last executing test programs:

5m56.758304109s ago: executing program 3 (id=609):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x2}, {0x96, 0xfc}, 0x2001, 0x4, 0x75}) (async)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000b00)={0x2020}, 0x2020) (async, rerun: 64)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)

5m56.579361264s ago: executing program 3 (id=611):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc5f2, 0xc20, 0x1, 0x364}, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x428c02)
ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x4, "36df218512b3be71048955f6f876b2ff"})
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x2d41, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x202, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x93)
syz_fuse_handle_req(r1, &(0x7f0000004200)="c2d413ab1322707d9abeb8927eed4810ea68642c460b39920fbf752253849233270dfec2382b2f94e9efed1965f665f1ba12554d59ad08bc2a300f9210353b24256183a9c3b7c39db910f7cc44d411f9748ccb0ce3075f77e5246898cf49c850a52f61a249bdc8296df1c3b177ef1d68d3a6c1988e95670b43c12e2de476dc383c393795afd381fa1a4b3b0659864006ec165bf9036a0dd9593d93d189112ba55e6e7d4c4075415d59c346861d1cb4d9809be255da465c7b92e960550986268cc4a4ade9add935f90a654f0f3d70873259b24a9e06b6096c10c1910a2854552bd3bd9e9cd2815969d1dc031c1d2d40610a8b17dbab7a47f8e9f56529a79b0f09502d00aa5448cb63577431c4ab01c2366b9aa1e38d79ad304fb0cacd9694649bdbfd9cad7b7b42a3ca60a62380063d0f9550b760aec8be2d8523528f3139045080a5abd4a4004b522edc4abcff5e124126316f0de034e60ef53e252514b9ce268767101381bebed0f514ae6ce5a17c829efd5b0bc47bf0276c4838636f648e18ee19687c38526bea74255458b5a896a418ef72422bf64d6bf3b0651cbe761a19bcfd2df277e330a7c8dee14659244f2e1a7be0f14ac71cc0d263a012a523e333a5f07a70e7beff6f6e062a8d83477c5604ae60591d6fb0b916dbd70a01574061680f320dfd64d6519015e4467694511ef712f64d2e85582c383845eee0da3168ed7a2d2e085869919862caaf96b8360e6260d83256dfa179f7d9ae9f6c0c054f981f739a1aa77a1b977cdc2d734f327317775fd47ab7255b851c11b1d8372195295d72da99f6b682567186cbc65e37edc2022edd9b1a3db04ce9a3e4846a06d4163add832f51b281ccadd0a3125ccab88eec94561fbb50cd8f6b3702f077d4a38f9cbf9336f40fd91659629e59d556482b4366c22a400e951a83b8648df0ccbb069c9936faef93077beb7ca9f1d06f8ea6880910fad65a16cb3076b18f2175f55e7b1e2aae13f089b195151702c28cb7d9678908064fca43309d330e035f7fb8903c430f2d9e6aca0451e23191425e2c77c40935770b3e2f8e24e76e58a13ab08c755f37c26fe2b2ef7fbf620a95b3b203d0d0077465d4fb7af8b8d336bd44fbb20f49850b8bd9acdf47e8ec10f43e5e01e2be795124148add29860482c87b0631b5143156d320f63888392fde19992b2040381d55e1eea077bc9b2e66d568871ac3ac8225677d95257dae4fe546a0726fb71d6afcdc820132977b663877f8a5b52b990fd2615e1a2e358eb8082e8769f347fd6d5bf52295fc68e993d75e26d7edd7170ac275933d72643fb7c39f32f3ec75a9796ae0fd8945a1109163bff6f7f5b69b8bcfb8a7502a799d5c520ba313f2b986e3a59e3a5cd2e9f9857c90db7ad041e3c15b713a3e6884f5e9b6990398a8027f6f067a0a5d7b6a6ea0a7ab5b1b29a5b78119a8b3060e706a4093a7d0552c6d66aafede2fb41590916486eec859a37d41b8c574d44301a5863b1bb21349aa126966f5bb44ef88b652ea435155a76d33efbcde2775a49fc270fd99d3e77319280242b7aeff592f7d761909108187a64d6e4176be728703416b32e69de3cae7f3f50262c7e1756fd31d1b5cea953891e352381176f71a7d0ec5efb66aea0f1d14ff14c7f7bde4363fe767ef2ac3b0c766229663117779078333aff10e4ce9d91cb4b3250025df261648c422c974482dcaf8d8cb1c62ca36164423ee2d7885e3890dbb46208637bb617b8ed326af33b0b14cbdd8b57850b63588535bd3d807be37040d026a0754c221e983d9835509354138795f99828549f7146071173a01a332b5b15774bf7e368421f962089c2ed04b9815bdef68e14a2ba8932712a5a2c12c8647078fb705e035b48a9a9b6aa386ee229605608649416ae7e32ca27dcd6b776967c71c5604c98630c89fd48473e8785fc5b29960efd8efe081afbdc385577655e3a74abaed80bb15a1ef2b9995da3179018e3b74c0bc58bf2e0f9a48971b4f5ca35c2601d543041347b832711cc5314656e7e8eef56c6f6ec5808956e4f00083777752b2ef35a2b19a845a9666ac869eda1ba2954a5cd5662e0bc23be4004a34f5b54d1e9562b27c7c9ae6d32db07d99df1ca53ab46c4a1984bc5b90a37aad1ea7b2fa4a75b89fc85fb182abc6ded642c68295a77ab801d8ac230b77427fdfbba35a5d22c7275a897720680e30b83fbd856affc4e9f8d4e17305051c8ee7572e3db3f74c3bcb43b12523038d76e3a4eee1b842ce2089d51e6b249e3313a6065e28110fbe01b3b00b8f8e87bda67222f882107a22647433c7c36f6f29b0e14e225ea3e24e76806954666f78176602992f1a577b8ebc9206f63054027443a844976fbdd22bfd770f42037f6541b6ca0b0b3bcbd1caa097b301ad1b9fa58a44c874fd04e7411d73e38978d50210fc325f41f936e9d9b531a1d4983767247d5aa28901a2fc18041d79f0c219a1fbccc75283466cac679ba427a133e785f6f142b09160d6da8971f454b109af7f0b58099c4482b92a7451f8ec4fba6dfd6b84e2928967c6a874ce9001c6fa759754a40c78b786bfbd2859de6b7d78a598edf1b9c5fa04a5f136804b7462b59ab439cd3f341407f32c47037053960cf8fc0a4bade8b2f04cc09690417358f8ee79a86854de7fbdc2939507f9c7107ca6c88960d928d450f6cff959e9962d29cc0c9df9fc7963e04e0cc399a228fd7b79141ad89289e037aa0f806ef1469091cbbea5fb31cbdb9dcf441b6c675ff26ea5fc32ad2d3373d35722d69327c77ca0819f138d03a48d279665d7190c53653936998868738743e844f0d65a704643c4c3d1fdffafd3a4173c16bdd55cdda8ff5d6138171c24f6df6c6d82aba0b86e596559a1bc2388067848c5d0f5e1621932920564fc588c14bbd46b19aaf4aa87d3140364180b816da50a5cf2d1a3f730d1bdb07c54ef406e6dd4dd538a0b5ae8185e78c69e6f53a416a9e0a5a3ca65f91e102b57b37b5edcc7013da100a238b2488ea3c3e921efae3586f33a4f921a1f7b0366bb28481082da1ae45bbc61833e30e4b4f8429f97ad3f4fbab9f22dca0a322ee99b85512bb717d79b478edd534d217f068afe7d806b9979782f0a4410b1b430ffd24c018ff4ecac8d46ce1d73ee80f663a3a5cf26b6834e79864ac7ee8beb0faa50f4dc26023109e5db578360bad4b14dff8b01a2a29a64d2ac6960677797c63714a644464261ea681335e49fe127659f180322285fc2b0370e195fa2658af90ae3e68597860b608ae243d96bdbef35a302965b99864aa5ae204a4bc942bf3b3981bfbb94820fa22260104b93ba4972b87d44a77287da1a3c79f7b1ad8ed09d5569084f01b47bf0325199f77c6ea89e1b836150bfe095f1758f99edf1f32046fa28a67bab5775ddfbc1cb5158159513570ac8a0ff964197423d3928dffbe4c9d2a6b207999b5330853b04668f7fa5e768b6dab96632ab431f9eb7e2745f461e8a5238e62f71b7590f09707e9d08a02ed968262a804db67f419540962df0954980c37ccea476ac5347d270e1f41758f8ada44c6e3f06513dcd7e7d8080dc33e9cc269214e2d94caae5409eaff1f843566c3246711fe412a605d57b94d60d8723974c463696fbb6e486ca35e0db43e6290c98e78a13be1d7037a3ef973ea51188bd0b751e9e82ca3b7c0891908f8d0590383930925facbf265ff7bdeef39317abaad099689e51f3489ce71aaf2007f3293f128c915679fd40c12833fc11ae01ad0217dbed657bb4010a20844374c50823ab123427e95161d1d0cc65c28129d24690acfa090e6d6b1feacd499410f75a5c8f711606acb04433d52806695fae90d03e1b3239952d34e8e41f40f094bceeeae17374289465f8ab945f9b8a9d190c06ea01b037ac5b679bdbfef7c3d55ed54a42c263137ce3c5670c3aff3beb2746419332f5772657ddec845b5bd0cea25c3a74caa3127f7c53c5d9f085af61a5294229b834d6660b90a0ecd4f2ef835704eac73d1c6cec1a49306bd191236cc652917a01740d8d44c8024b8e26505213565f87480d18c039e79ce8e568f80827543da4df7d77d5c196273a94dc5dcf1af8b7c4adf2c2c860022a56b546bc15aa00fe0c2597241761da872304029fd800e4a4af99737573af206322546b4e86330042a56acdc8a9f8f38331e018f97cca9c8bc3d4546d90e987a799e27ef722e094b0c697c117ba27a177856f2082d8074cab54a06cf1192b1eaa787e0c32e3b403e81287ef1f7f0a43f36c5fb0f49f332c6411b2a1b0cdeef2aad81426d6bfb927a8f0f5cafdaecf134ba211a08fbb900eaef86eec5ca9d19afc8a3b3ecf3014c0e68cacb0d38437d562cf496e22b701d402ab4fe3b4231c8bd2352c6a20e019a085ae430bc1e3996d9102dbb2863ac4bf0036c670b413de829580c90fa72d85fc2285195ceff20de3ccdd879559f14b7ec170eb519c5be7679bfcb629b26b563e90040ae489bd7f4489f58c9621fffcd40d97f4afaae335d1112a129c4044e989a1b025b711f83eeb9d6bb3e5fbdc8bc3397bd5fc2d74691f527befcf0b8d9476465b5d3df2bf8332238eb3929fff1609d4c252291791b867629fb96b3131d9b54fc3308dd16ccd2c28cafdc280f7ecd8aefb46afd870e0db13c0d221311e7279bd100cbbb01d390edd7722a837cd1915b61a07fb76aef303e974a87a003d4b614dca2aa78289ddba7f1ccb2cd28c1ffea25a00d445387ce26ac16bd40b3bc408be035b87900f8bb766d12cef3f7eb563e347125787a4a9007acb02179ead800652332b3e960bf1ca07f1dc9add4989c070ed282cdc6b45d3bcbc6236f6ff1b8ea77aa4c1b7a8ec875370eea5ad096f4105ce2177d1a307afaf5a87af02e8528d4e0e0b013cefab371da05163ee549b4811e9bd3d784bdfdad383d4acee2330c86818f94dd1ee0b9059e7574c9e26864b3af44e1f0652c1ae88d8d56fa74a001516f95a7741786b3f8a67a1584332157e64e936a601818d314f7d364b48b4f82e7d18c80f59d163640df4d8cb9efcbafd3c9165794b9aa4e0a7bff619cb1762c9dc4edb1eb69d4f6a8858942b52078af6b5ed361cc0ada78833fd29fd0f878f08112a4920534f7b6f4fc9725f733f68281971a50c557f0235907bf702aef8a65e54d8120f0657b8f4a38b6c92d22fbc2fffc11f87e868a6ee54432fabcbf10a704c1d9efbb01341a8a2062a85eef8d41d39f75d58e5d433bfbc7fda0f85c6aaf4ef49dae25b6a1099b28a0d0deac7a753c3157ec0151a7140b8e6aff8907450bdce2b46ac30852fabb85b182e9e39a2f238536996a9b956a68c0f100ab8f565174f45d9d7dd85964ba3146ef66fa31f0dac0aa9055a764a7d6a9d03e29c2dbbb62e89a1479e3f6c2b9c03633127d37731a95315f684c2f0b6e0fcc3e458327301599ace5738cfccc86f5a519518e121368c2f78f2af6e04b20a41c4c65c2cbddab9e57b07898edad05230c0aaf5fb603d0358d92191342b8f3021eba47ee5b82539262d56298e8ddfadb3232fd0c80e5d785bd488bdf95aa1694b056ccf1d9009f92a68a111c622260b206f0237eaf0adca4df1e4342df5ab6a0dda36c0b2019221957eee68708c9a90e96f1a8d3b298e3c01a06287046b8a64b5a1acbb6bcdfa86ef5415cb06e5793194818d421a34c1abf75723187658ec681a910f2eb9c8496cdc15213e9540a9177bb5bd1427366be571bdaa7ae43545a62ac471dfc1306e1cb70ce5f405ae671dbc00f1363776cca0ebc719937e1a40ae71af5155589cdf4aa2a1e7e48f52499d3749620ade7eadf6a7bad4a9fa7d55a044caf9e018f7382fe6a6b96a1aae8f1aac9908f872aa21c3f08b7c8917bf294e887b085eee2add56cc6832f2f598388308ec89a138e3f5b79e9f78f1ce6e349fa3ccef473292eaac53798b250d64e2fafe7758745a1445f62f46294fb84e5523341d7f89c6f202d7136d4534af9c4475dc6d4e7529db1b04c6a2d36d6ba61d1588ec1e1334997d664e11a7b93ff90e15d04774db779accbba6773c7d72f43abc60404c7f4d8b81de49f20836591efbf2929f800802d60241ca35faf57255fd29f18a3a84bf1c26b4bf5318158b7de8d0b338ae388714f4849b7721006646674ecdb5916687f544f7e798f89fc22ad29bc79f4e8bf74ad433b4394aa03b36df58ae4201576ff5cdf3cf7f975a4045216a0f3b399cff26a343d9eb0030b497192c1d8f3635b429d8ab64382abcf5425c2db1b9a2dcd61fd3316bc2ecf4e2ab783547ec45bc143a3c8f86f5d848be96dd8ff139e5d168681f19244528f92ac06f24bec4d3843134ce2b7237cfb72989a085e3de137be904f65bb035fe7a5f3fcd666181eb342e4f1441311dcc62fa4b53d039b7bce7229112d83bd7cfa114e162591b3d17916b8193f624488803a098ff5a2b6377376ffa55ced02d27352c058908cdc960330995f797c0b89e6b810de5e6990c1876ad4d59285522da1c8016e29d7260f31a05819be3d8b04327e6df77fccf5af7ab9a48a03b4f0ab06ef7ae92ed2dd7cd075341b7b049d577e0e0e54d5b0d6c56298edadb3fb07afa7c8f86ec4b2f801afbcd6d425b4fbee006df1cb5d52c0fc66eac80c9c4737ecba8d736f0cddc020efa78b56a76d253a77c472c49b07ea9f7243ac230e3495b9fd3c613372159ea19fec8a19805c0deb043a8bada1bbec7bd452e53f8beb6eec0e67753d72801ec3d01a5c75ac2c3e328f41297c3d552ea2223172306b3e0aa0e9ad02febf69c28feee790c3d6551c6fcdc05f7db60d173b172a6b178c23d4d974151f5bc3478aaec3e2972d1693c1661d6d2707a66751c3f8a0e2499be39942609119e226dd2b8204d102ab4a839fcdb1a158e2cb3e5e63b6bb4d23d415b152eb61c209bd83c1bd945361b27ea2e58410a8df2a1258daedfcfde558281e643caea35dd0f3fe648f01546b48f9b92c89085fa7857a084deb8a110c1f2ddd370bf464c466a838abe754d63f178b15c6c1d8dd2aad2b86c2b8e06454ce91eaf1df3e2b22685f8f38001671a08b5ff63e1b5e019e77e465c938719256be471f1c10e65dbc1e6f7abf4fd716f06ff5df6e1abb629d38089e2a3c8132178f9c685b0d70b9f8bcc0ac298a7375e53b28ca9b9f2cc31aebedc2f82f96757982662ab7ac0279c751b9a25a4f8e2a775dceafa0d04c1cbf27ba0138b25d6421fcd829f3b90c0169fd7dbe761506dd92365cadb05f62155646e5c258f9f42de2203ef7f099df0fc78e847f0fc78a6ed47c9618ae318ce4f1c7ac73bb452493f8ceaf717558d6d0f16fb6eefeee1e964d6ed423984af4cf71ac4a84cfebf9d62a0dde5bd6de5119bdd15ca0078f8be23aba5ca8e1698a526c44239de82691096042dc7bc0dda153c6597008f3932e147fcfd32f327fdd4c7008293644aaa9042f547667a5d5e45660533aec6778e548767c73330d1c8ee81919713077162a9f138cb73dcc28982ed19a05d8cf19e40c98befcb192c2c1e37e93c4bb4babce1f98e37fce7488db8e068d017c74981c208ef9ee6405cbe68e17790da61e2ea26369f3493d9bbf47c15a21a7c8d508dca9e9de29065c72fa357d97529c60a856890e0d64674eaa0c650405a0b84237e194f1c8855b57ce5a3e7d7d8b9bba16e1f58650a06af21256ac40b50f27128f27cbc11f6260d792c60de8a7d718a2e78f00dfd9427d6608ec0eb1a8897616c4ccfc8174817e19987fb9fc790fab13be4ac9061ed00e0bccdb4c6c19d7e55b7c7a02cbdee5b1ffd186808dd8a25ae6f091037c97de476be1132b2d74068db545ff145d191da2f0ae258bdbea5b78c7f199e1679459aa4ef181534ec1421d17dbec69a6aea27dffa505c2dbfd20c881af7e48db3a99fe80d0fdf45bce12fccb621d7eaaf8e9ade9d29a6a05faf2daa4e62a62eed6190a84fc1992ac86f3bce5e53592d35fd2b7484711d4f952cfd205564ae43976367403dd2cf2e24e438c26e41e3bc436d7f0067b6d2740e1c8a8e7e8bd5b2757e34cf76a482190372fd5eb4841594344f0513b4e3f05c3fac637e97ff359c899395619e3a4200b56665d2db9b521473c8702dcc81e3255a76ae2600ae2af2cb06c7207f898473880f80f72ae2d1f459c377e4f88a1cd04088d832a801072d17b506b1ad6b277f044c7a1390586ee6240cb768250a094d767f8c679bf2c29122b64e47151b7e35d388a52f843d3d4abb44d4b13c953ed97725f2a43b8e55cac731a635b90f8cc1c4bf6146bbfc3ee08ae59dc6e6e1d7e0c74f4679774663cc321508f83de38facd30d76a439a3ea0ef5219161703d432bc1dc76ad31084592f8a8d9edfe075e37eff3b8eebf952d3932637d936d5c09b86b6f98f27e503a71f44054c88d20963a4426e4d40f4093c5505cbf908dde86f9a9ddd4df49dabab5c9c728c00830f89377bc39b40b619dd27e1af95d9041921c76df2d6f57432c32eaba3d5bcd93d1248066fad1a41afd477b21bc440623715b4c42ca2266493a36fe6072990a634e282033fa002524bd18243dc380de0e4ab2fc75d6a88c80666b7b4ce317f7e6f623d60ee1f8b36bbbd9d93998e8cf10bb46c6ce39e11331cd9e37bc24907ef05b0076f67baa6bdcba12b92351a44d22186a4cea6ed050cb33085e6e5c5bd81993ae20302b9ad9688b355e0c4413da95a04d518b99f5bdd7b964538fc5817a85722f3fe3adf46bf7a2af7d2087d33d5a341e09fc7bd2e6a322e0e3d14c8aa34ca1c69a9b3b4f13553aeaff8e1ff2f134c1f5ea72d13337b66e8026e1050e5227094e68e5ac3233a308efb3f43bad32257f8ebf75dc8f18b9a53535e65b362f5f70b600aea19bb03bff709f6abba4119f08e0410af4795c7acc73c5aff032e8893c74ce4aa17fa67bde6e850474267cfbc08ed584b291ff5ac047acb99f61ba210fff186148b244de94da34ec79b099db0b509a8434e1a6de5d87e0a15a18725384445546c563c3e4252762afa11d1b9bc19c894f2923ac730ad1c8c0d5ff1075a11cb6c6fdfe28beb2581416d78166e2670a2eac97c68d9cf9adecad53592e59cb74d6f7bb1e33fa2275a828410117b95eea553287e982c1c26ae0245641e3ca1cf9de6b4337ce2484adc68198326b7a2c6915e015b29577226cff08875cd581e0940360160ad621c464a1b843754c9652cb2adf93dd3a783601988ce139b4905d6f8177639b2446f3d799b37ac8923918db2599a020ebebacf3b0f43248c5a8da4d0725de04baf03f1dd085407e116e82e651a22aea596031a736aec47c57758e384b0f38bdf39d2c3f61a51630a24c3d85df45d1a0f570117f94714747436bff8bb69456d9fca425d9a89ce6603ce3afd18620692bacfe1b2487d448ab806ac4e2d0844f4e47698c2e0f8b40b30d5a279d928d6f897f8f2a2ea4f82ecf685d053d180fa44a314876d3e78595236aea9f92420fd8ce4f01995932ccb8c0f272bad5e0d0dcf3c63dd37b8e32c8a363fb3569e34c3b9302012de21c22dd714cff294c99407bef1b21ac8178441b61f276cf31209c56d4e2908518f46739bdfabfc592aed8d3ffd5dd27b3211f601f94e9af666bfd4a4a3f4726d7a9e53d1d1533ffb27761e8b37626d5ac82cfe6237c869ec5bfd85815bb297165fed59393a61abdebccfdd55d8e6250e49b715bf6a2d6034ead279e507798d36225bddb469013033d3381e181dbf5e1b0e9501659e74b4b4096ab0eb353c817ea8998cfceea78587d1b279f0fa78b6da128fcfbc5a641f8996682154fa908b138e8aeecfbd41d5a40ffda3fb36814695e1a1ea8c7aa73ada0c24df14b288fcf5775429d0876ef2ef4d908729cb37428fb08d4ead35bb40f442409f48966d00e9c3c6331d8190418eb30e14a6451b55a42f8f3a44453b30957f93106088c14cf992ecc9d4ababeeaa528dbba89cf04062e403569517759a91bc435c256c0974808d7786143eab1e28dd1af34186fc3f5ed594218a998419d14938c147e2b9993d5b4092cbca55d1ba125d5e32e37808d131e414ae029f9e6e7cb5fdb0fd5c463e8717dab1087ff4585c510c3c3966b706c169f856e80a9ef29d6d4a1cd6d87e891a51c98dc02c299536675b0c8a393e6e86fc917e03d6c5faa1f4512f970d933a34fec78523b357943a89e4009edd64813deffdf8f4811a23986d07a35247993fed06265eb32a9ff64341826edef4e6878f35ba3daeb25c0b51442331f9ace99b0d051806b3d1f96dfc874583cf2f2ff1e277c163f3341a2ab799f6bc9f37ce3fe3a27c20ca159f021669d7c385102e8b71ec4ef083459502db401a90a8a685e38faf9f55cc4312e89eba12988939413d73aa01cc53f1f1ac6d90d42371a9ca5110f36b364a8c18e37550e7b2f9fd81a0b19cf6b1e33748e3b3e7caac6bfbd98817a57ff45a0ef8b94c09e5eb0edfd788508d19c40f93665b183105a030bbd43195153bc9aa27f5b668bbf8818f342336b618c401563a087582cbe8b6cf115f9e4bd035dbefbfa582ba8f4a3a05bc0bdce15abe21a293e83266b46efb7a1c0386dd0ba456fa24b4fd6ba6851552a052a7d4ee7bb4c377eea951043cc7ab60738f111c32a8d5244a3dcdcb451dbab0770c1accc1626ac36b9fc61dec40144a42be7cd1477eb5c8d82a185b853d3dd5ddafe1de2ee6d7f4ef9b36f58e9a5c721595df9bccc65f7634e2935279d5d7eb364660de5cd5110d3755393e02a8f59a2304f3a6c7935ca580b4ba7237294ec75de9e05b47a0617b21887685c1708446e7148d8b71926dc1d19b716f90579cbc5ebd9b7e3a9769e490a50ca82f51e48360550fd6a1586f1dcc43760b828cac600ab9c5b6afd54dc3f94eff39f3db3b18618e8758e48e5727e42ad2e0fedc2ec7e28172608e486b7e1e2238b83047965bfa92e4bc1bb6a196fc449372f0a8623112c4e0d5528c518927426aa5c35bfdd1397cf99e7c3bd0fd0d1500bc00b700e9cefa8ba28a468fab1eec322efadc1b4deabbfae241f515c257a629ba2e7b2d78db709e6aca3bffcfec6087100ed784d715bab6082ce21177fb32ecc9645d8f32f994db99c96b88bb718636b6946382c186335b78d500b71a6b33ec8ec1c1d8258c057cc51abac766c0385eb12ed6510d07319c6c8c01b5f08d47f25e494690a2d25900dc7bf4e802c4bceb9c00390e229fee5d2ad3f6da7cdd3f6f2f30b88b25c0d40f0192f54a60ca39d45a3ef43666c12bbd20fcea5166b76eafe6ecfdd8bcc9231b7e1ac7b5901b98029d8d6ac808400a26f264d84754376a2c2e934f276dd44b100e801b5a07f20475992321544662b7ea2caf0ca4574f8ffe532742802117ef95bd9fc265e9629fd0f962dfc850781adac18e69f6252dd96b8c58f088271acc06a913f4990e04be6a98b59897210fa87c42c1c460b4bd58170c355187e77eea9921ccf059f0115c3719810fce02b20aa10e32ae9fc2f93f517bd44f1409cd91002ceb4fc412aa2151c8ced61c2ad408d6b443c083af90d893d3fe6cbc3ebce91fbb535406a58bb43d70f895b8a648a1f4dd92db7b1ce", 0x2000, &(0x7f000000b040)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a440)={0x28, 0x0, 0x5, {{0x5, 0xce7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fcntl$lock(r3, 0x5, &(0x7f0000000200)={0x1})

5m56.381234439s ago: executing program 3 (id=614):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r2, 0x6, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002500)=@newtfilter={0x18fc, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x18cc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_EMATCHES={0x200, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x9, 0x8, 0x2}, {0x2, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x14c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x19d9, 0x3, 0x3}, {0x7, 0x6, 0xd, 0x3ff}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf1e, 0x3, 0x3b}, {0x8, 0x321f107c, 0x6, 0x100}}}, @TCF_EM_IPT={0xf0, 0x2, 0x0, 0x0, {{0x2, 0x9, 0xfa08}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0xd1, 0x5, "63a4ee77713462c54c667b8025d0d90e1de4c68459554502ecb0c160700bf0bead224e824d91ad032f87e0e4e99bd6e320eb2d2433a4f0bc8f93df2cc27cd5e1c933bdbb4ca2e4ea39748a969cf9cffbf3497926c99d8d9aaa1c7c37ebf02339a15493915e5d3af7afb55b8452e1a3448862aeb4807a73e10fd9c0f71844e8447b35fccf899eeeec542acfd2018d89802efdc049ac28e2c053c3a263bc4e54b7d10a9a52ced6e34996300a41b2417dd289d4d14e226fd5d67ea723d61a1467c2f3201bf5e81874be14f9d44214"}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x8}, {0x1, 0x0, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x8c4e, 0x8, 0x2}, {0x3, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x94, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x0, 0x8, 0x5}, {0x4, 0x5, 0x4}}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x2, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x9}, {0x8, 0x1, 0x2, "ca"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xb1e, 0x3, 0x668}, {0x5, 0x1, 0x6, 0xfffffff0}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x2}, {0xffffffffffffffff, 0x0, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xdc, 0x3, 0x4}, {0x3, 0x1, 0xc, 0x1}}}]}]}, @TCA_FLOW_ACT={0xa20, 0x9, 0x0, 0x1, [@m_police={0x4c0, 0x13, 0x0, 0x0, {{0xb}, {0x468, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x80, 0x2, 0xc74, 0x2829, 0x9, 0x2, 0x9, 0x2, 0x799f, 0xffffffff, 0x5, 0x46, 0x7fff, 0x800, 0x5, 0x0, 0x2, 0x7, 0x5, 0x8, 0x80000000, 0xff, 0xffffff70, 0x5, 0x3, 0xffff, 0xe8, 0xffff8d0e, 0x9, 0x1d69, 0x2, 0x80000000, 0x81, 0x0, 0x10000, 0x0, 0xfffffffb, 0x2, 0x3, 0x8, 0x8, 0x6, 0x5, 0xfff, 0xd87, 0x7fff, 0x9, 0x8, 0x3, 0x1, 0x9e5, 0x2, 0x5, 0x6, 0x100, 0x3, 0x8, 0x60, 0x0, 0x3, 0x6, 0x5, 0x3, 0x8, 0x2, 0xfdf4, 0x7, 0x9, 0xffff, 0xcf, 0x400, 0x80000000, 0xf7f, 0x9, 0x2, 0x3, 0x5, 0x4, 0x200, 0x2, 0x8, 0xdc027c7f, 0x3, 0x1, 0x8, 0x5, 0x954f, 0xf9d0, 0x4f9, 0x6, 0x400, 0xfffffff8, 0x91, 0x73, 0x1, 0x3, 0x200, 0x7, 0x1, 0x8000, 0x1, 0x8000, 0x3d, 0x8c, 0xd, 0x8, 0xa469, 0xda0, 0x7, 0x409, 0x7, 0x0, 0x0, 0xffffffff, 0xfff, 0x2, 0xf, 0x1, 0x1, 0x5, 0x57, 0x747, 0x2, 0x7, 0xa11a, 0x3, 0x10000, 0x7, 0x0, 0x80000001, 0x8, 0x9, 0x4, 0x1, 0x7, 0x6, 0x3, 0x6, 0x5, 0x9, 0x0, 0xfffffffe, 0x7fffffff, 0x98b, 0x2, 0x3, 0x9, 0x9, 0x8001, 0x0, 0x0, 0x3, 0x1, 0x8, 0x1b, 0x35, 0x5, 0x81, 0x20000, 0x401, 0x6, 0x7fff, 0xffffffff, 0xfffffff9, 0x400, 0x7, 0x6, 0x9, 0x6, 0xfffffff8, 0x401, 0x3, 0x7, 0x8, 0x80000001, 0xfff, 0x6, 0x3, 0x1, 0x40, 0x6, 0x401, 0x4, 0x48000, 0x10, 0x80000000, 0xfffffff9, 0x4, 0x19ee, 0x80000000, 0xfffff7e8, 0x3, 0x3, 0x82, 0x0, 0x8, 0x3ff800, 0x4399, 0x7, 0xfffffff8, 0x0, 0xfffffffe, 0xfffffffd, 0x401, 0xbec, 0x7000000, 0x1, 0x7ab9, 0x2, 0x8, 0xffff0001, 0x9, 0x59f2, 0x319c, 0xfffffe00, 0x4, 0x80000000, 0x7fffffff, 0x407, 0xe42a, 0x2, 0x7, 0xa, 0x4, 0x6, 0x9, 0x6, 0x7fff, 0x1, 0x5, 0xd, 0xef, 0xffffffff, 0x80000000, 0x1, 0x3, 0x7, 0x9, 0x9, 0x3, 0x8, 0x2, 0xf9f, 0xffffff53, 0x2da9, 0x0, 0x6, 0x51, 0x22, 0x2, 0x8, 0x5, 0x2, 0x92, 0x6]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x10000007, 0x6, 0x800, 0x9, {0x6, 0x2, 0x1, 0x400, 0x400, 0x9}, {0xb, 0x0, 0x101, 0x3, 0x7ff, 0x95}, 0xdd, 0x2, 0x6}}]]}, {0x2e, 0x6, "13116f988afcc944940606166d6b17560a829adc8b20534134356399597f20ef72660bdc3415c9ed4ee6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x144, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x401, 0x1ff, 0x4, 0x0, 0xddda}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}]}, {0xf0, 0x6, "2cb47b9e60d061ec44155c0d7929a444b0e9955119cf27b9ff18b9a11671d007d2930b7814e3da8c8afe959d5a0906a8749b44466dfdd95c3836170bc2bbcd4223f025865321483922703658181bcdf3b7a7cb504ef2a38bdfcedb4e7fecd56dc2a491a285f5fd10e54a71f4e03504378e389d84709dec93634e2ea3d710ef0bfbbcd8da9db976dfad090ee217a1b80404b1aaf1830ee51eddfe4806a70bdde25e73e1ca52b1a99632b36915990d5b091a8c897403c0872876017ee82952891f34b093d6402d68e2889fcf09b444b0d1d6bacb14cbc3cfae75f51b10fedd72499718316812ec6c9c5d524d1c"}, {0xc}, {0xc}}}, @m_mpls={0xbc, 0xd, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xedb8a}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_LABEL={0x8, 0x5, 0x4ed45}]}, {0x6d, 0x6, "abb5b72aa313c25d191ad6bc9decca00796ee277c0c439c07d6045ff14de90ed3bb7e0a4b8fd4b9ea53da21aed491e7421d592132ba0ddf4d36e221bb14c549ac731afce4f2ddf7779e2fb3a28da26c6fb74e5419ac2b021448e8a22b8ecf34c5dcede80230a3ae7d5"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0xa4, 0x3ffa, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xba3, 0x464, 0x3, 0x2, 0x8001}}]}, {0x60, 0x6, "6d3f3e7ec68b689aacc236d293b6ac35dc802a2ced96880205a032de4a9134cc3b9b280f107f60150dd03ed896ccfa68986b1483f1d5197774328ddca569be8ab8102cfa4ffb1fc36c381cf12cc93d31f9e9e29291dcbd33005f31ed"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}, @m_skbedit={0x7c, 0x14, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xd80}]}, {0x40, 0x6, "24c2b8fe114abf1f0441b57694bc112992dd4534549f8d5073a9946fe116a2d36c3b545d657b65a257a2754e7c8b0bb3f6efacfad4475fc96c4fadaa"}, {0xc, 0x7, {0x336c243c37376764}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0x120, 0x3, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x9}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0xc5, 0x6, "3c700740400ba43c0f197444ac2545066d2aaf85880914e42fb637f602dc3107c432d07d54d3eec7c1509b2fe1dbefcfee475cbfb4229440980e9145dc1b7dc85d83985fb85212589a485ed4f2b5f72792b81d1c34165076b4589ba0e19332af7cc4d9e9fe40c6faf43f849712fe6a2c7a661e93fc9911b7d6e39fef3e938e265c67c3e857d85a42ab9461331706336fe3bc4908dc9e47527dee1f169ca931e1c52e3b70d86882d56fcf050f2f346273e9e5a27ce1bb0a9648cc7515c8b082f949"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x11c, 0x19, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @remote}]}, {0xe4, 0x6, "d02b1b19d61484f47857f21c3c1cc135d02aa6a177494c582450ff5e7cc1233223f5ae174d03d31b0a9e912c3916bfe771b9966913a31468cc755706e678c44f8e90942e54b115376ef426c0c958a135a5ea770692d451e6e542711bddca267ceb0da7b7c0aa03fcd70ad8e631a390bf2ec42d4a9bb2d85ca7e74ef67e2341c2b9ddf58854b00cf487470eb66a45f848ff8dbd2afd1068dc4ea035f0e6ea70dbdf28e41035e70526e1dc1e3f407ff2b8085bbb435d3cb995da485e6d1ab8057ec39459163534ccf23870dd63038ec41c65f85314b454fb2b1fc37f3641a98740"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_POLICE={0xc88, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x10, 0x5, 0xbd, 0x5b1f, 0x3, 0x1, 0x2, 0x80000001, 0x4, 0x1ff, 0x5, 0x8, 0x3, 0x7, 0xeca, 0x5, 0xf, 0x0, 0x9d4, 0x27c8, 0x6, 0x4, 0x9, 0x4, 0x7fffffff, 0x2, 0x2, 0x2, 0x0, 0x5, 0x44, 0xe47a, 0x2, 0x1, 0x4, 0x9, 0x7, 0x2, 0x2, 0x5, 0x311, 0xfffffffc, 0xc, 0x0, 0x57, 0x6, 0xab, 0x8, 0x5, 0x800, 0x6, 0xff, 0x4, 0x31e9, 0x6, 0xb94e, 0x1, 0x10000, 0x92, 0xcb1, 0x9, 0x6, 0x9, 0x4, 0x79, 0x7, 0x6, 0x8, 0x6, 0x4, 0x0, 0xa7, 0x4, 0x4, 0x8, 0x1, 0x3, 0xc, 0x3, 0xe224, 0x1, 0x100, 0x1, 0xe7e4, 0x0, 0x5, 0x1000, 0xffffff00, 0x400, 0x5, 0x0, 0x8, 0xe, 0x2, 0xf58, 0xfffff27f, 0xa195, 0x91, 0x101, 0x2, 0xffffffff, 0x19, 0x3, 0x655968ed, 0x8, 0x30d9, 0x200, 0x5, 0x6, 0xaf, 0x8, 0x2, 0x8c, 0x3, 0x4, 0x6, 0xff, 0x10, 0xe7, 0x46, 0xd99a, 0x9, 0x2, 0xbc, 0x8456, 0x65fd, 0x4, 0x8, 0xd, 0x4, 0x2, 0x44, 0x1, 0x30, 0x8, 0xbf9, 0x3ff, 0x100, 0x40, 0x0, 0x0, 0x80000000, 0x4, 0x1ff, 0xf, 0xc87e, 0x3, 0x3, 0x282, 0x8, 0x400, 0x2, 0x444, 0xaaaf, 0x7fffffff, 0x4, 0x9, 0x5, 0x6, 0x958f, 0x6, 0x6, 0x3, 0x5, 0x9, 0x80000000, 0x82a, 0x80000001, 0x8, 0x3, 0xd7, 0x454777b5, 0x8, 0x20000000, 0x3, 0xa7, 0x7, 0x0, 0x9a59, 0x5, 0x4, 0xfffffff0, 0x3, 0x5, 0x3, 0x1, 0xa, 0x5efb, 0x5, 0x2, 0x9, 0xb, 0x9, 0x8000, 0x0, 0x1, 0x8, 0x6, 0x80, 0xc51b, 0x3, 0x80000000, 0x8, 0x9, 0x4, 0x1165, 0x6, 0x8001, 0x8001, 0xf58, 0x7, 0xfffffff7, 0x3e, 0x5, 0xe, 0x101, 0x6, 0x9, 0xd, 0x10000, 0x2, 0xfffff09e, 0x3, 0xac, 0xe, 0x0, 0xc, 0x7fff, 0x8, 0x20000000, 0x400, 0xfff, 0x8100000, 0x2, 0x4, 0x81, 0x1, 0x6927, 0x5, 0x2, 0x0, 0x255, 0xfffffff7, 0x9, 0x9, 0x7, 0x5, 0xe0c6, 0x3, 0xa000000, 0x8, 0x80000001, 0x0, 0x10001, 0x6340393f]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xcdd5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x1, 0x9, 0xccf, 0x200, 0xfbbc, 0xfffffffe, 0xf8000000, 0x70000000, 0x401, 0x6, 0x3f, 0x3, 0x10, 0x7, 0x1, 0x7, 0x6, 0x5, 0x6, 0x2, 0xffff, 0x5, 0x81, 0x15, 0xdf19, 0x800, 0x3, 0x800, 0x1, 0x8001, 0x6, 0x80, 0x0, 0x3b74b47e, 0x4, 0x7, 0x3, 0x8, 0x1, 0x4, 0x0, 0x3, 0x5, 0xfffff000, 0x0, 0xc3, 0x8, 0x827e, 0x1000, 0x9, 0x5, 0x2, 0x8, 0x7fffffff, 0x5, 0x1, 0x7f, 0x4, 0x9, 0xffffff0e, 0x8, 0x2, 0xb, 0x5, 0x8, 0x80000000, 0x9, 0xa3, 0x6, 0x4, 0x4, 0x6, 0x6, 0xfffffffe, 0x0, 0x8, 0x75, 0x400, 0x249, 0x3, 0x5, 0x78d0ee9a, 0x80, 0x1, 0x80, 0xff, 0xbd7, 0x9, 0x4, 0x6, 0x53, 0x447, 0x8, 0x101, 0x41d, 0x10000, 0x2, 0x0, 0xa2, 0xb, 0x7, 0x4, 0x10000, 0x6, 0x7ff, 0x0, 0x4, 0x7, 0x1, 0xa, 0x8, 0x8001, 0x2, 0x9, 0x1000, 0x3, 0x7, 0x400, 0x8, 0x5, 0x7, 0x10001, 0x4, 0x4f, 0x5f96, 0x8, 0xff, 0x10000, 0x5, 0x5, 0x21db16e4, 0x401, 0x4, 0x5d, 0xf74, 0x9, 0x9, 0x9, 0x9, 0x7, 0x35, 0x8, 0x20e8, 0x3, 0x1, 0x9, 0x0, 0x7, 0x4, 0x9, 0x7, 0x1, 0x5, 0x6, 0x5, 0xc8, 0x2, 0xffffffff, 0x7, 0x2, 0x5, 0x8, 0x2, 0x1, 0x80000000, 0x1, 0x6, 0x0, 0x2, 0x1, 0x1, 0x80000001, 0x800, 0x5, 0x5, 0xc4e8, 0x7fff, 0x0, 0x0, 0x3, 0x1, 0x3, 0x800001, 0x3, 0x0, 0x3, 0x3, 0x80000000, 0x6, 0x7, 0x637, 0x80000000, 0x9, 0xffff, 0x3, 0x3, 0x7, 0x8, 0x2, 0x6, 0x0, 0x1f, 0x7, 0x6, 0x2, 0x80a1, 0xfffff738, 0x8, 0xfffffffe, 0x3, 0xe05, 0xb, 0x7, 0x8001, 0x5, 0xb, 0x80000008, 0x5, 0xf0, 0x1, 0x6, 0x2, 0x4, 0xa, 0x100, 0x0, 0x7, 0x0, 0xc0a089a7, 0x80, 0x8, 0x2, 0x2, 0xfffff000, 0x4, 0x0, 0x46, 0x3, 0x7, 0x6, 0x6, 0x101, 0x15c, 0xe91b, 0x7, 0xffffff40, 0xfffffe00, 0xfe0, 0xffffff01, 0x4, 0x8, 0x3, 0xd2e3, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x5, 0xffffffff, 0x1000, 0x5, {0xa, 0x0, 0x32d6, 0x3, 0x3, 0x3}, {0xf7, 0x1, 0x9, 0x5, 0x1fe, 0x2}, 0x10, 0x5, 0x2}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x50, 0x0, 0x5, 0x7ff, 0x10001, 0x6, 0xffff7fff, 0xc2b1, 0x10000, 0x4, 0x2f, 0x7fff, 0x88d, 0x7, 0x6, 0xb1ec, 0x8, 0x1, 0x9, 0x0, 0xc, 0x7ff, 0x8, 0x6, 0x1d, 0x9, 0xb44f, 0x2, 0x3139, 0x7, 0xb, 0x100000, 0xfffffe00, 0x10000, 0x8, 0x9, 0x2, 0x6, 0x2, 0xb, 0x3, 0x6, 0x40, 0x49, 0x1000, 0xfffff2cf, 0x6, 0x4, 0xfffffff7, 0xffffffff, 0xcfd, 0x4, 0x9, 0x2, 0x6, 0x10, 0x7, 0x8000, 0xd, 0x7fffffff, 0x7, 0x6, 0x800, 0xfffffff7, 0x2, 0x1ff, 0x8002, 0x6, 0xeccf, 0x7, 0x3, 0x8, 0x5, 0x0, 0x2, 0x5, 0x5, 0x3, 0xfffffffa, 0x1, 0xffffffff, 0x0, 0x0, 0x75c, 0x2, 0x0, 0xa812, 0x80000001, 0x3, 0x7, 0xfffffff1, 0xffff, 0x41a3ee33, 0xe5, 0x8, 0xf, 0x6, 0x2, 0x7712, 0x0, 0x8, 0x7, 0x5, 0x1, 0x9, 0x1ff, 0x8, 0x5, 0x6937, 0x6, 0x7cd0, 0x200, 0x7ff, 0x7, 0x68, 0xffffff1f, 0xc7, 0xcaee, 0x5, 0x0, 0xbb, 0xffffffff, 0x101, 0x101, 0x0, 0x2, 0x8, 0xf8d, 0x1ff, 0x2, 0x8, 0x8, 0x7, 0x80, 0xea, 0x88, 0xe, 0x5, 0x6, 0x4, 0x9, 0x800, 0x6d28, 0x100, 0x3, 0x6, 0xe, 0x6, 0x72, 0x3, 0x2, 0x5, 0x2, 0x0, 0x10001, 0xff0, 0x4, 0x9, 0x8, 0x180, 0x8, 0x7fff, 0x8f, 0x3, 0x401, 0x9, 0x6fce, 0x6, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x100, 0x6, 0x3, 0x6, 0x6, 0x8000, 0x5, 0x8, 0x7, 0x4, 0x3, 0x8, 0xffffffff, 0x7, 0x6, 0x5, 0x1, 0x6bd900, 0x6, 0xa, 0x2c41, 0x5, 0x80000000, 0x7, 0xc2, 0xfffffffe, 0x8, 0x6, 0xc9, 0x4880, 0x7f, 0xfffffff8, 0x1, 0x7, 0x7, 0x6, 0x8, 0x5, 0xfffffff8, 0x8, 0x6d, 0x5, 0x5, 0x2, 0x9, 0x4, 0x4, 0x8, 0x1000, 0xc, 0x7ff, 0x120000, 0x302e2cf5, 0x2a40, 0x9, 0x18000, 0x3, 0xfffffffc, 0xd, 0x80, 0x4, 0xcac, 0xfffffeff, 0x8, 0x8, 0x1, 0x711a, 0x3, 0xd91, 0xff, 0x5, 0xfff, 0xffffffff, 0x100f, 0x1, 0x5, 0x10000, 0xc, 0x7, 0xfffffe36, 0x2f59, 0x5, 0x1]}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x6}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x20000}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x4}]}}]}, 0x18fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(0xffffffffffffffff, 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000540)={0x0, 0x5d, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="009772006434aa", @ANYRES16=r10, @ANYBLOB="010068bd7000fedbdf25140000000c000780000004000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8404}, 0x8040)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'})
socket$kcm(0x11, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)

5m54.710153827s ago: executing program 3 (id=627):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="700000001000ffff27bd70e4fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1501000000000000340012800b0001006970766c616e000024000280060001000100000006000100010000000600020003000000060002000200000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)

5m54.102885849s ago: executing program 3 (id=630):
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x0, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/231}, {&(0x7f00000004c0)=""/184}, {&(0x7f0000000580)=""/85}, {&(0x7f0000000600)=""/183}, {&(0x7f00000006c0)=""/233}], 0x0, &(0x7f0000000840)=""/194}, 0x6}, {{&(0x7f0000000940)=@nl=@proc, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)=""/126}, {&(0x7f0000000a40)=""/133}], 0x0, &(0x7f0000000240)=""/23}, 0x101}, {{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000b00)=""/121}, 0x4}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000340)=""/30, 0x51}, {&(0x7f0000000b80)=""/73}, {&(0x7f0000000c00)=""/92}, {&(0x7f0000000c80)=""/219}, {&(0x7f0000000d80)=""/4096}, {&(0x7f0000001d80)=""/96}, {&(0x7f0000001e00)=""/132}], 0x0, &(0x7f0000001f40)=""/195}, 0xff}], 0x946c, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f01e, 0x1})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xa, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pipe2(&(0x7f0000000000)={0x0, <r4=>0x0}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
pipe(&(0x7f0000000040)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x6, 0xb)

5m52.055766047s ago: executing program 3 (id=633):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0) (async)
write$char_usb(r3, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"568139cb5050a7a31ebfc4330c2bf68f86101d9a301cbe14b15f4f23031ceb319db01a783479d6b9a1201fb1cc7235f57f425131b1d59b14c7588e103ad23d61fc6b05b60536a1611da4d3a6a06d308650343e59d307e34d8c2ec3ef05629a47f994dd2e9f8b9ce05b338ae7db5267bc4082bd43ca93b78947a7c79e82df466d4fee2b222f1ebde976d2272a4f52329796330ee917cc4f5b3ec45ac1ecdaaf3dffe03c40b7c209e44cfeb08aad00e1b48da4289228d7d82d4f6a661942ace64f115d3cc6ac80f74420c390d89e7ab2133567aa41047d775e333184cc0b468ec5eb9bc3cb0fa00516e5452bf32a9e760f07efd5a5e5eb37eaff28ef92bb59498369808bdd310a4a95a5414a8ff450411ff67d3167eec8372455a19c0c5a608adfebded6974660fd85308a07860e16f62963da37448d6e1218f2092fb3d1662804623b63a07f3e5e881df9a5ac27ce3f1519003118aa6170ff423eb292dc70147bde37963f72d0642660e7107753167886fc10e108631a9ea4d6752145b8646187ba7e152b6bcbcedd6b83fb9435d5c8e8d5d25a3f173745eab94a4a296572d459a50d622c8769dc57a7cdf7efe9f259dc36f538d1836362f1bcb2c4ebceae7e3655d5e98ba481906f284bd03716c15894eca8cbf8302dc8e2c21736b697b5f868e8af96fa8bbb1ae56571616a70ce05970d1e4142f303f7586fd2fc6f0ee3dce1db6524dd6aa28faab046e074df38430a49e8a6dde71028f16539744b7867e19c856e670e8b799d52da435bb07beea6274bf512e7d6ebb8ff8f83a52e4d13602e7d4675a798a12c898ad5b00caa34313ff8fb6c3407cf815eca9795cffd9a24959653cc816851048ebf0772bebdd3ff9b8cfbd2c65c30e41586b00a14943e4815361789158139d440c4f627edb8ed59e1ca0bb0c60106e09635fa9335677337c554db885f75b899638e8df1ea9796f8258de36636346ab768856bbdfc51843a53701423d75c1f43be24469aa03d366bbfb81218b31e5c0ad716efea52175c2fa78317cafb16ee173eb5e9428509ca4c8f9bf798adc7da1758a9c0334e44200c0578495ff805fce84456205caa70f0976a8603f84cb542d0df1416602321c587556785af525ddf5548b4f51113c52a7a17042faf6c8c02d8d1835e0f67f60ab392c20fc12188db029e45bb77cfccc423671d52ec5a92d08c2bb27a676b66f3b89ac084d99e3f516426a015268a1f3fb91b13c8baba49a0765a305c13cd1f47b3ea7a6393182759b614a08d36192a8b68abef6e5c16849452c74af3a9f854e1f2bc1c2eac2f055f8ffd8fdaa6bb04a68850c585f433c0e6b8dba1401fce5aab11d75d2323d8079891175096e31013ca0a3763511c86f2fbc31a33458c52059ebe253dcd3e837fed39765a11842028df450479dd56e1325cd8d088ff12a8f7dd23f2"})
ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
iopl(0x0) (async)
iopl(0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
read$hiddev(r2, &(0x7f00000004c0)=""/136, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1, @ANYBLOB="dfa899aaf900a9d13b773bf1b13395d308eafdff"], 0x3c}}, 0x0)

5m36.825141912s ago: executing program 32 (id=633):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0) (async)
write$char_usb(r3, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000000)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (async)
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_CAP_HYPERV_SYNIC2(r8, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0xfffffffffffffffd}, {0x400000b1, 0x0, 0x8}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
iopl(0x0) (async)
iopl(0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
read$hiddev(r2, &(0x7f00000004c0)=""/136, 0x88)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1, @ANYBLOB="dfa899aaf900a9d13b773bf1b13395d308eafdff"], 0x3c}}, 0x0)

5.467086616s ago: executing program 1 (id=2648):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x4008800)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00'})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = epoll_create1(0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = dup3(r4, r3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x400}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x49fa}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48021)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000400)=@ethtool_gstrings={0x1b, 0x1}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r7=>r2, {0x5}}, './file0\x00'})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={<r10=>0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f00000001c0)=0x8)
r12 = signalfd4(r7, &(0x7f0000000440)={[0x8001]}, 0x8, 0x800)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f0000000340)={r10, @in={{0x2, 0x4e23, @empty}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={r11, 0x5c, &(0x7f0000000280)=[@in={0x2, 0x4e23, @private=0xa010102}, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x8001, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000000}]}, &(0x7f0000000300)=0x10)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000640)={0x48, 0x5, 0x0, 0x0, <r13=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f00000006c0)={0x48, 0x7, r13, 0x0, 0x1, 0x0, 0x2, 0xa7b})
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r14 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r14, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24)
r15 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, &(0x7f0000000140)=<r16=>0x0, &(0x7f0000000200)=<r17=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r16, r17, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r15, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.846074158s ago: executing program 1 (id=2652):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6e)
unshare(0x26020480)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x3c, "43720705000000004786b89e6fb2be5c3f000800a69e0825471829a0395ebb7bf7b5555f84e5e4ba020ffd700b5cd6fa2ae8463daa135676c64fd950"}})
epoll_create1(0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0)="34827f84eb5f6e981f277f0dc5532592ce4a4ce5df72db", 0x187, r2}, 0x38)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000))
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x2000)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x77, {"48b809000000000000000f23d00f21f8352000000a0f23f83667660f6634892e440fc7360f001ec744240003000000c74424020a000000ff2c24c4c1b173f8dcc482090d13c7442400e6000000c7442402a7000000ff2c24b8010000000f01c166b8d5008ec8"}}, @out_dx={0x6a, 0x28, {0xb463, 0x7, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x40, 0x4, 0x1}}], 0xe7})
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x60, 0x26}, 0x18)
r7 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.826975849s ago: executing program 0 (id=2664):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e000300000003000000050007"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

2.646314102s ago: executing program 0 (id=2665):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
ioctl$TCSBRKP(r1, 0x5425, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
syz_open_pts(r4, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x7, 0x1, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4000804)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000084000000000400001fc7ff0f0800c40083f14fca2541044b0274471c13ac4b7cc06d"], 0x18, 0x48060}], 0x1, 0x200000d0)

2.342500587s ago: executing program 5 (id=2667):
r0 = socket(0x200000000000011, 0x2, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x2004c840, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000005c0)={<r7=>0x0, 0x2c, &(0x7f0000000700)=[@in={0x2, 0x4e63, @broadcast}, @in6={0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10001}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={r7, 0x800c, 0x9, 0xd97, 0x10001, 0x7ff}, 0x14)
r8 = dup(r4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000600)=[@in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e24, 0x8000, @loopback}, @in6={0xa, 0x4e24, 0x3, @mcast1, 0x1}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x800, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401}, @in={0x2, 0x4e24, @private=0xa010101}], 0x94)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c)
sendmsg$inet6(r8, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x800, @loopback, 0x3}}, 0xe, 0x2b, 0xa4f, 0xc4, 0x28, 0xffffff85, 0xa9}, 0x9c)
ioctl$SOUND_PCM_READ_RATE(r8, 0x80045002, 0x0)
r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r9, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @pic={0x1, 0x9, 0x8, 0xb7, 0xff, 0x9, 0x8, 0x8, 0xf8, 0x81, 0x50, 0x4, 0x2, 0x4, 0x94, 0x4}})
ioctl$KVM_NMI(r10, 0xae9a)
ioctl$KVM_RUN(r10, 0xae80, 0x0)

2.037512759s ago: executing program 1 (id=2668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000480), 0x2262, 0x2)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x6, <r2=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x5, 0x10}, 0xc)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x50565559})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffe, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294fff051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.97035646s ago: executing program 1 (id=2669):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0)

1.730325338s ago: executing program 0 (id=2670):
r0 = memfd_create(&(0x7f0000000440)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC:\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\x06\x00\x00\x00\x00\x00\x00\x00\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S9k\xb6\xec\x9cb4\xd0z\xe4\xf5\x84', 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)

1.623534436s ago: executing program 0 (id=2671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000020605000000000000000000070000001400078008001140000000000800124000000c8f0500010006000000050005000200000005000400000000000900020073797a310000000a14000300686173683a69702c706f72742c6970"], 0x60}}, 0x20044050)

1.623295764s ago: executing program 1 (id=2672):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b80006990300000004001500808178a8001500030001400200000901ac040000d69b6f940071009807a290457f0189b316277ce06bbade8017cbec4c0000001fb791643a5ee4b11602b2a10e11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000400000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1, 0x0, 0x0, 0x7000000}, 0x8000194)

1.505131698s ago: executing program 0 (id=2673):
mlockall(0x2)
r0 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
r1 = shmget$private(0x0, 0x4000, 0x20, &(0x7f00001a9000/0x4000)=nil)
r2 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/92)
shmat(0x0, &(0x7f0000175000/0x4000)=nil, 0xffffffffffffffff)

1.470309343s ago: executing program 1 (id=2674):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x0, &(0x7f0000000240)={0x22, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}})

1.057385056s ago: executing program 0 (id=2678):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6e)
unshare(0x26020480)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x3c, "43720705000000004786b89e6fb2be5c3f000800a69e0825471829a0395ebb7bf7b5555f84e5e4ba020ffd700b5cd6fa2ae8463daa135676c64fd950"}})
epoll_create1(0x80000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x1, 0x2, 0x7, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0)="34827f84eb5f6e981f277f0dc5532592ce4a4ce5df72db", 0x187, r2}, 0x38)
openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040), &(0x7f0000000000))
io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000200), &(0x7f00000002c0)=""/56}, 0x20)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r6 = accept4(r5, 0x0, 0x0, 0x80800)
sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0x0, 0xf5000000}, 0x2000)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@nested_amd_vmsave={0x183, 0x18}, @code={0xa, 0x77, {"48b809000000000000000f23d00f21f8352000000a0f23f83667660f6634892e440fc7360f001ec744240003000000c74424020a000000ff2c24c4c1b173f8dcc482090d13c7442400e6000000c7442402a7000000ff2c24b8010000000f01c166b8d5008ec8"}}, @out_dx={0x6a, 0x28, {0xb463, 0x7, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x40, 0x4, 0x1}}], 0xe7})
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x60, 0x26}, 0x18)
r7 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x83, 0x2, "81f4"}, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

999.613398ms ago: executing program 4 (id=2679):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000480), 0x2262, 0x2)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x6, <r2=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r2, 0x5, 0x10}, 0xc)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x1a, 0x1, 0x7, "d30580c9042b7275077bafe6410c2087850000000000000000000080001500", 0x50565559})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffe, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294fff051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

890.904936ms ago: executing program 4 (id=2680):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in=@multicast2, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x20, 0xff}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x1000, 0x200000000000000}, 0x800, 0x6e6bb0}}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0xb8}}, 0x2c040010)

890.427963ms ago: executing program 2 (id=2681):
r0 = memfd_create(&(0x7f0000000440)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC:\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\x06\x00\x00\x00\x00\x00\x00\x00\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S9k\xb6\xec\x9cb4\xd0z\xe4\xf5\x84', 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)

789.394764ms ago: executing program 4 (id=2682):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x41, 0x42804}, 0x84)

730.667313ms ago: executing program 2 (id=2683):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) (async)
r1 = socket(0x11, 0x3, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) (async, rerun: 64)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async, rerun: 64)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051)
write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) (async, rerun: 64)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x141, 0x70) (rerun: 64)
write$UHID_INPUT2(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x87)

602.839708ms ago: executing program 4 (id=2684):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x6c, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x12021}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fff0, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4000}}]}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x6c}}, 0x8001002)

517.946131ms ago: executing program 4 (id=2685):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a000000050001000600000014000780080006400000000208000c", @ANYRES8=0x0, @ANYRES32=r0, @ANYRES64=r0], 0x58}}, 0x20000000)

509.580219ms ago: executing program 5 (id=2686):
unshare(0x4000480)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0)
fchmod(r0, 0x3)
r1 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90)
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r2, &(0x7f0000001280)=[{{&(0x7f0000000180)=@can={0x1d, r4}, 0x80, 0x0}}, {{&(0x7f00000022c0)=@can={0x1d, r4}, 0x80, 0x0}}], 0x2, 0x8d4)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10)
pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='@', 0x1}], 0x1, 0xff, 0x200, 0x6f9640594bd5df02)

347.621623ms ago: executing program 5 (id=2687):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=""/238, 0xee}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000000)=""/171, 0xab}, {&(0x7f0000001540)=""/4097, 0x1001}], 0x4}, 0x6}, {{0x0, 0x0, 0x0}, 0xee}], 0x2, 0x40000020, 0x0)

347.011283ms ago: executing program 2 (id=2688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8000000000000001}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xb3d2}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xe17}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0)

175.287407ms ago: executing program 2 (id=2689):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000240)={0x2, 0x8})
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
bind$packet(r0, &(0x7f0000000200)={0x11, 0x1b, r2, 0x1, 0x5, 0x6, @broadcast}, 0x14)
write(r1, &(0x7f0000000080)="017fc914d9dada19745b9869b3fa7dae1ea675cdbeb847477bc007ef175d5a691a644ba7a56c140184bc40d2d5cadf65822cefc6359f8b5acafc90c0c62d28a768c1572ed7d332ea3d83e9ed193f774e9e9b633ff57488728d5708ddf19945583d113c6007e43a32d43196347ac6d35630c1e04fd04d0c8028ed196a7c1ae9f6e96f25226446806506de0b9c6f16c0d9bb215c9ca1eef037c97bdaea0deef24a4fdba0099ce7b5a3e000934678deda89e269b7fb90ee66", 0xb7)

171.167854ms ago: executing program 5 (id=2690):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000480), 0x2262, 0x2)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x6, <r1=>0x0}, 0x8)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r1, 0x5, 0x10}, 0xc)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xffe, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294fff051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

163.769415ms ago: executing program 4 (id=2691):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8, @ANYRES8=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

103.986041ms ago: executing program 5 (id=2692):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff3, 0x4788}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x9}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)

27.467274ms ago: executing program 2 (id=2693):
r0 = memfd_create(&(0x7f0000000440)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC:\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\x06\x00\x00\x00\x00\x00\x00\x00\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S9k\xb6\xec\x9cb4\xd0z\xe4\xf5\x84', 0x6)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, 0x0, 0x0)

11.628126ms ago: executing program 2 (id=2694):
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x4004040)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0)

0s ago: executing program 5 (id=2695):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@loopback, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x33}, 0x54a25bf53473644c, @in6=@remote, 0x0, 0x5, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

kernel console output (not intermixed with test programs):

ength.
[  436.632242][ T2996] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  436.658424][ T5877] usb 6-1: USB disconnect, device number 30
[  436.668238][ T2996] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  436.677507][ T2996] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  436.719567][T12617] usb usb1: check_ctrlrecip: process 12617 (syz.0.2068) requesting ep 01 but needs 81
[  437.051200][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  437.089060][    T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  437.114453][ T5938] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  437.237196][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  437.288533][    T9] usb 2-1: USB disconnect, device number 63
[  437.306441][ T5938] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  437.356023][ T5938] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.433396][ T5938] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  437.505757][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  437.565785][ T5938] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  437.578172][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  437.591920][ T5938] usb 6-1: Product: syz
[  437.794449][ T5938] usb 6-1: Manufacturer: syz
[  437.814660][ T5938] cdc_wdm 6-1:1.0: skipping garbage
[  437.823491][ T5938] cdc_wdm 6-1:1.0: skipping garbage
[  437.904608][ T5938] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  437.910553][ T5938] cdc_wdm 6-1:1.0: Unknown control protocol
[  437.918939][   T10] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42
[  437.930043][   T30] audit: type=1804 audit(1769952990.600:339): pid=12643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2078" name=6D656D66643A6C32AA2AAAAAAB49F9BF83667CC38615ACBBEDBF25D8EE2917AA0FAA6C5296E621D76B026FFF5345 dev="hugetlbfs" ino=48396 res=1 errno=0
[  438.032249][   T30] audit: type=1804 audit(1769952990.670:340): pid=12643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2078" name=6D656D66643A6C32AA2AAAAAAB49F9BF83667CC38615ACBBEDBF25D8EE2917AA0FAA6C5296E621D76B026FFF5345 dev="hugetlbfs" ino=48396 res=1 errno=0
[  438.582460][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.589103][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.595905][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.602517][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.608806][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.615385][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.621620][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.628207][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.634486][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.641103][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.647315][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.653887][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.660174][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.666772][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.673113][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.679702][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.685938][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.692509][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.698738][    C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71
[  438.705322][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes
[  438.713240][    C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  438.721955][ T5877] usb 6-1: USB disconnect, device number 31
[  438.899867][T12668] vlan3: entered promiscuous mode
[  439.411980][T12683] random: crng reseeded on system resumption
[  439.472444][ T5877] usb 3-1: USB disconnect, device number 47
[  439.495273][ T5877] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device
[  439.777535][T12701] veth0: entered promiscuous mode
[  439.817993][T12701] __nla_validate_parse: 15 callbacks suppressed
[  439.818010][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'.
[  439.871432][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  439.878166][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.044412][ T5877] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  440.121982][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2094'.
[  440.224348][ T5877] usb 3-1: Using ep0 maxpacket: 8
[  440.286596][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.317569][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.335099][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  440.564470][ T5938] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  440.574343][ T5877] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  440.736782][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.744638][ T5938] usb 2-1: Using ep0 maxpacket: 8
[  441.385890][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.396948][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.406709][ T5877] usb 3-1: config 0 descriptor??
[  441.413165][ T5938] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  441.422327][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.436287][ T5938] usb 2-1: config 0 descriptor??
[  441.850281][T12722] Set syz1 is full, maxelem 65536 reached
[  442.065330][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.086637][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.276269][ T5938] usbhid 2-1:0.0: can't add hid device: -71
[  442.282466][ T5938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  442.305078][ T5938] usb 2-1: USB disconnect, device number 64
[  442.784396][   T78] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  443.014507][   T78] usb 6-1: device descriptor read/64, error -71
[  443.136251][ T5877] usbhid 3-1:0.0: can't add hid device: -71
[  443.142286][ T5877] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  443.454425][ T5877] usb 3-1: USB disconnect, device number 48
[  443.465350][   T78] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  443.624555][   T78] usb 6-1: device descriptor read/64, error -71
[  443.745015][   T78] usb usb6-port1: attempt power cycle
[  444.104491][   T78] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  444.152813][   T78] usb 6-1: device descriptor read/8, error -71
[  444.322539][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'.
[  444.406350][   T78] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  444.612478][   T78] usb 6-1: device descriptor read/8, error -71
[  444.628191][T12809] vlan3: entered promiscuous mode
[  444.725399][T12809] bond0: entered promiscuous mode
[  444.732083][   T78] usb usb6-port1: unable to enumerate USB device
[  444.767161][T12809] bond_slave_0: entered promiscuous mode
[  444.805090][T12809] bond_slave_1: entered promiscuous mode
[  444.918781][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'.
[  445.029720][T12826] vlan2: entered allmulticast mode
[  445.035125][    T9] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  445.051272][T12826] dummy0: entered allmulticast mode
[  445.058205][T12826] bridge0: port 3(vlan2) entered blocking state
[  445.067159][T12826] bridge0: port 3(vlan2) entered disabled state
[  445.076633][T12826] vlan2: entered promiscuous mode
[  445.084658][T12826] dummy0: entered promiscuous mode
[  445.226366][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  445.238206][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  445.257169][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  445.271259][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  445.307727][    T9] usb 2-1: string descriptor 0 read error: -22
[  445.314135][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  445.326465][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.359560][    T9] usb 2-1: 0:2 : does not exist
[  446.247974][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2125'.
[  446.332314][    T9] usb 2-1: 5:0: bogus dB values (-9931/-9623), disabling dB reporting
[  446.345957][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  446.376994][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  446.414002][    T9] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  446.489337][    T9] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  446.553253][    T9] usb 2-1: USB disconnect, device number 65
[  446.988589][T12853] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3167498050 (50679968800 ns) > initial count (7049095776 ns). Using initial count to start timer.
[  447.024004][T12856] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  447.037627][T12856] syzkaller0: entered promiscuous mode
[  447.044909][T12856] syzkaller0: entered allmulticast mode
[  447.199195][T12855] tipc: Resetting bearer <eth:syzkaller0>
[  447.233724][T12855] tipc: Disabling bearer <eth:syzkaller0>
[  447.256502][   T10] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  447.356700][T12867] blktrace: Concurrent blktraces are not allowed on sg0
[  447.469551][   T10] usb 2-1: Using ep0 maxpacket: 32
[  447.490808][   T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  447.499118][   T10] usb 2-1: config 0 has no interface number 0
[  447.511841][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  447.521184][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.529487][   T10] usb 2-1: Product: syz
[  447.535043][   T10] usb 2-1: Manufacturer: syz
[  447.540054][   T10] usb 2-1: SerialNumber: syz
[  447.555007][   T10] usb 2-1: config 0 descriptor??
[  447.569457][   T10] smsc95xx v2.0.0
[  447.614637][   T78] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  447.883769][   T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.908009][   T78] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.958825][   T78] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  447.972990][   T78] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  447.974679][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  447.988795][   T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.000912][T12886] FAULT_INJECTION: forcing a failure.
[  448.000912][T12886] name failslab, interval 1, probability 0, space 0, times 0
[  448.014103][T12886] CPU: 1 UID: 0 PID: 12886 Comm: syz.5.2139 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  448.014130][T12886] Tainted: [L]=SOFTLOCKUP
[  448.014137][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  448.014147][T12886] Call Trace:
[  448.014154][T12886]  <TASK>
[  448.014162][T12886]  dump_stack_lvl+0xe8/0x150
[  448.014188][T12886]  should_fail_ex+0x412/0x560
[  448.014212][T12886]  should_failslab+0xa8/0x100
[  448.014232][T12886]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  448.014259][T12886]  ? __alloc_skb+0x193/0x390
[  448.014276][T12886]  ? __alloc_skb+0x1d7/0x390
[  448.014292][T12886]  ? __local_bh_enable_ip+0xd0/0x130
[  448.014307][T12886]  ? __alloc_skb+0x193/0x390
[  448.014325][T12886]  __alloc_skb+0x1d7/0x390
[  448.014346][T12886]  netlink_ack+0x146/0xa50
[  448.014368][T12886]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  448.014390][T12886]  nfnetlink_rcv+0x2517/0x27b0
[  448.014442][T12886]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  448.014478][T12886]  ? ref_tracker_free+0x693/0x840
[  448.014521][T12886]  ? __netlink_deliver_tap+0x807/0x850
[  448.014537][T12886]  ? netlink_deliver_tap+0x2e/0x1b0
[  448.014569][T12886]  netlink_unicast+0x80f/0x9b0
[  448.014600][T12886]  ? __pfx_netlink_unicast+0x10/0x10
[  448.014622][T12886]  ? __alloc_skb+0x193/0x390
[  448.014640][T12886]  ? netlink_sendmsg+0x650/0xb40
[  448.014655][T12886]  ? skb_put+0x11b/0x210
[  448.014676][T12886]  netlink_sendmsg+0x813/0xb40
[  448.014702][T12886]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.014722][T12886]  ? aa_sock_msg_perm+0xf1/0x1b0
[  448.014742][T12886]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  448.014761][T12886]  ? __pfx_netlink_sendmsg+0x10/0x10
[  448.014777][T12886]  ____sys_sendmsg+0xa68/0xad0
[  448.014798][T12886]  ? __might_fault+0xaf/0x130
[  448.014825][T12886]  ? __pfx_____sys_sendmsg+0x10/0x10
[  448.014853][T12886]  ? import_iovec+0x73/0xa0
[  448.014879][T12886]  ___sys_sendmsg+0x2a5/0x360
[  448.014898][T12886]  ? __lock_acquire+0x6b5/0x2cf0
[  448.014922][T12886]  ? __pfx____sys_sendmsg+0x10/0x10
[  448.014980][T12886]  ? __fget_files+0x2a/0x420
[  448.014999][T12886]  ? __fget_files+0x3a0/0x420
[  448.015025][T12886]  __x64_sys_sendmsg+0x1bd/0x2a0
[  448.015048][T12886]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  448.015081][T12886]  ? __pfx_ksys_write+0x10/0x10
[  448.015114][T12886]  do_syscall_64+0xe2/0xf80
[  448.015132][T12886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.015148][T12886]  ? trace_irq_disable+0x37/0x100
[  448.015163][T12886]  ? clear_bhb_loop+0x60/0xb0
[  448.015183][T12886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.015199][T12886] RIP: 0033:0x7fea4f39aeb9
[  448.015215][T12886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  448.015228][T12886] RSP: 002b:00007fea50256028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  448.015246][T12886] RAX: ffffffffffffffda RBX: 00007fea4f615fa0 RCX: 00007fea4f39aeb9
[  448.015259][T12886] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  448.015270][T12886] RBP: 00007fea50256090 R08: 0000000000000000 R09: 0000000000000000
[  448.015281][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  448.015292][T12886] R13: 00007fea4f616038 R14: 00007fea4f615fa0 R15: 00007fea4f73fa48
[  448.015320][T12886]  </TASK>
[  448.113350][T12888] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  448.126271][   T78] usb 5-1: config 0 descriptor??
[  448.304459][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  448.804829][   T78] usbhid 5-1:0.0: can't add hid device: -71
[  448.817580][   T78] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  448.851600][   T78] usb 5-1: USB disconnect, device number 50
[  449.479103][   T30] audit: type=1326 audit(1769953002.140:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12913 comm="syz.5.2147" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea4f39aeb9 code=0x0
[  449.597222][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2148'.
[  449.606735][T12920] openvswitch: netlink: Flow key attr not present in new flow.
[  450.153222][   T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  450.166673][T12920] netdevsim netdevsim0: Direct firmware load for /
[  450.166673][T12920]  failed with error -2
[  450.182116][   T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  450.226274][T12920] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  450.226274][T12920] 
[  450.434618][   T10] usb 2-1: USB disconnect, device number 66
[  450.820793][T12932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2150'.
[  451.009592][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'.
[  451.244354][   T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  451.404339][   T10] usb 3-1: Using ep0 maxpacket: 16
[  451.410978][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.423267][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.462664][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00
[  451.476484][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.497445][   T10] usb 3-1: config 0 descriptor??
[  451.524442][T11555] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  451.642673][T12950] vlan6: entered promiscuous mode
[  451.679591][T11555] usb 2-1: Using ep0 maxpacket: 8
[  451.687673][T11555] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  451.705042][T11555] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  451.717022][T11555] usb 2-1: config 0 has no interface number 0
[  451.755302][T11555] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  451.789243][T11555] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  451.865053][T11555] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  451.932244][T12956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  452.054598][T11555] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  452.137048][T11555] usb 2-1: config 0 interface 52 has no altsetting 0
[  452.190437][T11555] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  452.212258][T11555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.312850][T11555] usb 2-1: config 0 descriptor??
[  452.541100][T11555] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input26
[  452.743674][   T78] usb 2-1: USB disconnect, device number 67
[  452.764379][T11555] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  453.047006][T11555] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  453.063275][T11555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.108455][T11555] usb 5-1: config 0 descriptor??
[  453.535499][T11555] usbhid 5-1:0.0: can't add hid device: -71
[  453.548315][T12969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2165'.
[  453.633862][T11555] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  453.679436][T11555] usb 5-1: USB disconnect, device number 51
[  453.794619][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2164'.
[  454.137236][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'.
[  455.126226][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2170'.
[  455.163898][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  455.269474][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  455.302737][   T10] usb 3-1: USB disconnect, device number 49
[  455.538143][T12997] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size.
[  456.434337][ T5938] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  456.562161][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'.
[  456.636481][ T5938] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  456.647013][ T5938] usb 6-1: config 0 has an invalid interface number: 2 but max is -1
[  456.660498][ T5938] usb 6-1: config 0 has an invalid interface number: 2 but max is -1
[  456.672772][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  456.704557][ T5938] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  456.732915][ T5938] usb 6-1: config 0 has no interface number 0
[  456.750879][ T5938] usb 6-1: config 0 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  456.766608][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'.
[  456.906720][ T5938] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  456.916404][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.935467][ T5938] usb 6-1: Product: syz
[  456.944429][ T5938] usb 6-1: Manufacturer: syz
[  456.954502][ T5938] usb 6-1: SerialNumber: syz
[  456.966268][ T5938] usb 6-1: config 0 descriptor??
[  457.265983][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  457.277078][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  457.320361][ T5938] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  457.390289][ T5938] usb 6-1: MIDIStreaming interface descriptor not found
[  457.467200][ T5938] usb 6-1: USB disconnect, device number 36
[  457.573019][ T9102] udevd[9102]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  457.663018][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2182'.
[  458.265057][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2191'.
[  458.344955][  T797] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  458.420420][   T30] audit: type=1400 audit(1769953011.100:342): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=13053 comm="syz.4.2193"
[  458.517741][  T797] usb 2-1: config 8 has an invalid interface number: 177 but max is 0
[  458.536162][  T797] usb 2-1: config 8 has no interface number 0
[  458.548492][  T797] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xAD, changing to 0x8D
[  458.590554][  T797] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8D has invalid maxpacket 1023, setting to 64
[  458.613365][  T797] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  458.790129][  T797] usb 2-1: config 8 interface 177 has no altsetting 0
[  458.799723][  T797] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  458.814425][  T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.837729][T13043] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  459.019036][T13060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  459.053227][  T797] usb 2-1: string descriptor 0 read error: -71
[  459.072868][  T797] ir_toy 2-1:8.177: required endpoints not found
[  459.121151][  T797] usb 2-1: USB disconnect, device number 68
[  459.391789][T13077] gretap0: left allmulticast mode
[  459.397201][T13077] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2200'.
[  459.408481][T13077] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  459.788443][T13083] bond1: left promiscuous mode
[  459.793364][T13083] bridge1: left promiscuous mode
[  459.877546][   T30] audit: type=1326 audit(1769953012.540:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13080 comm="syz.1.2202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f450279aeb9 code=0x0
[  459.919157][T13083] syzkaller1: entered allmulticast mode
[  459.964571][T13091] x_tables: duplicate underflow at hook 2
[  460.064144][T13097] syzkaller0: entered promiscuous mode
[  460.088280][T13097] syzkaller0: entered allmulticast mode
[  460.347497][T13099] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  460.391255][T13096] tipc: Resetting bearer <eth:syzkaller0>
[  460.397370][  T797] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  460.407269][T13103] fuse: Unknown parameter 'z'
[  460.572802][T13096] tipc: Disabling bearer <eth:syzkaller0>
[  460.830584][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  460.875971][  T797] usb 6-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  460.895359][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.919520][  T797] usb 6-1: config 0 descriptor??
[  461.678698][T13123] netlink: 'syz.4.2215': attribute type 5 has an invalid length.
[  461.715609][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2215'.
[  461.984492][ T5907] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  462.019450][T13134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2218'.
[  462.146253][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  462.332152][ T5907] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  462.373837][ T5907] usb 2-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00
[  462.412208][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.473057][ T5907] usb 2-1: config 0 descriptor??
[  462.498334][T13143] netlink: 'syz.0.2222': attribute type 1 has an invalid length.
[  462.618523][T13145] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address
[  462.639460][T13145] bond3: (slave vxcan5): Error -95 calling set_mac_address
[  462.713861][T13143] bond3: (slave bridge3): Enslaving as an active interface with a down link
[  462.763239][T13146] macvlan3: entered promiscuous mode
[  462.770004][T13146] macvlan3: entered allmulticast mode
[  462.798672][T13146] bond3: entered promiscuous mode
[  462.840062][T13146] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  462.853770][  T797] usbhid 6-1:0.0: can't add hid device: -71
[  462.870540][  T797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  462.893124][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2216'.
[  462.908133][T13125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2216'.
[  462.926460][T13146] bond3: left promiscuous mode
[  462.934631][  T797] usb 6-1: USB disconnect, device number 37
[  463.169819][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.179709][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.250269][ T5907] kye 0003:0458:5005.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  463.273414][   T30] audit: type=1326 audit(1769953015.950:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13151 comm="syz.2.2224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f829719aeb9 code=0x0
[  463.429509][ T5907] kye 0003:0458:5005.0010: hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.1-1/input0
[  463.666619][ T5907] kye 0003:0458:5005.0010: tablet-enabling feature report not found
[  463.687083][ T5907] kye 0003:0458:5005.0010: tablet enabling failed
[  463.954420][ T5907] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  464.204460][ T5907] usb 6-1: device descriptor read/64, error -71
[  464.444598][ T5907] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  464.595635][ T5907] usb 6-1: device descriptor read/64, error -71
[  464.715971][ T5907] usb usb6-port1: attempt power cycle
[  464.733175][T13177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2234'.
[  464.773054][   T78] usb 2-1: USB disconnect, device number 69
[  465.134345][ T5907] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  465.164977][ T5907] usb 6-1: device descriptor read/8, error -71
[  465.241157][T13195] netlink: 'syz.0.2241': attribute type 275 has an invalid length.
[  465.404416][ T5907] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  465.425155][ T5907] usb 6-1: device descriptor read/8, error -71
[  465.534634][ T5907] usb usb6-port1: unable to enumerate USB device
[  465.649098][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'.
[  465.686541][T13201] syz_tun: entered promiscuous mode
[  465.691836][T13201] macsec1: entered promiscuous mode
[  465.710453][T13201] syz_tun: left promiscuous mode
[  465.983503][T13208] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.2244'.
[  465.994985][T13208] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.2244'.
[  466.304384][ T5938] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  466.454341][ T5938] usb 3-1: Using ep0 maxpacket: 16
[  466.509211][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  466.525510][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  466.564424][   T30] audit: type=1326 audit(1769953019.240:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13217 comm="syz.1.2248" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f450279aeb9 code=0x0
[  466.566540][ T5938] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  466.603765][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.617768][ T5938] usb 3-1: Product: syz
[  466.627207][T13222] IPVS: rr: FWM 3 0x00000003 - no destination available
[  466.636279][ T5938] usb 3-1: Manufacturer: syz
[  466.640935][ T5938] usb 3-1: SerialNumber: syz
[  466.648736][ T5938] usb 3-1: config 0 descriptor??
[  466.662485][ T5938] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  466.698773][ T5938] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  466.981558][T13228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  466.992687][T13228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.202307][   T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  467.403830][   T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  467.443622][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.596777][   T10] usb 6-1: config 0 descriptor??
[  467.617806][   T10] cp210x 6-1:0.0: cp210x converter detected
[  467.828967][   T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -121
[  467.894419][ T5907] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  467.928333][   T10] cp210x 6-1:0.0: querying part number failed
[  467.941412][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  468.031490][T13226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2250'.
[  468.074419][ T5907] usb 2-1: device descriptor read/64, error -71
[  468.167136][   T30] audit: type=1326 audit(1769953020.850:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.293660][   T30] audit: type=1326 audit(1769953020.850:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.344674][ T5938] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  468.352137][ T5907] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  468.354602][ T5938] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  468.390749][   T30] audit: type=1326 audit(1769953020.850:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.396592][ T5938] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  468.423562][ T5938] em28xx 3-1:0.0: No AC97 audio processor
[  468.515850][   T30] audit: type=1326 audit(1769953020.850:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.539308][ T5907] usb 2-1: device descriptor read/64, error -71
[  468.592692][   T30] audit: type=1326 audit(1769953020.850:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.664837][ T5907] usb usb2-port1: attempt power cycle
[  468.736117][   T30] audit: type=1326 audit(1769953020.850:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.788094][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2256'.
[  468.804517][T13246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2256'.
[  468.818514][   T30] audit: type=1326 audit(1769953020.850:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.887326][   T30] audit: type=1326 audit(1769953020.850:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea4f35b78e code=0x7ffc0000
[  468.950597][T13248] FAULT_INJECTION: forcing a failure.
[  468.950597][T13248] name failslab, interval 1, probability 0, space 0, times 0
[  468.963831][   T30] audit: type=1326 audit(1769953020.850:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.5.2250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  468.986340][T13248] CPU: 0 UID: 0 PID: 13248 Comm: syz.0.2257 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  468.986366][T13248] Tainted: [L]=SOFTLOCKUP
[  468.986373][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  468.986383][T13248] Call Trace:
[  468.986390][T13248]  <TASK>
[  468.986398][T13248]  dump_stack_lvl+0xe8/0x150
[  468.986424][T13248]  should_fail_ex+0x412/0x560
[  468.986449][T13248]  should_failslab+0xa8/0x100
[  468.986468][T13248]  __kmalloc_cache_noprof+0x83/0x6e0
[  468.986486][T13248]  ? nf_tables_newchain+0x1c7a/0x2890
[  468.986505][T13248]  ? nf_tables_newchain+0x1df0/0x2890
[  468.986529][T13248]  nf_tables_newchain+0x1df0/0x2890
[  468.986563][T13248]  ? __pfx_nf_tables_newchain+0x10/0x10
[  468.986609][T13248]  ? nfnl_pernet+0x23/0x240
[  468.986631][T13248]  ? nfnl_pernet+0x23/0x240
[  468.986661][T13248]  ? __nla_parse+0x40/0x60
[  468.986686][T13248]  nfnetlink_rcv+0x1240/0x27b0
[  468.986736][T13248]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  468.986798][T13248]  ? netlink_deliver_tap+0x2e/0x1b0
[  468.986815][T13248]  ? netlink_deliver_tap+0x2e/0x1b0
[  468.986855][T13248]  netlink_unicast+0x80f/0x9b0
[  468.986886][T13248]  ? __pfx_netlink_unicast+0x10/0x10
[  468.986907][T13248]  ? __alloc_skb+0x193/0x390
[  468.986926][T13248]  ? netlink_sendmsg+0x650/0xb40
[  468.986941][T13248]  ? skb_put+0x11b/0x210
[  468.986963][T13248]  netlink_sendmsg+0x813/0xb40
[  468.986989][T13248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.987008][T13248]  ? aa_sock_msg_perm+0xf1/0x1b0
[  468.987030][T13248]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.987049][T13248]  ? __pfx_netlink_sendmsg+0x10/0x10
[  468.987064][T13248]  ____sys_sendmsg+0xa68/0xad0
[  468.987084][T13248]  ? __might_fault+0xaf/0x130
[  468.987111][T13248]  ? __pfx_____sys_sendmsg+0x10/0x10
[  468.987140][T13248]  ? import_iovec+0x73/0xa0
[  468.987165][T13248]  ___sys_sendmsg+0x2a5/0x360
[  468.987184][T13248]  ? __lock_acquire+0x6b5/0x2cf0
[  468.987209][T13248]  ? __pfx____sys_sendmsg+0x10/0x10
[  468.987260][T13248]  ? __fget_files+0x2a/0x420
[  468.987277][T13248]  ? __fget_files+0x3a0/0x420
[  468.987307][T13248]  __x64_sys_sendmsg+0x1bd/0x2a0
[  468.987330][T13248]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  468.987359][T13248]  ? __pfx_ksys_write+0x10/0x10
[  468.987391][T13248]  do_syscall_64+0xe2/0xf80
[  468.987408][T13248]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.987423][T13248]  ? trace_irq_disable+0x37/0x100
[  468.987439][T13248]  ? clear_bhb_loop+0x60/0xb0
[  468.987458][T13248]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.987474][T13248] RIP: 0033:0x7f7f8259aeb9
[  468.987489][T13248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  468.987503][T13248] RSP: 002b:00007f7f8342f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  468.987520][T13248] RAX: ffffffffffffffda RBX: 00007f7f82815fa0 RCX: 00007f7f8259aeb9
[  468.987532][T13248] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  468.987542][T13248] RBP: 00007f7f8342f090 R08: 0000000000000000 R09: 0000000000000000
[  468.987552][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  468.987561][T13248] R13: 00007f7f82816038 R14: 00007f7f82815fa0 R15: 00007f7f8293fa48
[  468.987589][T13248]  </TASK>
[  469.365534][ T5907] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  469.407120][ T5907] usb 2-1: device descriptor read/8, error -71
[  469.420017][T13250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2258'.
[  469.610065][ T5938] usb 3-1: USB disconnect, device number 50
[  469.623116][ T5938] em28xx 3-1:0.0: Disconnecting em28xx
[  469.635375][ T5938] em28xx 3-1:0.0: Freeing device
[  469.729576][ T5907] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  469.765710][ T5907] usb 2-1: device descriptor read/8, error -71
[  469.992190][ T5907] usb usb2-port1: unable to enumerate USB device
[  470.045714][T13264] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2264'.
[  470.262175][ T5938] usb 6-1: USB disconnect, device number 42
[  470.279921][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  470.303283][ T5938] cp210x 6-1:0.0: device disconnected
[  470.728293][T13287] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2272'.
[  470.892361][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'.
[  471.235537][T13298] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  471.374357][   T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  471.430241][T13298] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address
[  471.511756][T13298] bond4: (slave vxcan3): Error -95 calling set_mac_address
[  471.554365][   T10] usb 6-1: Using ep0 maxpacket: 32
[  471.565585][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  471.588440][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  471.611636][T13302] bond4: (slave bridge3): Enslaving as an active interface with a down link
[  471.857796][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  471.880111][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.889447][T13303] macvlan4: entered promiscuous mode
[  471.894873][T13303] macvlan4: entered allmulticast mode
[  471.900834][T13303] bond4: entered promiscuous mode
[  471.906351][T13303] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  471.921910][T13303] bond4: left promiscuous mode
[  471.971750][   T10] usb 6-1: config 0 descriptor??
[  471.992474][   T10] hub 6-1:0.0: USB hub found
[  472.193355][   T10] hub 6-1:0.0: 1 port detected
[  472.428405][T13296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.442510][T13296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.586658][   T10] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  472.593399][   T10] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  472.669227][   T10] usbhid 6-1:0.0: can't add hid device: -71
[  472.679150][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  472.679746][T13317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2282'.
[  472.699565][T13318] input: syz0 as /devices/virtual/input/input27
[  472.759511][   T10] usb 6-1: USB disconnect, device number 43
[  473.046475][T13326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'.
[  473.108025][T13326] syz_tun: entered promiscuous mode
[  473.113325][T13326] macsec1: entered promiscuous mode
[  473.158207][T13326] syz_tun: left promiscuous mode
[  473.291995][T13333] bridge0: port 3(vlan2) entered blocking state
[  473.298373][T13333] bridge0: port 3(vlan2) entered forwarding state
[  473.311942][T13333] 8021q: adding VLAN 0 to HW filter on device bond0
[  473.324316][T13333] team0: Device batadv1 failed to change mtu
[  473.614366][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  473.644332][T11555] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  473.774770][   T10] usb 5-1: Using ep0 maxpacket: 32
[  473.781321][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  473.790404][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.800795][   T10] usb 5-1: config 0 has no interface number 0
[  473.808731][T11555] usb 6-1: Using ep0 maxpacket: 16
[  473.816256][   T10] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  473.829490][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  473.837564][T11555] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  473.847612][T11555] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.857939][T11555] usb 6-1: config 0 has no interface number 0
[  473.867393][T11555] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  473.877924][T11555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.886053][T11555] usb 6-1: Product: syz
[  473.890261][T11555] usb 6-1: Manufacturer: syz
[  473.894945][T11555] usb 6-1: SerialNumber: syz
[  473.901275][T11555] usb 6-1: config 0 descriptor??
[  473.918159][T11555] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  473.936947][T11555] uvcvideo 6-1:0.105: No valid video chain found.
[  473.956100][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  473.969894][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.994892][   T10] usb 5-1: Product: syz
[  474.011540][   T10] usb 5-1: Manufacturer: syz
[  474.018089][ T5938] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  474.031385][   T10] usb 5-1: SerialNumber: syz
[  474.041639][   T10] usb 5-1: config 0 descriptor??
[  474.053795][   T10] smsc75xx v1.0.0
[  474.058021][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  474.071109][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  474.108513][T13352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2293'.
[  474.120837][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'.
[  474.131917][   T10] usb 6-1: USB disconnect, device number 44
[  474.175389][ T5938] usb 2-1: Using ep0 maxpacket: 8
[  474.195481][ T5938] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  474.205247][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.213268][ T5938] usb 2-1: Product: syz
[  474.218470][ T5938] usb 2-1: Manufacturer: syz
[  474.223083][ T5938] usb 2-1: SerialNumber: syz
[  474.231073][ T5938] usb 2-1: config 0 descriptor??
[  474.243185][ T5938] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  474.262667][T13338] netlink: 'syz.4.2287': attribute type 1 has an invalid length.
[  474.275943][   T78] usb 5-1: USB disconnect, device number 52
[  474.340483][   T30] kauditd_printk_skb: 184 callbacks suppressed
[  474.340500][   T30] audit: type=1326 audit(1769953027.020:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.377660][   T30] audit: type=1326 audit(1769953027.020:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.402797][   T30] audit: type=1326 audit(1769953027.060:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.438748][   T30] audit: type=1326 audit(1769953027.060:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.466665][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.478761][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.491652][   T30] audit: type=1326 audit(1769953027.060:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.516012][   T30] audit: type=1326 audit(1769953027.080:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.628431][   T30] audit: type=1326 audit(1769953027.080:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.752855][   T30] audit: type=1326 audit(1769953027.080:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.832799][   T30] audit: type=1326 audit(1769953027.080:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  474.918132][   T30] audit: type=1326 audit(1769953027.080:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13355 comm="syz.2.2295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f829719aeb9 code=0x7ffc0000
[  475.150459][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.160185][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.019313][T13378] bond3: Removing last ns target with arp_interval on
[  476.812410][   T78] usb 2-1: USB disconnect, device number 74
[  476.842543][T13384] binder: 13383:13384 ioctl 400c620e 200000000100 returned -22
[  476.879373][T13386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2304'.
[  477.091148][T13393] tipc: Enabled bearer <udp:syz2>, priority 10
[  477.114795][T13393] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2305'.
[  477.127125][T13393] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2305'.
[  477.208062][T13393] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  477.424366][T11555] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  477.576205][T11555] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  477.647880][T11555] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  477.663342][T11555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  477.671837][T11555] usb 6-1: SerialNumber: syz
[  477.902837][T13396] netlink: 'syz.5.2307': attribute type 1 has an invalid length.
[  477.929392][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2309'.
[  477.937881][T11555] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  477.939985][T13400] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2309'.
[  477.957691][T11555] usb 6-1: USB disconnect, device number 45
[  478.354490][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  478.580994][   T10] usb 5-1: Using ep0 maxpacket: 8
[  478.595431][   T10] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  478.607624][T13415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'.
[  478.619200][   T10] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  478.652936][   T10] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  478.705816][   T10] usb 5-1: config 250 has no interface number 0
[  478.754385][   T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  478.789630][   T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  478.800380][T11555] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  478.813776][   T10] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  478.845293][   T10] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  478.860517][   T10] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  478.906252][   T10] usb 5-1: config 250 interface 228 has no altsetting 0
[  478.931755][   T10] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  478.941477][   T10] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  478.950442][   T10] usb 5-1: Product: syz
[  478.964428][T11555] usb 2-1: Using ep0 maxpacket: 16
[  478.971552][   T10] usb 5-1: SerialNumber: syz
[  479.032618][T11555] usb 2-1: config 0 has no interfaces?
[  479.045792][T11555] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  479.059475][   T10] hub 5-1:250.228: bad descriptor, ignoring hub
[  479.068073][   T10] hub 5-1:250.228: probe with driver hub failed with error -5
[  479.076497][T11555] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  479.100902][T11555] usb 2-1: Manufacturer: syz
[  479.126574][T11555] usb 2-1: config 0 descriptor??
[  479.269209][   T10] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 53 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  479.531493][   T10] usb 5-1: reset high-speed USB device number 53 using dummy_hcd
[  480.425253][   T78] usb 5-1: USB disconnect, device number 53
[  480.436237][   T78] usblp0: removed
[  480.766173][T13439] netlink: 'syz.2.2320': attribute type 1 has an invalid length.
[  480.821228][T13441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2320'.
[  480.860757][T13439] 8021q: adding VLAN 0 to HW filter on device bond5
[  481.336843][   T30] kauditd_printk_skb: 56 callbacks suppressed
[  481.336855][   T30] audit: type=1326 audit(1769953034.020:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.367942][   T30] audit: type=1326 audit(1769953034.050:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.392069][   T30] audit: type=1326 audit(1769953034.070:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.416868][   T30] audit: type=1326 audit(1769953034.070:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.462583][   T30] audit: type=1326 audit(1769953034.070:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.564711][   T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  481.586878][   T30] audit: type=1326 audit(1769953034.070:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.696911][  T797] usb 2-1: USB disconnect, device number 75
[  481.734375][   T10] usb 5-1: device descriptor read/64, error -71
[  481.757424][   T30] audit: type=1326 audit(1769953034.070:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.836856][   T30] audit: type=1326 audit(1769953034.070:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.910917][   T30] audit: type=1326 audit(1769953034.070:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.957131][   T30] audit: type=1326 audit(1769953034.070:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13452 comm="syz.0.2324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f8259aeb9 code=0x7ffc0000
[  481.997070][   T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  482.134335][   T10] usb 5-1: device descriptor read/64, error -71
[  482.244630][   T10] usb usb5-port1: attempt power cycle
[  482.413116][T13474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2331'.
[  482.594554][   T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  482.617891][T13480] FAULT_INJECTION: forcing a failure.
[  482.617891][T13480] name failslab, interval 1, probability 0, space 0, times 0
[  482.631408][   T10] usb 5-1: device descriptor read/8, error -71
[  482.638249][T13480] CPU: 0 UID: 0 PID: 13480 Comm: syz.5.2333 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  482.638276][T13480] Tainted: [L]=SOFTLOCKUP
[  482.638283][T13480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  482.638294][T13480] Call Trace:
[  482.638301][T13480]  <TASK>
[  482.638309][T13480]  dump_stack_lvl+0xe8/0x150
[  482.638336][T13480]  should_fail_ex+0x412/0x560
[  482.638360][T13480]  should_failslab+0xa8/0x100
[  482.638382][T13480]  __kmalloc_cache_noprof+0x83/0x6e0
[  482.638399][T13480]  ? __pfx_stack_trace_save+0x10/0x10
[  482.638420][T13480]  ? rtnl_newlink+0x136/0x1be0
[  482.638452][T13480]  rtnl_newlink+0x136/0x1be0
[  482.638472][T13480]  ? kasan_save_track+0x4f/0x80
[  482.638487][T13480]  ? kasan_save_track+0x3e/0x80
[  482.638502][T13480]  ? kasan_save_free_info+0x46/0x50
[  482.638522][T13480]  ? __kasan_slab_free+0x5c/0x80
[  482.638538][T13480]  ? kmem_cache_free+0x195/0x610
[  482.638556][T13480]  ? __dev_queue_xmit+0x168f/0x3850
[  482.638577][T13480]  ? __netlink_deliver_tap+0x5ad/0x850
[  482.638594][T13480]  ? netlink_deliver_tap+0x19c/0x1b0
[  482.638610][T13480]  ? netlink_unicast+0x7e3/0x9b0
[  482.638631][T13480]  ? netlink_sendmsg+0x813/0xb40
[  482.638649][T13480]  ? __pfx_rtnl_newlink+0x10/0x10
[  482.638667][T13480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.638715][T13480]  ? kasan_quarantine_put+0xbb/0x1f0
[  482.638738][T13480]  ? lockdep_hardirqs_on+0x7a/0x110
[  482.638760][T13480]  ? kmem_cache_free+0x195/0x610
[  482.638777][T13480]  ? nlmon_xmit+0xb0/0x100
[  482.638804][T13480]  ? __lock_acquire+0x6b5/0x2cf0
[  482.638834][T13480]  ? __local_bh_enable_ip+0xd0/0x130
[  482.638855][T13480]  ? lockdep_hardirqs_on+0x7a/0x110
[  482.638872][T13480]  ? __dev_queue_xmit+0x274/0x3850
[  482.638892][T13480]  ? __local_bh_enable_ip+0xd0/0x130
[  482.638907][T13480]  ? __dev_queue_xmit+0x274/0x3850
[  482.638935][T13480]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  482.638967][T13480]  ? __pfx_rtnl_newlink+0x10/0x10
[  482.638985][T13480]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  482.639008][T13480]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  482.639026][T13480]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  482.639044][T13480]  ? ref_tracker_free+0x693/0x840
[  482.639063][T13480]  ? __copy_skb_header+0xa3/0x4a0
[  482.639086][T13480]  ? __pfx_ref_tracker_free+0x10/0x10
[  482.639116][T13480]  netlink_rcv_skb+0x232/0x4b0
[  482.639135][T13480]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  482.639156][T13480]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  482.639185][T13480]  ? netlink_deliver_tap+0x2e/0x1b0
[  482.639210][T13480]  netlink_unicast+0x80f/0x9b0
[  482.639241][T13480]  ? __pfx_netlink_unicast+0x10/0x10
[  482.639263][T13480]  ? __alloc_skb+0x193/0x390
[  482.639283][T13480]  ? netlink_sendmsg+0x650/0xb40
[  482.639299][T13480]  ? skb_put+0x11b/0x210
[  482.639322][T13480]  netlink_sendmsg+0x813/0xb40
[  482.639348][T13480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  482.639370][T13480]  ? aa_sock_msg_perm+0xf1/0x1b0
[  482.639391][T13480]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  482.639412][T13480]  ? __pfx_netlink_sendmsg+0x10/0x10
[  482.639430][T13480]  ____sys_sendmsg+0xa68/0xad0
[  482.639456][T13480]  ? __might_fault+0xaf/0x130
[  482.639485][T13480]  ? __pfx_____sys_sendmsg+0x10/0x10
[  482.639514][T13480]  ? import_iovec+0x73/0xa0
[  482.639541][T13480]  ___sys_sendmsg+0x2a5/0x360
[  482.639561][T13480]  ? __lock_acquire+0x6b5/0x2cf0
[  482.639586][T13480]  ? __pfx____sys_sendmsg+0x10/0x10
[  482.639638][T13480]  ? __fget_files+0x2a/0x420
[  482.639656][T13480]  ? __fget_files+0x3a0/0x420
[  482.639683][T13480]  __x64_sys_sendmsg+0x1bd/0x2a0
[  482.639707][T13480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  482.639737][T13480]  ? __pfx_ksys_write+0x10/0x10
[  482.639770][T13480]  do_syscall_64+0xe2/0xf80
[  482.639788][T13480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.639805][T13480]  ? clear_bhb_loop+0x60/0xb0
[  482.639826][T13480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  482.639843][T13480] RIP: 0033:0x7fea4f39aeb9
[  482.639859][T13480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  482.639874][T13480] RSP: 002b:00007fea50256028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  482.639893][T13480] RAX: ffffffffffffffda RBX: 00007fea4f615fa0 RCX: 00007fea4f39aeb9
[  482.639907][T13480] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  482.639918][T13480] RBP: 00007fea50256090 R08: 0000000000000000 R09: 0000000000000000
[  482.639930][T13480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  482.639941][T13480] R13: 00007fea4f616038 R14: 00007fea4f615fa0 R15: 00007fea4f73fa48
[  482.639970][T13480]  </TASK>
[  483.305017][   T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  483.325037][   T10] usb 5-1: device descriptor read/8, error -71
[  483.377266][T13486] bridge0: port 1(macvtap1) entered blocking state
[  483.384100][T13486] bridge0: port 1(macvtap1) entered disabled state
[  483.391401][T13486] macvtap1: entered allmulticast mode
[  483.412746][T13486] macvtap1: left allmulticast mode
[  483.435314][   T10] usb usb5-port1: unable to enumerate USB device
[  483.721994][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2339'.
[  483.814344][   T78] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  484.006096][   T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.017624][   T78] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  484.030123][   T78] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  484.051246][   T78] usb 6-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00
[  484.066638][   T78] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.085241][   T78] usb 6-1: config 0 descriptor??
[  484.502003][   T78] usbhid 6-1:0.0: can't add hid device: -71
[  484.514280][   T78] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  484.552666][   T78] usb 6-1: USB disconnect, device number 46
[  484.662854][T13509] netlink: 'syz.2.2344': attribute type 10 has an invalid length.
[  484.693495][T13509] team0: Device ipvlan1 failed to register rx_handler
[  484.808161][T13514] bridge4: entered promiscuous mode
[  485.419483][T13529] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2349'.
[  485.734641][   T78] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  485.971489][   T78] usb 6-1: Using ep0 maxpacket: 32
[  485.984427][   T78] usb 6-1: unable to get BOS descriptor or descriptor too short
[  486.001011][   T78] usb 6-1: config 128 has an invalid interface number: 127 but max is 3
[  486.012773][   T78] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  486.165070][   T78] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4
[  486.216368][   T78] usb 6-1: config 128 has no interface number 0
[  486.242374][T13548] loop4: detected capacity change from 0 to 1
[  486.255867][   T78] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  486.408152][   T78] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  486.418472][ T5816] Dev loop4: unable to read RDB block 1
[  486.436338][ T5816]  loop4: unable to read partition table
[  486.451943][ T5816] loop4: partition table beyond EOD, truncated
[  486.459685][   T78] usb 6-1: config 128 interface 127 has no altsetting 0
[  486.489852][   T30] kauditd_printk_skb: 131 callbacks suppressed
[  486.489866][   T30] audit: type=1326 audit(1769953039.170:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.544641][   T78] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  486.553859][   T30] audit: type=1326 audit(1769953039.170:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.576607][T13550] Dev loop4: unable to read RDB block 1
[  486.605111][T13550]  loop4: unable to read partition table
[  486.611001][T13550] loop4: partition table beyond EOD, truncated
[  486.621069][T13550] loop_reread_partitions: partition scan of loop4 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  486.640971][   T78] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.661614][   T78] usb 6-1: Product: syz
[  486.672438][   T78] usb 6-1: Manufacturer: syz
[  486.681529][   T78] usb 6-1: SerialNumber: syz
[  486.757220][   T30] audit: type=1326 audit(1769953039.170:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.855277][   T30] audit: type=1326 audit(1769953039.170:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.897715][   T30] audit: type=1326 audit(1769953039.200:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.967005][   T30] audit: type=1326 audit(1769953039.200:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  486.981421][   T78] usb 6-1: USB disconnect, device number 47
[  487.080718][ T5816] udevd[5816]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  487.100142][   T30] audit: type=1326 audit(1769953039.220:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  487.132763][T13559] xt_TCPMSS: Only works on TCP SYN packets
[  487.153543][T13559] sit1: entered allmulticast mode
[  487.198560][   T30] audit: type=1326 audit(1769953039.230:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  487.532521][   T30] audit: type=1326 audit(1769953039.400:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  487.591131][   T30] audit: type=1326 audit(1769953039.400:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13528 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4f39ab4b code=0x7ffc0000
[  487.814960][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2361'.
[  488.234366][ T5938] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  488.462504][ T5938] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  488.471235][ T5938] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  488.506970][ T5938] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  488.576973][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  488.767037][ T5938] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  488.808857][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  488.833315][ T5938] usb 3-1: Product: syz
[  488.841730][ T5938] usb 3-1: Manufacturer: syz
[  488.857132][ T5938] cdc_wdm 3-1:1.0: skipping garbage
[  488.863844][ T5938] cdc_wdm 3-1:1.0: skipping garbage
[  488.871269][ T5938] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  489.101843][T13561] openvswitch: netlink: IPv4 tun info is not correct
[  490.095539][T13597] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2368'.
[  490.274381][ T5938] usb 3-1: USB disconnect, device number 51
[  491.796321][T13618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2376'.
[  492.387655][T13630] batadv_slave_1: entered promiscuous mode
[  492.510411][T13629] batadv_slave_1: left promiscuous mode
[  493.154589][ T5938] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  493.254851][T13656] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2387'.
[  493.332882][ T5938] usb 3-1: Using ep0 maxpacket: 32
[  493.352953][ T5938] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  493.462125][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  493.557403][ T5938] usb 3-1: config 0 has no interface number 0
[  493.585873][ T5938] usb 3-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  493.619284][ T5938] usb 3-1: config 0 interface 184 has no altsetting 0
[  493.658984][T13665] input: syz0 as /devices/virtual/input/input28
[  493.728375][ T5938] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  493.754562][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.784474][ T5938] usb 3-1: Product: syz
[  493.788725][ T5938] usb 3-1: Manufacturer: syz
[  493.810815][ T5938] usb 3-1: SerialNumber: syz
[  493.870312][ T5938] usb 3-1: config 0 descriptor??
[  493.901115][ T5938] smsc75xx v1.0.0
[  493.913702][ T5938] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  493.973779][ T5938] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  494.111644][T13646] netlink: 'syz.2.2385': attribute type 1 has an invalid length.
[  494.121829][   T78] usb 3-1: USB disconnect, device number 52
[  494.953511][T13684] team0: Device gtp0 is of different type
[  495.369444][T13696] loop4: detected capacity change from 0 to 1
[  495.535516][T13699] netlink: 388 bytes leftover after parsing attributes in process `syz.5.2399'.
[  495.544651][ T5938] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  495.615467][ T5816] Dev loop4: unable to read RDB block 1
[  495.621126][ T5816]  loop4: unable to read partition table
[  495.678358][ T5938] usb 5-1: device descriptor read/64, error -71
[  495.700344][ T5816] loop4: partition table beyond EOD, truncated
[  495.721481][T13700] Dev loop4: unable to read RDB block 1
[  495.728133][T13700]  loop4: unable to read partition table
[  495.749729][T13700] loop4: partition table beyond EOD, truncated
[  495.766877][T13700] loop_reread_partitions: partition scan of loop4 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  495.912447][T13702] xt_CT: You must specify a L4 protocol and not use inversions on it
[  495.974466][ T5938] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  496.134481][ T5938] usb 5-1: device descriptor read/64, error -71
[  496.271598][T13706] vlan3: entered promiscuous mode
[  496.295812][ T5938] usb usb5-port1: attempt power cycle
[  496.660226][ T5938] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  496.833564][ T5938] usb 5-1: device descriptor read/8, error -71
[  497.094568][ T5938] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  497.128240][ T5938] usb 5-1: device descriptor read/8, error -71
[  497.244579][ T5938] usb usb5-port1: unable to enumerate USB device
[  497.284329][  T797] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  497.434367][  T797] usb 6-1: Using ep0 maxpacket: 16
[  497.442327][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  497.454170][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  497.464964][  T797] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  497.480695][  T797] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  497.489866][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.499947][T13731] lo: entered allmulticast mode
[  497.506497][T13731] gre0: entered allmulticast mode
[  497.515635][  T797] usb 6-1: config 0 descriptor??
[  497.532957][T13731] syz_tun: entered allmulticast mode
[  497.544485][T13731] bridge0: port 3(vlan2) entered disabled state
[  497.560757][T13731] ip6erspan0: entered allmulticast mode
[  497.567755][T13731] vxcan2: entered allmulticast mode
[  497.573075][T13731] vxcan3: entered allmulticast mode
[  497.582363][T13731] bond2: entered allmulticast mode
[  497.589837][T13731] bridge2: entered allmulticast mode
[  497.598371][T13731] mac80211_hwsim hwsim27 wlan3: entered allmulticast mode
[  497.606191][T13731] mac80211_hwsim hwsim31 wlan4: entered allmulticast mode
[  497.613433][T13731] mac80211_hwsim hwsim32 wlan5: entered allmulticast mode
[  497.621417][T13731] macvlan2: entered allmulticast mode
[  497.627021][T13731] bond3: entered allmulticast mode
[  497.632728][T13731] bridge3: entered allmulticast mode
[  497.634528][T13721] [U] 
[  497.946080][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2416'.
[  497.968520][T13729] xt_CT: You must specify a L4 protocol and not use inversions on it
[  498.042697][  T797] usbhid 6-1:0.0: can't add hid device: -71
[  498.079066][  T797] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  498.105519][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  498.105534][   T30] audit: type=1800 audit(1769953050.780:776): pid=13763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2421" name="file1" dev="tmpfs" ino=2629 res=0 errno=0
[  498.140968][  T797] usb 6-1: USB disconnect, device number 48
[  498.395690][T13773] loop9: detected capacity change from 0 to 7
[  498.484609][T13773] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  498.597363][T13773] vivid-001: disconnect
[  499.016301][T13770] vivid-001: reconnect
[  499.140806][T13811] syzkaller0: entered promiscuous mode
[  499.164010][T13811] syzkaller0: entered allmulticast mode
[  499.172587][T13819] netlink: 'syz.1.2433': attribute type 5 has an invalid length.
[  499.331380][T13832] netlink: 'syz.1.2437': attribute type 32 has an invalid length.
[  499.372202][T13832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2437'.
[  499.400556][T13837] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode
[  499.439538][T13837] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  500.177768][ T5938] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  500.349527][ T5938] usb 5-1: unable to get BOS descriptor or descriptor too short
[  500.362412][ T5938] usb 5-1: not running at top speed; connect to a high speed hub
[  500.382592][ T5938] usb 5-1: config 5 has an invalid interface number: 246 but max is 0
[  500.403145][ T5938] usb 5-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config
[  500.431265][ T5938] usb 5-1: config 5 has no interface number 0
[  500.445615][ T5938] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  500.451533][T13876] team0: Device batadv1 failed to change mtu
[  500.468985][ T5938] usb 5-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  500.510707][ T5938] usb 5-1: config 5 interface 246 has no altsetting 0
[  500.563833][ T5938] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  500.606350][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.626496][ T5938] usb 5-1: Product: syz
[  500.630723][ T5938] usb 5-1: Manufacturer: syz
[  500.631586][T13884] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2442'.
[  500.642456][ T5938] usb 5-1: SerialNumber: syz
[  500.888979][ T5938] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  500.891325][T12819] usb 5-1: Failed to submit usb control message: -71
[  500.908029][ T5938] usb 5-1: USB disconnect, device number 62
[  500.947961][T12819] usb 5-1: unable to send the bmi data to the device: -71
[  501.025804][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2447'.
[  501.114382][T12819] usb 5-1: unable to get target info from device
[  501.130640][T12819] usb 5-1: could not get target info (-71)
[  501.140236][T12819] usb 5-1: could not probe fw (-71)
[  501.164645][T13925] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2451'.
[  501.315043][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.321588][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  501.500555][T13931] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.509526][T13931] 8021q: adding VLAN 0 to HW filter on device team0
[  501.523968][T13931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  501.634098][T13942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2454'.
[  501.917240][T13960] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2456'.
[  502.058961][ T5938] usb 2-1: new low-speed USB device number 76 using dummy_hcd
[  502.080322][T13976] xt_CT: You must specify a L4 protocol and not use inversions on it
[  502.184756][  T797] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  502.344388][ T5938] usb 2-1: Invalid ep0 maxpacket: 32
[  502.396402][  T797] usb 6-1: unable to get BOS descriptor or descriptor too short
[  502.405999][  T797] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  502.418593][  T797] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  502.428723][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.454475][  T797] usb 6-1: Product: 
[  502.468606][  T797] usb 6-1: Manufacturer: И
[  502.474715][ T5938] usb 2-1: new low-speed USB device number 77 using dummy_hcd
[  502.493211][  T797] usb 6-1: SerialNumber: 蓡ꦁ䬅泈鿎ᶪ콢䫁澽뗖殺醔吊댐ᄐ㏱萋ᶜ㍃秌岁䭯⬥㟧꼪襨焹
[  502.678490][ T5938] usb 2-1: Invalid ep0 maxpacket: 32
[  502.685199][ T5938] usb usb2-port1: attempt power cycle
[  503.044352][ T5938] usb 2-1: new low-speed USB device number 78 using dummy_hcd
[  503.075030][ T5938] usb 2-1: Invalid ep0 maxpacket: 32
[  503.204366][ T5938] usb 2-1: new low-speed USB device number 79 using dummy_hcd
[  503.235018][ T5938] usb 2-1: Invalid ep0 maxpacket: 32
[  503.242680][ T5938] usb usb2-port1: unable to enumerate USB device
[  503.249421][T14008] binder: 14007:14008 ioctl c0306201 2000000003c0 returned -14
[  503.270246][   T30] audit: type=1800 audit(1769953055.950:777): pid=14008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2470" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  503.536084][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'.
[  503.579117][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2472'.
[  503.904365][T11555] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  504.077110][T11555] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  504.094331][T11555] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  504.120836][T11555] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  504.137379][T11555] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.154364][T11555] usb 3-1: Product: syz
[  504.160451][T11555] usb 3-1: Manufacturer: syz
[  504.168394][T11555] usb 3-1: SerialNumber: syz
[  504.397859][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.410877][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.423000][T14021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.435896][T14021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.458087][T11555] usb 3-1: 0:2 : does not exist
[  504.476070][T11555] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  504.514495][T11555] usb 3-1: USB disconnect, device number 53
[  504.548416][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  505.031948][T14086] Cannot find add_set index 1 as target
[  505.501507][   T30] audit: type=1326 audit(1769953058.180:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14102 comm="syz.2.2487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f829719aeb9 code=0x0
[  505.552750][T14118] ptrace attach of "./syz-executor exec"[14117] was attempted by "./syz-executor exec"[14118]
[  505.805843][  T797] usb 6-1: reset high-speed USB device number 49 using dummy_hcd
[  505.942945][T14124] binder: 14123:14124 ioctl c0306201 2000000003c0 returned -14
[  505.965461][  T797] usb 6-1: device descriptor read/64, error -71
[  506.255625][ T5877] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  506.274632][  T797] usb 6-1: reset high-speed USB device number 49 using dummy_hcd
[  506.404423][ T5877] usb 5-1: device descriptor read/64, error -71
[  506.414377][  T797] usb 6-1: device descriptor read/64, error -71
[  506.644342][ T5877] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  506.654484][  T797] usb 6-1: reset high-speed USB device number 49 using dummy_hcd
[  506.695372][  T797] usb 6-1: device descriptor read/8, error -71
[  506.790869][T14174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2500'.
[  506.799954][ T5877] usb 5-1: device descriptor read/64, error -71
[  506.868855][T14177] netlink: 'syz.2.2504': attribute type 32 has an invalid length.
[  506.886086][T14177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2504'.
[  506.917822][ T5877] usb usb5-port1: attempt power cycle
[  506.954347][  T797] usb 6-1: reset high-speed USB device number 49 using dummy_hcd
[  506.981770][  T797] usb 6-1: device descriptor read/8, error -71
[  507.102543][  T797] usb 6-1: USB disconnect, device number 49
[  507.264339][ T5877] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  507.272076][  T797] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  507.280547][T14194] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2508'.
[  507.294894][ T5877] usb 5-1: device descriptor read/8, error -71
[  507.387759][T14197] kvm: Disabled LAPIC found during irq injection
[  507.424383][  T797] usb 6-1: device descriptor read/64, error -71
[  507.534305][ T5877] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  507.554874][ T5877] usb 5-1: device descriptor read/8, error -71
[  507.664376][  T797] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  507.672778][ T5877] usb usb5-port1: unable to enumerate USB device
[  507.804335][  T797] usb 6-1: device descriptor read/64, error -71
[  507.834500][   T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  507.914559][  T797] usb usb6-port1: attempt power cycle
[  508.014334][   T10] usb 3-1: Using ep0 maxpacket: 16
[  508.021033][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  508.032379][   T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  508.042138][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  508.058569][   T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  508.067636][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  508.075664][   T10] usb 3-1: SerialNumber: syz
[  508.083661][T14197] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  508.254394][  T797] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  508.275944][  T797] usb 6-1: device descriptor read/8, error -71
[  508.348871][   T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  508.365550][   T10] usb 3-1: USB disconnect, device number 54
[  509.394112][T14250] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  509.470276][T14268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  509.614606][   T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  509.808386][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  509.835320][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  509.853637][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  509.870744][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  509.892704][   T10] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  509.902411][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.913978][   T10] usb 6-1: Product: syz
[  509.986280][   T10] usb 6-1: Manufacturer: syz
[  509.990881][   T10] usb 6-1: SerialNumber: syz
[  510.086871][   T10] usb 6-1: config 0 descriptor??
[  510.127115][T14294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2526'.
[  510.215992][   T10] ums-isd200 6-1:0.0: USB Mass Storage device detected
[  510.309764][   T30] audit: type=1326 audit(1769953062.990:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.357880][   T30] audit: type=1326 audit(1769953063.020:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.385937][   T30] audit: type=1326 audit(1769953063.020:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.542124][  T797] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  510.567770][   T30] audit: type=1326 audit(1769953063.020:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.606801][   T30] audit: type=1326 audit(1769953063.020:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.643593][   T30] audit: type=1326 audit(1769953063.020:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.684330][  T797] usb 3-1: device descriptor read/64, error -71
[  510.691881][   T30] audit: type=1326 audit(1769953063.020:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.724463][   T30] audit: type=1326 audit(1769953063.020:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.836966][   T30] audit: type=1326 audit(1769953063.020:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.893080][   T30] audit: type=1326 audit(1769953063.020:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.5.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4f39aeb9 code=0x7ffc0000
[  510.925977][  T797] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  510.971295][T14262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.988901][T14262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.059133][   T10] scsi host1: usb-storage 6-1:0.0
[  511.084328][  T797] usb 3-1: device descriptor read/64, error -71
[  511.102773][   T10] usb 6-1: USB disconnect, device number 54
[  511.132940][T14331] loop4: detected capacity change from 0 to 1
[  511.176116][T14331] Dev loop4: unable to read RDB block 1
[  511.181714][T14331]  loop4: unable to read partition table
[  511.187654][T14331] loop4: partition table beyond EOD, truncated
[  511.193837][T14331] loop_reread_partitions: partition scan of loop4 (�ݷ�U@�:�B$�{
W�ɴ�) failed (rc=-5)
[  511.214412][  T797] usb usb3-port1: attempt power cycle
[  511.585311][  T797] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  511.628648][  T797] usb 3-1: device descriptor read/8, error -71
[  511.754386][ T5877] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  511.934457][  T797] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  511.982018][ T5877] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  511.991893][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  512.003186][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  512.017050][  T797] usb 3-1: device descriptor read/8, error -71
[  512.057763][ T5877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.143931][  T797] usb usb3-port1: unable to enumerate USB device
[  512.188283][ T5877] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  512.208068][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  512.282896][ T5877] usb 5-1: Product: syz
[  512.293756][ T5877] usb 5-1: Manufacturer: syz
[  512.314934][ T5877] cdc_wdm 5-1:1.0: skipping garbage
[  512.323269][ T5877] cdc_wdm 5-1:1.0: skipping garbage
[  512.407613][ T5877] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  512.521457][T14353] openvswitch: netlink: IPv4 tun info is not correct
[  513.084330][   T10] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  513.106981][T14424] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2541'.
[  513.150949][T14424] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2541'.
[  513.162779][T14424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2541'.
[  513.259680][   T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  513.275964][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.373094][   T10] usb 6-1: Product: syz
[  513.400952][   T10] usb 6-1: Manufacturer: syz
[  513.422593][   T10] usb 6-1: SerialNumber: syz
[  513.956312][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  513.968216][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  514.002440][   T10] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  514.064361][   T10] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  514.456085][   T10] usb 6-1: USB disconnect, device number 55
[  514.510244][T14472] FAULT_INJECTION: forcing a failure.
[  514.510244][T14472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.544016][T14472] CPU: 1 UID: 0 PID: 14472 Comm: syz.5.2548 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  514.544035][T14472] Tainted: [L]=SOFTLOCKUP
[  514.544039][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  514.544046][T14472] Call Trace:
[  514.544051][T14472]  <TASK>
[  514.544056][T14472]  dump_stack_lvl+0xe8/0x150
[  514.544074][T14472]  should_fail_ex+0x412/0x560
[  514.544089][T14472]  _copy_from_user+0x2d/0xb0
[  514.544106][T14472]  input_event_from_user+0xb1/0x290
[  514.544117][T14472]  ? __pfx_input_event_from_user+0x10/0x10
[  514.544134][T14472]  evdev_write+0x2c7/0x4c0
[  514.544150][T14472]  ? __lock_acquire+0x6b5/0x2cf0
[  514.544166][T14472]  ? __pfx_evdev_write+0x10/0x10
[  514.544181][T14472]  ? bpf_lsm_file_permission+0x9/0x20
[  514.544193][T14472]  ? security_file_permission+0x75/0x260
[  514.544204][T14472]  ? rw_verify_area+0x255/0x4d0
[  514.544227][T14472]  ? __pfx_evdev_write+0x10/0x10
[  514.544249][T14472]  vfs_write+0x29a/0xb90
[  514.544277][T14472]  ? __pfx_vfs_write+0x10/0x10
[  514.544300][T14472]  ? __fget_files+0x2a/0x420
[  514.544322][T14472]  ? __fget_files+0x2a/0x420
[  514.544338][T14472]  ? __fget_files+0x3a0/0x420
[  514.544355][T14472]  ? __fget_files+0x2a/0x420
[  514.544389][T14472]  ksys_write+0x150/0x270
[  514.544414][T14472]  ? __pfx_ksys_write+0x10/0x10
[  514.544447][T14472]  do_syscall_64+0xe2/0xf80
[  514.544465][T14472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.544481][T14472]  ? trace_irq_disable+0x37/0x100
[  514.544499][T14472]  ? clear_bhb_loop+0x60/0xb0
[  514.544520][T14472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.544537][T14472] RIP: 0033:0x7fea4f39aeb9
[  514.544553][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  514.544569][T14472] RSP: 002b:00007fea50256028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  514.544588][T14472] RAX: ffffffffffffffda RBX: 00007fea4f615fa0 RCX: 00007fea4f39aeb9
[  514.544600][T14472] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000005
[  514.544611][T14472] RBP: 00007fea50256090 R08: 0000000000000000 R09: 0000000000000000
[  514.544621][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  514.544632][T14472] R13: 00007fea4f616038 R14: 00007fea4f615fa0 R15: 00007fea4f73fa48
[  514.544660][T14472]  </TASK>
[  514.844309][T11555] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  515.104513][T11555] usb 2-1: Using ep0 maxpacket: 32
[  515.240851][T11555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.266145][T11555] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.286143][T11555] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  515.304324][T11555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.355569][T11555] usb 2-1: config 0 descriptor??
[  515.399513][  T797] usb 5-1: USB disconnect, device number 67
[  515.446226][T11555] hub 2-1:0.0: USB hub found
[  515.860595][T11555] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  516.066812][T14458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  516.636858][   T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  516.807054][   T10] usb 5-1: Using ep0 maxpacket: 8
[  516.818050][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  516.829729][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  516.853588][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  516.884071][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  516.924310][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  516.939302][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  516.948219][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  516.959629][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  516.971453][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  516.983044][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  517.057607][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  517.071251][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  517.097166][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  517.123724][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  517.143870][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  517.161683][   T10] usb 5-1: string descriptor 0 read error: -22
[  517.171370][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  517.181626][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.219113][   T10] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  517.343243][T14541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2559'.
[  517.450398][ T5877] usb 5-1: USB disconnect, device number 68
[  517.583167][T14568] netlink: 'syz.0.2561': attribute type 1 has an invalid length.
[  517.685377][T14595] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address
[  517.697159][T14595] bond4: (slave vxcan5): Error -95 calling set_mac_address
[  517.826522][T14568] bond4: (slave bridge4): Enslaving as an active interface with a down link
[  517.857094][T14595] macvlan3: entered promiscuous mode
[  517.863702][T14595] macvlan3: entered allmulticast mode
[  517.873947][T14595] bond4: entered promiscuous mode
[  517.880005][T14595] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  517.892193][T14595] bond4: left promiscuous mode
[  517.926298][T11555] usbhid 2-1:0.0: can't add hid device: -71
[  517.934682][T11555] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  517.976427][T11555] usb 2-1: USB disconnect, device number 80
[  518.227891][T14635] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.237609][T14635] 8021q: adding VLAN 0 to HW filter on device team0
[  518.258656][T14635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  518.464477][T11555] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  518.636395][T11555] usb 2-1: unable to get BOS descriptor or descriptor too short
[  518.645664][T11555] usb 2-1: not running at top speed; connect to a high speed hub
[  518.665078][T11555] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  518.677578][T11555] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  518.689793][T11555] usb 2-1: string descriptor 0 read error: -22
[  518.697054][T11555] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  518.706280][T11555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.722915][T11555] usb 2-1: 0:2 : does not exist
[  518.746183][   T10] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  518.754376][ T5938] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  518.926359][T11555] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  518.934674][ T5938] usb 3-1: Using ep0 maxpacket: 16
[  518.954038][   T10] usb 6-1: Using ep0 maxpacket: 16
[  518.961317][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.975174][ T5938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  518.986584][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.998396][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.009622][ T5938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  519.020052][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  519.029503][ T5938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  519.040371][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.049190][T11555] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  519.056895][ T5938] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  519.071959][   T10] usb 6-1: config 0 descriptor??
[  519.080729][ T5938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  519.090288][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  519.098814][T11555] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  519.121515][T11555] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  519.129489][ T5938] usb 3-1: SerialNumber: syz
[  519.160890][T14661] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  519.180366][ T5938] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  519.198774][ T5938] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  519.207193][T11555] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  519.236303][T11555] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  519.255002][T11555] usb 2-1: USB disconnect, device number 81
[  519.371671][ T5877] usb 3-1: USB disconnect, device number 59
[  519.507725][   T10] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  519.628716][T14731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2581'.
[  519.645544][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2581'.
[  519.699694][ T5877] usb 6-1: USB disconnect, device number 56
[  519.819939][T14756] fuse: Invalid uid '00000000000000000004'
[  519.911070][T14761] xt_TCPMSS: Only works on TCP SYN packets
[  520.722662][T14769] Invalid argument reading file caps for ./file0
[  521.011690][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2595'.
[  521.042549][T14802] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2596'.
[  521.118640][T14810] vlan3: entered promiscuous mode
[  521.226943][   T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  521.254352][ T5877] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  521.334399][  T797] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  521.387623][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  521.398850][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.409695][   T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  521.418977][   T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  521.427090][   T10] usb 3-1: Manufacturer: syz
[  521.434536][   T10] usb 3-1: config 0 descriptor??
[  521.444668][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short
[  521.456512][ T5877] usb 5-1: not running at top speed; connect to a high speed hub
[  521.466663][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  521.477350][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  521.489278][ T5877] usb 5-1: string descriptor 0 read error: -22
[  521.496001][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  521.506201][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  521.517170][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.535475][  T797] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  521.562267][ T5877] usb 5-1: 0:2 : does not exist
[  521.570062][  T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  521.597772][  T797] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  521.610185][  T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.619049][  T797] usb 2-1: Product: syz
[  521.623247][  T797] usb 2-1: Manufacturer: syz
[  521.628215][  T797] usb 2-1: SerialNumber: syz
[  521.640598][  T797] usb 2-1: config 0 descriptor??
[  521.648691][T14805] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  521.667926][  T797] usb 2-1: ucan: probing device on interface #0
[  521.675387][  T797] usb 2-1: ucan: invalid in_ep MaxPacketSize
[  521.686039][  T797] usb 2-1: ucan: probe failed; try to update the device firmware
[  521.794991][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  521.823262][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  521.852140][   T10] usb 3-1: USB disconnect, device number 60
[  521.888323][ T5938] usb 2-1: USB disconnect, device number 82
[  522.025467][  T797] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  522.214525][  T797] usb 6-1: Using ep0 maxpacket: 32
[  522.221967][  T797] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  522.238119][  T797] usb 6-1: config 0 has no interface number 0
[  522.255797][  T797] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  522.265511][  T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.273570][  T797] usb 6-1: Product: syz
[  522.278129][  T797] usb 6-1: Manufacturer: syz
[  522.282762][  T797] usb 6-1: SerialNumber: syz
[  522.294916][  T797] usb 6-1: config 0 descriptor??
[  522.304798][  T797] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  522.454567][ T5907] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  522.508233][  T797] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  522.521702][  T797] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  522.604402][ T5907] usb 3-1: device descriptor read/64, error -71
[  522.616822][T14944] input: syz0 as /devices/virtual/input/input32
[  522.874447][ T5907] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  522.901376][ T5877] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  522.922639][ T5877] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  523.064581][ T5907] usb 3-1: device descriptor read/64, error -71
[  523.093346][ T5877] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  523.101673][   T30] kauditd_printk_skb: 121 callbacks suppressed
[  523.101697][   T30] audit: type=1326 audit(1769953075.780:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.148355][ T5877] usb 5-1: USB disconnect, device number 69
[  523.168927][   T30] audit: type=1326 audit(1769953075.780:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.191714][ T5907] usb usb3-port1: attempt power cycle
[  523.377597][   T30] audit: type=1326 audit(1769953075.820:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.411915][   T30] audit: type=1326 audit(1769953075.820:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.451776][   T30] audit: type=1326 audit(1769953075.820:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.540689][   T30] audit: type=1326 audit(1769953075.820:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.591303][   T30] audit: type=1326 audit(1769953075.820:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.622589][ T5907] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  523.682579][ T5907] usb 3-1: device descriptor read/8, error -71
[  523.702647][   T30] audit: type=1326 audit(1769953075.820:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.727444][   T30] audit: type=1326 audit(1769953075.820:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.750183][   T30] audit: type=1326 audit(1769953075.820:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14954 comm="syz.4.2613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e979aeb9 code=0x7ffc0000
[  523.924362][ T5907] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  523.997982][ T5907] usb 3-1: device descriptor read/8, error -71
[  524.117359][ T5907] usb usb3-port1: unable to enumerate USB device
[  524.796897][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  524.797930][   T10] usb 6-1: USB disconnect, device number 57
[  524.825914][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  524.847388][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  524.866559][   T10] quatech2 6-1:0.51: device disconnected
[  525.174567][   T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  525.414988][   T10] usb 6-1: Using ep0 maxpacket: 32
[  525.436179][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  525.449720][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  525.459932][   T10] usb 6-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  525.475910][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.490627][   T10] usb 6-1: config 0 descriptor??
[  525.736254][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.762411][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.806980][   T10] smartjoyplus 0003:0925:8866.0012: unknown main item tag 0x6
[  525.819816][   T10] smartjoyplus 0003:0925:8866.0012: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.5-1/input0
[  525.853093][   T10] smartjoyplus 0003:0925:8866.0012: no output reports found
[  525.989742][ T5907] usb 6-1: USB disconnect, device number 58
[  526.037791][T15043] fido_id[15043]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  526.142759][T15058] netlink: 'syz.4.2624': attribute type 9 has an invalid length.
[  526.152040][T15058] netlink: 'syz.4.2624': attribute type 11 has an invalid length.
[  526.174607][ T5877] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[  526.192651][T15058] netlink: 'syz.4.2624': attribute type 12 has an invalid length.
[  526.201830][T15058] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2624'.
[  526.211632][T15058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2624'.
[  526.304071][T15065] FAULT_INJECTION: forcing a failure.
[  526.304071][T15065] name failslab, interval 1, probability 0, space 0, times 0
[  526.318612][T15065] CPU: 1 UID: 0 PID: 15065 Comm: syz.1.2626 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  526.318641][T15065] Tainted: [L]=SOFTLOCKUP
[  526.318647][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  526.318659][T15065] Call Trace:
[  526.318666][T15065]  <TASK>
[  526.318674][T15065]  dump_stack_lvl+0xe8/0x150
[  526.318700][T15065]  should_fail_ex+0x412/0x560
[  526.318725][T15065]  should_failslab+0xa8/0x100
[  526.318746][T15065]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  526.318770][T15065]  ? __alloc_skb+0x193/0x390
[  526.318789][T15065]  ? __alloc_skb+0x1d7/0x390
[  526.318806][T15065]  ? __local_bh_enable_ip+0xd0/0x130
[  526.318823][T15065]  ? __alloc_skb+0x193/0x390
[  526.318842][T15065]  __alloc_skb+0x1d7/0x390
[  526.318865][T15065]  netlink_sendmsg+0x5d4/0xb40
[  526.318891][T15065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.318913][T15065]  ? aa_sock_msg_perm+0xf1/0x1b0
[  526.318945][T15065]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  526.318965][T15065]  ? __pfx_netlink_sendmsg+0x10/0x10
[  526.318982][T15065]  ____sys_sendmsg+0xa68/0xad0
[  526.319003][T15065]  ? __might_fault+0xaf/0x130
[  526.319032][T15065]  ? __pfx_____sys_sendmsg+0x10/0x10
[  526.319061][T15065]  ? import_iovec+0x73/0xa0
[  526.319086][T15065]  ___sys_sendmsg+0x2a5/0x360
[  526.319106][T15065]  ? __lock_acquire+0x6b5/0x2cf0
[  526.319131][T15065]  ? __pfx____sys_sendmsg+0x10/0x10
[  526.319182][T15065]  ? __fget_files+0x2a/0x420
[  526.319199][T15065]  ? __fget_files+0x3a0/0x420
[  526.319227][T15065]  __x64_sys_sendmsg+0x1bd/0x2a0
[  526.319250][T15065]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  526.319279][T15065]  ? __pfx_ksys_write+0x10/0x10
[  526.319312][T15065]  do_syscall_64+0xe2/0xf80
[  526.319330][T15065]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.319346][T15065]  ? trace_irq_disable+0x37/0x100
[  526.319363][T15065]  ? clear_bhb_loop+0x60/0xb0
[  526.319383][T15065]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  526.319400][T15065] RIP: 0033:0x7f450279aeb9
[  526.319416][T15065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  526.319430][T15065] RSP: 002b:00007f450364d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  526.319449][T15065] RAX: ffffffffffffffda RBX: 00007f4502a15fa0 RCX: 00007f450279aeb9
[  526.319463][T15065] RDX: 0000000020000050 RSI: 0000200000000300 RDI: 0000000000000003
[  526.319475][T15065] RBP: 00007f450364d090 R08: 0000000000000000 R09: 0000000000000000
[  526.319486][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  526.319497][T15065] R13: 00007f4502a16038 R14: 00007f4502a15fa0 R15: 00007f4502b3fa48
[  526.319525][T15065]  </TASK>
[  526.599617][ T5877] usb 3-1: unable to get BOS descriptor or descriptor too short
[  526.608202][ T5877] usb 3-1: not running at top speed; connect to a high speed hub
[  526.616937][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.627567][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.645909][ T5877] usb 3-1: string descriptor 0 read error: -22
[  526.652261][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  526.661661][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.678432][ T5877] usb 3-1: 0:2 : does not exist
[  527.024531][ T5938] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  527.187657][ T5938] usb 2-1: Using ep0 maxpacket: 8
[  527.195961][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  527.203563][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  527.217344][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  527.231202][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  527.242649][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  527.253943][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  527.261484][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  527.274104][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  527.286444][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  527.297819][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  527.365955][ T5938] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[  527.373721][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  527.386167][ T5938] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  527.398454][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  527.409915][ T5938] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  527.423683][ T5938] usb 2-1: string descriptor 0 read error: -22
[  527.431040][ T5938] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  527.440360][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.459164][ T5938] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  527.670102][ T5938] usb 2-1: USB disconnect, device number 83
[  528.027924][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2640'.
[  528.061832][ T5877] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  528.073551][ T5877] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  528.148491][ T5877] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  528.174735][ T5877] usb 3-1: USB disconnect, device number 65
[  528.685200][T15172] netlink: 'syz.4.2641': attribute type 10 has an invalid length.
[  528.693100][T15172] ipvlan1: entered promiscuous mode
[  528.711679][T15172] ipvlan1: left allmulticast mode
[  528.725696][T15172] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up
[  528.749247][T15171] vlan3: entered promiscuous mode
[  529.317497][T15193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2650'.
[  529.780286][T15198] Cannot find del_set index 4 as target
[  530.029604][T15211] FAULT_INJECTION: forcing a failure.
[  530.029604][T15211] name failslab, interval 1, probability 0, space 0, times 0
[  530.142157][T15211] CPU: 1 UID: 0 PID: 15211 Comm: syz.5.2654 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.142187][T15211] Tainted: [L]=SOFTLOCKUP
[  530.142194][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  530.142203][T15211] Call Trace:
[  530.142210][T15211]  <TASK>
[  530.142218][T15211]  dump_stack_lvl+0xe8/0x150
[  530.142245][T15211]  should_fail_ex+0x412/0x560
[  530.142269][T15211]  should_failslab+0xa8/0x100
[  530.142288][T15211]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  530.142311][T15211]  ? __alloc_skb+0x193/0x390
[  530.142328][T15211]  ? __alloc_skb+0x1d7/0x390
[  530.142344][T15211]  ? __local_bh_enable_ip+0xd0/0x130
[  530.142359][T15211]  ? __alloc_skb+0x193/0x390
[  530.142377][T15211]  __alloc_skb+0x1d7/0x390
[  530.142398][T15211]  netlink_sendmsg+0x5d4/0xb40
[  530.142424][T15211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.142445][T15211]  ? aa_sock_msg_perm+0xf1/0x1b0
[  530.142466][T15211]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  530.142489][T15211]  ? __pfx_netlink_sendmsg+0x10/0x10
[  530.142506][T15211]  ____sys_sendmsg+0xa68/0xad0
[  530.142528][T15211]  ? __might_fault+0xaf/0x130
[  530.142556][T15211]  ? __pfx_____sys_sendmsg+0x10/0x10
[  530.142595][T15211]  ? import_iovec+0x73/0xa0
[  530.142621][T15211]  ___sys_sendmsg+0x2a5/0x360
[  530.142640][T15211]  ? __lock_acquire+0x6b5/0x2cf0
[  530.142667][T15211]  ? __pfx____sys_sendmsg+0x10/0x10
[  530.142720][T15211]  ? __fget_files+0x2a/0x420
[  530.142738][T15211]  ? __fget_files+0x3a0/0x420
[  530.142765][T15211]  __x64_sys_sendmsg+0x1bd/0x2a0
[  530.142789][T15211]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  530.142817][T15211]  ? __pfx_ksys_write+0x10/0x10
[  530.142850][T15211]  do_syscall_64+0xe2/0xf80
[  530.142869][T15211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.142886][T15211]  ? trace_irq_disable+0x37/0x100
[  530.142902][T15211]  ? clear_bhb_loop+0x60/0xb0
[  530.142923][T15211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.142940][T15211] RIP: 0033:0x7fea4f39aeb9
[  530.142957][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  530.142973][T15211] RSP: 002b:00007fea50256028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  530.142993][T15211] RAX: ffffffffffffffda RBX: 00007fea4f615fa0 RCX: 00007fea4f39aeb9
[  530.143006][T15211] RDX: 0000000020000050 RSI: 00002000000002c0 RDI: 0000000000000003
[  530.143018][T15211] RBP: 00007fea50256090 R08: 0000000000000000 R09: 0000000000000000
[  530.143030][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.143041][T15211] R13: 00007fea4f616038 R14: 00007fea4f615fa0 R15: 00007fea4f73fa48
[  530.143069][T15211]  </TASK>
[  530.574424][ T5907] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  530.574915][T15222] FAULT_INJECTION: forcing a failure.
[  530.574915][T15222] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.756363][T15222] CPU: 1 UID: 0 PID: 15222 Comm: syz.5.2657 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  530.756393][T15222] Tainted: [L]=SOFTLOCKUP
[  530.756401][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  530.756412][T15222] Call Trace:
[  530.756420][T15222]  <TASK>
[  530.756428][T15222]  dump_stack_lvl+0xe8/0x150
[  530.756456][T15222]  should_fail_ex+0x412/0x560
[  530.756490][T15222]  _copy_to_user+0x31/0xb0
[  530.756517][T15222]  simple_read_from_buffer+0xe1/0x170
[  530.756541][T15222]  proc_fail_nth_read+0x1bb/0x230
[  530.756568][T15222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.756594][T15222]  ? rw_verify_area+0x2a6/0x4d0
[  530.756616][T15222]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  530.756640][T15222]  vfs_read+0x20c/0xa70
[  530.756661][T15222]  ? fdget_pos+0x246/0x320
[  530.756684][T15222]  ? __pfx___mutex_lock+0x10/0x10
[  530.756704][T15222]  ? __pfx_vfs_read+0x10/0x10
[  530.756727][T15222]  ? __fget_files+0x2a/0x420
[  530.756751][T15222]  ? __fget_files+0x3a0/0x420
[  530.756768][T15222]  ? __fget_files+0x2a/0x420
[  530.756795][T15222]  ksys_read+0x150/0x270
[  530.756820][T15222]  ? __pfx_ksys_read+0x10/0x10
[  530.756841][T15222]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  530.756874][T15222]  do_syscall_64+0xe2/0xf80
[  530.756893][T15222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.756910][T15222]  ? trace_irq_disable+0x37/0x100
[  530.756928][T15222]  ? clear_bhb_loop+0x60/0xb0
[  530.756948][T15222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.756966][T15222] RIP: 0033:0x7fea4f35b78e
[  530.756982][T15222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  530.756997][T15222] RSP: 002b:00007fea50255fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  530.757017][T15222] RAX: ffffffffffffffda RBX: 00007fea502566c0 RCX: 00007fea4f35b78e
[  530.757030][T15222] RDX: 000000000000000f RSI: 00007fea502560a0 RDI: 0000000000000004
[  530.757042][T15222] RBP: 00007fea50256090 R08: 0000000000000000 R09: 0000000000000000
[  530.757054][T15222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.757065][T15222] R13: 00007fea4f616038 R14: 00007fea4f615fa0 R15: 00007fea4f73fa48
[  530.757095][T15222]  </TASK>
[  531.233759][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short
[  531.242072][ T5907] usb 2-1: not running at top speed; connect to a high speed hub
[  531.251110][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  531.261388][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  531.272979][ T5907] usb 2-1: string descriptor 0 read error: -22
[  531.280068][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  531.289176][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.305953][ T5907] usb 2-1: 0:2 : does not exist
[  531.330469][T15234] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2660'.
[  531.410820][T15238] syzkaller0: entered promiscuous mode
[  531.416810][T15238] syzkaller0: entered allmulticast mode
[  531.473588][T15238] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  531.517093][ T5907] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  531.524691][T15237] tipc: Resetting bearer <eth:syzkaller0>
[  531.565795][ T5907] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  531.599257][ T5907] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  531.610116][T15237] tipc: Disabling bearer <eth:syzkaller0>
[  531.618411][ T5907] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  531.720396][ T5907] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  531.756830][ T5907] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  531.831589][ T5907] usb 2-1: USB disconnect, device number 84
[  532.115467][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'.
[  533.278060][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  533.278078][   T30] audit: type=1800 audit(1769953085.920:921): pid=15301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2673" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  533.349516][   T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  533.368334][T15317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2677'.
[  533.584371][   T10] usb 2-1: Using ep0 maxpacket: 16
[  533.593501][   T10] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  533.603286][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.622184][   T10] usb 2-1: Product: syz
[  533.632317][   T10] usb 2-1: Manufacturer: syz
[  533.642462][   T10] usb 2-1: SerialNumber: syz
[  533.883777][   T10] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  533.907085][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  533.928097][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  533.936749][   T10] usb 2-1: media controller created
[  533.971593][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  534.089393][   T10] zl10353_read_register: readreg error (reg=127, ret==-32)
[  534.446664][T15398] ------------[ cut here ]------------
[  534.452406][T15398] usb 2-1: BOGUS control dir, pipe 80005580 doesn't match bRequestType c0
[  534.461058][T15398] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.1.2674/15398
[  534.471650][T15398] Modules linked in:
[  534.475867][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.1.2674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  534.487169][T15398] Tainted: [L]=SOFTLOCKUP
[  534.491500][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  534.501681][T15398] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[  534.507775][T15398] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[  534.527444][T15398] RSP: 0018:ffffc9000f5c7608 EFLAGS: 00010246
[  534.533582][T15398] RAX: 0000000000000000 RBX: ffff888029867d00 RCX: 0000000080005580
[  534.541975][T15398] RDX: ffff8880321845a0 RSI: ffffffff8c5dcce0 RDI: ffffffff8ffc2fa0
[  534.550422][T15398] RBP: 1ffff11009bad4e8 R08: 00000000000000c0 R09: 0000000000000000
[  534.558666][   T78] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  534.568631][T15398] R10: ffffc9000f5c7700 R11: fffff52001eb8eec R12: ffff88807d8d2100
[  534.577048][T15398] R13: ffff88804dd6a740 R14: 0000000080005580 R15: ffff8880321845a0
[  534.585645][T15398] FS:  00007f450362c6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  534.594672][T15398] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  534.601286][T15398] CR2: 00007f450362bff8 CR3: 0000000077204000 CR4: 00000000003526f0
[  534.609330][T15398] Call Trace:
[  534.612641][T15398]  <TASK>
[  534.615628][T15398]  ? __init_swait_queue_head+0xa9/0x150
[  534.621194][T15398]  usb_start_wait_urb+0x12b/0x510
[  534.626273][T15398]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  534.631857][T15398]  usb_control_msg+0x232/0x3e0
[  534.636667][T15398]  gl861_ctrl_msg+0x207/0x420
[  534.641453][T15398]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  534.646709][T15398]  ? cpu_rmap_update+0x270/0x970
[  534.651753][T15398]  gl861_i2c_master_xfer+0x439/0x6a0
[  534.657073][T15398]  ? __se_sys_ioctl+0x47/0x170
[  534.661862][T15398]  __i2c_transfer+0x79a/0x1ee0
[  534.666778][T15398]  ? __lock_acquire+0x6b5/0x2cf0
[  534.671737][T15398]  __i2c_smbus_xfer+0xfca/0x1e40
[  534.676732][T15398]  ? __pfx___i2c_smbus_xfer+0x10/0x10
[  534.682135][T15398]  ? lockdep_hardirqs_on+0x7a/0x110
[  534.687389][T15398]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  534.693214][T15398]  ? rt_mutex_lock_nested+0x15c/0x1e0
[  534.698671][T15398]  i2c_smbus_xfer+0x1f4/0x310
[  534.703366][T15398]  i2cdev_ioctl_smbus+0x1e7/0x730
[  534.708460][T15398]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[  534.714040][T15398]  i2cdev_ioctl+0x615/0x880
[  534.714334][   T78] usb 5-1: Using ep0 maxpacket: 8
[  534.718603][T15398]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  534.728587][T15398]  ? __fget_files+0x2a/0x420
[  534.733211][T15398]  ? __fget_files+0x3a0/0x420
[  534.734700][   T78] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  534.737948][T15398]  ? bpf_lsm_file_ioctl+0x9/0x20
[  534.749421][   T78] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  534.752929][T15398]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  534.752962][T15398]  __se_sys_ioctl+0xfc/0x170
[  534.763362][   T78] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.767138][T15398]  do_syscall_64+0xe2/0xf80
[  534.767166][T15398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.767187][T15398]  ? trace_irq_disable+0x37/0x100
[  534.767209][T15398]  ? clear_bhb_loop+0x60/0xb0
[  534.767234][T15398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.767256][T15398] RIP: 0033:0x7f450279aeb9
[  534.767275][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  534.767293][T15398] RSP: 002b:00007f450362c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  534.767317][T15398] RAX: ffffffffffffffda RBX: 00007f4502a16090 RCX: 00007f450279aeb9
[  534.778309][   T78] usb 5-1: config 0 descriptor??
[  534.779903][T15398] RDX: 00002000000002c0 RSI: 0000000000000720 RDI: 0000000000000004
[  534.799639][   T78] gspca_main: vc032x-2.14.0 probing 046d:0892
[  534.800157][T15398] RBP: 00007f4502808c1f R08: 0000000000000000 R09: 0000000000000000
[  534.874085][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.882139][T15398] R13: 00007f4502a16128 R14: 00007f4502a16090 R15: 00007f4502b3fa48
[  534.890160][T15398]  </TASK>
[  534.893186][T15398] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  534.900459][T15398] CPU: 0 UID: 0 PID: 15398 Comm: syz.1.2674 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  534.911393][T15398] Tainted: [L]=SOFTLOCKUP
[  534.915699][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  534.925742][T15398] Call Trace:
[  534.929008][T15398]  <TASK>
[  534.931946][T15398]  vpanic+0x1e0/0x670
[  534.935969][T15398]  panic+0xc5/0xd0
[  534.939680][T15398]  ? __pfx_panic+0x10/0x10
[  534.944099][T15398]  __warn+0x315/0x4a0
[  534.948079][T15398]  ? usb_submit_urb+0x1052/0x18b0
[  534.953100][T15398]  ? usb_submit_urb+0x1052/0x18b0
[  534.958117][T15398]  __report_bug+0x29a/0x540
[  534.962622][T15398]  ? usb_submit_urb+0x1052/0x18b0
[  534.967638][T15398]  ? __pfx___report_bug+0x10/0x10
[  534.972657][T15398]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  534.978461][T15398]  ? lockdep_hardirqs_on+0x7a/0x110
[  534.983651][T15398]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  534.989455][T15398]  ? stack_depot_save_flags+0x3f3/0x810
[  534.995007][T15398]  report_bug_entry+0x19a/0x290
[  534.999854][T15398]  ? usb_submit_urb+0x1114/0x18b0
[  535.004867][T15398]  ? usb_submit_urb+0x1119/0x18b0
[  535.009880][T15398]  handle_bug+0xca/0x200
[  535.014119][T15398]  exc_invalid_op+0x1a/0x50
[  535.018611][T15398]  asm_exc_invalid_op+0x1a/0x20
[  535.023448][T15398] RIP: 0010:usb_submit_urb+0x1114/0x18b0
[  535.029068][T15398] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9
[  535.048663][T15398] RSP: 0018:ffffc9000f5c7608 EFLAGS: 00010246
[  535.054724][T15398] RAX: 0000000000000000 RBX: ffff888029867d00 RCX: 0000000080005580
[  535.062682][T15398] RDX: ffff8880321845a0 RSI: ffffffff8c5dcce0 RDI: ffffffff8ffc2fa0
[  535.070646][T15398] RBP: 1ffff11009bad4e8 R08: 00000000000000c0 R09: 0000000000000000
[  535.078614][T15398] R10: ffffc9000f5c7700 R11: fffff52001eb8eec R12: ffff88807d8d2100
[  535.086603][T15398] R13: ffff88804dd6a740 R14: 0000000080005580 R15: ffff8880321845a0
[  535.094582][T15398]  ? usb_submit_urb+0x10a3/0x18b0
[  535.099605][T15398]  ? __init_swait_queue_head+0xa9/0x150
[  535.105142][T15398]  usb_start_wait_urb+0x12b/0x510
[  535.110161][T15398]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  535.115714][T15398]  usb_control_msg+0x232/0x3e0
[  535.120478][T15398]  gl861_ctrl_msg+0x207/0x420
[  535.125153][T15398]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  535.130342][T15398]  ? cpu_rmap_update+0x270/0x970
[  535.135286][T15398]  gl861_i2c_master_xfer+0x439/0x6a0
[  535.140560][T15398]  ? __se_sys_ioctl+0x47/0x170
[  535.145331][T15398]  __i2c_transfer+0x79a/0x1ee0
[  535.150107][T15398]  ? __lock_acquire+0x6b5/0x2cf0
[  535.155045][T15398]  __i2c_smbus_xfer+0xfca/0x1e40
[  535.160000][T15398]  ? __pfx___i2c_smbus_xfer+0x10/0x10
[  535.165375][T15398]  ? lockdep_hardirqs_on+0x7a/0x110
[  535.170564][T15398]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  535.176367][T15398]  ? rt_mutex_lock_nested+0x15c/0x1e0
[  535.181736][T15398]  i2c_smbus_xfer+0x1f4/0x310
[  535.186407][T15398]  i2cdev_ioctl_smbus+0x1e7/0x730
[  535.191431][T15398]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[  535.196981][T15398]  i2cdev_ioctl+0x615/0x880
[  535.201488][T15398]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  535.206510][T15398]  ? __fget_files+0x2a/0x420
[  535.211100][T15398]  ? __fget_files+0x3a0/0x420
[  535.215788][T15398]  ? bpf_lsm_file_ioctl+0x9/0x20
[  535.220718][T15398]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  535.225739][T15398]  __se_sys_ioctl+0xfc/0x170
[  535.230327][T15398]  do_syscall_64+0xe2/0xf80
[  535.234823][T15398]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.240876][T15398]  ? trace_irq_disable+0x37/0x100
[  535.245888][T15398]  ? clear_bhb_loop+0x60/0xb0
[  535.250556][T15398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.256440][T15398] RIP: 0033:0x7f450279aeb9
[  535.260847][T15398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.280442][T15398] RSP: 002b:00007f450362c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  535.288849][T15398] RAX: ffffffffffffffda RBX: 00007f4502a16090 RCX: 00007f450279aeb9
[  535.296812][T15398] RDX: 00002000000002c0 RSI: 0000000000000720 RDI: 0000000000000004
[  535.304771][T15398] RBP: 00007f4502808c1f R08: 0000000000000000 R09: 0000000000000000
[  535.312734][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.320693][T15398] R13: 00007f4502a16128 R14: 00007f4502a16090 R15: 00007f4502b3fa48
[  535.328667][T15398]  </TASK>
[  535.332029][T15398] Kernel Offset: disabled
[  535.336339][T15398] Rebooting in 86400 seconds..