page_type: f5(slab)
[  168.793220][    C0] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[  168.793238][    C0] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  168.793257][    C0] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[  168.793273][    C0] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  168.793291][    C0] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  168.793307][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  168.793318][    C0] page dumped because: kasan: bad access detected
[  168.793336][    C0] page_owner tracks the page as allocated
[  168.793343][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5632, tgid 5632 (syz-executor), ts 72286389612
[  168.793376][    C0]  post_alloc_hook+0x1f9/0x250
[  168.793405][    C0]  get_page_from_freelist+0x2209/0x2280
[  168.793426][    C0]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  168.793453][    C0]  allocate_slab+0x7d/0x620
[  168.793477][    C0]  refill_objects+0x2d5/0x350
[  168.793499][    C0]  __pcs_replace_empty_main+0x2c8/0x6c0
[  168.793522][    C0]  __kmalloc_node_track_caller_noprof+0x548/0x720
[  168.793540][    C0]  pskb_expand_head+0x22c/0x13a0
[  168.793557][    C0]  netlink_trim+0x1b3/0x2c0
[  168.793583][    C0]  netlink_broadcast_filtered+0x6d/0xea0
[  168.793606][    C0]  nlmsg_notify+0xe3/0x1a0
[  168.793620][    C0]  rtnetlink_event+0x224/0x270
[  168.793639][    C0]  notifier_call_chain+0x1a5/0x3d0
[  168.793660][    C0]  netif_set_mac_address+0x393/0x4d0
[  168.793680][    C0]  do_setlink+0x9ad/0x4670
[  168.793698][    C0]  rtnl_newlink+0x15a3/0x1c30
[  168.793715][    C0] page last free pid 5691 tgid 5691 ts 72280237292 stack trace:
[  168.793726][    C0]  __free_frozen_pages+0xc93/0xd90
[  168.793738][    C0]  __slab_free+0x274/0x2c0
[  168.793752][    C0]  qlist_free_all+0x99/0x100
[  168.793770][    C0]  kasan_quarantine_reduce+0x148/0x160
[  168.793787][    C0]  __kasan_slab_alloc+0x22/0x80
[  168.793809][    C0]  __kvmalloc_node_noprof+0x49f/0x820
[  168.793829][    C0]  bucket_table_alloc+0x75/0x380
[  168.793851][    C0]  rhashtable_rehash_alloc+0x8e/0x170
[  168.793874][    C0]  rht_deferred_worker+0x482/0x2250
[  168.793896][    C0]  process_scheduled_works+0xc3d/0x1630
[  168.793919][    C0]  worker_thread+0xa47/0xfb0
[  168.793941][    C0]  kthread+0x38b/0x480
[  168.793957][    C0]  ret_from_fork+0x514/0xb70
[  168.793973][    C0]  ret_from_fork_asm+0x1a/0x30
[  168.793999][    C0] 
[  168.794004][    C0] Memory state around the buggy address:
[  168.794015][    C0]  ffff88807c539000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.794028][    C0]  ffff88807c539080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.794042][    C0] >ffff88807c539100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.794052][    C0]                                                     ^
[  168.794063][    C0]  ffff88807c539180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.794077][    C0]  ffff88807c539200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.794087][    C0] ==================================================================
[  168.794122][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  169.580315][    C0] CPU: 0 UID: 0 PID: 6185 Comm: kworker/u8:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  169.591419][    C0] Tainted: [L]=SOFTLOCKUP
[  169.595728][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  169.605776][    C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  169.613583][    C0] Call Trace:
[  169.616854][    C0]  <IRQ>
[  169.619689][    C0]  vpanic+0x56d/0xa60
[  169.623665][    C0]  ? rcu_is_watching+0x16/0xb0
[  169.628420][    C0]  ? __pfx_vpanic+0x10/0x10
[  169.632920][    C0]  panic+0xc5/0xd0
[  169.636633][    C0]  ? __pfx_panic+0x10/0x10
[  169.641042][    C0]  ? tasklet_action_common+0x103/0x490
[  169.646500][    C0]  ? tasklet_action_common+0x103/0x490
[  169.651952][    C0]  check_panic_on_warn+0x89/0xb0
[  169.656880][    C0]  ? tasklet_action_common+0x103/0x490
[  169.662330][    C0]  end_report+0x73/0x170
[  169.666572][    C0]  ? tasklet_action_common+0x103/0x490
[  169.672023][    C0]  kasan_report+0x128/0x150
[  169.676518][    C0]  ? tasklet_action_common+0x103/0x490
[  169.681972][    C0]  tasklet_action_common+0x103/0x490
[  169.687252][    C0]  handle_softirqs+0x226/0x860
[  169.692012][    C0]  ? do_softirq+0x77/0xd0
[  169.696335][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  169.701440][    C0]  do_softirq+0x77/0xd0
[  169.705587][    C0]  </IRQ>
[  169.708505][    C0]  <TASK>
[  169.711422][    C0]  __local_bh_enable_ip+0x100/0x140
[  169.716609][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  169.721707][    C0]  __dev_queue_xmit+0x1efb/0x3920
[  169.726719][    C0]  ? __dev_queue_xmit+0x29b/0x3920
[  169.731824][    C0]  ? rcu_is_watching+0x16/0xb0
[  169.736579][    C0]  ? __pfx___dev_queue_xmit+0x10/0x10
[  169.741937][    C0]  ? skb_release_data+0x2f7/0xa80
[  169.746962][    C0]  ? skb_push+0x8e/0xe0
[  169.751106][    C0]  ? batadv_skb_head_push+0x187/0x200
[  169.756471][    C0]  batadv_send_skb_packet+0x3ff/0x650
[  169.761840][    C0]  batadv_iv_send_outstanding_bat_ogm_packet+0x590/0x740
[  169.768862][    C0]  ? process_scheduled_works+0x97a/0x1630
[  169.774572][    C0]  process_scheduled_works+0xc3d/0x1630
[  169.780121][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  169.786099][    C0]  ? assign_work+0x3cf/0x5d0
[  169.790680][    C0]  worker_thread+0xa47/0xfb0
[  169.795275][    C0]  kthread+0x38b/0x480
[  169.799341][    C0]  ? __pfx_worker_thread+0x10/0x10
[  169.804447][    C0]  ? __pfx_kthread+0x10/0x10
[  169.809021][    C0]  ret_from_fork+0x514/0xb70
[  169.813600][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  169.818697][    C0]  ? __switch_to+0xc89/0x1420
[  169.823366][    C0]  ? __pfx_kthread+0x10/0x10
[  169.827942][    C0]  ret_from_fork_asm+0x1a/0x30
[  169.832710][    C0]  </TASK>
[  169.835963][    C0] Kernel Offset: disabled
[  169.840276][    C0] Rebooting in 86400 seconds..