last executing test programs:

13.084251929s ago: executing program 3 (id=1403):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0xb3b57418ccfbfe66, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

12.934585181s ago: executing program 3 (id=1405):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xe4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'ftp-20000\x00'}, @CTA_EXPECT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0xe4}, 0x1, 0x0, 0x0, 0x801}, 0x444)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x28, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x2093}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x20000000)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
get_mempolicy(&(0x7f0000000500), &(0x7f0000000540), 0xc3, &(0x7f0000ffd000/0x2000)=nil, 0x4)
setregid(0xffffffffffffffff, r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="1400050000000400000a39de9d"], 0x14}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)

12.8238802s ago: executing program 3 (id=1406):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0xb3b57418ccfbfe66, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_io_uring_setup(0x57ac, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x1, 0x2b3}, &(0x7f0000000080), &(0x7f0000ff4000))
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48)
syz_io_uring_setup(0x4409, &(0x7f0000000000)={0x0, 0x44ba, 0x1001, 0x1, 0x2fa}, &(0x7f0000000080), &(0x7f00000000c0))
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000500)=0x40000000, 0x4)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x85b4, 0x301202)

9.777776118s ago: executing program 3 (id=1418):
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1})
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
accept4(r4, 0x0, 0x0, 0x0)

8.283407925s ago: executing program 1 (id=1421):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00')
symlinkat(0x0, 0xffffffffffffffff, 0x0)
write$P9_RWSTAT(r2, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80)
setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x0, 0x1}, {0x3}}, {{0x4, 0x0, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x4}, {0x2}}, {{0x3, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x1}, {0x4, 0x0, 0x1}}, {{}, {0x1, 0x1}}], 0x38)

7.861168141s ago: executing program 3 (id=1424):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000e00)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000200)={0x0, 0xd, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "6bd15621b670ced631347d7c55a6068e5f10c517dda8769c226882fb9bade23ec7d432bdaf5057150cb6d661484c0c"}})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/clear_refs\x00', 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000140)={0x1, 0x8000000000000001})
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41}}], 0x20, 0x40018}, 0x94)

7.021932963s ago: executing program 1 (id=1428):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102b32d4320560830ac0ec40f0203010902120409045ae0f705bac4b1c047bb"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000300)={0x20071026}, 0x0)
r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000240)={0x6, @raw_data="9e4a46f0d0560d03b50b7f5f674c92ed2265230f2016609c4936903019a99864d2e08b5901e688591db8be980c7699265bef10d5b7ff0e5ba2b6c8f6d7247284a8f53f66146d47dac11dde014172fedf5191eda16d5806201a4daa88d165e2eeac25e65e81cc107fda24c463faad5f2927e58505c938db3516a1aeae951f7e0061a209b46f344c7cde1ceb294b40c39be4d76db9d688914b184926f840ed84238bc96e199186bc5d8bc79e364fd7cef67dcaa3dc495166ce1525dd074a19f03ebfd1409a134faab2"})
lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0)
recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000640)=@nfc, 0x80, 0x0}, 0x2}, {{&(0x7f0000000980)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/228, 0xe4}], 0x1, &(0x7f0000000b40)=""/30, 0x1e}, 0x5c1a}], 0x2, 0x20, &(0x7f0000000c00))
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000100)={0x20, 0xc, 0x45, {0x45, 0x7, "c86604e83de20de1ca8f2802a8c6db56c63438818c370bdb4f8fcf495d95628cf49c414af72c22858b6dc613378e39a5a1608ab28802fa3fa572522feb28e5dba568ee"}}, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x19, {[@local=@item_012={0x2, 0x2, 0x0, "e7ea"}, @local=@item_012={0x1, 0x2, 0x8, 'R'}, @main=@item_4={0x3, 0x0, 0xb, "0471a05b"}, @local=@item_4={0x3, 0x2, 0x7, "3104850b"}, @main=@item_4={0x3, 0x0, 0x8, "b1140c71"}, @global=@item_4={0x3, 0x1, 0x6, "8ef2a06b"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2b, 0x6, 0x1, {0x22, 0x98d}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x40, 0x10, 0x83, "0f715af9011b84594999f2c23f811953b89e39f6349a279aee40e3a53e8552331c61093b43f093d87bc6634c81df6f74433334ceb8161216f65b3415049a87867e9bcd3bf7a2eef32087c10cebc8fc585487393bd0c0a849db0c4d8242fbdcb286606d5b26fcf8930ad77c509caf56d471251d64aac58b7e0794fff5b1fc6c83e70c51"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000580)={0x20, 0x1, 0x7, "bedf5c42bb5dc2"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xf}})

6.082321398s ago: executing program 4 (id=1431):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x0, 0xfffffffe}, 0x4}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="923c78445499f0a36d8b12d496df67118bacc9adddda1c32630764452b3c6eb5cb03a39eb6dcea1c054498419ed1db1bc40f37f769b92cdc873bdb69b349242a8ac5988d7b6dfa0e0285b8789f136840e92ff8299e9b813d72122fa4c5b77786556443020bc1346c4b4be9603a15c42c5ed2c3395983b8e0e89a823bc7005d62f9b319103a360d89", 0x88}, {&(0x7f0000000180)="bfb1c56e92a4f918342ab6174c21f2bac0ab33f2c248f62baa18a577c1", 0x1d}, {&(0x7f00000001c0)="c6d47ec792c066ed871d30f2a684a64ef57e3e698ef8165795e7c51028ebda4e96e9835ea12a4712", 0x28}, {&(0x7f00000003c0)="0980d436d73f2350bbb066236b7fa0302ebb428a3d3b47df37fd300270b943b121f33c2d10404b7a4c34f1e9798bc1149564dc212efbbccaf8d1d455c2c12e7813550dc0251ccb460236f38d5d373767c90804417f3d81ae8605775e1be256d57911e4b3723165b21b13fd4334531ab77321c790114ee565ab4a30f8ab698a3b0baa25d7e24e6a040eb57f01bd1fbd3dd96ee8ef401ef877d9e440aa967a327b88c52177b872d2548430a6ac625579c31793133d046058a55cf2a61e60f2ac0afe", 0xc1}, {&(0x7f0000000200)="93e9f373703f7d0eef6dc695bbb9817e7700d3d89b87c556ffe691670b9141467f17e8e976751fd067b8b29edce12bdb8a2223d53873f48d37f187e103127f2366b444b1e440f2d0714d25b1131d7c27b0e5007cf1099fe8942cc8ceb6b6b915280755364c11094541a56d3157859c649b11d326684c16a42f7f66289253e0b29d4d1980f23707107800c381b1af0bc0748e2c333b86c024be361e8c68376fbe05214674cc9736b82031e5a130ddb3fffa8afac3aefd8e", 0xb7}], 0x5, 0x0, 0x0, 0x40040}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
mkdir(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES64=r0], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x87}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000500)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="15c34fa832a9f2b97b8cbe4bd1b71137573ebda1621b45cf40443fa4d5545ae9f458d055b3403008f0055e9a6554981cecb5610739566650cf50eea32c32cc6d12129c43ec2077adc42a09342a58210871f88801de59eca382076e2bd6012e6c88acfe8d88c014158b7103072770cb80e2b1bb56ffbe0d8e69bcf5ef23c385374da98f7c4aa7dd3c02128b79eb4230949b4d8267a0a0527766bdb8707dd3a7ef2b961cf81454ed"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
capset(0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r8 = socket(0xb, 0x803, 0x80000)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x24044800)
syz_open_dev$sg(&(0x7f0000000300), 0x5, 0xa0102)

5.598949437s ago: executing program 0 (id=1432):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[]) (async)
getrandom(&(0x7f0000000000)=""/190, 0xbe, 0x3) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

5.416012132s ago: executing program 4 (id=1433):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r3 = syz_open_dev$dmmidi(0x0, 0x2, 0x8901)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9}, 0x94)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8)
mmap(&(0x7f000030f000/0x1000)=nil, 0x1000, 0x0, 0x97052, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f00000001c0))
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioprio_get$pid(0x2, r5)
fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="6f011100000000000000"])
migrate_pages(0x0, 0xc, &(0x7f00000002c0)=0x7fffffff, &(0x7f0000000300)=0x8)
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x4})
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x0)

5.018327963s ago: executing program 2 (id=1434):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
dup(r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
preadv(r1, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0)
tkill(0x0, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="8d3cb67941e6fda6539805c4feb2fd00a0901dddc03db27fc4a2b0ffb61f58ee77a54ad80e04ebbd6b466dd3b061990f8a2868713f9606b51ee0ed933de0601c56cb9d3d30110a73c102ef97ba8cb1653d093a"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300)
r3 = fsopen(&(0x7f0000000100)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0)

4.877174445s ago: executing program 1 (id=1435):
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x10038ab, 0x80, 0xfffffffe, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
getpeername(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x56b91000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r3 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
readv(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000307010004000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8090)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="c40100001700000428bd7000fddbdf25fe80000000000000000000000000003b000004d23300000000000000000000000000000000000000ffffffff000000000000000000000000e00000010000000000000000000000004e2200004e2400060a0020802f000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ac1e0101000000000000000000000000000000000000000000000000000000014e21000b4e2400070a0020a004000000", @ANYRES32, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8}, 0x10)

4.635298047s ago: executing program 4 (id=1436):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@local, @broadcast}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}})
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/712], 0x2c8}}], 0x1, 0x810)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.221291072s ago: executing program 4 (id=1437):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@local, @broadcast, <r1=>0x0}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', <r2=>0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x150, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24040052}, 0x45)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000028010000000000002900000004000000042100000000000007100000000102099f000800000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c50401f8801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0740000000010e7a01800500000000000000090000000000000004000000000000000600000000000000040000000000000000040000000000000b0000000000000005020a7e000100c910fc0200000000000000000000000000009311e80ee304ecb784ec4655260cecea14e498000000140000000000000029000000340000000000000000000000e00000000000000029000000360000005e18000000000000ff4550d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a94b32c28f70dac435740001000001000740000000030e00ff0f0200000000000000040000000000000066090000000000000700000000000000f7ffffffffffffff0100000000000000010000000000000007100000000002070600ff7f000000000000080007180000000304030700000000000000000004ffffffffffffff01082bdb86d1ce6a20c20020000000000000002900000037000000730000000000000000010000000000001400000000000020290000000b0000000000000200000000180000000000000029000000390000000000000000000000280000000000000029000000390000003a02027000000000ff020000000000000000000000000001"], 0x2c8}}], 0x1, 0x810)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.898542943s ago: executing program 1 (id=1438):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4)
getsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0xb3b57418ccfbfe66, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

3.740085644s ago: executing program 4 (id=1439):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r7=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6})
r8 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r8, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10)
listen(r8, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0)
accept4(r8, 0x0, 0x0, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r9, &(0x7f00000000c0), 0x2, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.656129962s ago: executing program 2 (id=1440):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe800000000000000000000000000000fe8000000000000000001b4b74455c30000000000000"], 0x0)
r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x5}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0xffffffff})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000000)={0x80, 0x4, 0x4, 0xe05, 0xe3, 0x80})
write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r7, r1, 0x0)

3.564929721s ago: executing program 1 (id=1441):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
clock_gettime(0x0, &(0x7f00000002c0)={<r5=>0x0, <r6=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000240)=@abs, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/112, 0x70}, {&(0x7f00000006c0)=""/248, 0xf8}], 0x4, &(0x7f00000001c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x2, 0x40000000, &(0x7f0000000640)={r5, r6+60000000})
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1, 0x1}, 0x4)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r7)

2.64055859s ago: executing program 2 (id=1442):
r0 = socket$alg(0x26, 0x5, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000500)={@local, @broadcast, <r1=>0x0}, &(0x7f0000000540)=0xc)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', <r2=>0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x134, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x24040052}, 0x45)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r3 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/712], 0x2c8}}], 0x1, 0x810)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

2.626001536s ago: executing program 3 (id=1443):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
sendfile(r2, r2, 0x0, 0x2000fb)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
ppoll(&(0x7f00000002c0)=[{r4, 0x1046}], 0x1, 0x0, 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
socket$netlink(0x10, 0x3, 0x9)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0)
fcntl$setsig(r5, 0xa, 0x13)
fcntl$setlease(r5, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000040)=0x1, 0x4)
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
truncate(&(0x7f0000000140)='./file0\x00', 0x0)

2.367730545s ago: executing program 0 (id=1444):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f00000002c0)={0x0, "fbd78df8363b88d9c3a4cae9b29b529de5e20000000000001400", 0x3})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x2, @empty}, 0x1c)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542140002007767300000000000000000cc0f682439ac7da44f05d5cb645ec800000000002c0008802800008024000100d1732889f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b6b3651dc1e7e7475fbe9cbaf39f61dab3169252e24ea7f701045358fa75ce765cf928781"], 0x78}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000380)="772cdb1454e96363ab095e6c8a6457a859646193010a24b50364a68319f695d07f50a1aa0b1914dce43c759f45011e9074d86139a3f7788efebb944f4f07c08c7dffb75ed288bf55b5ed61ba628086656c86502ec7de6d963182ad14142d8a4464ae41a8ff8640a437de15b36f7fed34d3998b0b91a6c860bb515d63398b97d208672d50cea387f2e09b00", 0x8b}, {&(0x7f0000000440)="caf114a73210db1da97cce97cc666786a7af221f91ed4217860057735cf6926296985a40a8111a0f299393a71563723d6a811c4ae9decdc0920abb59e1a948cc1b761823f3ed0908489424f501d3a9214dc1d3e00c0b7f24bf228d11465c218423483f84a064c0d101b42ad2e7b350250512d9b5482d1bf102c1939f014dbeee034f2e980f993c15cb95ae1cb5bef8adfd8eed61c53d2e4ee9e396eb93d9421b1a5dfbf1781a79ef99fd6451414a03e57e8d03c154a655d1c651e812163567e07f6046a53d7933c1820823", 0xcb}, {&(0x7f00000001c0)="1af14ca7167e58888d71d2b23944324440a7a0fa3c19611d747e71d4b8b46578e6a9e7a765b2b481b292ba49277dba179151e82c96ab5d015bac1ea45fb49d909ed4b836133afc3cb17f1344485eb22821794ab7b6d2768a757802d7612374d467", 0x61}, {&(0x7f0000000100)="7fe704ddb0533076288080de5031eb45de301bca47dc49984a506217246bd9dee61020d6198e1a1247438d3647bbae6220451545", 0x34}, {&(0x7f0000000540)="f37dd9c0802c6e71f5099c847ee07b6075a80dd734b970718a541202288ca8b998399c1c1346a8c1f9fc9e70fb18cb11b307092207e64b32bf47658ea05283374c4641f4f245cc8071055455daae7afabdb267b5e8ce1ddc145d8211f55061eadb2dcd4f8cd4ade19df1bb7d9eb3d6b8fb96229c20b1", 0x76}, {&(0x7f00000005c0)="0fe65ffa9108ee3293fea328265fa9a0b24c3c5ddf6be936138dfad672ecc960f52ab119faee5f5bd0ca01d0d6616a44e80ded52e6041a06faf3d85f50091ba12a8c80239b3729fab228687047a5a7773dc63a237bd80553c9074b07b111296021adc6ead36a15c7ee5cc5ba66f08746ec376649b8684faddde2ef5cee", 0x7d}, {&(0x7f0000000640)="fcf3c30ae8a913aaf5bdef6ad081b133585d6583d067d9cf52e2c307cb36b1ad9f", 0x21}, {&(0x7f0000000680)="f31dbe714a7223f28ed43ef1d0e91f", 0xf}], 0x8, &(0x7f0000000c00)=[{0x80, 0x1, 0x9df, "3a59c962ad6107c5ecbb380edb2f3d7e3a73eff36c64c6ab13b467101250242c594044f250114d89a199560aa86d05df4bb19b256f288255d27c070853475b3ccb6e07a621a3f83ba9d1603de5f4dbae3719d8f786b33a8f5ef3be8037739e9cc27c5e69d0bff00839ac33b7fe"}, {0x88, 0x103, 0x555b, "a679363f2486d7962c4cb59a50903d05239f1e0dca84e75e1e5b7b259a910b25d83267ced5767e5e84c8cccd3dd5a0eb5c1b974261b63bd1f8aea7fc6d85c53173703a53c7e0006d414dfd99242f951c89d2718e0d412f8a06776db272949ba3eb28e5940258d520e45d4536c017b1cc30cf"}, {0x78, 0x10b, 0x3, "8b8b9865b12d8be54db30a4c718a8e96f13b4b12fd6ddd82f0c25601b9112818187ac566500c344962df35c4bbd6c5cd61fe72acf4f75a111a53bb5636968fec3c0fc373ffd32311eb2f8bc9ade1529fa23f7c410e6433de4f4cc91b3502e3f5db15ea"}, {0x70, 0x10b, 0x7, "3c24de91ea4d3b8df88736c5595705dd409ff6eb204d7330155a2da7c61e0b39ba6812061bba232bfc13f1a818dd7f0df8b6140e6dfd6e70ef8e8bb394d0091ab3a4a1ff4296a3b241f9680d33c2b99cb65c8815dd7761fc23c3d6"}, {0x100, 0x1f5, 0x3, "070d96be0a5e36d55b7a167087057656ef81ad31835d22c3c0328543eba1d6878ae9890d721d133a30485fe9690b406ea11d5429b4f114b9caa3d678fa80db85ccbcacdcf8cf5ad1266ed81386ac86dea5089a1a1b5bf762d94827f9a14918bb24951fa57b82c7c8d06d03066fa540bc2996f29ecde0268462049f4094eb13a388ba902ff8494185fc82a8ea7b682e968bb0538e07f13bf2d10b52698118a5758deecf5c2810a334f1e20f7a95ce3c7987d7a7e1a77696aa9f58262dbee2b1809dcf4973ddb5c170664e77f6ef9a04ba134c101929de58f3f90248aba68ac8851267cf5f670d7124d873e13265"}, {0x198, 0x116, 0xf, "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"}, {0x20, 0x111, 0x7, "fb6a516d20d06156920601b986df32"}], 0x4a8}, 0x4000)
mknod(0x0, 0x8, 0x8)
socket(0x10, 0x80000, 0x1000000)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x8000a, 0x10, 0x3ffffffe, 0x1})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r4, 0x40000000af01, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000000c0))
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000680)={0x1, 0x1, 0x0, &(0x7f00000004c0)=""/195, &(0x7f00000005c0)=""/187, 0x100000})
r6 = dup(r5)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x2002, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)

2.357888117s ago: executing program 2 (id=1445):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0118000000000000aaffc637809ac22ddb00000f0000000f00ed12bb34c627b9a4dc1c"], 0x0, 0x2a, 0x0, 0x0, 0x7ff}, 0x28)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (fail_nth: 9)

1.927067142s ago: executing program 0 (id=1446):
socket$netlink(0x10, 0x3, 0xf)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x2}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f0000002180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.515835843s ago: executing program 2 (id=1447):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_io_uring_setup(0x263f, &(0x7f0000000580)={0x0, 0x9ced, 0x186a}, 0x0, 0x0)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058000b4824ca945f64009400ff0325010ebc000b00000000008000f0fffeffe809005300fff5dd000000100001d80cf42098da03870000000000", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0x0, 0x0, 0xb}, [@tail_call, @alu={0x7, 0x1, 0x3, 0xb, 0x5, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0x2, 0x7, 0x5, 0x80, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000008ec22fbb972b23f25000000000200"/27], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x103182, 0x0)
socket(0x1, 0x1, 0x0)
ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89a0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0)
r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
setpgid(0x0, r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r7}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r8, 0x58, &(0x7f0000001500)}, 0x10)

1.435067574s ago: executing program 4 (id=1448):
r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x10038ab, 0x80, 0xfffffffe, 0x1e6}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
getpid()
getpeername(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x56b91000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0)
r3 = userfaultfd(0x80001)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
readv(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff)
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000000307010004000000000000000500000d090001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8090)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000001300)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="c40100001700000428bd7000fddbdf25fe80000000000000000000000000003b000004d23300000000000000000000000000000000000000ffffffff000000000000000000000000e00000010000000000000000000000004e2200004e2400060a0020802f000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8}, 0x10)

1.050571416s ago: executing program 0 (id=1449):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x9], 0x1c, 0x0, 0x0, [{}]}, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x20000001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x14, &(0x7f0000000340)=ANY=[], 0x0, 0x7fff, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x10, 0xfffff469}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94)
listen(0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
connect$pppl2tp(r2, 0x0, 0x0)
syz_emit_ethernet(0x4a, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24082}, 0xa800)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r3, &(0x7f0000000080), 0x12)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000700)={'bond0\x00', 0x5c00})

696.936607ms ago: executing program 0 (id=1450):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006440), r1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006480)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000006540)={0x0, 0x0, &(0x7f0000006500)={&(0x7f00000064c0)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {{0x19, 0x0, 0x300}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x7}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x24000000)

692.447005ms ago: executing program 1 (id=1451):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
dup(r0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket$igmp6(0xa, 0x3, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
preadv(r1, &(0x7f0000003380)=[{&(0x7f00000020c0)=""/168, 0xa8}], 0x1, 0xffffffc0, 0x10000)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, 0x0)
tkill(0x0, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="8d3cb67941e6fda6539805c4feb2fd00a0901dddc03db27fc4a2b0ffb61f58ee77a54ad80e04ebbd6b466dd3b061990f8a2868713f9606b51ee0ed933de0601c56cb9d3d30110a73c102ef97ba8cb1653d093a"], 0x14}], 0x1, 0x0, 0x0, 0x84}, 0x4000300)
r3 = fsopen(&(0x7f0000000100)='gfs2\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000140), 0x0)

264.002699ms ago: executing program 0 (id=1452):
syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89c, 0x400, 0x0, 0x20002fa})
r3 = socket$inet(0x2, 0x800, 0xbad1)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000300))
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0x3, @vbi={0x0, 0x400, 0x0, 0x3de6309979d131fe, [], [0xfffffffe, 0x5]}})
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1001d, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r5, &(0x7f0000000340)=[{0x6, 0xc1, 0x0, 0x0, @tick=0x40, {0x7}, {0x0, 0xfd}, @ext={0xffffffffffffffc1, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffc, {0x2}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x1}, {0x0, 0x8}, {}, @control={0x0, 0x0, 0x1}}, {0x0, 0x0, 0x1, 0x0, @time={0x1, 0x9}, {}, {0x4}, @connect={{}, {0x0, 0x5}}}, {0x5, 0x1, 0x1, 0x2, @tick=0x9, {0xac, 0x1}, {0x3, 0x7}, @result={0x8, 0x80}}], 0x8c)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000})
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r6, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042)
syz_open_dev$amidi(&(0x7f0000000040), 0x100000000000a, 0x10602)
ioctl$TCFLSH(r7, 0x400455c8, 0x4)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x32)
socket$nl_netfilter(0x10, 0x3, 0xc)
getpgrp(0xffffffffffffffff)

0s ago: executing program 2 (id=1453):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="2b00008080b63428e900"/20, @ANYRES32, @ANYBLOB="000000000001"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x806}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0)
r1 = fsopen(&(0x7f0000000100)='fusectl\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fcntl$dupfd(r3, 0x0, r3)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
r4 = msgget(0x0, 0x40)
msgctl$MSG_INFO(r4, 0xc, &(0x7f00000000c0)=""/173)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000240)={0x2, 0x0, 0x56b, 0xfffffffffffffffc})
fcntl$lock(r5, 0x24, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x7})
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback, 0x2b, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000006, 0x1010, r6, 0x6db1c000)
syz_clone(0x62000011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400000002020000052406000005240000000d240f010000000000000000000524"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)

kernel console output (not intermixed with test programs):

[  444.934260][T10511]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  444.934295][T10511]  ? __fget_files+0x20e/0x3c0
[  444.934317][T10511]  ? fput+0x9b/0xd0
[  444.934337][T10511]  ? __bpf_prog_get+0x97/0x2a0
[  444.934358][T10511]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  444.934382][T10511]  __sys_bpf+0x1035/0x4980
[  444.934406][T10511]  ? __rcu_read_unlock+0x2bc/0x550
[  444.934433][T10511]  ? __pfx___sys_bpf+0x10/0x10
[  444.934468][T10511]  ? find_held_lock+0x2b/0x80
[  444.934497][T10511]  ? find_held_lock+0x2b/0x80
[  444.934526][T10511]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  444.934562][T10511]  ? fput+0x9b/0xd0
[  444.934585][T10511]  ? ksys_write+0x1ac/0x250
[  444.934603][T10511]  ? __pfx_ksys_write+0x10/0x10
[  444.934626][T10511]  __x64_sys_bpf+0x78/0xc0
[  444.934653][T10511]  ? lockdep_hardirqs_on+0x7c/0x110
[  444.934681][T10511]  do_syscall_64+0xcd/0xfa0
[  444.934701][T10511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  444.934720][T10511] RIP: 0033:0x7f92f278f6c9
[  444.934735][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  444.934752][T10511] RSP: 002b:00007f92f3613038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  444.934771][T10511] RAX: ffffffffffffffda RBX: 00007f92f29e6090 RCX: 00007f92f278f6c9
[  444.934783][T10511] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a
[  444.934794][T10511] RBP: 00007f92f3613090 R08: 0000000000000000 R09: 0000000000000000
[  444.934806][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  444.934818][T10511] R13: 00007f92f29e6128 R14: 00007f92f29e6090 R15: 00007ffeaff06ff8
[  444.934847][T10511]  </TASK>
[  445.610649][ T1206] usb 5-1: USB disconnect, device number 57
[  446.340505][ T5824] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  446.502595][ T5824] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  446.510937][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.522289][ T5824] usb 2-1: config 0 has no interface number 0
[  446.528532][ T5824] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  446.545311][ T5824] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  446.562905][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.585514][ T5824] usb 2-1: Product: syz
[  446.594360][ T5824] usb 2-1: Manufacturer: syz
[  446.607579][ T5824] usb 2-1: SerialNumber: syz
[  446.623362][ T5824] usb 2-1: config 0 descriptor??
[  446.695832][ T5898] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  446.839815][ T5824] usb 2-1: USB disconnect, device number 48
[  446.863570][ T5898] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  446.881184][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.920685][ T5898] usb 1-1: config 0 has no interface number 0
[  446.941392][ T5898] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  446.962572][ T5898] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.982240][ T5898] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  446.992628][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.000861][ T5898] usb 1-1: Product: syz
[  447.009071][ T5898] usb 1-1: Manufacturer: syz
[  447.015300][ T5898] usb 1-1: SerialNumber: syz
[  447.115329][ T5898] usb 1-1: config 0 descriptor??
[  447.360941][   T30] kauditd_printk_skb: 120 callbacks suppressed
[  447.360957][   T30] audit: type=1400 audit(1762476314.257:1175): avc:  denied  { create } for  pid=10549 comm="syz.3.1178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  448.142093][   T48] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  448.613251][ T5898] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -32
[  448.788901][T10558] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  448.832070][   T48] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  448.841419][   T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  448.854607][   T48] usb 5-1: config 0 has no interface number 0
[  448.865060][   T48] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  448.892159][   T48] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  448.931698][T10562] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1179'.
[  448.946702][   T48] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  448.957530][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.966052][   T48] usb 5-1: Product: syz
[  448.971536][   T48] usb 5-1: Manufacturer: syz
[  448.976330][   T48] usb 5-1: SerialNumber: syz
[  449.003162][   T48] usb 5-1: config 0 descriptor??
[  449.130507][ T5824] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  449.140683][T10565] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  449.160364][ T8399] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  449.252012][   T48] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -32
[  449.583178][ T8399] usb 4-1: Using ep0 maxpacket: 16
[  449.602407][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  449.612268][ T8399] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  449.624132][ T8399] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  449.634491][ T5824] usb 2-1: not running at top speed; connect to a high speed hub
[  449.642568][ T8399] usb 4-1: config 0 interface 0 has no altsetting 0
[  449.651773][ T5824] usb 2-1: config index 0 descriptor too short (expected 1042, got 18)
[  449.662041][ T8399] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  449.677176][ T5824] usb 2-1: config 4 has an invalid descriptor of length 71, skipping remainder of the config
[  449.689149][ T8399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.698791][ T5824] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  449.712916][ T8399] usb 4-1: config 0 descriptor??
[  449.721531][ T5824] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e
[  449.731317][ T5824] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=3
[  449.744516][ T5824] usb 2-1: Product: syz
[  449.748846][ T5824] usb 2-1: Manufacturer: syz
[  449.754893][ T5824] usb 2-1: SerialNumber: syz
[  449.830328][    T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  449.890865][ T1206] usb 1-1: USB disconnect, device number 65
[  450.000668][    T9] usb 3-1: Using ep0 maxpacket: 16
[  450.022888][    T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.041817][    T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.056543][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  450.076074][    T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  450.128662][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.144538][    T9] usb 3-1: config 0 descriptor??
[  450.565055][   T48] usb 2-1: USB disconnect, device number 49
[  450.577112][   T30] audit: type=1400 audit(1762476317.667:1176): avc:  denied  { module_load } for  pid=10569 comm="syz.0.1183" path="/sys/power/wakeup_count" dev="sysfs" ino=1413 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  450.628812][T10571] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1183'.
[  450.711287][ T8399] usbhid 4-1:0.0: can't add hid device: -71
[  450.737239][ T8399] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  450.761496][ T8399] usb 4-1: USB disconnect, device number 50
[  450.839920][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  450.849776][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  450.868161][ T1206] usb 5-1: USB disconnect, device number 58
[  450.880136][    T9] usb 3-1: USB disconnect, device number 51
[  451.029993][T10577] FAULT_INJECTION: forcing a failure.
[  451.029993][T10577] name failslab, interval 1, probability 0, space 0, times 0
[  451.043411][T10577] CPU: 1 UID: 0 PID: 10577 Comm: syz.0.1186 Not tainted syzkaller #0 PREEMPT(full) 
[  451.043437][T10577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  451.043448][T10577] Call Trace:
[  451.043454][T10577]  <TASK>
[  451.043471][T10577]  dump_stack_lvl+0x16c/0x1f0
[  451.043507][T10577]  should_fail_ex+0x512/0x640
[  451.043529][T10577]  ? __kmalloc_cache_noprof+0x5f/0x780
[  451.043559][T10577]  should_failslab+0xc2/0x120
[  451.043581][T10577]  __kmalloc_cache_noprof+0x72/0x780
[  451.043609][T10577]  ? hash_ip_create+0x7c1/0x1a20
[  451.043632][T10577]  ? hash_ip_create+0x7c1/0x1a20
[  451.043649][T10577]  hash_ip_create+0x7c1/0x1a20
[  451.043667][T10577]  ? __pfx___nla_validate_parse+0x10/0x10
[  451.043697][T10577]  ? __print_lock_name+0x40/0xe0
[  451.043724][T10577]  ? __pfx_hash_ip_create+0x10/0x10
[  451.043743][T10577]  ? __nla_parse+0x40/0x60
[  451.043768][T10577]  ? __pfx_hash_ip_create+0x10/0x10
[  451.043789][T10577]  ? ip_set_create+0x7e4/0x14d0
[  451.043809][T10577]  ip_set_create+0x7e4/0x14d0
[  451.043838][T10577]  ? __pfx_ip_set_create+0x10/0x10
[  451.043883][T10577]  ? find_held_lock+0x2b/0x80
[  451.043911][T10577]  nfnetlink_rcv_msg+0x9fc/0x1200
[  451.043944][T10577]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  451.043967][T10577]  ? __lock_acquire+0x622/0x1c90
[  451.044003][T10577]  ? avc_has_perm_noaudit+0x149/0x3b0
[  451.044023][T10577]  netlink_rcv_skb+0x158/0x420
[  451.044040][T10577]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  451.044053][T10577]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  451.044076][T10577]  ? ns_capable+0xd7/0x110
[  451.044091][T10577]  nfnetlink_rcv+0x1b3/0x430
[  451.044103][T10577]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  451.044114][T10577]  ? netlink_deliver_tap+0x1ae/0xd30
[  451.044131][T10577]  netlink_unicast+0x5aa/0x870
[  451.044149][T10577]  ? __pfx_netlink_unicast+0x10/0x10
[  451.044170][T10577]  netlink_sendmsg+0x8c8/0xdd0
[  451.044188][T10577]  ? __pfx_netlink_sendmsg+0x10/0x10
[  451.044209][T10577]  ____sys_sendmsg+0xa98/0xc70
[  451.044221][T10577]  ? copy_msghdr_from_user+0x10a/0x160
[  451.044236][T10577]  ? __pfx_____sys_sendmsg+0x10/0x10
[  451.044254][T10577]  ___sys_sendmsg+0x134/0x1d0
[  451.044269][T10577]  ? __pfx____sys_sendmsg+0x10/0x10
[  451.044281][T10577]  ? __lock_acquire+0x622/0x1c90
[  451.044317][T10577]  __sys_sendmsg+0x16d/0x220
[  451.044331][T10577]  ? __pfx___sys_sendmsg+0x10/0x10
[  451.044355][T10577]  do_syscall_64+0xcd/0xfa0
[  451.044366][T10577]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  451.044378][T10577] RIP: 0033:0x7fa00618f6c9
[  451.044388][T10577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  451.044398][T10577] RSP: 002b:00007fa006f7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  451.044409][T10577] RAX: ffffffffffffffda RBX: 00007fa0063e5fa0 RCX: 00007fa00618f6c9
[  451.044417][T10577] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  451.044423][T10577] RBP: 00007fa006f7a090 R08: 0000000000000000 R09: 0000000000000000
[  451.044432][T10577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  451.044443][T10577] R13: 00007fa0063e6038 R14: 00007fa0063e5fa0 R15: 00007fff71227d08
[  451.044469][T10577]  </TASK>
[  451.622599][ T1206] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  451.820394][ T1206] usb 5-1: Using ep0 maxpacket: 32
[  451.841535][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.852850][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  452.065088][ T1206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  452.085463][ T1206] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  452.094836][ T1206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.110950][ T1206] usb 5-1: config 0 descriptor??
[  452.129670][ T1206] hub 5-1:0.0: USB hub found
[  452.253045][    T9] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  452.347092][ T1206] hub 5-1:0.0: 1 port detected
[  452.401194][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  452.497657][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  452.508214][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.670281][    T9] usb 4-1: config 0 descriptor??
[  452.698613][    T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  452.736973][   T30] audit: type=1400 audit(1762476319.827:1177): avc:  denied  { map } for  pid=10595 comm="syz.0.1192" path="/dev/net/tun" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1
[  452.795211][T10602] binder: BINDER_SET_CONTEXT_MGR already set
[  452.806979][   T30] audit: type=1400 audit(1762476319.827:1178): avc:  denied  { module_request } for  pid=10595 comm="syz.0.1192" kmod="net-pf-2-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  452.830387][T10602] binder: 10595:10602 ioctl 4018620d 200000000040 returned -16
[  452.909227][   T30] audit: type=1400 audit(1762476319.887:1179): avc:  denied  { append } for  pid=10595 comm="syz.0.1192" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  452.958594][ T1206] hub 5-1:0.0: activate --> -90
[  453.321309][    T9] hub 5-1:0.0: hub_ext_port_status failed (err = 0)
[  453.467243][   T30] audit: type=1326 audit(1762476320.487:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  453.580631][ T8409] usb 5-1: USB disconnect, device number 59
[  453.603256][   T30] audit: type=1326 audit(1762476320.487:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  453.790963][T10611] syz.0.1195: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  453.806066][   T30] audit: type=1326 audit(1762476320.487:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  453.829820][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.0.1195 Not tainted syzkaller #0 PREEMPT(full) 
[  453.829850][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  453.829864][T10611] Call Trace:
[  453.829872][T10611]  <TASK>
[  453.829880][T10611]  dump_stack_lvl+0x16c/0x1f0
[  453.829920][T10611]  warn_alloc+0x248/0x3a0
[  453.829953][T10611]  ? __pfx_warn_alloc+0x10/0x10
[  453.829982][T10611]  ? __pfx_stack_trace_save+0x10/0x10
[  453.830021][T10611]  ? kasan_save_stack+0x42/0x60
[  453.830041][T10611]  ? kasan_save_stack+0x33/0x60
[  453.830059][T10611]  ? kasan_save_track+0x14/0x30
[  453.830079][T10611]  ? xskq_create+0x52/0x1d0
[  453.830105][T10611]  ? xsk_setsockopt+0x74e/0x9a0
[  453.830128][T10611]  ? do_sock_setsockopt+0xf3/0x1d0
[  453.830162][T10611]  ? xskq_create+0xfb/0x1d0
[  453.830193][T10611]  __vmalloc_node_range_noprof+0xfbc/0x1480
[  453.830228][T10611]  ? xskq_create+0xfb/0x1d0
[  453.830258][T10611]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  453.830288][T10611]  ? xskq_create+0xfb/0x1d0
[  453.830312][T10611]  vmalloc_user_noprof+0x9e/0xe0
[  453.830337][T10611]  ? xskq_create+0xfb/0x1d0
[  453.830365][T10611]  xskq_create+0xfb/0x1d0
[  453.830394][T10611]  xsk_setsockopt+0x74e/0x9a0
[  453.830421][T10611]  ? __pfx_xsk_setsockopt+0x10/0x10
[  453.830443][T10611]  ? find_held_lock+0x2b/0x80
[  453.830473][T10611]  ? selinux_socket_setsockopt+0x6a/0x80
[  453.830508][T10611]  ? __pfx_xsk_setsockopt+0x10/0x10
[  453.830536][T10611]  do_sock_setsockopt+0xf3/0x1d0
[  453.830572][T10611]  __sys_setsockopt+0x1a0/0x230
[  453.830604][T10611]  __x64_sys_setsockopt+0xbd/0x160
[  453.830628][T10611]  ? do_syscall_64+0x91/0xfa0
[  453.830647][T10611]  ? lockdep_hardirqs_on+0x7c/0x110
[  453.830677][T10611]  do_syscall_64+0xcd/0xfa0
[  453.830722][T10611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.830745][T10611] RIP: 0033:0x7fa00618f6c9
[  453.830764][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.830784][T10611] RSP: 002b:00007fa006f7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  453.830804][T10611] RAX: ffffffffffffffda RBX: 00007fa0063e5fa0 RCX: 00007fa00618f6c9
[  453.830819][T10611] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  453.830831][T10611] RBP: 00007fa006211f91 R08: 0000000000000004 R09: 0000000000000000
[  453.830844][T10611] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  453.830856][T10611] R13: 00007fa0063e6038 R14: 00007fa0063e5fa0 R15: 00007fff71227d08
[  453.830888][T10611]  </TASK>
[  454.104467][T10611] Mem-Info:
[  454.107791][T10611] active_anon:13638 inactive_anon:0 isolated_anon:0
[  454.107791][T10611]  active_file:13366 inactive_file:42857 isolated_file:0
[  454.107791][T10611]  unevictable:2815 dirty:277 writeback:0
[  454.107791][T10611]  slab_reclaimable:7469 slab_unreclaimable:98368
[  454.107791][T10611]  mapped:36935 shmem:4227 pagetables:1330
[  454.107791][T10611]  sec_pagetables:0 bounce:0
[  454.107791][T10611]  kernel_misc_reclaimable:0
[  454.107791][T10611]  free:1307862 free_pcp:6479 free_cma:0
[  454.178547][   T30] audit: type=1326 audit(1762476320.487:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  454.210384][T10611] Node 0 active_anon:54564kB inactive_anon:0kB active_file:53292kB inactive_file:171124kB unevictable:9724kB isolated(anon):0kB isolated(file):0kB mapped:147520kB dirty:1080kB writeback:0kB shmem:15372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:13364kB pagetables:5188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  454.398455][   T30] audit: type=1326 audit(1762476320.487:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  454.424109][T10611] Node 1 active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:220kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  454.454845][   T30] audit: type=1326 audit(1762476320.487:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  454.480352][   T30] audit: type=1326 audit(1762476320.487:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.1.1196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f0b8f6c9 code=0x7ffc0000
[  454.533453][T10611] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.605099][T10611] lowmem_reserve[]: 0 2485 2487 2487 2487
[  454.611803][T10611] Node 0 DMA32 free:1316408kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54456kB inactive_anon:0kB active_file:53292kB inactive_file:171132kB unevictable:9724kB writepending:1088kB zspages:0kB present:3129332kB managed:2544856kB mlocked:8188kB bounce:0kB free_pcp:17864kB local_pcp:8864kB free_cma:0kB
[  454.646563][T10611] lowmem_reserve[]: 0 0 1 1 1
[  454.726051][ T5898] usb 4-1: USB disconnect, device number 51
[  454.769779][T10611] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  454.834457][T10611] lowmem_reserve[]: 0 0 0 0 0
[  454.839343][T10611] Node 1 Normal free:3899680kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:304kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8640kB local_pcp:3872kB free_cma:0kB
[  454.873799][T10611] lowmem_reserve[]: 0 0 0 0 0
[  454.881633][T10611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  454.896078][T10611] Node 0 DMA32: 2*4kB (ME) 48*8kB (E) 39*16kB (UM) 448*32kB (UME) 133*64kB (UME) 102*128kB (UME) 84*256kB (UME) 21*512kB (UME) 12*1024kB (UME) 7*2048kB (UME) 298*4096kB (UM) = 1316408kB
[  454.960745][T10611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  454.974332][T10611] Node 1 Normal: 214*4kB (UME) 53*8kB (UME) 42*16kB (UE) 270*32kB (UME) 87*64kB (UME) 20*128kB (UME) 2*256kB (U) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3899680kB
[  454.993083][T10611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  454.994888][T10629] openvswitch: netlink: Flow actions attr not present in new flow.
[  455.005566][T10611] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.020702][T10611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  455.023694][T10629] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1199'.
[  455.041308][T10611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  455.051812][T10611] 58911 total pagecache pages
[  455.056638][T10611] 0 pages in swap cache
[  455.061227][T10611] Free swap  = 124996kB
[  455.065601][T10611] Total swap = 124996kB
[  455.069829][T10611] 2097051 pages RAM
[  455.074155][T10611] 0 pages HighMem/MovableOnly
[  455.079136][T10611] 428747 pages reserved
[  455.083745][T10611] 0 pages cma reserved
[  455.151073][ T5898] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  455.862109][ T5898] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  455.870560][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.880898][ T5898] usb 4-1: config 0 has no interface number 0
[  455.887046][ T5898] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  455.898443][ T5898] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  455.916969][ T5898] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  455.934248][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.956282][ T5898] usb 4-1: Product: syz
[  455.967343][ T5898] usb 4-1: Manufacturer: syz
[  455.978059][ T5898] usb 4-1: SerialNumber: syz
[  456.064679][ T5898] usb 4-1: config 0 descriptor??
[  456.582822][ T5898] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -32
[  457.230518][ T5898] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  457.590439][ T5898] usb 3-1: Using ep0 maxpacket: 16
[  457.623829][T10663] bridge_slave_1: left allmulticast mode
[  457.629843][T10663] bridge_slave_1: left promiscuous mode
[  457.637914][T10663] bridge0: port 2(bridge_slave_1) entered disabled state
[  457.654412][ T5898] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  457.665238][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.674952][ T5898] usb 3-1: Product: syz
[  457.679378][ T5898] usb 3-1: Manufacturer: syz
[  457.684835][ T5898] usb 3-1: SerialNumber: syz
[  457.697428][ T5898] usb 3-1: config 0 descriptor??
[  457.714433][ T5898] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  457.756003][T10663] bridge_slave_0: left allmulticast mode
[  457.763504][T10663] bridge_slave_0: left promiscuous mode
[  457.780357][T10663] bridge0: port 1(bridge_slave_0) entered disabled state
[  457.921184][ T5824] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  458.106276][ T5898] ssu100 3-1:0.0: probe with driver ssu100 failed with error -110
[  458.132216][ T8409] usb 4-1: USB disconnect, device number 52
[  458.165053][ T5824] usb 5-1: device descriptor read/64, error -71
[  458.249302][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  458.770561][ T5824] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  458.793178][    T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  458.801965][    T9] usb 1-1: config 0 has no interface number 0
[  458.814160][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  458.823643][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.832740][    T9] usb 1-1: Product: syz
[  458.837417][    T9] usb 1-1: Manufacturer: syz
[  458.842683][    T9] usb 1-1: SerialNumber: syz
[  458.850130][    T9] usb 1-1: config 0 descriptor??
[  458.865096][    T9] yurex 1-1:0.50: Could not find endpoints
[  458.910498][ T5824] usb 5-1: device descriptor read/64, error -71
[  458.960409][ T8409] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  459.020905][ T5824] usb usb5-port1: attempt power cycle
[  459.063320][    T9] usb 1-1: USB disconnect, device number 66
[  459.065280][T10668] FAULT_INJECTION: forcing a failure.
[  459.065280][T10668] name failslab, interval 1, probability 0, space 0, times 0
[  459.083543][T10668] CPU: 1 UID: 0 PID: 10668 Comm: syz.0.1211 Not tainted syzkaller #0 PREEMPT(full) 
[  459.083570][T10668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  459.083580][T10668] Call Trace:
[  459.083587][T10668]  <TASK>
[  459.083595][T10668]  dump_stack_lvl+0x16c/0x1f0
[  459.083630][T10668]  should_fail_ex+0x512/0x640
[  459.083652][T10668]  ? __kmalloc_noprof+0xca/0x880
[  459.083681][T10668]  should_failslab+0xc2/0x120
[  459.083703][T10668]  __kmalloc_noprof+0xdd/0x880
[  459.083737][T10668]  ? kobject_get_path+0xd2/0x2a0
[  459.083758][T10668]  ? kobject_get_path+0xd2/0x2a0
[  459.083775][T10668]  kobject_get_path+0xd2/0x2a0
[  459.083797][T10668]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  459.083820][T10668]  kobject_uevent_env+0x289/0x1870
[  459.083842][T10668]  ? __pfx_dev_uevent_name+0x10/0x10
[  459.083873][T10668]  ? gadget_unbind_driver+0x370/0x4e0
[  459.083891][T10668]  ? __pfx_dummy_udc_async_callbacks+0x10/0x10
[  459.083920][T10668]  ? __pfx_gadget_unbind_driver+0x10/0x10
[  459.083943][T10668]  device_remove+0xcb/0x170
[  459.083960][T10668]  device_release_driver_internal+0x44b/0x620
[  459.083986][T10668]  driver_detach+0xd8/0x1b0
[  459.084006][T10668]  ? __pfx_raw_release+0x10/0x10
[  459.084024][T10668]  bus_remove_driver+0x13b/0x2c0
[  459.084054][T10668]  driver_unregister+0x76/0xb0
[  459.084075][T10668]  usb_gadget_unregister_driver+0x49/0x70
[  459.084093][T10668]  raw_release+0x1ae/0x2b0
[  459.084112][T10668]  __fput+0x402/0xb70
[  459.084141][T10668]  fput_close_sync+0x118/0x210
[  459.084166][T10668]  ? __pfx_fput_close_sync+0x10/0x10
[  459.084188][T10668]  ? dnotify_flush+0x79/0x4c0
[  459.084219][T10668]  __x64_sys_close+0x8b/0x120
[  459.084246][T10668]  do_syscall_64+0xcd/0xfa0
[  459.084275][T10668]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.084294][T10668] RIP: 0033:0x7fa00618e32a
[  459.084310][T10668] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24
[  459.084328][T10668] RSP: 002b:00007fa006f79ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  459.084347][T10668] RAX: ffffffffffffffda RBX: 00007fa0063e5fa0 RCX: 00007fa00618e32a
[  459.084360][T10668] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  459.084370][T10668] RBP: 00007fa006f7a090 R08: 0000000000000000 R09: 0000000000000000
[  459.084380][T10668] R10: 0000000000000003 R11: 0000000000000293 R12: 0000000000000001
[  459.084391][T10668] R13: 00007fa0063e6038 R14: 00007fa0063e5fa0 R15: 00007fff71227d08
[  459.084421][T10668]  </TASK>
[  459.336173][    C1] vkms_vblank_simulate: vblank timer overrun
[  459.380349][ T8409] usb 4-1: Using ep0 maxpacket: 8
[  459.391492][ T8409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  459.403634][ T8409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  459.413433][ T8409] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  459.423155][ T8409] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  459.434358][ T8409] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  459.444411][ T8409] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  459.454765][ T8409] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.464695][ T8409] usb 4-1: config 0 descriptor??
[  459.472465][T10672] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  459.630366][ T1206] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  459.638104][ T5824] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  459.672669][ T5824] usb 5-1: device descriptor read/8, error -71
[  459.691265][T10672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.700458][T10672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.800308][ T1206] usb 2-1: Using ep0 maxpacket: 16
[  459.808186][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  459.819292][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  459.829203][ T1206] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  459.838370][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  459.848781][ T1206] usb 2-1: config 0 descriptor??
[  460.019960][    T9] usb 3-1: USB disconnect, device number 52
[  460.026604][ T5824] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  460.079431][  T847] usb 4-1: USB disconnect, device number 53
[  460.083118][ T5813] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  460.093973][ T5824] usb 5-1: device descriptor read/8, error -71
[  460.111189][T10681] netlink: 'syz.2.1215': attribute type 2 has an invalid length.
[  460.640691][ T1206] usbhid 2-1:0.0: can't add hid device: -71
[  460.646754][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  460.655259][ T5824] usb usb5-port1: unable to enumerate USB device
[  460.680166][ T1206] usb 2-1: USB disconnect, device number 50
[  461.740507][ T1206] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  461.853262][T10697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10697 comm=syz.0.1219
[  461.910368][ T1206] usb 3-1: Using ep0 maxpacket: 16
[  461.917050][ T1206] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.929980][ T1206] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.941450][ T1206] usb 3-1: config 0 interface 0 has no altsetting 0
[  461.948136][ T1206] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  462.090433][ T8409] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  462.151368][ T1206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.168118][ T1206] usb 3-1: config 0 descriptor??
[  462.331419][ T8409] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  462.351701][ T8409] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.374540][ T8409] usb 2-1: config 0 has no interface number 0
[  462.394028][ T8409] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  462.410664][  T847] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  462.422291][ T8409] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  462.448870][ T8409] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  462.458221][ T8409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.466962][ T8409] usb 2-1: Product: syz
[  462.474443][ T8409] usb 2-1: Manufacturer: syz
[  462.479089][ T8409] usb 2-1: SerialNumber: syz
[  462.487380][ T8409] usb 2-1: config 0 descriptor??
[  462.560958][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  462.560976][   T30] audit: type=1326 audit(1762476329.617:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  462.603858][  T847] usb 5-1: too many configurations: 37, using maximum allowed: 8
[  462.612532][   T30] audit: type=1326 audit(1762476329.617:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  462.637178][   T30] audit: type=1326 audit(1762476329.617:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  462.694870][  T847] usb 5-1: string descriptor 0 read error: -71
[  462.701355][  T847] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  462.832449][ T8409] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -32
[  462.887031][  T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.899277][   T30] audit: type=1326 audit(1762476329.617:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.080364][ T1206] usbhid 3-1:0.0: can't add hid device: -71
[  463.088461][ T1206] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  463.098158][   T30] audit: type=1326 audit(1762476329.617:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.126948][ T1206] usb 3-1: USB disconnect, device number 53
[  463.148005][   T30] audit: type=1326 audit(1762476329.627:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.166860][  T847] usb 5-1: can't set config #1, error -71
[  463.203770][  T847] usb 5-1: USB disconnect, device number 64
[  463.320737][   T30] audit: type=1326 audit(1762476329.627:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.370374][   T30] audit: type=1326 audit(1762476329.627:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.410734][T10718] serio: Serial port ptm1
[  463.420718][   T30] audit: type=1326 audit(1762476329.627:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  463.445199][   T30] audit: type=1326 audit(1762476329.627:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10710 comm="syz.0.1224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  464.267650][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'.
[  464.344713][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.355306][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.386498][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.395830][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.450376][ T5824] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  464.581803][ T8409] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  464.624807][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.633968][T10744] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1234'.
[  464.670324][ T5824] usb 3-1: Using ep0 maxpacket: 16
[  464.677389][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  464.688103][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  464.725967][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  464.866331][ T5824] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  464.878806][ T8409] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[  464.891876][ T8409] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.023336][ T8409] usb 5-1: config 0 has no interface number 0
[  465.039145][ T8409] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  465.039273][ T1206] usb 2-1: USB disconnect, device number 51
[  465.050133][ T8409] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  465.060376][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  465.077776][ T8409] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  465.154158][ T5824] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  465.161069][ T8409] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.166611][ T5824] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  465.187244][ T8409] usb 5-1: Product: syz
[  465.199852][ T5824] usb 3-1: Manufacturer: syz
[  465.208690][ T8409] usb 5-1: Manufacturer: syz
[  465.225048][ T5824] usb 3-1: config 0 descriptor??
[  465.230144][ T8409] usb 5-1: SerialNumber: syz
[  465.251938][ T8409] usb 5-1: config 0 descriptor??
[  465.562869][ T8409] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -32
[  467.420586][    T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  467.496690][ T8409] usb 5-1: USB disconnect, device number 65
[  467.600322][    T9] usb 2-1: Using ep0 maxpacket: 16
[  467.732266][    T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.781518][    T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.938573][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  467.956777][    T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  467.966084][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.976902][    T9] usb 2-1: config 0 descriptor??
[  468.146163][T10788] netlink: 'syz.4.1242': attribute type 2 has an invalid length.
[  468.170324][T10788] netlink: 'syz.4.1242': attribute type 2 has an invalid length.
[  468.272374][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'.
[  468.390495][ T1206] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  468.443299][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  468.479082][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  468.540282][ T5824] rc_core: IR keymap rc-hauppauge not found
[  468.551131][    T9] usb 2-1: USB disconnect, device number 52
[  468.563056][ T5824] Registered IR keymap rc-empty
[  468.606997][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  468.626411][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  468.645040][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  468.658211][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  468.668582][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  468.704906][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  468.724782][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  468.741445][ T1206] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  468.772199][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.780601][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53
[  468.808888][ T1206] usb 4-1: config 0 descriptor??
[  468.819915][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  468.880329][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  468.914360][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  468.963358][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.033160][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.241234][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.248306][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1248'.
[  469.564332][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.640361][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.662493][ T1206] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max
[  469.670314][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.739822][ T5824] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  469.776083][ T1206] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  469.813487][ T5824] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  469.829189][ T5824] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  469.880744][ T5824] usb 3-1: USB disconnect, device number 54
[  470.596066][  T847] usb 4-1: USB disconnect, device number 54
[  470.687547][T10823] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1252'.
[  471.107886][T10823] bond7: Unable to set up delay as MII monitoring is disabled
[  471.252121][T10823] bond7 (unregistering): Released all slaves
[  471.885032][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1250'.
[  471.893383][T10817] syz.0.1250 (10817): drop_caches: 2
[  472.037801][T10819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1251'.
[  472.117881][T10818] syz.1.1251 (10818): drop_caches: 2
[  472.280288][ T5824] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  472.434272][ T5824] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  472.462735][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  472.500585][ T5824] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  472.516531][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.538069][ T5824] usb 4-1: config 0 descriptor??
[  472.557281][ T5824] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  472.661905][ T8409] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  472.669744][  T847] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  472.844325][ T8409] usb 3-1: too many configurations: 37, using maximum allowed: 8
[  472.970467][  T847] usb 1-1: Using ep0 maxpacket: 32
[  473.017394][  T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.040657][ T5824] usb 2-1: new full-speed USB device number 53 using dummy_hcd
[  473.040896][  T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.060337][  T847] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  473.069550][  T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.082839][  T847] usb 1-1: config 0 descriptor??
[  473.094132][  T847] hub 1-1:0.0: USB hub found
[  473.101037][ T8409] usb 3-1: string descriptor 0 read error: -71
[  473.107587][ T8409] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  473.121701][ T8409] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.141414][ T8409] usb 3-1: can't set config #1, error -71
[  473.171354][ T8409] usb 3-1: USB disconnect, device number 55
[  473.210629][ T5824] usb 2-1: unable to get BOS descriptor or descriptor too short
[  473.219170][ T5824] usb 2-1: not running at top speed; connect to a high speed hub
[  473.230056][ T5824] usb 2-1: config index 0 descriptor too short (expected 1042, got 18)
[  473.238821][ T5824] usb 2-1: config 4 has an invalid descriptor of length 71, skipping remainder of the config
[  473.249525][ T5824] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  473.261597][ T5824] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e
[  473.271020][ T5824] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=3
[  473.279180][ T5824] usb 2-1: Product: syz
[  473.284014][ T5824] usb 2-1: Manufacturer: syz
[  473.288680][ T5824] usb 2-1: SerialNumber: syz
[  473.303464][  T847] hub 1-1:0.0: 1 port detected
[  473.713010][ T5824] usb 2-1: USB disconnect, device number 53
[  473.809843][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  473.809859][   T30] audit: type=1400 audit(1762476340.897:1227): avc:  denied  { bind } for  pid=10863 comm="syz.2.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  473.916006][  T847] hub 1-1:0.0: activate --> -90
[  474.124009][  T847] hub 1-1:0.0: hub_ext_port_status failed (err = 2)
[  474.320978][ T5824] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  474.448050][    T9] usb 1-1: USB disconnect, device number 67
[  474.606103][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  474.632459][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'.
[  474.638477][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  474.661480][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  474.678110][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  474.724121][ T5824] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  474.733690][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.765285][ T5824] usb 5-1: config 0 descriptor??
[  474.928844][ T1206] usb 4-1: USB disconnect, device number 55
[  475.027285][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.036950][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.383961][ T5824] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max
[  475.473236][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.484214][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.505124][ T5824] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  475.549581][T10886] bond2: Unable to set up delay as MII monitoring is disabled
[  475.564143][T10886] bond2 (unregistering): Released all slaves
[  475.674499][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.710698][T10882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1269'.
[  475.733347][ T5824] usb 5-1: USB disconnect, device number 66
[  476.505387][   T30] audit: type=1326 audit(1762476343.597:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  476.697203][   T30] audit: type=1326 audit(1762476343.627:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  476.813702][   T30] audit: type=1326 audit(1762476343.627:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  476.840341][   T30] audit: type=1326 audit(1762476343.627:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  476.888497][   T30] audit: type=1326 audit(1762476343.627:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  476.988775][   T30] audit: type=1326 audit(1762476343.627:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  477.289968][T10914] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1276'.
[  477.510342][   T30] audit: type=1326 audit(1762476343.627:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  477.719681][   T30] audit: type=1326 audit(1762476343.627:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  477.772051][T10914] bond2: Unable to set up delay as MII monitoring is disabled
[  477.837039][T10914] bond2 (unregistering): Released all slaves
[  477.865153][   T30] audit: type=1326 audit(1762476343.627:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10898 comm="syz.3.1272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  478.469812][ T5824] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  479.150581][ T5824] usb 3-1: Using ep0 maxpacket: 32
[  479.202510][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.303178][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.423323][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  479.445601][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.660056][ T5824] usb 3-1: config 0 descriptor??
[  479.667748][ T5824] hub 3-1:0.0: USB hub found
[  480.044223][ T5824] hub 3-1:0.0: 1 port detected
[  480.282027][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  480.300321][ T5898] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  480.430294][ T5898] usb 1-1: device descriptor read/64, error -71
[  480.472621][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.505286][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  480.520337][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  480.530384][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  480.550380][ T8399] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  480.560241][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  480.570658][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.588283][    T9] usb 4-1: config 0 descriptor??
[  480.645588][ T5824] hub 3-1:0.0: activate --> -90
[  480.680400][ T5898] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  480.822611][ T8399] usb 5-1: Using ep0 maxpacket: 16
[  480.923899][ T5824] hub 3-1:0.0: hub_ext_port_status failed (err = 2)
[  480.983142][ T5898] usb 1-1: device descriptor read/64, error -71
[  481.070885][ T8399] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  481.083958][ T8399] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  481.096237][ T5898] usb usb1-port1: attempt power cycle
[  481.100478][ T8399] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.121728][ T8399] usb 5-1: config 0 descriptor??
[  481.150675][ T8399] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input54
[  481.233414][  T847] usb 3-1: USB disconnect, device number 56
[  481.267879][    T9] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max
[  481.327856][    T9] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  481.460317][ T5898] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  481.511682][ T5898] usb 1-1: device descriptor read/8, error -71
[  481.584898][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  481.584915][   T30] audit: type=1400 audit(1762476348.657:1261): avc:  denied  { append } for  pid=10968 comm="syz.1.1290" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  481.666543][   T30] audit: type=1400 audit(1762476348.757:1262): avc:  denied  { getopt } for  pid=10968 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  481.687672][   T30] audit: type=1400 audit(1762476348.757:1263): avc:  denied  { write } for  pid=10968 comm="syz.1.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  481.790533][ T5898] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  481.831682][ T5898] usb 1-1: device descriptor read/8, error -71
[  482.049227][ T5898] usb usb1-port1: unable to enumerate USB device
[  482.079598][T10971] input: syz0 as /devices/virtual/input/input55
[  483.250804][   T30] audit: type=1400 audit(1762476350.327:1264): avc:  denied  { remount } for  pid=10986 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  483.470291][    T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  483.620554][    T9] usb 3-1: Using ep0 maxpacket: 16
[  483.627656][    T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  483.636244][    T9] usb 3-1: config 0 has no interface number 0
[  483.648679][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  483.650323][  T847] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  483.658355][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.675724][    T9] usb 3-1: Product: syz
[  483.680143][    T9] usb 3-1: Manufacturer: syz
[  483.685030][    T9] usb 3-1: SerialNumber: syz
[  483.701398][    T9] usb 3-1: config 0 descriptor??
[  483.708951][    T9] hub 3-1:0.132: bad descriptor, ignoring hub
[  483.715463][    T9] hub 3-1:0.132: probe with driver hub failed with error -5
[  483.727135][    T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input56
[  483.818677][ T5898] usb 4-1: reset high-speed USB device number 56 using dummy_hcd
[  484.064572][  T847] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  484.108062][  T847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.150353][ T5898] usb 4-1: device firmware changed
[  484.183684][  T847] usb 2-1: Product: syz
[  484.220980][  T847] usb 2-1: Manufacturer: syz
[  484.263800][  T847] usb 2-1: SerialNumber: syz
[  484.299240][ T5924] usb 4-1: USB disconnect, device number 56
[  484.337284][  T847] usb 2-1: config 0 descriptor??
[  484.450295][ T5924] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  484.523437][T11001] batadv_slave_1: entered promiscuous mode
[  484.637070][  T847] hso 2-1:0.0: Can't find BULK IN endpoint
[  484.646148][  T847] usb-storage 2-1:0.0: USB Mass Storage device detected
[  484.653449][ T5170] bcm5974 5-1:0.0: could not read from device
[  484.701024][ T5924] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  484.713273][ T8399] usb 5-1: USB disconnect, device number 67
[  484.716308][ T5170] bcm5974 5-1:0.0: could not read from device
[  484.727406][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.745620][ T5924] usb 4-1: config 0 descriptor??
[  484.842500][    T9] usb 2-1: USB disconnect, device number 54
[  485.050797][  T847] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  485.250572][  T847] usb 1-1: Using ep0 maxpacket: 32
[  485.403019][ T5924] kye 0003:0458:0153.001D: hidraw0: USB HID v1.01 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[  485.405604][  T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.520288][  T847] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.530575][  T847] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  485.539684][  T847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.599943][  T847] usb 1-1: config 0 descriptor??
[  485.678393][  T847] hub 1-1:0.0: USB hub found
[  485.891253][  T847] hub 1-1:0.0: 1 port detected
[  486.340376][ T8409] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  486.812587][ T5898] hub 1-1:0.0: activate --> -90
[  486.888806][T11008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11008 comm=syz.4.1300
[  486.950761][ T8409] usb 2-1: Using ep0 maxpacket: 32
[  487.073339][ T5898] hub 1-1:0.0: hub_ext_port_status failed (err = 3)
[  487.275694][ T5924] usb 1-1: USB disconnect, device number 72
[  487.360881][ T8409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  487.366461][T11000] batadv_slave_1: left promiscuous mode
[  487.457944][ T8409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  487.467992][ T8409] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  487.477222][ T8409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.488699][ T8409] usb 2-1: config 0 descriptor??
[  487.496612][ T8409] hub 2-1:0.0: USB hub found
[  487.615849][ T8399] usb 3-1: USB disconnect, device number 57
[  488.256745][ T8409] hub 2-1:0.0: 1 port detected
[  488.328077][ T8399] usb 4-1: USB disconnect, device number 57
[  488.508631][  T847] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  489.218792][  T847] usb 5-1: device descriptor read/64, error -71
[  489.235840][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'.
[  489.247327][ T8409] hub 2-1:0.0: activate --> -90
[  489.466791][ T8409] hub 2-1:0.0: hub_ext_port_status failed (err = 2)
[  489.610745][  T847] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  489.772057][  T847] usb 5-1: device descriptor read/64, error -71
[  489.785612][ T5965] usb 2-1: USB disconnect, device number 55
[  489.891782][  T847] usb usb5-port1: attempt power cycle
[  490.065220][T11049] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  490.642226][  T847] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  490.877293][T11054] netlink: 'syz.2.1312': attribute type 4 has an invalid length.
[  490.971466][  T847] usb 5-1: device not accepting address 70, error -71
[  491.474820][T11074] netlink: 'syz.3.1317': attribute type 2 has an invalid length.
[  491.590321][ T8399] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  491.880304][ T8399] usb 3-1: Using ep0 maxpacket: 32
[  492.041237][   T30] audit: type=1326 audit(1762476359.007:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.075804][ T8399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  492.091453][ T8399] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  492.113028][   T30] audit: type=1326 audit(1762476359.007:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.157531][ T8399] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  492.177493][ T8399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.198486][   T30] audit: type=1326 audit(1762476359.007:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.225902][ T8399] usb 3-1: config 0 descriptor??
[  492.248262][ T8399] hub 3-1:0.0: USB hub found
[  492.277311][   T30] audit: type=1326 audit(1762476359.017:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.350491][   T30] audit: type=1326 audit(1762476359.017:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.468009][ T8399] hub 3-1:0.0: 1 port detected
[  492.566499][   T30] audit: type=1326 audit(1762476359.017:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.650541][   T30] audit: type=1326 audit(1762476359.017:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.688953][   T30] audit: type=1326 audit(1762476359.017:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.718695][   T30] audit: type=1326 audit(1762476359.017:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  492.750318][   T30] audit: type=1326 audit(1762476359.017:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11075 comm="syz.4.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80b58f6c9 code=0x7ffc0000
[  493.093837][ T8399] hub 3-1:0.0: activate --> -90
[  493.130346][  T847] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  493.294678][ T8399] hub 3-1:0.0: hub_ext_port_status failed (err = 3)
[  493.304459][  T847] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.320313][ T5824] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  493.423464][  T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  493.478065][  T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  493.493714][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  493.517459][  T847] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  493.571879][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  493.572441][  T847] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  493.611471][ T8399] usb 3-1: USB disconnect, device number 58
[  493.658507][  T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.691697][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  493.722358][  T847] usb 5-1: config 0 descriptor??
[  493.746280][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  493.799551][ T5824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  493.819206][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.844568][ T5824] usb 2-1: config 0 descriptor??
[  494.217065][  T847] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max
[  494.298594][  T847] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  494.595453][T11107] Cannot find set identified by id 0 to match
[  494.891700][ T5824] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max
[  494.995548][ T5824] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  495.212524][T11101] syz.3.1323 (11101): drop_caches: 2
[  495.371600][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1323'.
[  495.494057][ T8409] usb 2-1: USB disconnect, device number 56
[  496.443691][   T48] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  496.511236][T11131] netlink: 'syz.1.1333': attribute type 2 has an invalid length.
[  496.531494][  T847] usb 5-1: USB disconnect, device number 72
[  496.642766][   T48] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  496.677459][   T48] usb 3-1: config 0 has no interface number 0
[  496.725425][   T48] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  496.781278][   T48] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  496.791038][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.799637][   T48] usb 3-1: Product: syz
[  496.820691][   T48] usb 3-1: Manufacturer: syz
[  496.837634][   T48] usb 3-1: SerialNumber: syz
[  496.854171][   T48] usb 3-1: config 0 descriptor??
[  496.860631][ T5965] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  496.881728][   T48] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  497.032208][ T5965] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  497.073071][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  497.160283][T11140] FAULT_INJECTION: forcing a failure.
[  497.160283][T11140] name failslab, interval 1, probability 0, space 0, times 0
[  497.173117][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.2.1329 Not tainted syzkaller #0 PREEMPT(full) 
[  497.173143][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  497.173154][T11140] Call Trace:
[  497.173161][T11140]  <TASK>
[  497.173169][T11140]  dump_stack_lvl+0x16c/0x1f0
[  497.173209][T11140]  should_fail_ex+0x512/0x640
[  497.173237][T11140]  ? kmem_cache_alloc_noprof+0x62/0x6e0
[  497.173268][T11140]  should_failslab+0xc2/0x120
[  497.173290][T11140]  kmem_cache_alloc_noprof+0x75/0x6e0
[  497.173318][T11140]  ? alloc_empty_file+0x55/0x1e0
[  497.173347][T11140]  ? alloc_empty_file+0x55/0x1e0
[  497.173370][T11140]  alloc_empty_file+0x55/0x1e0
[  497.173396][T11140]  path_openat+0xda/0x2cb0
[  497.173429][T11140]  ? __pfx_path_openat+0x10/0x10
[  497.173450][T11140]  ? __lock_acquire+0xb8a/0x1c90
[  497.173484][T11140]  do_filp_open+0x20b/0x470
[  497.173505][T11140]  ? __pfx_do_filp_open+0x10/0x10
[  497.173548][T11140]  ? alloc_fd+0x471/0x7d0
[  497.173576][T11140]  do_sys_openat2+0x11b/0x1d0
[  497.173600][T11140]  ? __pfx_do_sys_openat2+0x10/0x10
[  497.173628][T11140]  ? __fget_files+0x20e/0x3c0
[  497.173645][T11140]  ? __pfx_rcu_is_watching+0x10/0x10
[  497.173676][T11140]  __x64_sys_openat+0x174/0x210
[  497.173700][T11140]  ? __pfx___x64_sys_openat+0x10/0x10
[  497.173723][T11140]  ? ksys_write+0x1ac/0x250
[  497.173752][T11140]  do_syscall_64+0xcd/0xfa0
[  497.173773][T11140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.173793][T11140] RIP: 0033:0x7f3aec98df10
[  497.173809][T11140] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44
[  497.173827][T11140] RSP: 002b:00007f3aed859b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  497.173846][T11140] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3aec98df10
[  497.173858][T11140] RDX: 0000000000000002 RSI: 00007f3aed859c10 RDI: 00000000ffffff9c
[  497.173871][T11140] RBP: 00007f3aed859c10 R08: 0000000000000000 R09: 00007f3aed859987
[  497.173883][T11140] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  497.173894][T11140] R13: 00007f3aecbe6128 R14: 00007f3aecbe6090 R15: 00007ffd4d7871e8
[  497.173924][T11140]  </TASK>
[  497.387065][    C0] vkms_vblank_simulate: vblank timer overrun
[  497.467960][ T5965] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  497.487448][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.773420][ T5965] usb 4-1: config 0 descriptor??
[  497.793402][ T5965] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  498.519510][  T847] usb 3-1: USB disconnect, device number 59
[  499.051203][  T847] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  499.081406][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1332'.
[  499.298064][T11134] syz.0.1332 (11134): drop_caches: 2
[  499.787801][T11137] syz.4.1335 (11137): drop_caches: 2
[  500.284325][T11137] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'.
[  500.383738][   T48] usb 4-1: USB disconnect, device number 58
[  500.810295][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  500.810310][   T30] audit: type=1804 audit(1762476367.527:1285): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.1339" name="/newroot/294/file1" dev="fuse" ino=1 res=1 errno=0
[  500.919314][   T30] audit: type=1800 audit(1762476367.597:1286): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1339" name="/" dev="fuse" ino=1 res=0 errno=0
[  501.216453][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  501.276559][T11177] FAULT_INJECTION: forcing a failure.
[  501.276559][T11177] name failslab, interval 1, probability 0, space 0, times 0
[  501.419310][T11177] CPU: 1 UID: 0 PID: 11177 Comm: syz.2.1343 Not tainted syzkaller #0 PREEMPT(full) 
[  501.419335][T11177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  501.419345][T11177] Call Trace:
[  501.419352][T11177]  <TASK>
[  501.419358][T11177]  dump_stack_lvl+0x16c/0x1f0
[  501.419392][T11177]  should_fail_ex+0x512/0x640
[  501.419414][T11177]  ? kmem_cache_alloc_node_noprof+0x65/0x770
[  501.419445][T11177]  should_failslab+0xc2/0x120
[  501.419467][T11177]  kmem_cache_alloc_node_noprof+0x78/0x770
[  501.419492][T11177]  ? __alloc_skb+0x2b2/0x380
[  501.419518][T11177]  ? __alloc_skb+0x2b2/0x380
[  501.419538][T11177]  ? __pfx_netlink_insert+0x10/0x10
[  501.419565][T11177]  __alloc_skb+0x2b2/0x380
[  501.419587][T11177]  ? __pfx___alloc_skb+0x10/0x10
[  501.419610][T11177]  ? netlink_autobind.isra.0+0x158/0x370
[  501.419641][T11177]  netlink_alloc_large_skb+0x69/0x140
[  501.419670][T11177]  netlink_sendmsg+0x698/0xdd0
[  501.419700][T11177]  ? __pfx_netlink_sendmsg+0x10/0x10
[  501.419732][T11177]  ____sys_sendmsg+0xa98/0xc70
[  501.419749][T11177]  ? copy_msghdr_from_user+0x10a/0x160
[  501.419771][T11177]  ? __pfx_____sys_sendmsg+0x10/0x10
[  501.419809][T11177]  ___sys_sendmsg+0x134/0x1d0
[  501.419836][T11177]  ? __pfx____sys_sendmsg+0x10/0x10
[  501.419858][T11177]  ? __lock_acquire+0x622/0x1c90
[  501.419922][T11177]  __sys_sendmsg+0x16d/0x220
[  501.419945][T11177]  ? __pfx___sys_sendmsg+0x10/0x10
[  501.419988][T11177]  do_syscall_64+0xcd/0xfa0
[  501.420009][T11177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.420027][T11177] RIP: 0033:0x7f3aec98f6c9
[  501.420043][T11177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  501.420060][T11177] RSP: 002b:00007f3aed87b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  501.420079][T11177] RAX: ffffffffffffffda RBX: 00007f3aecbe5fa0 RCX: 00007f3aec98f6c9
[  501.420091][T11177] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  501.420102][T11177] RBP: 00007f3aed87b090 R08: 0000000000000000 R09: 0000000000000000
[  501.420114][T11177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  501.420124][T11177] R13: 00007f3aecbe6038 R14: 00007f3aecbe5fa0 R15: 00007ffd4d7871e8
[  501.420151][T11177]  </TASK>
[  501.720349][ T5965] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[  501.794356][   T48] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  501.800250][ T5824] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  501.875560][ T5965] usb 5-1: unable to get BOS descriptor or descriptor too short
[  501.883895][ T5965] usb 5-1: not running at top speed; connect to a high speed hub
[  501.893971][ T5965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  501.904147][  T847] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  501.912071][ T5965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  501.924313][ T5965] usb 5-1: string descriptor 0 read error: -22
[  501.931307][ T5965] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  501.940699][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.958111][ T5965] usb 5-1: 0:2 : does not exist
[  501.960263][ T8399] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[  501.964976][   T48] usb 4-1: too many configurations: 37, using maximum allowed: 8
[  501.974038][ T5824] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  501.993842][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.009246][ T5824] usb 1-1: config 0 descriptor??
[  502.020349][   T48] usb 4-1: string descriptor 0 read error: -71
[  502.046771][   T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  502.056303][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  502.068279][   T48] usb 4-1: can't set config #1, error -71
[  502.076542][   T48] usb 4-1: USB disconnect, device number 59
[  502.082630][  T847] usb 2-1: Using ep0 maxpacket: 16
[  502.101675][  T847] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  502.112024][  T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  502.123357][  T847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  502.133504][  T847] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  502.142758][ T8399] usb 3-1: unable to get BOS descriptor or descriptor too short
[  502.144904][  T847] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  502.152246][ T8399] usb 3-1: not running at top speed; connect to a high speed hub
[  502.173050][  T847] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  502.175044][ T8399] usb 3-1: config index 0 descriptor too short (expected 1042, got 18)
[  502.183716][  T847] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  502.196227][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.201311][  T847] usb 2-1: Manufacturer: syz
[  502.215936][ T8399] usb 3-1: config 4 has an invalid descriptor of length 71, skipping remainder of the config
[  502.234813][ T8399] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  502.235198][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.246609][ T8399] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e
[  502.252576][  T847] usb 2-1: config 0 descriptor??
[  502.266103][ T8399] usb 3-1: New USB device strings: Mfr=15, Product=2, SerialNumber=3
[  502.279001][ T8399] usb 3-1: Product: syz
[  502.291300][ T8399] usb 3-1: Manufacturer: syz
[  502.297165][ T8399] usb 3-1: SerialNumber: syz
[  502.444124][ T5824] waltop 0003:172F:0038.0020: item fetching failed at offset 3/5
[  502.452680][ T5824] waltop 0003:172F:0038.0020: probe with driver waltop failed with error -22
[  502.531070][ T5965] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  502.572579][ T5965] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  502.585093][ T5965] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  502.598491][ T5965] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  502.655455][ T5965] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  502.678935][ T5965] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  502.694992][   T48] usb 1-1: USB disconnect, device number 73
[  502.716512][ T5965] usb 5-1: USB disconnect, device number 73
[  502.743528][ T5869] usb 3-1: USB disconnect, device number 60
[  504.457345][   T30] audit: type=1400 audit(1762476371.547:1287): avc:  denied  { bind } for  pid=11222 comm="syz.3.1357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  504.818223][T11235] netlink: 'syz.1.1362': attribute type 12 has an invalid length.
[  504.840629][ T5869] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  504.990301][  T847] rc_core: IR keymap rc-hauppauge not found
[  504.997109][  T847] Registered IR keymap rc-empty
[  505.013787][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  505.022528][ T5869] usb 4-1: too many configurations: 37, using maximum allowed: 8
[  505.040624][ T5824] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  505.056854][ T5869] usb 4-1: string descriptor 0 read error: -71
[  505.063322][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  505.079590][ T5869] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  505.101427][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.121664][  T847] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  505.505155][ T5824] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  505.625144][ T5869] usb 4-1: can't set config #1, error -71
[  505.632528][ T5869] usb 4-1: USB disconnect, device number 60
[  505.640361][ T8399] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  505.641791][  T847] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input57
[  505.648928][ T5824] usb 5-1: config 0 has no interface number 0
[  505.862964][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  505.866903][ T5824] usb 5-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06
[  505.912499][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  505.972494][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  505.974669][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.046887][ T8399] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  506.060227][ T8399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  506.072257][ T5824] usb 5-1: config 0 descriptor??
[  506.077511][ T8399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  506.087822][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.090880][ T8399] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  506.104830][ T8399] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.112961][ T8399] usb 1-1: Product: syz
[  506.117651][ T8399] usb 1-1: Manufacturer: syz
[  506.122610][ T8399] usb 1-1: SerialNumber: syz
[  506.138089][ T8399] usb 1-1: config 0 descriptor??
[  506.151438][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.166462][T11242] bond7: Unable to set up delay as MII monitoring is disabled
[  506.190579][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.200816][T11242] bond7 (unregistering): Released all slaves
[  506.242594][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.270324][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.300343][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.301734][ T5824] usb 5-1: string descriptor 0 read error: -71
[  506.331875][  T847] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  506.335284][ T5824] usb-storage 5-1:0.168: USB Mass Storage device detected
[  506.367348][  T847] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  506.385650][  T847] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  506.562432][ T5824] usb-storage 5-1:0.168: Quirks match for vid 05ab pid 0060: 2
[  506.575053][  T847] usb 2-1: USB disconnect, device number 57
[  506.678171][ T5824] usb 5-1: USB disconnect, device number 74
[  508.233655][ T8399] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  508.352348][ T8399] powermate 1-1:0.0: probe with driver powermate failed with error -5
[  508.431378][ T8399] usb 1-1: USB disconnect, device number 74
[  508.469880][T11269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1367'.
[  508.900669][   T30] audit: type=1326 audit(1762476375.957:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  508.961497][T11265] syz.2.1368 (11265): drop_caches: 2
[  508.971528][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1368'.
[  509.012494][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.040316][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.079865][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.086708][   T30] audit: type=1326 audit(1762476375.957:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  509.196035][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.239366][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.312524][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.356416][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.581552][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.599023][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.672320][  T847] hid-generic 0003:0003:0000.0021: unknown main item tag 0x0
[  509.678712][   T30] audit: type=1326 audit(1762476375.957:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  509.766888][  T847] hid-generic 0003:0003:0000.0021: hidraw0: USB HID v0.00 Device [syz1] on syz1
[  509.780065][T11283] FAULT_INJECTION: forcing a failure.
[  509.780065][T11283] name fail_futex, interval 1, probability 0, space 0, times 1
[  509.828113][T11290] syz.2.1375 (11290): drop_caches: 2
[  509.833618][T11283] CPU: 1 UID: 0 PID: 11283 Comm: syz.1.1373 Not tainted syzkaller #0 PREEMPT(full) 
[  509.833641][T11283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  509.833651][T11283] Call Trace:
[  509.833657][T11283]  <TASK>
[  509.833665][T11283]  dump_stack_lvl+0x16c/0x1f0
[  509.833698][T11283]  should_fail_ex+0x512/0x640
[  509.833726][T11283]  get_futex_key+0x1d0/0x1560
[  509.833758][T11283]  ? __pfx_get_futex_key+0x10/0x10
[  509.833784][T11283]  ? __mutex_trylock_common+0xe9/0x250
[  509.833807][T11283]  futex_wake+0xea/0x530
[  509.833829][T11283]  ? __pfx_futex_wake+0x10/0x10
[  509.833847][T11283]  ? __lock_acquire+0xb8a/0x1c90
[  509.833885][T11283]  do_futex+0x1e3/0x350
[  509.833903][T11283]  ? __pfx_do_futex+0x10/0x10
[  509.833918][T11283]  ? __might_fault+0xe3/0x190
[  509.833951][T11283]  mm_release+0x24e/0x300
[  509.833972][T11283]  do_exit+0x68e/0x2bf0
[  509.833997][T11283]  ? lock_acquire+0x179/0x350
[  509.834020][T11283]  ? __pfx_do_exit+0x10/0x10
[  509.834055][T11283]  ? find_held_lock+0x2b/0x80
[  509.834083][T11283]  do_group_exit+0xd3/0x2a0
[  509.834113][T11283]  get_signal+0x2671/0x26d0
[  509.834149][T11283]  ? __pfx_get_signal+0x10/0x10
[  509.834180][T11283]  arch_do_signal_or_restart+0x8f/0x7c0
[  509.834203][T11283]  ? __fget_files+0x20e/0x3c0
[  509.834220][T11283]  ? __fget_files+0x110/0x3c0
[  509.834238][T11283]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  509.834270][T11283]  ? __pfx_do_readv+0x10/0x10
[  509.834303][T11283]  exit_to_user_mode_loop+0x85/0x130
[  509.834325][T11283]  do_syscall_64+0x426/0xfa0
[  509.834345][T11283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.834364][T11283] RIP: 0033:0x7fc7f0b8f6c9
[  509.834381][T11283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.834398][T11283] RSP: 002b:00007fc7f194e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013
[  509.834423][T11283] RAX: fffffffffffffffc RBX: 00007fc7f0de5fa0 RCX: 00007fc7f0b8f6c9
[  509.834435][T11283] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003
[  509.834446][T11283] RBP: 00007fc7f194e090 R08: 0000000000000000 R09: 0000000000000000
[  509.834457][T11283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.834468][T11283] R13: 00007fc7f0de6038 R14: 00007fc7f0de5fa0 R15: 00007fff7ef4cb98
[  509.834497][T11283]  </TASK>
[  509.940350][   T30] audit: type=1326 audit(1762476375.957:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  509.944370][    C1] vkms_vblank_simulate: vblank timer overrun
[  509.960264][   T30] audit: type=1326 audit(1762476375.957:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  510.136621][   T30] audit: type=1326 audit(1762476375.967:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  510.164132][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'.
[  510.175239][   T30] audit: type=1326 audit(1762476375.967:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  510.215672][   T30] audit: type=1326 audit(1762476375.967:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  510.239127][    C1] vkms_vblank_simulate: vblank timer overrun
[  510.248690][   T30] audit: type=1326 audit(1762476375.967:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  510.279085][   T30] audit: type=1326 audit(1762476375.967:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11271 comm="syz.0.1371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa00618f6c9 code=0x7ffc0000
[  511.099003][T11314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11314 comm=syz.2.1377
[  511.311161][T11316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11316 comm=syz.1.1378
[  512.045851][T11323] FAULT_INJECTION: forcing a failure.
[  512.045851][T11323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.099887][T11323] CPU: 0 UID: 0 PID: 11323 Comm: syz.4.1382 Not tainted syzkaller #0 PREEMPT(full) 
[  512.099914][T11323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  512.099926][T11323] Call Trace:
[  512.099933][T11323]  <TASK>
[  512.099940][T11323]  dump_stack_lvl+0x16c/0x1f0
[  512.099971][T11323]  should_fail_ex+0x512/0x640
[  512.099998][T11323]  _copy_from_user+0x2e/0xd0
[  512.100030][T11323]  copy_msghdr_from_user+0x98/0x160
[  512.100057][T11323]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  512.100097][T11323]  ___sys_sendmsg+0xfe/0x1d0
[  512.100124][T11323]  ? __pfx____sys_sendmsg+0x10/0x10
[  512.100146][T11323]  ? __lock_acquire+0x622/0x1c90
[  512.100206][T11323]  __sys_sendmsg+0x16d/0x220
[  512.100228][T11323]  ? __pfx___sys_sendmsg+0x10/0x10
[  512.100269][T11323]  do_syscall_64+0xcd/0xfa0
[  512.100289][T11323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.100308][T11323] RIP: 0033:0x7fa80b58f6c9
[  512.100324][T11323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.100342][T11323] RSP: 002b:00007fa80c455038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  512.100362][T11323] RAX: ffffffffffffffda RBX: 00007fa80b7e5fa0 RCX: 00007fa80b58f6c9
[  512.100373][T11323] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004
[  512.100384][T11323] RBP: 00007fa80c455090 R08: 0000000000000000 R09: 0000000000000000
[  512.100394][T11323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.100405][T11323] R13: 00007fa80b7e6038 R14: 00007fa80b7e5fa0 R15: 00007ffe46e3f018
[  512.100432][T11323]  </TASK>
[  512.962169][T11320] bond1: Unable to set up delay as MII monitoring is disabled
[  513.019190][T11320] bond1 (unregistering): Released all slaves
[  513.096360][T11334] netlink: 'syz.0.1384': attribute type 2 has an invalid length.
[  513.262938][T11336] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11336 comm=syz.2.1381
[  513.792359][T11344] fuse: Bad value for 'fd'
[  514.298434][T11348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1386'.
[  514.320280][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  514.320296][   T30] audit: type=1326 audit(1762476381.407:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.370699][   T30] audit: type=1326 audit(1762476381.407:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.569307][   T30] audit: type=1326 audit(1762476381.407:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.592859][    C1] vkms_vblank_simulate: vblank timer overrun
[  514.622324][T11357] netlink: 'syz.2.1390': attribute type 72 has an invalid length.
[  514.630164][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1390'.
[  514.672261][   T30] audit: type=1326 audit(1762476381.407:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.697157][   T30] audit: type=1326 audit(1762476381.407:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.761888][   T30] audit: type=1326 audit(1762476381.407:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.789770][   T30] audit: type=1326 audit(1762476381.407:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.857108][   T30] audit: type=1326 audit(1762476381.407:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  514.930331][   T30] audit: type=1326 audit(1762476381.407:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  515.089879][T11362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11362 comm=syz.2.1391
[  515.170289][   T30] audit: type=1326 audit(1762476381.407:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.3.1388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92f278f6c9 code=0x7ffc0000
[  515.510332][  T847] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  516.106750][  T847] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[  516.136864][  T847] usb 5-1: config 0 has no interface number 0
[  516.144561][  T847] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  516.192089][  T847] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  516.201237][  T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.218560][  T847] usb 5-1: Product: syz
[  516.235586][  T847] usb 5-1: Manufacturer: syz
[  516.265512][  T847] usb 5-1: SerialNumber: syz
[  516.288375][  T847] usb 5-1: config 0 descriptor??
[  516.299204][  T847] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[  516.983340][T11388] bond2: Unable to set up delay as MII monitoring is disabled
[  517.246969][T11388] bond2 (unregistering): Released all slaves
[  517.580033][T11399] netlink: 'syz.3.1401': attribute type 72 has an invalid length.
[  517.588411][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'.
[  518.070277][ T8399] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  518.102168][T11406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1404'.
[  518.180229][T11409] team0: Cannot enslave team device to itself
[  518.241000][ T8399] usb 3-1: Using ep0 maxpacket: 16
[  518.272619][ T1206] usb 5-1: USB disconnect, device number 75
[  518.284545][ T8399] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  518.300863][ T1206] yurex 5-1:0.50: USB YUREX #0 now disconnected
[  518.309190][ T8399] usb 3-1: config 0 has no interface number 0
[  518.321285][ T8399] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  518.364632][ T8399] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  518.389576][ T8399] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.400103][ T8399] usb 3-1: Product: syz
[  518.410299][ T8399] usb 3-1: Manufacturer: syz
[  518.414987][ T8399] usb 3-1: SerialNumber: syz
[  518.423942][ T8399] usb 3-1: config 0 descriptor??
[  518.442131][T11405] delete_channel: no stack
[  519.022699][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.032659][T11412] syz.3.1406: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  519.049599][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.065908][T11412] CPU: 0 UID: 0 PID: 11412 Comm: syz.3.1406 Not tainted syzkaller #0 PREEMPT(full) 
[  519.065938][T11412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  519.065951][T11412] Call Trace:
[  519.065959][T11412]  <TASK>
[  519.065968][T11412]  dump_stack_lvl+0x16c/0x1f0
[  519.066009][T11412]  warn_alloc+0x248/0x3a0
[  519.066042][T11412]  ? __pfx_warn_alloc+0x10/0x10
[  519.066070][T11412]  ? __pfx_stack_trace_save+0x10/0x10
[  519.066108][T11412]  ? kasan_save_stack+0x42/0x60
[  519.066128][T11412]  ? kasan_save_stack+0x33/0x60
[  519.066147][T11412]  ? kasan_save_track+0x14/0x30
[  519.066166][T11412]  ? xskq_create+0x52/0x1d0
[  519.066192][T11412]  ? xsk_setsockopt+0x74e/0x9a0
[  519.066215][T11412]  ? do_sock_setsockopt+0xf3/0x1d0
[  519.066248][T11412]  ? xskq_create+0xfb/0x1d0
[  519.066277][T11412]  __vmalloc_node_range_noprof+0xfbc/0x1480
[  519.066314][T11412]  ? xskq_create+0xfb/0x1d0
[  519.066349][T11412]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  519.066385][T11412]  ? xskq_create+0xfb/0x1d0
[  519.066416][T11412]  vmalloc_user_noprof+0x9e/0xe0
[  519.066441][T11412]  ? xskq_create+0xfb/0x1d0
[  519.066469][T11412]  xskq_create+0xfb/0x1d0
[  519.066498][T11412]  xsk_setsockopt+0x74e/0x9a0
[  519.066526][T11412]  ? __pfx_xsk_setsockopt+0x10/0x10
[  519.066552][T11412]  ? find_held_lock+0x2b/0x80
[  519.066585][T11412]  ? selinux_socket_setsockopt+0x6a/0x80
[  519.066619][T11412]  ? __pfx_xsk_setsockopt+0x10/0x10
[  519.066647][T11412]  do_sock_setsockopt+0xf3/0x1d0
[  519.066689][T11412]  __sys_setsockopt+0x1a0/0x230
[  519.066723][T11412]  __x64_sys_setsockopt+0xbd/0x160
[  519.066750][T11412]  ? do_syscall_64+0x91/0xfa0
[  519.066769][T11412]  ? lockdep_hardirqs_on+0x7c/0x110
[  519.066802][T11412]  do_syscall_64+0xcd/0xfa0
[  519.066823][T11412]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.066845][T11412] RIP: 0033:0x7f92f278f6c9
[  519.066863][T11412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.066884][T11412] RSP: 002b:00007f92f3634038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  519.066905][T11412] RAX: ffffffffffffffda RBX: 00007f92f29e5fa0 RCX: 00007f92f278f6c9
[  519.066920][T11412] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  519.066933][T11412] RBP: 00007f92f2811f91 R08: 0000000000000004 R09: 0000000000000000
[  519.066946][T11412] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000
[  519.066958][T11412] R13: 00007f92f29e6038 R14: 00007f92f29e5fa0 R15: 00007ffeaff06ff8
[  519.066989][T11412]  </TASK>
[  519.067015][T11412] Mem-Info:
[  519.280904][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.350780][   T30] kauditd_printk_skb: 152 callbacks suppressed
[  519.350795][   T30] audit: type=1400 audit(1762476386.447:1483): avc:  denied  { ioctl } for  pid=11394 comm="syz.2.1400" path="socket:[35723]" dev="sockfs" ino=35723 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  519.409245][T11412] active_anon:11344 inactive_anon:0 isolated_anon:0
[  519.409245][T11412]  active_file:13366 inactive_file:42371 isolated_file:0
[  519.409245][T11412]  unevictable:768 dirty:393 writeback:0
[  519.409245][T11412]  slab_reclaimable:7532 slab_unreclaimable:98115
[  519.409245][T11412]  mapped:32938 shmem:1354 pagetables:1345
[  519.409245][T11412]  sec_pagetables:0 bounce:0
[  519.409245][T11412]  kernel_misc_reclaimable:0
[  519.409245][T11412]  free:1305357 free_pcp:11146 free_cma:0
[  519.477235][T11412] Node 0 active_anon:45376kB inactive_anon:0kB active_file:53292kB inactive_file:169180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:131532kB dirty:1572kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:13020kB pagetables:5248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  519.509370][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.516587][   T30] audit: type=1400 audit(1762476386.567:1484): avc:  denied  { getopt } for  pid=11394 comm="syz.2.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  519.584436][ T8399] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  519.616136][ T8399] usb 3-1: USB disconnect, device number 61
[  519.646236][T11412] Node 1 active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  519.695952][T11412] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  519.790516][  T847] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  519.798490][T11412] lowmem_reserve[]: 0 2485 2487 2487 2487
[  519.807715][T11412] Node 0 DMA32 free:1303892kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45500kB inactive_anon:0kB active_file:53292kB inactive_file:169180kB unevictable:1536kB writepending:1584kB zspages:0kB present:3129332kB managed:2544856kB mlocked:0kB bounce:0kB free_pcp:39040kB local_pcp:18436kB free_cma:0kB
[  519.841315][    C0] vkms_vblank_simulate: vblank timer overrun
[  519.965194][T11412] lowmem_reserve[]: 0 0 1 1 1
[  519.974519][T11412] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  520.004215][    C0] vkms_vblank_simulate: vblank timer overrun
[  520.010975][T11412] lowmem_reserve[]: 0 0 0 0 0
[  520.015776][T11412] Node 1 Normal free:3902816kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:304kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5568kB local_pcp:2336kB free_cma:0kB
[  520.048210][    C0] vkms_vblank_simulate: vblank timer overrun
[  520.172790][   T30] audit: type=1400 audit(1762476387.157:1485): avc:  denied  { read } for  pid=11432 comm="syz.0.1413" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  520.196110][  T847] usb 5-1: Using ep0 maxpacket: 16
[  520.228247][   T30] audit: type=1400 audit(1762476387.157:1486): avc:  denied  { open } for  pid=11432 comm="syz.0.1413" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[  520.230516][  T847] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  520.252398][    C0] vkms_vblank_simulate: vblank timer overrun
[  520.253272][T11412] lowmem_reserve[]: 0 0 0 0 0
[  520.281803][T11412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  520.298277][T11412] Node 0 DMA32: 980*4kB (UM) 542*8kB (UME) 196*16kB (UM) 344*32kB (UME) 108*64kB (UME) 96*128kB (UME) 86*256kB (UME) 25*512kB (UME) 14*1024kB (UME) 2*2048kB (ME) 295*4096kB (UM) = 1303168kB
[  520.546819][T11412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  520.547661][  T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.558552][T11412] Node 1 Normal: 214*4kB (UME) 53*8kB (UME) 42*16kB (UE) 278*32kB (UME) 110*64kB (UME) 27*128kB (UME) 4*256kB (U) 3*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3902816kB
[  520.607957][T11412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.617225][  T847] usb 5-1: Product: syz
[  520.621377][T11412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.627345][  T847] usb 5-1: Manufacturer: syz
[  520.631498][T11412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.640357][  T847] usb 5-1: SerialNumber: syz
[  520.658012][T11412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.670065][T11412] 58935 total pagecache pages
[  520.675873][T11412] 0 pages in swap cache
[  520.680286][T11412] Free swap  = 124996kB
[  520.684531][T11412] Total swap = 124996kB
[  520.688848][T11412] 2097051 pages RAM
[  520.692825][T11412] 0 pages HighMem/MovableOnly
[  520.697602][T11412] 428747 pages reserved
[  520.732768][  T847] usb 5-1: config 0 descriptor??
[  520.744350][   T30] audit: type=1400 audit(1762476387.797:1487): avc:  denied  { map_read map_write } for  pid=11439 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  520.764277][    C0] vkms_vblank_simulate: vblank timer overrun
[  520.815875][T11412] 0 pages cma reserved
[  520.868177][  T847] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  521.210455][   T30] audit: type=1400 audit(1762476388.247:1488): avc:  denied  { read } for  pid=11439 comm="syz.1.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  521.254597][  T847] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  521.622068][   T30] audit: type=1400 audit(1762476388.717:1489): avc:  denied  { wake_alarm } for  pid=11425 comm="syz.4.1410" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  521.710386][   T30] audit: type=1400 audit(1762476388.747:1490): avc:  denied  { ioctl } for  pid=11425 comm="syz.4.1410" path="socket:[37040]" dev="sockfs" ino=37040 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  522.013156][   T30] audit: type=1400 audit(1762476389.087:1491): avc:  denied  { append } for  pid=11458 comm="syz.1.1419" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  522.469741][T11460] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1419'.
[  522.712148][   T30] audit: type=1400 audit(1762476389.687:1492): avc:  denied  { name_bind } for  pid=11458 comm="syz.1.1419" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  523.085271][ T8399] usb 5-1: USB disconnect, device number 76
[  523.100504][  T847] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  523.263055][  T847] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  523.274372][  T847] usb 3-1: config 0 interface 0 has no altsetting 0
[  523.285305][  T847] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  523.296269][  T847] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  523.306406][  T847] usb 3-1: Product: syz
[  523.310841][  T847] usb 3-1: Manufacturer: syz
[  523.315499][  T847] usb 3-1: SerialNumber: syz
[  523.328543][  T847] usb 3-1: config 0 descriptor??
[  523.342341][  T847] usb 3-1: selecting invalid altsetting 0
[  524.080250][ T1206] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  524.433272][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  524.439544][   T30] audit: type=1400 audit(1762476391.467:1507): avc:  denied  { create } for  pid=11461 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  524.461255][ T8399] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  524.716954][ T1206] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  524.726131][   T30] audit: type=1400 audit(1762476391.477:1508): avc:  denied  { write } for  pid=11461 comm="syz.2.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  524.726176][   T30] audit: type=1400 audit(1762476391.807:1509): avc:  denied  { mount } for  pid=11489 comm="syz.0.1429" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  524.745527][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.746632][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.788170][ T1206] usb 4-1: Product: syz
[  524.792971][ T1206] usb 4-1: Manufacturer: syz
[  524.797949][ T1206] usb 4-1: SerialNumber: syz
[  524.806715][ T8399] usb 2-1: unable to get BOS descriptor or descriptor too short
[  524.809485][   T30] audit: type=1400 audit(1762476391.807:1510): avc:  denied  { unmount } for  pid=11489 comm="syz.0.1429" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  524.815694][ T8399] usb 2-1: not running at top speed; connect to a high speed hub
[  524.861310][   T30] audit: type=1400 audit(1762476391.957:1511): avc:  denied  { execute } for  pid=11494 comm="syz.4.1430" name="file0" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  524.884722][   T30] audit: type=1400 audit(1762476391.957:1512): avc:  denied  { execute_no_trans } for  pid=11494 comm="syz.4.1430" path="/291/file0" dev="tmpfs" ino=1585 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  524.921921][ T8399] usb 2-1: config index 0 descriptor too short (expected 1042, got 18)
[  524.933674][ T8399] usb 2-1: config 4 has an invalid descriptor of length 71, skipping remainder of the config
[  524.944973][ T8399] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 9
[  524.959940][ T8399] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=c4.0e
[  524.969800][ T8399] usb 2-1: New USB device strings: Mfr=15, Product=2, SerialNumber=3
[  524.979286][ T8399] usb 2-1: Product: syz
[  524.984326][ T8399] usb 2-1: Manufacturer: syz
[  524.990007][ T8399] usb 2-1: SerialNumber: syz
[  525.233844][   T30] audit: type=1400 audit(1762476392.327:1513): avc:  denied  { mac_admin } for  pid=11486 comm="syz.1.1428" capability=33  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  525.256813][   T30] audit: type=1400 audit(1762476392.327:1514): avc:  denied  { relabelto } for  pid=11486 comm="syz.1.1428" name="276" dev="tmpfs" ino=1460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  525.283744][   T30] audit: type=1400 audit(1762476392.327:1515): avc:  denied  { associate } for  pid=11486 comm="syz.1.1428" name="276" dev="tmpfs" ino=1460 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  525.345818][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  525.358816][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  525.433726][   T30] audit: type=1400 audit(1762476392.527:1516): avc:  denied  { create } for  pid=11496 comm="syz.4.1431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  525.455044][ T8399] usb 2-1: USB disconnect, device number 58
[  525.920602][ T5965] usb 3-1: USB disconnect, device number 62
[  526.268830][T11504] syz.4.1433 (11504): drop_caches: 2
[  526.278257][T11504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'.
[  526.705379][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  526.795881][T11512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1435'.
[  527.156277][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  527.200761][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  527.221575][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  527.235007][ T1206] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  527.292350][ T1206] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  527.341208][ T1206] usb 4-1: USB disconnect, device number 61
[  527.922788][ T1206] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  528.160492][ T1206] usb 2-1: Using ep0 maxpacket: 16
[  528.237066][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.283263][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  528.295918][ T1206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  528.306178][ T1206] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  528.350145][ T1206] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  528.371513][ T1206] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  528.384192][ T1206] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  528.461976][ T1206] usb 2-1: Manufacturer: syz
[  528.483026][ T1206] usb 2-1: config 0 descriptor??
[  528.762927][ T5965] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  528.920421][ T5965] usb 4-1: Using ep0 maxpacket: 16
[  528.980837][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  529.160550][T11556] FAULT_INJECTION: forcing a failure.
[  529.160550][T11556] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  529.167154][ T5965] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  529.183820][ T5965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.194979][ T5965] usb 4-1: config 0 descriptor??
[  529.204127][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.2.1445 Not tainted syzkaller #0 PREEMPT(full) 
[  529.204153][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  529.204165][T11556] Call Trace:
[  529.204171][T11556]  <TASK>
[  529.204178][T11556]  dump_stack_lvl+0x16c/0x1f0
[  529.204214][T11556]  should_fail_ex+0x512/0x640
[  529.204241][T11556]  _copy_from_user+0x2e/0xd0
[  529.204265][T11556]  copy_from_sockptr_offset+0x15c/0x1b0
[  529.204293][T11556]  ? __pfx_copy_from_sockptr_offset+0x10/0x10
[  529.204325][T11556]  do_arpt_set_ctl+0x579/0xe30
[  529.204349][T11556]  ? __pfx___mutex_trylock_common+0x10/0x10
[  529.204371][T11556]  ? __pfx_do_arpt_set_ctl+0x10/0x10
[  529.204395][T11556]  ? trace_contention_end+0xdd/0x130
[  529.204413][T11556]  ? find_held_lock+0x2b/0x80
[  529.204437][T11556]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  529.204470][T11556]  ? __mutex_unlock_slowpath+0x161/0x7b0
[  529.204488][T11556]  ? lockdep_hardirqs_on+0x7c/0x110
[  529.204533][T11556]  ? sockopt_release_sock+0x52/0x60
[  529.204564][T11556]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  529.204581][T11556]  ? sockopt_release_sock+0x52/0x60
[  529.204616][T11556]  ? nf_sockopt_find.constprop.0+0x222/0x290
[  529.204645][T11556]  nf_setsockopt+0x8d/0xf0
[  529.204674][T11556]  ip_setsockopt+0xcb/0xf0
[  529.204698][T11556]  tcp_setsockopt+0xa7/0x100
[  529.204724][T11556]  smc_setsockopt+0x1b6/0xa00
[  529.204746][T11556]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  529.204776][T11556]  ? __pfx_smc_setsockopt+0x10/0x10
[  529.204802][T11556]  ? selinux_socket_setsockopt+0x6a/0x80
[  529.204832][T11556]  ? __pfx_smc_setsockopt+0x10/0x10
[  529.204857][T11556]  do_sock_setsockopt+0xf3/0x1d0
[  529.204886][T11556]  __sys_setsockopt+0x1a0/0x230
[  529.204911][T11556]  __x64_sys_setsockopt+0xbd/0x160
[  529.204932][T11556]  ? do_syscall_64+0x91/0xfa0
[  529.204947][T11556]  ? lockdep_hardirqs_on+0x7c/0x110
[  529.204975][T11556]  do_syscall_64+0xcd/0xfa0
[  529.204993][T11556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.205010][T11556] RIP: 0033:0x7f3aec98f6c9
[  529.205024][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  529.205041][T11556] RSP: 002b:00007f3aed87b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  529.205058][T11556] RAX: ffffffffffffffda RBX: 00007f3aecbe5fa0 RCX: 00007f3aec98f6c9
[  529.205070][T11556] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006
[  529.205080][T11556] RBP: 00007f3aed87b090 R08: 0000000000000430 R09: 0000000000000000
[  529.205091][T11556] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.205103][T11556] R13: 00007f3aecbe6038 R14: 00007f3aecbe5fa0 R15: 00007ffd4d7871e8
[  529.205130][T11556]  </TASK>
[  529.475704][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.496892][   T30] kauditd_printk_skb: 20 callbacks suppressed
[  529.496908][   T30] audit: type=1400 audit(1762476396.587:1537): avc:  denied  { read write } for  pid=11542 comm="syz.3.1443" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  529.580945][   T30] audit: type=1400 audit(1762476396.677:1538): avc:  denied  { open } for  pid=11542 comm="syz.3.1443" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  529.631506][ T5965] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input60
[  529.645820][   T30] audit: type=1400 audit(1762476396.737:1539): avc:  denied  { read } for  pid=5170 comm="acpid" name="mouse1" dev="devtmpfs" ino=3533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  529.646718][T11560] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11560 comm=syz.2.1447
[  529.668730][   T30] audit: type=1400 audit(1762476396.737:1540): avc:  denied  { open } for  pid=5170 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3533 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  529.705040][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.714921][   T30] audit: type=1400 audit(1762476396.737:1541): avc:  denied  { sqpoll } for  pid=11559 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  529.734932][   T30] audit: type=1400 audit(1762476396.777:1542): avc:  denied  { read write } for  pid=11542 comm="syz.3.1443" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  529.758126][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.765397][   T30] audit: type=1400 audit(1762476396.777:1543): avc:  denied  { open } for  pid=11542 comm="syz.3.1443" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  529.788563][    C1] vkms_vblank_simulate: vblank timer overrun
[  529.805851][   T30] audit: type=1400 audit(1762476396.807:1544): avc:  denied  { map } for  pid=11542 comm="syz.3.1443" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  530.031300][   T30] audit: type=1400 audit(1762476396.807:1545): avc:  denied  { execute } for  pid=11542 comm="syz.3.1443" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  530.142909][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1449'.
[  530.160260][ T1206] rc_core: IR keymap rc-hauppauge not found
[  530.174724][ T1206] Registered IR keymap rc-empty
[  530.180688][   T30] audit: type=1400 audit(1762476397.277:1546): avc:  denied  { append } for  pid=11559 comm="syz.2.1447" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  530.226869][ T1206] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  530.251220][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1448'.
[  530.274237][T11575] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  530.281831][T11566] input: syz0 as /devices/virtual/input/input62
[  530.290303][ T1206] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  530.312479][ T1206] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  530.332015][T11575] /dev/nullb0: Can't open blockdev
[  530.418827][ T1206] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61
[  530.509334][T11542] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6575c
[  530.555027][T11542] memcg:ffff8880770e0000
[  530.559375][T11542] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff)
[  530.584731][T11542] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000
[  530.610626][T11542] raw: 0000000000000000 0000000000000000 00000001ffffffff ffff8880770e0000
[  530.660295][T11542] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping))
[  530.779840][T11542] page_owner tracks the page as allocated
[  530.815451][T11542] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 11542, tgid 11542 (syz.3.1443), ts 530509296593, free_ts 530501275731
[  530.859824][T11542]  post_alloc_hook+0x1c0/0x230
[  530.864813][T11542]  get_page_from_freelist+0x10a3/0x3a30
[  530.870661][T11542]  __alloc_frozen_pages_noprof+0x25f/0x2470
[  530.877690][T11542]  alloc_pages_mpol+0x1fb/0x550
[  530.882934][T11542]  folio_alloc_noprof+0x20/0x2d0
[  530.888046][T11542]  filemap_alloc_folio_noprof+0x3a1/0x470
[  530.894913][T11542]  page_cache_ra_order+0x56f/0xf20
[  530.903287][T11542]  filemap_fault+0x1583/0x29a0
[  530.908638][T11542]  __do_fault+0x10d/0x490
[  530.914021][T11542]  do_pte_missing+0x1a6/0x3ba0
[  530.919507][T11542]  __handle_mm_fault+0x1556/0x2aa0
[  530.925140][T11542]  handle_mm_fault+0x589/0xd10
[  530.930477][T11542]  do_user_addr_fault+0x60c/0x1370
[  530.935766][T11542]  exc_page_fault+0x64/0xc0
[  530.940714][T11542]  asm_exc_page_fault+0x26/0x30
[  530.945617][T11542] page last free pid 5824 tgid 5824 stack trace:
[  530.956623][T11542]  __free_frozen_pages+0x7df/0x1160
[  530.962157][T11542]  vfree+0x1fd/0xb50
[  530.966225][T11542]  delayed_vfree_work+0x56/0x70
[  530.971681][T11542]  process_one_work+0x9cf/0x1b70
[  530.978344][T11542]  worker_thread+0x6c8/0xf10
[  530.983880][T11542]  kthread+0x3c5/0x780
[  530.991146][T11542]  ret_from_fork+0x675/0x7d0
[  531.020385][T11542]  ret_from_fork_asm+0x1a/0x30
[  531.035856][T11542] ------------[ cut here ]------------
[  531.041877][T11542] kernel BUG at mm/filemap.c:870!
[  531.127363][T11592] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  531.214878][   T36] Bluetooth: hci5: Frame reassembly failed (-84)
[  531.221595][T11542] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[  531.228063][T11542] CPU: 1 UID: 0 PID: 11542 Comm: syz.3.1443 Not tainted syzkaller #0 PREEMPT(full) 
[  531.237436][T11542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  531.247525][T11542] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[  531.253532][T11542] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48
[  531.273304][T11542] RSP: 0018:ffffc9000fb377e8 EFLAGS: 00010293
[  531.279491][T11542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  531.287474][T11542] RDX: ffff88801cf1c900 RSI: ffffffff81f5baca RDI: ffff88801cf1cd84
[  531.295440][T11542] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[  531.303400][T11542] R10: ffffffff90820cd7 R11: 0000000000000001 R12: 0000000000000002
[  531.311359][T11542] R13: ffffea000195d700 R14: 0000000000000000 R15: 1ffff92001f66f27
[  531.319320][T11542] FS:  00005555802df500(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  531.328249][T11542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  531.334855][T11542] CR2: 0000200000088030 CR3: 0000000051558000 CR4: 00000000003526f0
[  531.342822][T11542] Call Trace:
[  531.346083][T11542]  <TASK>
[  531.349090][T11542]  ? __pfx___filemap_add_folio+0x10/0x10
[  531.354724][T11542]  filemap_add_folio+0x19a/0x610
[  531.359666][T11542]  ? __pfx_filemap_add_folio+0x10/0x10
[  531.365122][T11542]  ? css_rstat_updated+0x1c2/0x510
[  531.370241][T11542]  page_cache_ra_order+0x635/0xf20
[  531.375352][T11542]  filemap_fault+0x1583/0x29a0
[  531.380125][T11542]  ? __pfx_filemap_fault+0x10/0x10
[  531.385221][T11542]  ? lockdep_init_map_type+0x5c/0x280
[  531.390666][T11542]  ? __raw_spin_lock_init+0x3a/0x110
[  531.395935][T11542]  ? __pfx_filemap_map_pages+0x10/0x10
[  531.401381][T11542]  __do_fault+0x10d/0x490
[  531.405739][T11542]  ? __pfx_filemap_map_pages+0x10/0x10
[  531.411191][T11542]  do_pte_missing+0x1a6/0x3ba0
[  531.415940][T11542]  ? __thp_vma_allowable_orders+0x1c8/0xcd0
[  531.421904][T11542]  ? __lock_acquire+0x622/0x1c90
[  531.426831][T11542]  __handle_mm_fault+0x1556/0x2aa0
[  531.431932][T11542]  ? __pfx___handle_mm_fault+0x10/0x10
[  531.437379][T11542]  ? lock_vma_under_rcu+0x176/0x530
[  531.442571][T11542]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  531.448102][T11542]  ? lockdep_hardirqs_on+0x7c/0x110
[  531.453290][T11542]  handle_mm_fault+0x589/0xd10
[  531.458039][T11542]  ? __pkru_allows_pkey+0x11/0xb0
[  531.463054][T11542]  do_user_addr_fault+0x60c/0x1370
[  531.468150][T11542]  ? rcu_is_watching+0x12/0xc0
[  531.472900][T11542]  exc_page_fault+0x64/0xc0
[  531.477393][T11542]  asm_exc_page_fault+0x26/0x30
[  531.482231][T11542] RIP: 0033:0x7f92f2758a88
[  531.486629][T11542] Code: 66 89 74 17 02 88 0f c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 c5 fa 7f 07 c5 fa 7f 4c 17 f0 c3 0f 1f 44 00 00 48 8b 4c 16 f8 48 8b 36 <48> 89 37 48 89 4c 17 f8 c3 62 e1 fe 28 6f 54 16 ff 62 e1 fe 28 6f
[  531.506230][T11542] RSP: 002b:00007ffeaff07158 EFLAGS: 00010246
[  531.512285][T11542] RAX: 00002000009e1000 RBX: 0000000000000004 RCX: 0030656c69662f2e
[  531.520234][T11542] RDX: 0000000000000008 RSI: 0030656c69662f2e RDI: 00002000009e1000
[  531.528183][T11542] RBP: 00007f92f29e7da0 R08: 0000001b32820000 R09: 0000000000000001
[  531.536133][T11542] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f92f29e618c
[  531.544085][T11542] R13: 00007ffeaff07250 R14: fffffffffffffffe R15: 00007ffeaff07270
[  531.552050][T11542]  </TASK>
[  531.555048][T11542] Modules linked in:
[  531.559005][    C1] vkms_vblank_simulate: vblank timer overrun
[  531.565838][T11542] ---[ end trace 0000000000000000 ]---
[  531.793708][T11595] lo speed is unknown, defaulting to 1000
[  531.986909][T11542] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0
[  532.001778][T11542] Code: 52 c7 ff 48 c7 c6 60 70 99 8b 4c 89 ef e8 bd 6b 11 00 90 0f 0b e8 e5 52 c7 ff 48 c7 c6 c0 70 99 8b 4c 89 ef e8 a6 6b 11 00 90 <0f> 0b e8 ce 52 c7 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 52 c7 ff 48
[  532.038486][T11542] RSP: 0018:ffffc9000fb377e8 EFLAGS: 00010293
[  532.118049][T11542] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  532.126321][T11542] RDX: ffff88801cf1c900 RSI: ffffffff81f5baca RDI: ffff88801cf1cd84
[  532.134505][T11542] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001
[  532.142693][T11542] R10: ffffffff90820cd7 R11: 0000000000000001 R12: 0000000000000002
[  532.151906][T11542] R13: ffffea000195d700 R14: 0000000000000000 R15: 1ffff92001f66f27
[  532.160021][T11542] FS:  00005555802df500(0000) GS:ffff888124b08000(0000) knlGS:0000000000000000
[  532.169103][T11542] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  532.275957][T11542] CR2: 0000200000123030 CR3: 0000000051558000 CR4: 00000000003526f0
[  532.284155][  T847] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  532.310286][T11542] Kernel panic - not syncing: Fatal exception
[  532.316668][T11542] Kernel Offset: disabled
[  532.321025][T11542] Rebooting in 86400 seconds..