last executing test programs:

8.477433576s ago: executing program 0 (id=688):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x384, 0x3, 0x1}, 0x18, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
syz_open_procfs(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
shutdown(r2, 0x0)
listen(r2, 0xb)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x62)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}})
syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d4ee0620cf10618012b70102030109022d00010000100009040600024f1ce80009050202000202000009058202"], 0x0)
close(r1)
landlock_restrict_self(r0, 0xb)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0xa3, 0xe2, 0x96, 0x40, 0xa46, 0x269, 0xd846, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x31, 0xe0, 0x80, "", [{{0x9, 0x4, 0x45, 0x2, 0x0, 0x5a, 0x93, 0xd2}}]}}]}}, &(0x7f0000001240)={0x0, 0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="050f1000010b100192454a57f3baef680fc95a9c2afa800fd7747ba707116f4c875b68c601d308e26b180029aca0b7e7fd1d7eef163da133956981288f78aa597c7fa9421fba8a2d1ee559779bb62d2ead317b6e48c5cff6ab912a15acdd0a1cfa47f7aa74573bc260a51ad7ee30fd5df081d2f620286d7d1c4e00ccd60ab9f6cda8fdeb26010000af160e95e133bcb4d2c9e09f2bfe7fcf71faf70c20634586e2fe1789ff3cb19459144352b87e9af50c2d"]})
syz_usb_connect(0x5, 0x29a, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0)

8.347397629s ago: executing program 4 (id=690):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffffe3, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x123, 0x4, 0x70bd28, 0x25dfdbff, {0x16}, [@typed={0x8, 0x142}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2002c841}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000060000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0)

8.095840395s ago: executing program 4 (id=691):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000)
ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x5, 0x6a03, "0f9d0000002000200000b82100"})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004a80)={0x2c, r5, 0x105, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40006)
connect$inet(r3, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r3, r6})
sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}], 0x1}}], 0x1, 0x0)
mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1)
r8 = socket$inet(0xa, 0x800, 0x88)
listen(r8, 0x8)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='bic', 0x5c)
socket$netlink(0x10, 0x3, 0x13)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r9, &(0x7f0000000200), 0xfffffd9d)

5.841094791s ago: executing program 1 (id=697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x4b, 0x0, &(0x7f0000000200)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$key(0xf, 0x3, 0x2)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r4=>0x0})
sendmsg$can_raw(r3, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f00000009c0)=@canfd={{0x4, 0x1}, 0x32, 0x0, 0x0, 0x0, "a1e626f8facc08238b9b756c56cd3765933ad3164db946825a24d1dbd4cf293d3bce76815d0aa531dc2aee4c8863050750c42cd7b949efca0b90790220752309"}, 0x80c}, 0x1, 0x0, 0x0, 0x84844}, 0x0)
sendmsg$key(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)={0x2, 0xa, 0x7, 0x2, 0x7, 0x0, 0x70bd29, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x26, 0x4, 0x9f12443852f025de}]}, 0x38}}, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)

5.641798372s ago: executing program 4 (id=698):
set_mempolicy(0x4005, &(0x7f00000000c0)=0x8000, 0x78)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x20000)
timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r0], 0x34}}, 0x8004004)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x8000000000000000})
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x11142480, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
timer_create(0x0, 0x0, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x3)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x2000c000)
getdents64(0xffffffffffffffff, &(0x7f0000000440)=""/45, 0x2d)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}}, 0x8002)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
mprotect(&(0x7f00007d2000/0x3000)=nil, 0x3000, 0x2000000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x9c940000, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000380)={@remote, 0x9c940000, 0x2, 0x3, 0x2, 0x1, 0x96}, 0x20)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

5.522962839s ago: executing program 1 (id=700):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
keyctl$read(0xb, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, 0x0)

5.363688323s ago: executing program 4 (id=701):
r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x7a40745caf86f1bf, 0x15, 0x4, "1e3c135e"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x80, 0x4, 0xe9, {0xe9, 0x21, "1ce719c1d7d7025a61c6bcb5b1b3ff73253de167eb36ae04d8d7756ad2604b713ff8dce63112a8b8428d8132945f4ed4bd2507c37dadd2096c6513f83621b4e70aaadddcb27f00a15479c3d612dfa1798d8006d19630622eb2fc1f342db5f1200dd6aa1013a222c530c1e90e560eabf5af70d5fed0b5c7907a11bab23f1d134d9df29d410d524990c73b87617517bb100a2230681d20d21ed69b8cb9a357ae976086df081882fb154c562790a3b6fcb1f03c708ff63cec5c84e803cbeeadb34858ee27783304b149ea2743fedad1362ab5571286f6109245955251cb89efb2a2d03fe142272c1e"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000200)={0x40, 0x17, 0xeb, "4f795e8dddbbc3a5e8a40f61e25c4fe237ff7f556dd6cc51c047b6e4f72b9040f25778fb5fe2bac615ba5681dfdc063be4dbc7480b69a9c39b38916de8aee1edd5d8f07bdf777a9eb81124b89ea937820337240fee7dc5c6ad88707b36cc8446fa0d93747e0478c7b2edca88b79652b7e4d9b8f50214017cd96c73a249ac7283de46d389d1a7b6d9895699a3933a1757f7ee9fa3fa9f3f55d0d6881e524bba2841c6b918930ce49ffa6b728c6077d5d76f55b879325460e8f223e90cdf4958dda1cffda38361420db79c28787bbfb4ca7c80533ba14e0fa078493201a34584fec402c428618690aa86b7cb"}, &(0x7f0000000480)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a80)=ANY=[@ANYBLOB="010000000000404218e8bcd9685432f555786f81de5d9e4479dfd5dafe25bd356dde240e85bbb8c53bd68819fe72a2cdeb81236a49b33eff2c2c2fe841411860d1da06bd722165fc00000000bb220e58cc4c1e8377509674905c5890aead94e98cefb49ac5b9c585da200e87e154f245e5d998ff79ad2175cdbf2d995e657753d277986922814ccfb51df5950a1cdba39a3464277457de3d5c60d245a80c65da1f79796bbdc28f7c668b33316cb9a14b8c677352cf39db6df2009dcb03eeadc5f5"]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_ublk_setup_io_uring(0x354a, &(0x7f0000000400)={0x0, 0x30af, 0x400, 0x3, 0x158}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xf2d3, 0x400, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x80, 0x0, 0x10000000, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffffff, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc841, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x3, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x49, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x34, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r10 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r10}, &(0x7f0000000000)=<r11=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
r12 = socket(0x10, 0x3, 0x0)
sendto$inet6(r12, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a4460409456536", 0x35, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r11, 0x1, &(0x7f0000000040), 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
statx(0xffffffffffffffff, 0x0, 0x100, 0x2, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180))
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
syz_clone(0x8a000000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.352292366s ago: executing program 1 (id=702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket(0x1e, 0x4, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000080)={'ip_vti0\x00', <r3=>r1, 0x8000, 0x7800, 0x4, 0xcd, {{0xe, 0x4, 0x0, 0x35, 0x38, 0x65, 0x0, 0x2, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xe}, {[@rr={0x7, 0xf, 0x9e, [@multicast1, @remote, @empty]}, @generic={0x83, 0x12, "c3177557603b3fb5e676912e6a748906"}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x4c, 0x26, 0x200, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffe5, 0xfff2}, {0x8, 0xe}}, [{0x4}, {0x2b}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x801}, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10)
close(r2)
poll(&(0x7f00000002c0)=[{r2, 0x2}, {r2, 0x28}], 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES16=r0, @ANYBLOB="fe059115647917d4dcc3aa10839edbde37aa3486c1c35de177445509f554c47ee750d92885f71e66d7a81e27c3f1e5b9e0098d4c2bb273cb21cc35030ee6c0f079bbe46b8ed145628c028af0376387d4a4d0f14aa5b113de130537475d435a84", @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4)
dup2(r0, r0)

5.122910284s ago: executing program 0 (id=703):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f00000012c0)=""/78, 0x4e}], 0x1}}], 0x1, 0x14000, 0x0)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="f89fcfb587a4792b", 0x8)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080))
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r4, 0x1, 0x31, &(0x7f0000fee000)=0x3fa, 0x4)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
listen(r4, 0xa)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1000, "0eaf9000277aa6d4e4f956e2e641e602032187651faff1ea9ff956771540b3ce", <r5=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f0000000100))
ioctl$TCXONC(r3, 0x540a, 0x1)

4.978955018s ago: executing program 1 (id=704):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x3a)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xee01, &(0x7f00000002c0)='./file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x4a}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x200, 0xfffffffe, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884)

4.930326044s ago: executing program 0 (id=705):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="b9800000c00f3235000800000f300f20d835080000000f22d8420f06fa47f5b979010000b800000000ba000001000f300f009e00000000c461fe5b1bc4427d185708f30f09", 0x45}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30, 0x200448e0}}], 0x1, 0x10)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ppoll(&(0x7f0000000080)=[{r6, 0x8430}, {r6, 0x5303}], 0x2, 0x0, 0x0, 0x0)
write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500000000000000000000000000000012ef4b2c80085c913b5192745d55f04233980f28c255869c1439775990dc2c6406c7ff5f04c19fcbd7c3e63a7420a5cab7", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a464357177330772"], 0x48}}, 0x8000000)
recvmmsg(r4, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(r0, 0x5, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4)
socket(0x400000000010, 0x2, 0x0)
socket$unix(0x1, 0x1, 0x0)

4.174326814s ago: executing program 1 (id=710):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x64c68000)
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000004600)=ANY=[@ANYRES16=r0], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=<r2=>r1], 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f00000045c0)=ANY=[@ANYBLOB="2c0000001a00010029bd6703000000000200001efd0000000031000008001900", @ANYRES32=0x0, @ANYRES64=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
gettid()
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000003c0)={0xada, 0x8005, 0x2, 0x9b6f}, 0x10)
timer_create(0x1, &(0x7f0000002300)={0x0, 0x22, 0x4, @thr={&(0x7f0000002200)="e3a7ded84759e065c96d8f45effa52aab3c2f0daf770c6f95b2cbf8b67f2547e7644878cb50b8f6b3f12c877623672744e0be87f3b227b1eff1badd7c6493835b511f1caf3d9abd80975917d530e5a4c869ddaad11e97fc479262ead4986aadd66cb98cdd502a67b56a59b7801daca68b71b1d526e47b9ca67e142ca260bb54dbf8df39ecbd2c81a4c6f22232f2fd20273f82721ce543e2395f35eb426dd81c14b8958ac35ce64512af93dfb1c92d30b48b9ee3af87fb5a1a88de4c843c0d515041766e31df56a22d6936ab1f03c2705dc0e9af7c8d0ca2b08066baa7add673f34327f6a13fe78da5b883aa2b672512aaa0fcd9ac49a9c883143434764", &(0x7f0000004500)="c556943eff32911647a3cd40b16c7e43ee4b8a4251ca2a793c7e457a8160d8d9ee23cad99f23ac070a73c7eece75f3c4765ede68e1b99b11a7427710aac19e5e1e2769070d2a15b73c396fd30dc6514e6798e2a3bfb5d64ee7c7d576c9d3f7881c88340d216929677a3149ed4c985f1fe317290f184af5a6a9ca9a2c"}}, 0x0)
fcntl$lock(r0, 0x40792f34e4d19d7f, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4010, r0, 0xc447c000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000002340)={0xc})
ioctl$HIDIOCAPPLICATION(r4, 0x4802, 0x4)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0xc0400, &(0x7f0000002380)=ANY=[@ANYBLOB="66863d", @ANYRESHEX, @ANYRES8, @ANYRESDEC, @ANYBLOB="472098a605bdd2b0641dbf9f4ed87506b15d774a74f3002e73f5915392f964826ac4b1de34fbfaec2fa29e41ff018f78ea431a82f4e71c47097f24fb00a164", @ANYRESDEC=0x0])
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r7, 0x29, 0x6, &(0x7f0000000140)=0x4, 0x4)
sendmmsg$inet6(r6, &(0x7f0000001d80)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast1, 0x9}, 0x1c, &(0x7f0000001c00)}}], 0x1, 0x5dc)
read$FUSE(r4, &(0x7f00000024c0)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)={0x90, 0xfffffffffffffff5, 0x1000003, {0x0, 0x200000000, 0x1, 0x4, 0xb, 0x1, {0x1, 0x10001, 0xa, 0x3, 0x0, 0x100, 0x10000, 0x2, 0xc88, 0x0, 0xd, r8, 0x0, 0xffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.894818379s ago: executing program 2 (id=711):
r0 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x1000168})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x100, 0x0)
socket(0x200000000000011, 0x2, 0xd)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x1a, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e)
close_range(r0, 0xffffffffffffffff, 0x0)
r4 = mq_open(&(0x7f0000000480)='!sel\x10\x00\x00\x10\x00\x00\x00\x00\xd7TP\xc1\xde.O\x93\x94\xe7\xf8\x00\x10\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x3, 0x0)
mq_timedreceive(r4, &(0x7f0000000280)=""/199, 0xc7, 0x8200000200007, 0x0)
timer_create(0x0, &(0x7f000049efa0)={0x0, 0x8000000, 0x1, @thr={0x0, 0x0}}, &(0x7f0000044000)=<r5=>0x0)
timer_gettime(r5, &(0x7f0000000000))

3.812406668s ago: executing program 3 (id=712):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
keyctl$read(0xb, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, 0x0)

3.710611153s ago: executing program 3 (id=713):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000004ac14142e00000000000000000000000004000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000001000000000007f00000100000000000000000000000020010000000000000000000000000000fe80000000000000000000000000000e3c000000000000100a0002000a0101010000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000fe8000000000000000000000000000bb3c"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)

3.564142434s ago: executing program 3 (id=714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c000208000900140000000800050000", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x9c)
sendto$inet6(r2, &(0x7f0000000280)="ee", 0x1, 0x200400d0, &(0x7f0000000040)={0xa, 0x4e28, 0x8000028, @loopback, 0x10001}, 0x1c)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = io_uring_setup(0x8, &(0x7f0000000200)={0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc})
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f0000000100)={0x3c, 0xb, 0x1, '\x00', 0x9}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r5, 0x1b, &(0x7f00000000c0)={0x5, 0x4, 0x1, '\x00', 0x7e9}, 0x1)
io_uring_register$IORING_UNREGISTER_NAPI(r5, 0x1c, &(0x7f0000000280), 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000100)={r6, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r6, 0xbe, "2d00e677fc241a800d3139efe67002a2d26fa104caa5669b22dd5f21ccd0f59f42d62146c2a01d22cb65c82bd87f03189eae82d3accca3b29e289dce1d3db06f1f86d55be6c9b802f24566499299fb06ade793deb64af8892be5a468e923d71b1a49eac132824fc9a20744c8e323148f6ebb3a585e2b650799f1233810b544c27a6435f78ac7bbf0b78ab83edce03dcd74043ad2c9ef5b3187bc74e0d743b9fbae2bfeafe263ba4da33c119f4ab348b54f223dc437d97d5eef7dc6ef94bc"}, &(0x7f0000000200)=0xc6)

3.128747637s ago: executing program 4 (id=715):
r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) (async)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x0, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
pipe2(&(0x7f00000001c0), 0xc080)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = timerfd_create(0x0, 0x0)
read(r3, &(0x7f0000002180)=""/262, 0x106)
timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async)
timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x18) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="c481f850d2440f20c03504000000440f22c00fc79c7586000000c421f95b9fc4274b0526400f23360f01bcb8c3b9914ab97d080000b8fac10000ba000000000f30b8010000000f01c18f2978c14c720f2ef720", 0x53}], 0x1, 0x11, 0x0, 0x0)
r5 = syz_usb_connect(0x3, 0x32, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r6, 0x0, 0x0, 0xd000) (async)
pread64(r6, 0x0, 0x0, 0xd000)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) (async)
mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10001, 0x80)
syz_usb_connect(0x6, 0x47, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0x0)

3.00761178s ago: executing program 2 (id=716):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (fail_nth: 24)

2.635190329s ago: executing program 2 (id=717):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2)
socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x80, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r6}}], 0x1, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
r8 = socket$kcm(0x2d, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fcntl$dupfd(r7, 0x406, r8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000408000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.472237046s ago: executing program 3 (id=718):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000a00), 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40003d}, 0x50)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000100000000000000000000000000000080000000100000000000000000000000000000000000000000000202000000008401050000000000000000000000ffffac1414aa000000003c00000000000000ffffffff000000000000000000000000ff34000002020000000000000000000000180000ac1414aa000000000000000000000000000004d33c0000000a0000000000000000000000000000000000000002020000000000000002000000080000fcffffff000000000000000000000000000000000000000032000000000000007f0000010000000000000000000000000335000003030000000000000002000000000000ac1e01010000000000000000000000000000000033"], 0x23c}}, 0x4c090)

2.348973104s ago: executing program 0 (id=719):
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0800000001000000ae04000000000000"], 0x232482)

2.303895336s ago: executing program 3 (id=720):
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x3a)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0xee01, &(0x7f00000002c0)='./file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0x3b5, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x4a}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x200, 0xfffffffe, 0xb3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x20000000, 0xe4, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x2, 0x2, 0x80000250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884)

2.162858306s ago: executing program 2 (id=721):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000006c00000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0)

2.133659256s ago: executing program 0 (id=722):
sched_setattr(0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, &(0x7f00000002c0)}}, &(0x7f0000000000)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1c, 0xffffffffffffffff, &(0x7f0000000000))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettaction={0xc4, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl(r3, 0x3b90, &(0x7f0000000200)="2800000000000000efbeadde0300000005")
close_range(r1, 0xffffffffffffffff, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000240)={<r7=>0xffffffffffffffff})
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x21, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080")
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b"], 0x24}}, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x8, {"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", 0x1000}}, 0x1006)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r9, 0x410, &(0x7f0000000200)={0x2, 0x3, 0x1000000000000003, 0x9b})
sendfile(r7, r7, &(0x7f0000000080)=0x1, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r10 = socket(0x2c, 0x4, 0xbe69)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'lblc\x00', 0x8, 0x42, 0x6f}, 0x2c)

2.089868502s ago: executing program 2 (id=723):
r0 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
keyctl$read(0xb, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x6, 0x80000000, 0xa18c, 0x8}, 0x0)

1.917760721s ago: executing program 0 (id=724):
syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040e604050000010102030109022000010100803209040000020806500007058102000200070502026c701ede7c053b50ac766d650ffa1af57fb5ac18bb39983c07a8efd7faa808e3585851a5aa132563061f9c5786bd7cfb8cac854f39763c0791e9487d6687619211a67748"], 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002b00)={0xac, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x57, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f, 0x11}}, @void}}, @NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x48}}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @supported_rates={0x1, 0x2, [{0x12, 0x1}, {0xc, 0x1}]}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xac}}, 0x20000014)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000380)={"80fdcc44877ead264672f4a498049299221120be50cac8e0bb42670b7dc78035"})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
lsm_set_self_attr(0x67, &(0x7f00000000c0)={0x6a, 0x67, 0x20}, 0x20, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000b00)={0x14, &(0x7f0000000940)={0x40, 0xa, 0xad, {0xad, 0x8, "a7022abf69db9776f028ef59a7aca34dda8612e145a84a276efed5ea6d11ae7c714c8376cf0e2f326514b5981ffbd042f4e0c215e8f8c4d65cb4397200744c6fad2c3851cada1277681d98c523659729438303cce688b1a1c75bbc3cdea556ba60ee794b119be7909ed5a48f20dc30289577f8c41e22761c44d40459d9980936994ebe9b5d160b17070a78a9fd041bcea176a22bf9ddb0c47a54c52c334d91279d9e6739e58943900a62ad"}}, &(0x7f0000000a80)={0x0, 0x3, 0x52, @string={0x52, 0x3, "df9a5e6c8d2c6ea22f8733a509a0b90d718de6aa70d8c92ece6cd25ddec2d949eba092033c837eb03691f9145379db89686bf727c514dc40f211f685d4a63d20ce118353c543cd1959e6a7d95047d620"}}}, &(0x7f0000000e00)={0x44, 0x0, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000cc0)={0x20, 0x81, 0x2, "9c15"}, &(0x7f0000000d00)={0x20, 0x82, 0x3, "6ec963"}, &(0x7f0000000d40)={0x20, 0x83, 0x3, 'qZ^'}, &(0x7f0000000d80)={0x20, 0x84, 0x2, "fda8"}, &(0x7f0000000dc0)={0x20, 0x85, 0x3, "969e75"}})
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)

1.915681669s ago: executing program 2 (id=725):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000300)={0x31e000})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ID={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x58}}, 0xc094) (async, rerun: 64)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) (async, rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000400)={0x0, 0x200000}) (async, rerun: 64)
r4 = creat(&(0x7f0000000300)='./file0\x00', 0x9c) (rerun: 64)
recvmmsg(r2, &(0x7f0000001d00)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, &(0x7f0000000d00)=""/4096, 0x1000}, 0x467}], 0x1, 0x20, &(0x7f0000001d40)={0x0, 0x3938700}) (async, rerun: 32)
fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x2, 0x1, 0x8, 0xfffffffffffffffd}) (rerun: 32)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x13)
syz_usb_connect(0x2, 0xb3, &(0x7f0000000840)=ANY=[@ANYBLOB="12010002ef0201405a22d4e1ada7f5d200010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e0010000000000000000006009001516050001151605000924", @ANYRES32=r5], &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})
linkat(r4, &(0x7f0000000000)='./file0\x00', r5, &(0x7f0000000040)='./file0\x00', 0x2000)

1.742980523s ago: executing program 3 (id=726):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6008000010000104000000000300000000000000", @ANYRES32=r2, @ANYBLOB="2420040085ad0000400012800e00010069703665727370616e0000002c0002800500160002000000060018000100000014000700fc02000000000000000000000000000004001200"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x51a7, 0x208, 0xffffffffffffffff, 0x80000, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xc}, 0x50)
recvmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000080)=""/56, 0x38}], 0x2, &(0x7f0000000180)=""/9, 0x9}, 0x10000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff)
execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000a80)='\x00']}, &(0x7f0000000bc0)={[&(0x7f0000000b00)='./cgroup/syz0\x00', &(0x7f0000000b40)='-/\x00', &(0x7f0000000b80)='&@[\x00']})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
r5 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4ea92e07227bd95b, 0x2, 0x400, 0x80, 0x9, 0xd}, {0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0x9, 0x6}, {0x9, 0x5, 0xe, 0x3, 0x68, 0x2, 0xfb, 0x22}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x4, 0xfe, {0xfe, 0xf, "93832747b7f4bb57f17ba3147447c6db68bf02411e5543ea478c5baf8652d27b05786f55b180239d17210ac5a1c88a1a5315f424af29025b8cd62de4d396ad39dc6ff8cbc24578cd196dbfdd4ee520ccd2d27dbc263931b78b4a8e088249259ea132c6da7b86d145feba1c9903d85fcb9c9b0b3150db7df8571b49c4aee9a6cac1a8fd92ca3da0c6cab518ebab14f89cfed7fa0f5fddb1f153c0f825880fea0a8cc8b4e77b846623470869720573d50957b42a50ef6011164512e9d8477f7f0262b41e699dbfed6999ce7d688a09f1442db81e5d72b5f76554776f5146cdadb6626030c19416835fa3a50e4105990436e9c6c8c4785b317b57d84aea"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="0018bd0000000d948aa880807d5e1c848b95ee8efc05d15999a86bfcee607e7a1e2ea820a5ef1ca4b81d48cb5250931b0ebbbd7a84253129499d48bfd1bc7c0b8a726125a35dfb443172e581032c6a905626cbce89e88c02d1682cfdd959cf54b3716dc32ddda394a3fddf6f40b87c2b49de5d7fea37099565079cdeda28ccbef9309f6e52f408592c688d5985a0cf8bf7fe7b69257466ebc113aad10759a257282ac729e92481474fb8b481a8875cd812aecd6f8a60055ebccf8f5f563d03d14c25f2"], &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000940)={0x21, 0x0, 0x3, "480f68"}})
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="6008000010000104000000000300000000000000", @ANYRES32=r2, @ANYBLOB="2420040085ad0000400012800e00010069703665727370616e0000002c0002800500160002000000060018000100000014000700fc02000000000000000000000000000004001200"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x2, 0x7, 0x51a7, 0x208, 0xffffffffffffffff, 0x80000, '\x00', r2, 0xffffffffffffffff, 0x2, 0x4, 0x2, 0xc}, 0x50) (async)
recvmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/6, 0x6}, {&(0x7f0000000080)=""/56, 0x38}], 0x2, &(0x7f0000000180)=""/9, 0x9}, 0x10000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) (async)
execve(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000ac0)={[&(0x7f0000000a80)='\x00']}, &(0x7f0000000bc0)={[&(0x7f0000000b00)='./cgroup/syz0\x00', &(0x7f0000000b40)='-/\x00', &(0x7f0000000b80)='&@[\x00']}) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async)
syz_clone3(&(0x7f00000000c0)={0x200000400, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) (async)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4ea92e07227bd95b, 0x2, 0x400, 0x80, 0x9, 0xd}, {0x9, 0x5, 0x0, 0x2, 0x40, 0x6, 0x9, 0x6}, {0x9, 0x5, 0xe, 0x3, 0x68, 0x2, 0xfb, 0x22}}}}}}]}}, 0x0) (async)
syz_usb_control_io$sierra_net(r5, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x20, 0x4, 0xfe, {0xfe, 0xf, "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"}}, &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81d}}}, &(0x7f0000000980)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="0018bd0000000d948aa880807d5e1c848b95ee8efc05d15999a86bfcee607e7a1e2ea820a5ef1ca4b81d48cb5250931b0ebbbd7a84253129499d48bfd1bc7c0b8a726125a35dfb443172e581032c6a905626cbce89e88c02d1682cfdd959cf54b3716dc32ddda394a3fddf6f40b87c2b49de5d7fea37099565079cdeda28ccbef9309f6e52f408592c688d5985a0cf8bf7fe7b69257466ebc113aad10759a257282ac729e92481474fb8b481a8875cd812aecd6f8a60055ebccf8f5f563d03d14c25f2"], &(0x7f0000000500)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000940)={0x21, 0x0, 0x3, "480f68"}}) (async)

961.991333ms ago: executing program 1 (id=727):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r1, 0x3a, 0x1, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000013c0)={0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = shmget$private(0x0, 0xe000, 0x2, &(0x7f0000ff2000/0xe000)=nil)
r3 = shmat(r2, &(0x7f0000ff4000/0x2000)=nil, 0x7000)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) (async)
shmdt(r3) (async)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
rt_sigprocmask(0x2, &(0x7f00000001c0)={[0xa1]}, 0x0, 0x8) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x5, 0x3c, {0x3c, 0x22, "1b53ec2a6e84822e88885c175ae34d1ac78b892ef8eee60e305b3b50d9b1504a1157f103888f13019b341c66640a9ae47904513f2f19e5a5e8e3"}}, &(0x7f00000000c0)={0x0, 0x3, 0x38, @string={0x38, 0x3, "10bba044c64d7833cfcfd0e2a04dc74d0eb1af0db7fba465fa4923b43d4234f876e4e604d0da803db8de609999a828f81a7b0f651be2"}}, &(0x7f0000000280)=ANY=[@ANYBLOB="00220d000000b7365fdc883f9f299461c44b2d"], &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x7, 0x1, {0x22, 0x432}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0x5, 0x69, "8fc17d2fa46d6ca49eea6f1d9941a6de02cffbb0ed18aac6906432ecff80b507938089b78cc43ee11b7c86412d2c9836d055ede0534c183366cd6c58156f8632db4c11bc6321e3919d542e3233269441180c6014c29c2ed8896c6181656f443b22073d7612a7e0a645"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)=ANY=[@ANYBLOB="2001ef000000929e8a13ef97c32c5df6b36e57899e870edb39462bb237ae4ee3fddb97e89ad076b3e001eef08673428ffcfde309cdfe82ffb1205b63bac649ca75b326e0a29af2ccab1bcfbade153f50fe997626be016b316e6d8d6fc08814bd82b404240746606b3dccd7afaca904613e3554d1602bc6f570030000005c1563296234e43b8cda852e065ce0244918ce80817ec3e96486a01276c7781b522a71c679265b399810a28a1505fc67d85216cd7b2cb2949d0d053b41e1dfa1b109230fd7ebcdf1d8c950aa8f6d81e668d355f3474333402442bbd7c31415a48673d58826bf44bdaa01a4f6472cb1579b8f4999f0cae6e0b10c3f975ab99d859d3e3b7104eebda000000000eadf43fdd05988b0f79f07699415019aa34fc3858bcda5296832aef367e037361ee9b024ca03ebb656d8e7111a520f00543a15247823f9cb717f7a303a0daf78fc73f61313ed430ccd0491c03e93ef62829e558b48106704bfbcca92638fa0f6894c41324990e699a6f72b300606ae6e277cb892a825e0a3535349b7aca5ea8c1457772190cec6520d17ba356c77242897636d481dd64d376175cc9ade6f2f47a24351b260"], &(0x7f00000003c0)={0x20, 0x3, 0x1, 0xe}})

0s ago: executing program 4 (id=728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0b0}, 0x20000000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000100)=""/7, 0x7}], 0x1)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x100, 0x20, 0x87}, {0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x5, 0xfffffffffffffffb}, {0x5e4, 0x40000000000000, 0x200000000000000, 0x80}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x68004010)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl(r5, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff0100"/72)
ioctl(r4, 0xffff, &(0x7f0000000300)="0100"/72)
ioctl(r5, 0xc048aeca, &(0x7f0000000200)='\a\x00'/72)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000005c0))
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r9=>0x0})
r10 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r11=>r8, {0xfffff800}}, './file0\x00'})
bind$xdp(r10, &(0x7f0000000140)={0x2c, 0x5, r9, 0x1d, r11}, 0x10)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000d0421bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800c0001006d6163766c616e000c000280080009001400000008000500", @ANYRES32=r9, @ANYBLOB="e62d633993a88672fb74e034feebf0ab3a7cd7ee125279826c50916fe58081a06ba4ef06e5a84f3c75ad8bd4787c5f3d1dff5688c9ec0ccb9ae09909008aea9856e74d170000000000000000004ae1ae6754fa082e68507994322993d441282e24792b77164ba327ff6f8071a255d8bfec46bc19a568b036ff7e08cf82e6e1380a9ee1c0fffe61"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x4)

kernel console output (not intermixed with test programs):

ialNumber=3
[  162.456004][   T10] usb 5-1: Product: syz
[  162.456015][   T10] usb 5-1: Manufacturer: syz
[  162.456025][   T10] usb 5-1: SerialNumber: syz
[  162.519340][   T10] usb 5-1: config 0 descriptor??
[  162.541687][   T10] hub 5-1:0.0: bad descriptor, ignoring hub
[  162.541717][   T10] hub 5-1:0.0: probe with driver hub failed with error -5
[  162.596980][   T10] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  162.635206][ T1407] usb 5-1: Failed to submit usb control message: -71
[  162.635249][ T1407] usb 5-1: unable to send the bmi data to the device: -71
[  162.635269][ T1407] usb 5-1: unable to get target info from device
[  162.635299][ T1407] usb 5-1: could not get target info (-71)
[  162.635325][ T1407] usb 5-1: could not probe fw (-71)
[  162.854459][   T30] usb 5-1: USB disconnect, device number 10
[  163.796111][   T30] usb 2-1: USB disconnect, device number 12
[  164.914069][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.935460][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.212247][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.327'.
[  170.660722][   T30] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  170.821192][   T30] usb 2-1: Using ep0 maxpacket: 32
[  170.821910][   T30] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  170.847322][   T30] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  170.847361][   T30] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  170.847386][   T30] usb 2-1: config 0 interface 0 has no altsetting 0
[  170.847423][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.903194][   T30] usb 2-1: config 0 descriptor??
[  170.943502][   T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  171.093675][   T25] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  171.097878][   T25] usb 5-1: config index 0 descriptor too short (expected 69, got 51)
[  171.097945][   T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.098004][   T25] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.118510][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.118539][   T25] usb 5-1: Product: syz
[  171.118555][   T25] usb 5-1: Manufacturer: syz
[  171.118569][   T25] usb 5-1: SerialNumber: syz
[  171.204422][   T25] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  171.375682][   T30] hid_parser_main: 2 callbacks suppressed
[  171.375708][   T30] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  171.375742][   T30] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  171.375770][   T30] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  171.375826][   T30] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  171.375853][   T30] corsair-cpro 0003:1B1C:0C10.0006: unknown main item tag 0x0
[  171.390336][   T25] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -90
[  171.453810][   T30] corsair-cpro 0003:1B1C:0C10.0006: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[  171.533406][   T30] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -90
[  171.587569][   T30] usb 2-1: USB disconnect, device number 13
[  171.661541][ T7061] fido_id[7061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  171.733175][   T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90
[  171.797238][   T25] usb 5-1: USB disconnect, device number 11
[  171.887468][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.306965][ T7094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  174.801103][   T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  174.951010][   T10] usb 1-1: Using ep0 maxpacket: 8
[  174.952218][   T10] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a
[  174.956728][   T10] usb 1-1: config 0 has an invalid interface number: 239 but max is 0
[  174.956757][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.956779][   T10] usb 1-1: config 0 has no interface number 0
[  174.956823][   T10] usb 1-1: config 0 interface 239 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  174.956846][   T10] usb 1-1: config 0 interface 239 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.032840][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.032871][   T10] usb 1-1: Product: syz
[  175.032887][   T10] usb 1-1: Manufacturer: syz
[  175.032903][   T10] usb 1-1: SerialNumber: syz
[  175.072887][   T10] usb 1-1: config 0 descriptor??
[  175.090763][  T189] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  175.243299][  T189] usb 5-1: Using ep0 maxpacket: 8
[  175.245279][  T189] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  175.278529][  T189] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[  175.278586][  T189] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  175.278625][  T189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  175.278680][  T189] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.278707][  T189] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.278752][  T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.302330][ T5677] usb 4-1: USB disconnect, device number 20
[  175.355805][ T5699] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  175.500701][ T5699] usb 3-1: Using ep0 maxpacket: 16
[  175.501550][ T5699] usb 3-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  175.502946][ T5699] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.502980][ T5699] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  175.503010][ T5699] usb 3-1: config 0 interface 0 has no altsetting 0
[  175.503045][ T5699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.510395][ T5699] usb 3-1: config 0 descriptor??
[  175.596374][  T189] usb 5-1: GET_CAPABILITIES returned 0
[  175.596427][  T189] usbtmc 5-1:16.0: can't read capabilities
[  175.817557][ T7115] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71
[  175.945123][   T10] ath6kl: Failed to submit usb control message: -71
[  175.945214][   T10] ath6kl: unable to send the bmi data to the device: -71
[  175.945232][   T10] ath6kl: Unable to send get target info: -71
[  175.948034][   T10] ath6kl: Failed to init ath6kl core: -71
[  175.949698][   T10] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71
[  176.004267][   T10] usb 1-1: USB disconnect, device number 17
[  176.039143][ T5699] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04B4:BCA1.0007/input/input11
[  176.076337][ T7149] binder: 7137:7149 ioctl 4018620d 0 returned -22
[  176.135147][  T189] usb 5-1: USB disconnect, device number 12
[  176.174526][ T5699] cypress 0003:04B4:BCA1.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.2-1/input0
[  176.710747][   T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  176.863027][   T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  176.881142][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.881171][   T25] usb 4-1: Product: syz
[  176.881186][   T25] usb 4-1: Manufacturer: syz
[  176.881201][   T25] usb 4-1: SerialNumber: syz
[  177.187072][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  177.338511][   T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  177.338581][   T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  177.561179][   T30] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  177.724183][   T30] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  177.728796][   T30] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  177.728825][   T30] usb 2-1: config 5 has no interface number 0
[  177.728866][   T30] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  177.728925][   T30] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  177.728955][   T30] usb 2-1: config 5 interface 123 has no altsetting 0
[  177.750004][   T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.750035][   T30] usb 2-1: Product: syz
[  177.750052][   T30] usb 2-1: Manufacturer: syz
[  177.750068][   T30] usb 2-1: SerialNumber: syz
[  177.813466][ T7175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  177.952155][  T189] usb 3-1: USB disconnect, device number 16
[  178.098154][   T30] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  178.174473][   T30] usb 2-1: USB disconnect, device number 14
[  178.221901][   T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO
[  178.221965][   T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  178.223346][   T25] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  178.266768][   T25] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  178.398479][   T25] usb 4-1: USB disconnect, device number 21
[  178.917427][ T7196] vivid-000: disconnect
[  179.049874][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.545825][ T7209] loop0: detected capacity change from 0 to 3904
[  179.582999][ T7209] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  179.583024][ T7209] ldm_validate_privheads(): Disk read failed.
[  179.587037][ T7209] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  179.587056][ T7209] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  179.587065][ T7209] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  179.587077][ T7209] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  179.587086][ T7209] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  179.587128][ T7209]  loop0:
[  179.587141][ T7209] loop0: partition table partially beyond EOD, truncated
[  180.357070][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'.
[  180.507460][ T7196] vivid-000: reconnect
[  180.710823][ T5699] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  180.867940][ T5699] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  180.869113][ T5699] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  180.869142][ T5699] usb 2-1: config 5 has no interface number 0
[  180.869184][ T5699] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  180.869215][ T5699] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  180.869244][ T5699] usb 2-1: config 5 interface 123 has no altsetting 0
[  180.920814][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.920843][ T5699] usb 2-1: Product: syz
[  180.920858][ T5699] usb 2-1: Manufacturer: syz
[  180.920874][ T5699] usb 2-1: SerialNumber: syz
[  180.997512][ T7216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.028679][ T7228] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size.
[  181.301993][ T5699] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  181.344885][ T5699] usb 2-1: USB disconnect, device number 15
[  181.821127][ T7251] loop0: detected capacity change from 0 to 3904
[  181.889961][ T7251] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  181.889987][ T7251] ldm_validate_privheads(): Disk read failed.
[  181.890460][ T7251] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  181.890476][ T7251] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  181.890486][ T7251] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  181.890497][ T7251] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  181.890507][ T7251] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  181.890539][ T7251]  loop0:
[  181.898276][ T7251] loop0: partition table partially beyond EOD, truncated
[  182.103754][   T30] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  182.124831][   T25] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  182.253768][   T30] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  182.255549][   T30] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  182.255577][   T30] usb 4-1: config 0 has no interface number 0
[  182.255618][   T30] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.264026][   T25] usb 3-1: device descriptor read/64, error -71
[  182.286884][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.286965][   T30] usb 4-1: Product: syz
[  182.287007][   T30] usb 4-1: Manufacturer: syz
[  182.287048][   T30] usb 4-1: SerialNumber: syz
[  182.331730][   T30] usb 4-1: config 0 descriptor??
[  182.372580][   T30] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[  182.503884][   T25] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  182.631667][   T25] usb 3-1: device descriptor read/64, error -71
[  182.721577][ T7272] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  182.742276][   T25] usb usb3-port1: attempt power cycle
[  183.081534][   T25] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  183.102988][   T25] usb 3-1: device descriptor read/8, error -71
[  183.341257][   T25] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  183.364447][   T25] usb 3-1: device descriptor read/8, error -71
[  183.471044][   T25] usb usb3-port1: unable to enumerate USB device
[  184.227258][ T7285] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.539167][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.411'.
[  184.682449][    C1] usb 4-1: yurex_control_callback - control failed: -2
[  184.698182][  T189] usb 4-1: USB disconnect, device number 22
[  184.709598][  T189] yurex 4-1:0.50: USB YUREX #0 now disconnected
[  184.862492][ T5699] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  184.953991][ T7294] loop0: detected capacity change from 0 to 3904
[  184.987731][ T7294] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  184.987765][ T7294] ldm_validate_privheads(): Disk read failed.
[  184.998199][ T7294] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  184.998272][ T7294] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  184.998312][ T7294] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  184.998354][ T7294] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  184.998393][ T7294] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  184.998529][ T7294]  loop0:
[  184.998574][ T7294] loop0: partition table partially beyond EOD, truncated
[  185.041038][ T5699] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  185.061054][ T5699] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  185.061085][ T5699] usb 2-1: config 5 has no interface number 0
[  185.061126][ T5699] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  185.061155][ T5699] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  185.061183][ T5699] usb 2-1: config 5 interface 123 has no altsetting 0
[  185.118853][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.118892][ T5699] usb 2-1: Product: syz
[  185.118907][ T5699] usb 2-1: Manufacturer: syz
[  185.118923][ T5699] usb 2-1: SerialNumber: syz
[  185.149498][ T7292] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  185.381425][ T5699] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  185.402329][ T5699] usb 2-1: USB disconnect, device number 16
[  185.529428][ T7313] netlink: 'syz.4.417': attribute type 10 has an invalid length.
[  185.594451][ T7313] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  185.701178][  T189] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  185.862220][  T189] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  185.864800][  T189] usb 3-1: config 0 interface 0 altsetting 255 bulk endpoint 0x5 has invalid maxpacket 61
[  185.864834][  T189] usb 3-1: config 0 interface 0 has no altsetting 0
[  185.868378][  T189] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  185.868406][  T189] usb 3-1: Product: syz
[  185.868423][  T189] usb 3-1: Manufacturer: syz
[  185.868439][  T189] usb 3-1: SerialNumber: syz
[  185.957724][  T189] usb 3-1: config 0 descriptor??
[  185.959127][ T7309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  185.987315][  T189] usb 3-1: selecting invalid altsetting 0
[  187.451838][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'.
[  187.551536][ T5676] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  187.585696][ T7358] syzkaller0: entered allmulticast mode
[  187.639669][  T189] usb 3-1: USB disconnect, device number 21
[  187.722111][ T5676] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  187.728026][ T5676] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  187.728048][ T5676] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.728084][ T5676] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  187.752600][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.752680][ T5676] usb 2-1: Product: syz
[  187.752723][ T5676] usb 2-1: Manufacturer: syz
[  187.752766][ T5676] usb 2-1: SerialNumber: syz
[  187.816147][ T5676] usb 2-1: config 0 descriptor??
[  187.834753][ T5676] usb-storage 2-1:0.0: USB Mass Storage device detected
[  187.858154][ T5676] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  188.046748][ T7349] IPVS: set_ctl: invalid protocol: 103 100.1.1.2:20004
[  188.062034][ T5676] usb 2-1: USB disconnect, device number 17
[  188.768424][ T7385] bond0: (slave bridge0): Releasing backup interface
[  188.852756][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.439'.
[  189.193032][ T7385] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  189.462828][ T7407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.443'.
[  190.816556][ T7427] netlink: Unknown nat attribute (0)
[  190.816584][ T7427] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.880304][ T7428] loop0: detected capacity change from 0 to 3904
[  190.957805][ T7428] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  190.957835][ T7428] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID.
[  190.957849][ T7428] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  190.957903][ T7428]  loop0:
[  191.496076][ T5676] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  191.643407][ T5676] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  191.645043][ T5676] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  191.645097][ T5676] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  191.645124][ T5676] usb 3-1: config 0 interface 0 has no altsetting 0
[  191.652488][ T5676] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  191.652516][ T5676] usb 3-1: Product: syz
[  191.652532][ T5676] usb 3-1: Manufacturer: syz
[  191.652547][ T5676] usb 3-1: SerialNumber: syz
[  191.688874][ T5676] usb 3-1: config 0 descriptor??
[  191.746972][ T5676] hub 3-1:0.0: bad descriptor, ignoring hub
[  191.747022][ T5676] hub 3-1:0.0: probe with driver hub failed with error -5
[  191.810425][ T5676] usb 3-1: selecting invalid altsetting 0
[  192.036310][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.457'.
[  192.881186][ T7471] loop0: detected capacity change from 0 to 4096
[  192.905094][ T7471] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  192.905467][ T7471] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  192.905490][ T7471] ldm_validate_privheads(): Cannot find PRIVHEAD 2.
[  192.905565][ T7471]  loop0:
[  193.128862][ T7473] netlink: 'syz.3.463': attribute type 1 has an invalid length.
[  193.158146][ T7473] bond1: entered promiscuous mode
[  193.158212][ T7473] bond1: entered allmulticast mode
[  193.158569][ T7473] 8021q: adding VLAN 0 to HW filter on device bond1
[  193.322242][ T5676] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  193.410754][   T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  193.470668][ T5676] usb 2-1: Using ep0 maxpacket: 32
[  193.471296][ T5676] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  193.472591][ T5676] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  193.472621][ T5676] usb 2-1: config 0 has no interface number 0
[  193.474732][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.474759][ T5676] usb 2-1: Product: syz
[  193.474774][ T5676] usb 2-1: Manufacturer: syz
[  193.474789][ T5676] usb 2-1: SerialNumber: syz
[  193.477305][ T5676] usb 2-1: config 0 descriptor??
[  193.520862][ T5676] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  193.603686][   T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  193.607677][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.607706][   T25] usb 4-1: Product: syz
[  193.607750][   T25] usb 4-1: Manufacturer: syz
[  193.607766][   T25] usb 4-1: SerialNumber: syz
[  193.629641][   T25] usb 4-1: config 0 descriptor??
[  194.109994][ T7473] bridge1: entered promiscuous mode
[  194.110262][ T7473] bridge1: entered allmulticast mode
[  194.125713][ T7473] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  194.127803][ T5676] usb 2-1: qt2_attach - failed to power on unit: -71
[  194.128129][ T5676] quatech2 2-1:0.51: probe with driver quatech2 failed with error -71
[  194.157442][ T7139] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  194.171264][ T5676] usb 2-1: USB disconnect, device number 18
[  194.195340][   T25] usb 4-1: Firmware version (0.0) predates our first public release.
[  194.195371][   T25] usb 4-1: Please update to version 0.2 or newer
[  194.284848][   T35] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  194.337383][ T7450] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow!
[  194.360179][   T25] usb 4-1: USB disconnect, device number 23
[  194.368548][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  194.368601][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  194.441786][  T943] usb 3-1: USB disconnect, device number 22
[  195.190879][   T25] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  195.362195][   T25] usb 4-1: Using ep0 maxpacket: 32
[  195.363509][   T25] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  195.366969][   T25] usb 4-1: config index 0 descriptor too short (expected 27632, got 27)
[  195.366997][   T25] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  195.367021][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  195.367044][   T25] usb 4-1: config 1 has no interface number 0
[  195.367085][   T25] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  195.367115][   T25] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  195.367160][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.474659][   T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  196.018868][   T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  197.007109][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.1.475'.
[  197.081968][   T25] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  197.308043][ T7541] bond1: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5)
[  197.337365][ T7541] bond1 (unregistering): Released all slaves
[  197.599042][ T7563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'.
[  197.685212][ T7563] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'.
[  197.768154][   T25] usb 4-1: USB disconnect, device number 24
[  197.784898][   T25] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  198.698724][ T7598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.484'.
[  198.710244][ T7599] netlink: 48 bytes leftover after parsing attributes in process `syz.0.484'.
[  198.982059][   T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  199.110764][   T25] usb 1-1: device descriptor read/64, error -71
[  199.351404][   T25] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  199.480938][   T25] usb 1-1: device descriptor read/64, error -71
[  199.591584][   T25] usb usb1-port1: attempt power cycle
[  199.690934][ T7609] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.930713][   T25] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  199.953845][   T25] usb 1-1: device descriptor read/8, error -71
[  200.190671][   T25] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  200.227239][   T25] usb 1-1: device descriptor read/8, error -71
[  200.331058][   T25] usb usb1-port1: unable to enumerate USB device
[  200.499107][ T7633] No buffer was provided with the request
[  201.041026][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  201.200962][   T10] usb 4-1: Using ep0 maxpacket: 8
[  201.201706][   T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  201.202838][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  201.202887][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.208158][   T10] usb 4-1: config 0 descriptor??
[  201.439021][   T10] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  201.662523][  T943] usb 4-1: USB disconnect, device number 25
[  202.237731][ T7660] loop0: detected capacity change from 0 to 3904
[  202.289354][ T7660] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  202.289378][ T7660] ldm_validate_privheads(): Disk read failed.
[  202.297920][ T7660] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  202.297993][ T7660] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  202.298027][ T7660] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  202.298069][ T7660] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  202.298110][ T7660] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  202.298251][ T7660]  loop0:
[  202.298304][ T7660] loop0: partition table partially beyond EOD, truncated
[  202.911118][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  202.950862][  T943] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  203.085053][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0118, bcdDevice=3e.1f
[  203.087915][   T10] usb 3-1: config 8 has an invalid interface number: 235 but max is 0
[  203.087936][   T10] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  203.087950][   T10] usb 3-1: config 8 has no interface number 0
[  203.087977][   T10] usb 3-1: config 8 interface 235 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  203.087998][   T10] usb 3-1: config 8 interface 235 has no altsetting 0
[  203.088021][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.120201][   T10] hub 3-1:8.235: bad descriptor, ignoring hub
[  203.120277][   T10] hub 3-1:8.235: probe with driver hub failed with error -5
[  203.125668][  T943] usb 5-1: Using ep0 maxpacket: 32
[  203.178744][  T943] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  203.193045][  T943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  203.193134][  T943] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  203.193165][  T943] usb 5-1: config 1 interface 0 has no altsetting 1
[  203.193557][  T943] usb 5-1: config 1 interface 1 has no altsetting 0
[  203.206282][   T10] keyspan 3-1:8.235: Keyspan - (without firmware) converter detected
[  203.228622][  T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.228643][  T943] usb 5-1: Product: syz
[  203.228655][  T943] usb 5-1: Manufacturer: syz
[  203.228673][  T943] usb 5-1: SerialNumber: syz
[  203.308117][  T943] snd-ua101 5-1:1.1: invalid num_altsetting
[  203.308153][  T943] snd-ua101 5-1:1.0: invalid bNumEndpoints
[  203.308483][  T943] usb 5-1: selecting invalid altsetting 0
[  203.334261][  T943] usb 5-1: selecting invalid altsetting 0
[  203.334294][  T943] usbtest 5-1:1.1: probe with driver usbtest failed with error -22
[  203.335294][  T943] usb 5-1: selecting invalid altsetting 0
[  203.335320][  T943] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22
[  203.335615][  T943] usb 5-1: selecting invalid altsetting 0
[  203.335640][  T943] snd-ua101 5-1:1.1: probe with driver snd-ua101 failed with error -22
[  203.515248][ T7666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.502'.
[  203.552947][  T189] usb 3-1: USB disconnect, device number 23
[  203.553765][  T189] keyspan 3-1:8.235: device disconnected
[  203.721329][  T189] usb 5-1: USB disconnect, device number 13
[  203.808657][ T7691] FAULT_INJECTION: forcing a failure.
[  203.808657][ T7691] name failslab, interval 1, probability 0, space 0, times 0
[  203.808701][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.1.509 Not tainted syzkaller #0 PREEMPT(full) 
[  203.808726][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  203.808741][ T7691] Call Trace:
[  203.808749][ T7691]  <TASK>
[  203.808759][ T7691]  dump_stack_lvl+0xe8/0x150
[  203.808794][ T7691]  should_fail_ex+0x410/0x560
[  203.808828][ T7691]  should_failslab+0xa8/0x100
[  203.808859][ T7691]  __kmalloc_cache_noprof+0xa3/0x600
[  203.808886][ T7691]  ? sctp_add_bind_addr+0x8c/0x370
[  203.808909][ T7691]  ? sctp_add_bind_addr+0x8c/0x370
[  203.808934][ T7691]  ? __pfx_sctp_get_port_local+0x10/0x10
[  203.808970][ T7691]  sctp_add_bind_addr+0x8c/0x370
[  203.808993][ T7691]  ? sctp_auto_asconf_init+0x14d/0x1d0
[  203.809028][ T7691]  sctp_do_bind+0x597/0x9a0
[  203.809065][ T7691]  sctp_connect_new_asoc+0x270/0x6b0
[  203.809098][ T7691]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  203.809136][ T7691]  ? __local_bh_enable_ip+0xd6/0x140
[  203.809164][ T7691]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  203.809198][ T7691]  ? security_sctp_bind_connect+0x7e/0x2c0
[  203.809229][ T7691]  sctp_sendmsg+0x159b/0x2d00
[  203.809273][ T7691]  ? __pfx_sctp_sendmsg+0x10/0x10
[  203.809322][ T7691]  ? __lock_acquire+0x747/0x2de0
[  203.809366][ T7691]  ? aa_sock_msg_perm+0xfc/0x210
[  203.809396][ T7691]  ? sock_rps_record_flow+0x19/0x350
[  203.809426][ T7691]  ? inet_sendmsg+0x298/0x320
[  203.809455][ T7691]  ? __pfx_inet_sendmsg+0x10/0x10
[  203.809479][ T7691]  sock_sendmsg_nosec+0x10e/0x180
[  203.809510][ T7691]  ____sys_sendmsg+0x54e/0x850
[  203.809561][ T7691]  ? __pfx_____sys_sendmsg+0x10/0x10
[  203.809606][ T7691]  ? import_iovec+0x73/0xa0
[  203.809641][ T7691]  ___sys_sendmsg+0x2a5/0x360
[  203.809673][ T7691]  ? __lock_acquire+0x747/0x2de0
[  203.809702][ T7691]  ? __pfx____sys_sendmsg+0x10/0x10
[  203.809773][ T7691]  ? __fget_files+0x2a/0x420
[  203.809805][ T7691]  ? __fget_files+0x3a2/0x420
[  203.809849][ T7691]  __x64_sys_sendmsg+0x1b1/0x290
[  203.809886][ T7691]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  203.809945][ T7691]  do_syscall_64+0x166/0x520
[  203.809976][ T7691]  ? trace_irq_disable+0x3b/0x140
[  203.810000][ T7691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.810024][ T7691]  ? clear_bhb_loop+0x70/0xc0
[  203.810052][ T7691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.810074][ T7691] RIP: 0033:0x7f8bb179e159
[  203.810095][ T7691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  203.810115][ T7691] RSP: 002b:00007f8bb26ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  203.810140][ T7691] RAX: ffffffffffffffda RBX: 00007f8bb1a25fa0 RCX: 00007f8bb179e159
[  203.810157][ T7691] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  203.810172][ T7691] RBP: 00007f8bb26ab090 R08: 0000000000000000 R09: 0000000000000000
[  203.810186][ T7691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  203.810200][ T7691] R13: 00007f8bb1a26038 R14: 00007f8bb1a25fa0 R15: 00007f8bb1b4fa48
[  203.810235][ T7691]  </TASK>
[  204.229288][ T7694] fuse: fd is not a fuse device
[  204.383556][ T7702] netlink: 48 bytes leftover after parsing attributes in process `syz.0.512'.
[  204.423844][ T7703] loop0: detected capacity change from 0 to 3904
[  204.468481][ T7703] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  204.468516][ T7703] ldm_validate_privheads(): Disk read failed.
[  204.470164][ T7703] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  204.470189][ T7703] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  204.470204][ T7703] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  204.470220][ T7703] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  204.470234][ T7703] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  204.470284][ T7703]  loop0:
[  204.470303][ T7703] loop0: partition table partially beyond EOD, truncated
[  205.301224][  T943] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  205.382582][   T25] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  205.452199][  T943] usb 5-1: Using ep0 maxpacket: 8
[  205.454147][  T943] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  205.458554][  T943] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  205.458581][  T943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.458601][  T943] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  205.458656][  T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.497449][  T943] usb 5-1: config 0 descriptor??
[  205.530801][   T25] usb 4-1: Using ep0 maxpacket: 32
[  205.531614][   T25] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  205.535174][   T25] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  205.535200][   T25] usb 4-1: config 0 has no interface number 0
[  205.535242][   T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.535270][   T25] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.535309][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.627324][   T25] usb 4-1: config 0 descriptor??
[  205.816671][ T7731] syz_tun: entered allmulticast mode
[  205.881150][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  206.032214][   T10] usb 3-1: Using ep0 maxpacket: 8
[  206.033136][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  206.038363][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  206.038393][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.038413][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  206.038450][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.095206][  T189] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  206.097008][   T10] usb 3-1: config 0 descriptor??
[  206.241032][  T189] usb 2-1: Using ep0 maxpacket: 8
[  206.241948][  T189] usb 2-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  206.243507][  T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.243546][  T189] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  206.243576][  T189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.262848][  T189] usb 2-1: config 0 descriptor??
[  206.364876][   T25] uclogic 0003:28BD:0094.0008: failed retrieving string descriptor #100: -71
[  206.364966][   T25] uclogic 0003:28BD:0094.0008: failed retrieving pen parameters: -71
[  206.364991][   T25] uclogic 0003:28BD:0094.0008: pen probing failed: -71
[  206.365008][   T25] uclogic 0003:28BD:0094.0008: failed probing parameters: -71
[  206.365131][   T25] uclogic 0003:28BD:0094.0008: probe with driver uclogic failed with error -71
[  206.424173][   T25] usb 4-1: USB disconnect, device number 26
[  206.701047][ T5615] Bluetooth: hci2: command 0x0406 tx timeout
[  206.701117][ T5615] Bluetooth: hci3: command 0x0406 tx timeout
[  206.701149][ T5615] Bluetooth: hci0: command 0x0406 tx timeout
[  206.701176][ T5615] Bluetooth: hci1: command 0x0406 tx timeout
[  206.701195][ T5615] Bluetooth: hci4: command 0x0406 tx timeout
[  206.745282][ T7730] syz_tun: left allmulticast mode
[  206.759997][  T189] usbhid 2-1:0.0: can't add hid device: -71
[  206.760078][  T189] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  206.831248][  T189] usb 2-1: USB disconnect, device number 19
[  207.330657][   T25] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  207.496795][   T25] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.496848][   T25] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  207.499628][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.499659][   T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  207.499717][   T25] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  207.499755][   T25] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  207.499796][   T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  207.499824][   T25] usb 4-1: config 1 interface 1 has no altsetting 0
[  207.591622][   T25] usb 4-1: string descriptor 0 read error: -22
[  207.591776][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.034167][   T25] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2)
[  208.034205][   T25] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  208.034225][   T25] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  208.212252][  T189] usb 5-1: USB disconnect, device number 14
[  208.414244][  T943] usb 3-1: USB disconnect, device number 24
[  208.446612][   T31] kauditd_printk_skb: 22 callbacks suppressed
[  208.446633][   T31] audit: type=1326 audit(1791188165.597:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.446683][   T31] audit: type=1326 audit(1791188165.597:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.485063][   T31] audit: type=1326 audit(1791188165.637:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.515758][   T31] audit: type=1326 audit(1791188165.667:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.572659][   T31] audit: type=1326 audit(1791188165.727:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.572717][   T31] audit: type=1326 audit(1791188165.727:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.572762][   T31] audit: type=1326 audit(1791188165.727:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.574438][   T31] audit: type=1326 audit(1791188165.727:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.574487][   T31] audit: type=1326 audit(1791188165.727:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.574540][   T31] audit: type=1326 audit(1791188165.727:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.4.526" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f10be79e159 code=0x7ffc0000
[  208.759218][   T25] usb 4-1: 2:0: failed to get current value for ch 1 (-71)
[  208.811786][   T25] usb 4-1: USB disconnect, device number 27
[  209.371024][   T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  209.486975][ T7763] syz_tun: entered allmulticast mode
[  209.520797][  T943] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  209.521882][   T25] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  209.523545][   T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  209.523566][   T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  209.525866][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.525893][   T25] usb 5-1: Product: syz
[  209.525911][   T25] usb 5-1: Manufacturer: syz
[  209.525926][   T25] usb 5-1: SerialNumber: syz
[  209.540907][  T189] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  209.690646][  T943] usb 1-1: Using ep0 maxpacket: 8
[  209.691463][  T943] usb 1-1: New USB device found, idVendor=07c0, idProduct=b112, bcdDevice=30.22
[  209.691463][  T189] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  209.692847][  T189] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28780, setting to 1024
[  209.692880][  T189] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  209.693419][  T943] usb 1-1: unable to read config index 0 descriptor/start: -61
[  209.693453][  T943] usb 1-1: can't read configurations, error -61
[  209.695256][  T189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.695285][  T189] usb 3-1: Product: syz
[  209.695295][  T189] usb 3-1: Manufacturer: syz
[  209.695307][  T189] usb 3-1: SerialNumber: syz
[  209.717125][ T7752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  209.734833][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  209.818861][   T25] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  209.820144][  T189] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  209.851475][  T189] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  209.851475][  T189]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  209.886657][  T943] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  209.892966][   T10] usb 4-1: Using ep0 maxpacket: 8
[  209.895959][   T10] usb 4-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  209.904471][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.910433][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.910844][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.946227][   T10] usb 4-1: config 0 descriptor??
[  210.050634][  T943] usb 1-1: Using ep0 maxpacket: 8
[  210.052220][  T943] usb 1-1: New USB device found, idVendor=07c0, idProduct=b112, bcdDevice=30.22
[  210.054092][  T943] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.054129][  T943] usb 1-1: can't read configurations, error -61
[  210.054408][  T943] usb usb1-port1: attempt power cycle
[  210.352793][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  210.352933][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  210.358719][ T7762] syz_tun: left allmulticast mode
[  210.389642][   T10] usb 4-1: USB disconnect, device number 28
[  210.396878][  T943] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  210.421636][  T943] usb 1-1: Using ep0 maxpacket: 8
[  210.422470][  T943] usb 1-1: New USB device found, idVendor=07c0, idProduct=b112, bcdDevice=30.22
[  210.425583][  T943] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.425992][  T943] usb 1-1: can't read configurations, error -61
[  210.552260][ T5706] usb 5-1: USB disconnect, device number 15
[  210.566909][  T943] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  210.583765][ T5706] usblp0: removed
[  210.594909][  T943] usb 1-1: Using ep0 maxpacket: 8
[  210.595459][  T943] usb 1-1: New USB device found, idVendor=07c0, idProduct=b112, bcdDevice=30.22
[  210.597226][  T943] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.597264][  T943] usb 1-1: can't read configurations, error -61
[  210.597576][  T943] usb usb1-port1: unable to enumerate USB device
[  210.709332][ T7771] random: crng reseeded on system resumption
[  210.730299][ T7771] fuse: Bad value for 'user_id'
[  210.730313][ T7771] fuse: Bad value for 'user_id'
[  211.019668][ T7773] loop0: detected capacity change from 0 to 3904
[  211.072938][ T7773] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  211.072982][ T7773] ldm_validate_privheads(): Disk read failed.
[  211.073692][ T7773] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  211.073725][ T7773] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  211.073741][ T7773] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  211.073758][ T7773] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  211.073774][ T7773] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  211.073839][ T7773]  loop0:
[  211.073860][ T7773] loop0: partition table partially beyond EOD, truncated
[  211.471154][ T7779] fuse: Bad value for 'group_id'
[  211.471195][ T7779] fuse: Bad value for 'group_id'
[  211.550680][  T943] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  211.690515][ T7780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.536'.
[  211.709674][  T943] usb 4-1: Using ep0 maxpacket: 8
[  211.710419][  T943] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  211.729159][  T943] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  211.729190][  T943] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.729213][  T943] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  211.729252][  T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.779021][  T943] usb 4-1: config 0 descriptor??
[  212.518710][  T189] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22
[  212.570246][  T189] usb 3-1: USB disconnect, device number 25
[  212.743200][ T7795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'.
[  212.788805][ T7795] vlan3: entered promiscuous mode
[  213.061587][ T7809] syz_tun: entered allmulticast mode
[  213.302886][  T189] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  213.451890][  T189] usb 3-1: Using ep0 maxpacket: 8
[  213.454906][  T189] usb 3-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  213.456790][  T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.456823][  T189] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.456867][  T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.513611][  T189] usb 3-1: config 0 descriptor??
[  213.942053][  T189] usbhid 3-1:0.0: can't add hid device: -71
[  213.942164][  T189] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  213.964864][  T189] usb 3-1: USB disconnect, device number 26
[  214.002516][ T7808] syz_tun: left allmulticast mode
[  214.115162][   T10] usb 4-1: USB disconnect, device number 29
[  214.583949][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'.
[  214.648137][ T7822] fuse: Unknown parameter 'default_permissions '
[  214.649868][   T31] kauditd_printk_skb: 7 callbacks suppressed
[  214.649886][   T31] audit: type=1326 audit(1791188171.797:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.684873][   T31] audit: type=1326 audit(1791188171.817:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685041][   T31] audit: type=1326 audit(1791188171.817:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685150][   T31] audit: type=1326 audit(1791188171.817:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685265][   T31] audit: type=1326 audit(1791188171.817:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685366][   T31] audit: type=1326 audit(1791188171.817:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685496][   T31] audit: type=1326 audit(1791188171.817:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685610][   T31] audit: type=1326 audit(1791188171.817:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685736][   T31] audit: type=1326 audit(1791188171.817:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  214.685852][   T31] audit: type=1326 audit(1791188171.817:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7819 comm="syz.4.551" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10be79e159 code=0x50000
[  215.200737][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  215.281832][  T943] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  215.320699][   T25] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  215.353623][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  215.354625][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  215.354662][   T10] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  215.362731][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.362789][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  215.388507][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.388589][   T10] usb 5-1: Product: syz
[  215.388625][   T10] usb 5-1: Manufacturer: syz
[  215.388672][   T10] usb 5-1: SerialNumber: syz
[  215.480706][   T25] usb 1-1: Using ep0 maxpacket: 8
[  215.482917][   T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  215.485104][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.485130][   T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  215.485176][   T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  215.485205][   T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  215.485250][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.559851][  T943] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  215.573889][  T943] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28780, setting to 1024
[  215.573915][  T943] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  215.577784][   T25] hub 1-1:1.0: bad descriptor, ignoring hub
[  215.577812][   T25] hub 1-1:1.0: probe with driver hub failed with error -5
[  215.618965][   T25] cdc_wdm 1-1:1.0: skipping garbage
[  215.618988][   T25] cdc_wdm 1-1:1.0: skipping garbage
[  215.619207][  T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.619231][  T943] usb 4-1: Product: syz
[  215.619248][  T943] usb 4-1: Manufacturer: syz
[  215.619264][  T943] usb 4-1: SerialNumber: syz
[  215.692031][ T7830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  215.697352][   T25] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  215.697376][   T25] cdc_wdm 1-1:1.0: Unknown control protocol
[  215.757081][  T943] ums-sddr09 4-1:1.0: USB Mass Storage device detected
[  215.789342][  T943] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  215.789342][  T943]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  215.962501][ T7846] ªªªªªª: renamed from vlan0
[  215.982061][   T10] usb 5-1: USB disconnect, device number 16
[  216.073150][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  216.122901][ T5706] usb 1-1: USB disconnect, device number 26
[  216.379012][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'.
[  216.680800][   T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  216.834149][   T10] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  216.836777][   T10] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  216.836848][   T10] usb 5-1: config 5 has no interface number 0
[  216.836891][   T10] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  216.836923][   T10] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  216.836961][   T10] usb 5-1: config 5 interface 123 has no altsetting 0
[  216.845392][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.845499][   T10] usb 5-1: Product: syz
[  216.845556][   T10] usb 5-1: Manufacturer: syz
[  216.845605][   T10] usb 5-1: SerialNumber: syz
[  216.929523][ T7855] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  217.212273][   T10] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  217.236507][   T10] usb 5-1: USB disconnect, device number 17
[  217.873519][ T7867] syz_tun: entered allmulticast mode
[  218.131583][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  218.140812][  T943] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22
[  218.176303][  T943] usb 4-1: USB disconnect, device number 30
[  218.281212][   T10] usb 5-1: Using ep0 maxpacket: 8
[  218.282129][   T10] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00
[  218.283355][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.283389][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.283433][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.348811][   T10] usb 5-1: config 0 descriptor??
[  218.452180][ T7877] fuse: Unknown parameter 'ro:tmode'
[  218.711005][ T5706] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  218.766064][ T7866] syz_tun: left allmulticast mode
[  218.769835][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  218.769922][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  218.810039][   T10] usb 5-1: USB disconnect, device number 18
[  218.874840][ T5706] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  218.876087][ T5706] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0xA has invalid wMaxPacketSize 0
[  218.876112][ T5706] usb 1-1: config 0 interface 0 has no altsetting 0
[  218.879929][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  218.879948][ T5706] usb 1-1: Product: syz
[  218.879959][ T5706] usb 1-1: Manufacturer: syz
[  218.879970][ T5706] usb 1-1: SerialNumber: syz
[  218.901286][ T5706] usb 1-1: config 0 descriptor??
[  218.911260][  T943] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  218.965647][ T5706] usb 1-1: selecting invalid altsetting 0
[  219.081888][  T943] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  219.084016][  T943] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.084041][  T943] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  219.086193][  T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  219.086219][  T943] usb 3-1: SerialNumber: syz
[  219.229035][ T5706] usb 1-1: USB disconnect, device number 27
[  219.347576][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.391037][  T943] usb 3-1: 0:2 : does not exist
[  219.506351][ T7888] bridge2: entered promiscuous mode
[  219.507523][  T943] usb 3-1: USB disconnect, device number 27
[  219.642012][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.729787][ T7891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'.
[  219.780966][ T7891] vlan2: entered promiscuous mode
[  219.780993][ T7891] batadv0: entered promiscuous mode
[  219.907370][ T7894] syzkaller0: entered promiscuous mode
[  219.907389][ T7894] syzkaller0: entered allmulticast mode
[  219.944605][ T7894] tipc: Started in network mode
[  219.944642][ T7894] tipc: Node identity f6997f42c59e, cluster identity 4711
[  219.975481][ T7894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  220.004648][ T7894] tipc: Resetting bearer <eth:syzkaller0>
[  220.079553][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'.
[  220.271626][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  220.370672][ T5706] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  220.423172][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  220.424326][   T10] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  220.424354][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.424374][   T10] usb 4-1: config 0 has no interface number 0
[  220.473107][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.473138][   T10] usb 4-1: Product: syz
[  220.473155][   T10] usb 4-1: Manufacturer: syz
[  220.473171][   T10] usb 4-1: SerialNumber: syz
[  220.479037][   T10] usb 4-1: config 0 descriptor??
[  220.521698][ T5706] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  220.522787][ T5706] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  220.522805][ T5706] usb 5-1: config 5 has no interface number 0
[  220.522832][ T5706] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  220.522850][ T5706] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  220.522869][ T5706] usb 5-1: config 5 interface 123 has no altsetting 0
[  220.529463][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.529491][ T5706] usb 5-1: Product: syz
[  220.529508][ T5706] usb 5-1: Manufacturer: syz
[  220.529524][ T5706] usb 5-1: SerialNumber: syz
[  220.534349][   T10] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22
[  220.628347][ T7902] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  220.784217][ T7894] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.810998][  T189] usb 4-1: USB disconnect, device number 31
[  220.838626][ T7893] tipc: Resetting bearer <eth:syzkaller0>
[  220.900507][ T5706] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  220.911195][ T5706] usb 5-1: USB disconnect, device number 19
[  220.936386][ T7893] tipc: Disabling bearer <eth:syzkaller0>
[  221.220658][  T943] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  221.371386][  T943] usb 2-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  221.372755][  T943] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28780, setting to 1024
[  221.372787][  T943] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  221.374926][  T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.374952][  T943] usb 2-1: Product: syz
[  221.374969][  T943] usb 2-1: Manufacturer: syz
[  221.374984][  T943] usb 2-1: SerialNumber: syz
[  221.432981][ T7908] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  221.435899][  T943] ums-sddr09 2-1:1.0: USB Mass Storage device detected
[  221.473645][  T943] ums-sddr09 2-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  221.473645][  T943]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  221.684915][ T7912] loop0: detected capacity change from 0 to 4096
[  221.740118][ T7912] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  221.750105][ T7912] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting.
[  221.750125][ T7912] ldm_validate_privheads(): Cannot find PRIVHEAD 2.
[  221.750172][ T7912]  loop0:
[  222.132352][ T5706] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  222.284019][ T5706] usb 1-1: Using ep0 maxpacket: 8
[  222.285271][ T5706] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  222.289707][ T5706] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  222.289748][ T5706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.289770][ T5706] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  222.289806][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.354358][ T5706] usb 1-1: config 0 descriptor??
[  222.682383][  T189] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  222.831355][  T189] usb 4-1: Using ep0 maxpacket: 8
[  222.832385][  T189] usb 4-1: New USB device found, idVendor=ff70, idProduct=93ff, bcdDevice=8d.6a
[  222.836838][  T189] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  222.836865][  T189] usb 4-1: config 0 has no interface number 0
[  222.836894][  T189] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  222.836929][  T189] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  222.836949][  T189] usb 4-1: config 0 interface 48 has no altsetting 0
[  222.865759][  T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.865788][  T189] usb 4-1: Product: syz
[  222.865833][  T189] usb 4-1: Manufacturer: syz
[  222.865850][  T189] usb 4-1: SerialNumber: syz
[  222.941441][  T189] usb 4-1: config 0 descriptor??
[  223.301308][ T5706] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  223.451237][ T5706] usb 3-1: Using ep0 maxpacket: 8
[  223.452300][ T5706] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  223.456097][ T5706] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  223.456141][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.502707][ T5706] usb 3-1: config 0 descriptor??
[  223.730861][ T5706] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  223.938091][   T10] usb 3-1: USB disconnect, device number 28
[  224.043585][ T5706] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  224.136894][  T943] ums-sddr09 2-1:1.0: probe with driver ums-sddr09 failed with error -22
[  224.172047][  T943] usb 2-1: USB disconnect, device number 20
[  224.191979][ T5706] usb 5-1: Using ep0 maxpacket: 32
[  224.199958][ T5706] usb 5-1: unable to get BOS descriptor or descriptor too short
[  224.199993][ T5706] usb 5-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40
[  224.218673][ T5706] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  224.218790][ T5706] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  224.247778][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.247799][ T5706] usb 5-1: Product: syz
[  224.247810][ T5706] usb 5-1: Manufacturer: syz
[  224.247821][ T5706] usb 5-1: SerialNumber: syz
[  224.299122][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'.
[  224.498934][ T7946] IPVS: set_ctl: invalid protocol: 65531 255.255.7.0:256
[  224.600369][ T5706] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  224.613123][   T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  224.749844][ T5706] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  224.761952][   T10] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  224.764738][   T10] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  224.764777][   T10] usb 2-1: config 5 has no interface number 0
[  224.764804][   T10] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  224.764824][   T10] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  224.764843][   T10] usb 2-1: config 5 interface 123 has no altsetting 0
[  224.785563][ T5706] usb 5-1: USB disconnect, device number 20
[  224.794074][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.794157][   T10] usb 2-1: Product: syz
[  224.794283][   T10] usb 2-1: Manufacturer: syz
[  224.794333][   T10] usb 2-1: SerialNumber: syz
[  224.887291][ T7944] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  224.920328][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.193200][   T10] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  225.224402][   T10] usb 2-1: USB disconnect, device number 21
[  225.293313][ T7965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.589'.
[  225.425250][ T7967] FAULT_INJECTION: forcing a failure.
[  225.425250][ T7967] name failslab, interval 1, probability 0, space 0, times 0
[  225.425288][ T7967] CPU: 1 UID: 0 PID: 7967 Comm: syz.2.588 Not tainted syzkaller #0 PREEMPT(full) 
[  225.425312][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  225.425326][ T7967] Call Trace:
[  225.425335][ T7967]  <TASK>
[  225.425345][ T7967]  dump_stack_lvl+0xe8/0x150
[  225.425387][ T7967]  should_fail_ex+0x410/0x560
[  225.425445][ T7967]  should_failslab+0xa8/0x100
[  225.425478][ T7967]  __kmalloc_cache_noprof+0xa3/0x600
[  225.425504][ T7967]  ? __kmalloc_cache_noprof+0x14d/0x600
[  225.425528][ T7967]  ? sctp_add_bind_addr+0x8c/0x370
[  225.425556][ T7967]  ? sctp_add_bind_addr+0x8c/0x370
[  225.425587][ T7967]  sctp_add_bind_addr+0x8c/0x370
[  225.425616][ T7967]  sctp_copy_local_addr_list+0x31a/0x4e0
[  225.425643][ T7967]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  225.425671][ T7967]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  225.425701][ T7967]  ? sctp_v4_is_any+0x35/0x60
[  225.425726][ T7967]  ? sctp_copy_one_addr+0x93/0x360
[  225.425754][ T7967]  sctp_bind_addr_copy+0xb3/0x3c0
[  225.425779][ T7967]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  225.425824][ T7967]  sctp_connect_new_asoc+0x2ff/0x6b0
[  225.425859][ T7967]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  225.425897][ T7967]  ? __local_bh_enable_ip+0xd6/0x140
[  225.425924][ T7967]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  225.425966][ T7967]  ? security_sctp_bind_connect+0x7e/0x2c0
[  225.425997][ T7967]  sctp_sendmsg+0x159b/0x2d00
[  225.426041][ T7967]  ? __pfx_sctp_sendmsg+0x10/0x10
[  225.426075][ T7967]  ? __lock_acquire+0x747/0x2de0
[  225.426117][ T7967]  ? aa_sock_msg_perm+0xfc/0x210
[  225.426149][ T7967]  ? sock_rps_record_flow+0x19/0x350
[  225.426179][ T7967]  ? inet_sendmsg+0x298/0x320
[  225.426209][ T7967]  ? __pfx_inet_sendmsg+0x10/0x10
[  225.426235][ T7967]  sock_sendmsg_nosec+0x10e/0x180
[  225.426266][ T7967]  ____sys_sendmsg+0x54e/0x850
[  225.426306][ T7967]  ? __pfx_____sys_sendmsg+0x10/0x10
[  225.426349][ T7967]  ? import_iovec+0x73/0xa0
[  225.426384][ T7967]  ___sys_sendmsg+0x2a5/0x360
[  225.426418][ T7967]  ? __lock_acquire+0x747/0x2de0
[  225.426454][ T7967]  ? __pfx____sys_sendmsg+0x10/0x10
[  225.426527][ T7967]  ? __fget_files+0x2a/0x420
[  225.426559][ T7967]  ? __fget_files+0x3a2/0x420
[  225.426603][ T7967]  __x64_sys_sendmsg+0x1b1/0x290
[  225.426654][ T7967]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  225.426713][ T7967]  do_syscall_64+0x166/0x520
[  225.426749][ T7967]  ? trace_irq_disable+0x3b/0x140
[  225.426774][ T7967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.426797][ T7967]  ? clear_bhb_loop+0x70/0xc0
[  225.426825][ T7967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.426849][ T7967] RIP: 0033:0x7f579b19e159
[  225.426869][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  225.426889][ T7967] RSP: 002b:00007f579c134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  225.426913][ T7967] RAX: ffffffffffffffda RBX: 00007f579b425fa0 RCX: 00007f579b19e159
[  225.426930][ T7967] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  225.426945][ T7967] RBP: 00007f579c134090 R08: 0000000000000000 R09: 0000000000000000
[  225.426960][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  225.426974][ T7967] R13: 00007f579b426038 R14: 00007f579b425fa0 R15: 00007f579b54fa48
[  225.427009][ T7967]  </TASK>
[  225.500851][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  225.967477][ T5706] usb 1-1: USB disconnect, device number 28
[  226.330506][ T7986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  226.337186][ T7986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.382024][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'.
[  226.510829][ T7981] vlan0: entered promiscuous mode
[  226.510855][ T7981] batadv0: entered promiscuous mode
[  227.097277][ T8004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.600'.
[  227.348822][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'.
[  227.456873][ T8017] FAULT_INJECTION: forcing a failure.
[  227.456873][ T8017] name failslab, interval 1, probability 0, space 0, times 0
[  227.456901][ T8017] CPU: 0 UID: 0 PID: 8017 Comm: syz.2.603 Not tainted syzkaller #0 PREEMPT(full) 
[  227.456919][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  227.456929][ T8017] Call Trace:
[  227.456935][ T8017]  <TASK>
[  227.456942][ T8017]  dump_stack_lvl+0xe8/0x150
[  227.456972][ T8017]  should_fail_ex+0x410/0x560
[  227.456996][ T8017]  should_failslab+0xa8/0x100
[  227.457020][ T8017]  __kmalloc_cache_noprof+0xa3/0x600
[  227.457038][ T8017]  ? __kmalloc_cache_noprof+0x14d/0x600
[  227.457055][ T8017]  ? sctp_add_bind_addr+0x8c/0x370
[  227.457071][ T8017]  ? sctp_add_bind_addr+0x8c/0x370
[  227.457092][ T8017]  sctp_add_bind_addr+0x8c/0x370
[  227.457136][ T8017]  sctp_copy_local_addr_list+0x31a/0x4e0
[  227.457165][ T8017]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  227.457192][ T8017]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  227.457222][ T8017]  ? sctp_v4_is_any+0x35/0x60
[  227.457245][ T8017]  ? sctp_copy_one_addr+0x93/0x360
[  227.457276][ T8017]  sctp_bind_addr_copy+0xb3/0x3c0
[  227.457295][ T8017]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  227.457323][ T8017]  sctp_connect_new_asoc+0x2ff/0x6b0
[  227.457348][ T8017]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  227.457377][ T8017]  ? __local_bh_enable_ip+0xd6/0x140
[  227.457398][ T8017]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  227.457421][ T8017]  ? security_sctp_bind_connect+0x7e/0x2c0
[  227.457443][ T8017]  sctp_sendmsg+0x159b/0x2d00
[  227.457474][ T8017]  ? __pfx_sctp_sendmsg+0x10/0x10
[  227.457499][ T8017]  ? __lock_acquire+0x747/0x2de0
[  227.457526][ T8017]  ? aa_sock_msg_perm+0xfc/0x210
[  227.457548][ T8017]  ? sock_rps_record_flow+0x19/0x350
[  227.457570][ T8017]  ? inet_sendmsg+0x298/0x320
[  227.457589][ T8017]  ? __pfx_inet_sendmsg+0x10/0x10
[  227.457606][ T8017]  sock_sendmsg_nosec+0x10e/0x180
[  227.457628][ T8017]  ____sys_sendmsg+0x54e/0x850
[  227.457656][ T8017]  ? __pfx_____sys_sendmsg+0x10/0x10
[  227.457688][ T8017]  ? import_iovec+0x73/0xa0
[  227.457713][ T8017]  ___sys_sendmsg+0x2a5/0x360
[  227.457737][ T8017]  ? __lock_acquire+0x747/0x2de0
[  227.457757][ T8017]  ? __pfx____sys_sendmsg+0x10/0x10
[  227.457807][ T8017]  ? __fget_files+0x2a/0x420
[  227.457831][ T8017]  ? __fget_files+0x3a2/0x420
[  227.457867][ T8017]  __x64_sys_sendmsg+0x1b1/0x290
[  227.457895][ T8017]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  227.457936][ T8017]  do_syscall_64+0x166/0x520
[  227.457960][ T8017]  ? trace_irq_disable+0x3b/0x140
[  227.457976][ T8017]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.457993][ T8017]  ? clear_bhb_loop+0x70/0xc0
[  227.458012][ T8017]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.458028][ T8017] RIP: 0033:0x7f579b19e159
[  227.458043][ T8017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  227.458057][ T8017] RSP: 002b:00007f579c134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  227.458074][ T8017] RAX: ffffffffffffffda RBX: 00007f579b425fa0 RCX: 00007f579b19e159
[  227.458086][ T8017] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  227.458097][ T8017] RBP: 00007f579c134090 R08: 0000000000000000 R09: 0000000000000000
[  227.458107][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  227.458116][ T8017] R13: 00007f579b426038 R14: 00007f579b425fa0 R15: 00007f579b54fa48
[  227.458141][ T8017]  </TASK>
[  227.691975][ T5706] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  227.871960][ T5706] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  227.874580][ T5706] usb 2-1: config 5 has an invalid interface number: 123 but max is 0
[  227.874617][ T5706] usb 2-1: config 5 has no interface number 0
[  227.874698][ T5706] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  227.874727][ T5706] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  227.874754][ T5706] usb 2-1: config 5 interface 123 has no altsetting 0
[  227.891948][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.892088][ T5706] usb 2-1: Product: syz
[  227.892134][ T5706] usb 2-1: Manufacturer: syz
[  227.892179][ T5706] usb 2-1: SerialNumber: syz
[  227.978024][ T8018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  228.217617][ T5706] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  228.237876][ T5706] usb 2-1: USB disconnect, device number 22
[  228.611589][  T943] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  228.750728][  T943] usb 3-1: device descriptor read/64, error -71
[  229.000692][  T943] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  229.059839][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'.
[  229.133890][ T8037] vlan0: entered promiscuous mode
[  229.146046][  T943] usb 3-1: device descriptor read/64, error -71
[  229.151924][ T5706] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  229.252823][  T943] usb usb3-port1: attempt power cycle
[  229.313500][ T5706] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00
[  229.315173][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  229.315207][ T5706] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.315223][ T5706] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  229.358688][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.358769][ T5706] usb 2-1: Product: syz
[  229.358810][ T5706] usb 2-1: Manufacturer: syz
[  229.358850][ T5706] usb 2-1: SerialNumber: syz
[  229.414336][   T25] usb 4-1: USB disconnect, device number 32
[  229.650697][  T943] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  229.671873][  T943] usb 3-1: device descriptor read/8, error -71
[  229.932906][  T943] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  229.936893][ T5706] usb 2-1: cannot create comm data receiver.
[  229.965160][  T943] usb 3-1: device descriptor read/8, error -71
[  229.976140][ T5706] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -8
[  230.075748][  T943] usb usb3-port1: unable to enumerate USB device
[  230.200646][   T25] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  230.329553][ T5706] usb 2-1: USB disconnect, device number 23
[  230.361273][   T25] usb 5-1: Using ep0 maxpacket: 8
[  230.362025][   T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  230.363275][   T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  230.363300][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.363312][   T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  230.363336][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.432624][   T25] usb 5-1: config 0 descriptor??
[  231.495056][ T5706] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  231.660821][ T5706] usb 2-1: Using ep0 maxpacket: 16
[  231.664187][ T5706] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  231.701743][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.701772][ T5706] usb 2-1: Product: syz
[  231.701788][ T5706] usb 2-1: Manufacturer: syz
[  231.701802][ T5706] usb 2-1: SerialNumber: syz
[  231.739405][ T5706] usb 2-1: config 0 descriptor??
[  231.755552][ T5706] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  231.772123][ T5706] usb 2-1: Detected FT-X
[  231.962663][ T5706] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  231.982009][ T5706] ftdi_sio 2-1:0.0: GPIO initialisation failed: -32
[  232.011702][ T5706] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  232.182062][  T189] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  232.708585][   T31] kauditd_printk_skb: 1680 callbacks suppressed
[  232.708607][   T31] audit: type=1326 audit(1791188189.857:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.744125][   T31] audit: type=1326 audit(1791188189.897:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.744491][ T8077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'.
[  232.789820][   T31] audit: type=1326 audit(1791188189.937:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.828963][   T31] audit: type=1326 audit(1791188189.967:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.859600][   T31] audit: type=1326 audit(1791188190.007:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.880931][   T31] audit: type=1326 audit(1791188190.027:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.881074][   T31] audit: type=1326 audit(1791188190.027:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.887026][   T31] audit: type=1326 audit(1791188190.037:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.887148][   T31] audit: type=1326 audit(1791188190.037:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  232.896351][   T31] audit: type=1326 audit(1791188190.047:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8075 comm="syz.0.618" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e3f39e159 code=0x7ffc0000
[  233.318442][   T10] usb 5-1: USB disconnect, device number 21
[  233.331052][  T189] usb 4-1: device descriptor read/64, error -71
[  233.552211][ T5706] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  233.571192][  T189] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  233.579792][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.621'.
[  233.602306][ T8085] vlan0: entered promiscuous mode
[  233.701148][   T10] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  233.707744][ T5706] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  233.721276][  T189] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  233.721457][ T5706] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28780, setting to 1024
[  233.721492][ T5706] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  233.725788][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.725818][ T5706] usb 3-1: Product: syz
[  233.725910][ T5706] usb 3-1: Manufacturer: syz
[  233.725926][ T5706] usb 3-1: SerialNumber: syz
[  233.727393][  T189] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  233.727417][  T189] usb 4-1: config 5 has no interface number 0
[  233.727470][  T189] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  233.727499][  T189] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  233.727526][  T189] usb 4-1: config 5 interface 123 has no altsetting 0
[  233.740322][ T8081] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  233.750267][  T189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.750352][  T189] usb 4-1: Product: syz
[  233.750383][  T189] usb 4-1: Manufacturer: syz
[  233.750426][  T189] usb 4-1: SerialNumber: syz
[  233.808469][ T5706] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[  233.843340][ T8079] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  233.873024][   T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  233.881411][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.881928][   T10] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  233.881992][   T10] usb 5-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  233.922787][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.922817][   T10] usb 5-1: Product: syz
[  233.922833][   T10] usb 5-1: Manufacturer: syz
[  233.922877][   T10] usb 5-1: SerialNumber: syz
[  233.926982][ T5706] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  233.926982][ T5706]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  234.078166][  T189] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  234.097762][  T189] usb 4-1: USB disconnect, device number 34
[  234.261117][ T5677] usb 2-1: USB disconnect, device number 24
[  234.286263][ T5677] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  234.286767][ T5677] ftdi_sio 2-1:0.0: device disconnected
[  234.310577][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  234.399806][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.623'.
[  234.401632][    C0] usb 5-1: received EP1 urb->status = -2
[  234.402592][   T10] usb 5-1: unable to init card! (ret=-110)
[  234.409762][   T10] snd-usb-caiaq 5-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  234.528356][ T5677] usb 5-1: USB disconnect, device number 22
[  234.663668][ T8108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.625'.
[  234.708480][ T8109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.624'.
[  234.731732][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  234.880673][   T10] usb 1-1: Using ep0 maxpacket: 16
[  234.885826][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  234.885878][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40
[  234.887249][   T10] usb 1-1: config 1 interface 0 altsetting 203 endpoint 0x81 has an invalid bInterval 19, changing to 8
[  234.887319][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  234.934272][   T10] usb 1-1: string descriptor 0 read error: -22
[  234.934410][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.998658][   T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12
[  235.453573][ T8120] netlink: 'syz.4.627': attribute type 1 has an invalid length.
[  235.484342][ T8120] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  235.577188][ T8120] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  236.471584][ T5706] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22
[  236.508078][ T5706] usb 3-1: USB disconnect, device number 33
[  237.196111][ T4968] bcm5974 1-1:1.0: could not read from device
[  237.230161][ T4968] bcm5974 1-1:1.0: could not read from device
[  237.244495][ T4968] bcm5974 1-1:1.0: could not read from device
[  237.270142][ T4968] bcm5974 1-1:1.0: could not read from device
[  237.285627][ T4968] bcm5974 1-1:1.0: could not read from device
[  237.302536][   T10] usb 1-1: USB disconnect, device number 29
[  237.538033][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'.
[  237.538060][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'.
[  237.747330][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'.
[  238.081596][   T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  238.232717][   T10] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  238.234814][   T10] usb 1-1: config 5 has an invalid interface number: 123 but max is 0
[  238.234833][   T10] usb 1-1: config 5 has no interface number 0
[  238.234871][   T10] usb 1-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  238.234891][   T10] usb 1-1: config 5 interface 123 altsetting 7 endpoint 0x5 has invalid maxpacket 1088, setting to 64
[  238.234909][   T10] usb 1-1: config 5 interface 123 has no altsetting 0
[  238.240460][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.240477][   T10] usb 1-1: Product: syz
[  238.240487][   T10] usb 1-1: Manufacturer: syz
[  238.240496][   T10] usb 1-1: SerialNumber: syz
[  238.564383][   T10] ni6501 1-1:5.123: driver 'ni6501' failed to auto-configure device.
[  238.594667][   T10] usb 1-1: USB disconnect, device number 30
[  239.251034][   T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  239.360756][ T8186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.642'.
[  239.383463][ T8183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.391337][   T10] usb 3-1: device descriptor read/64, error -71
[  239.394383][ T8183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.476938][ T8190] program syz.4.643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  239.580691][   T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  239.630679][   T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  239.710772][   T25] usb 4-1: device descriptor read/64, error -71
[  239.730846][  T943] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  239.771215][   T10] usb 3-1: device descriptor read/64, error -71
[  239.822145][ T8198] usb usb7: usbfs: process 8198 (syz.4.646) did not claim interface 3 before use
[  239.880913][   T10] usb usb3-port1: attempt power cycle
[  239.881471][  T943] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=fb.9d
[  239.882833][  T943] usb 1-1: config 14 has an invalid interface number: 128 but max is 0
[  239.882859][  T943] usb 1-1: config 14 has no interface number 0
[  239.885641][  T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.885668][  T943] usb 1-1: Product: syz
[  239.885685][  T943] usb 1-1: Manufacturer: syz
[  239.885702][  T943] usb 1-1: SerialNumber: syz
[  239.950893][   T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  240.090929][   T25] usb 4-1: device descriptor read/64, error -71
[  240.136424][ T8192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.137949][ T8192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.211405][   T25] usb usb4-port1: attempt power cycle
[  240.221405][   T10] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  240.241536][   T10] usb 3-1: device descriptor read/8, error -71
[  240.243771][  T943] usb-storage 1-1:14.128: USB Mass Storage device detected
[  240.276681][  T943] usb-storage 1-1:14.128: device ignored
[  240.372335][  T943] usb 1-1: USB disconnect, device number 31
[  240.479963][ T8214] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  240.490642][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  240.511678][   T10] usb 3-1: device descriptor read/8, error -71
[  240.560859][   T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  240.581188][   T25] usb 4-1: device descriptor read/8, error -71
[  240.621252][   T10] usb usb3-port1: unable to enumerate USB device
[  240.820717][   T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  240.842522][   T25] usb 4-1: device descriptor read/8, error -71
[  240.951428][   T25] usb usb4-port1: unable to enumerate USB device
[  241.055751][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.650'.
[  242.190440][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'.
[  242.836521][ T8242] loop0: detected capacity change from 0 to 3904
[  242.910770][ T8242] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes.
[  242.910817][ T8242] ldm_validate_privheads(): Disk read failed.
[  242.914337][ T8242] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  242.914363][ T8242] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt.
[  242.914378][ T8242] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2.
[  242.914395][ T8242] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3.
[  242.914410][ T8242] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK.
[  242.914461][ T8242]  loop0:
[  242.915451][ T8242] loop0: partition table partially beyond EOD, truncated
[  243.374505][ T8268] syz.1.663 (8268): /proc/8265/oom_adj is deprecated, please use /proc/8265/oom_score_adj instead.
[  243.640671][   T10] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  243.690811][   T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  243.802392][   T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  243.803554][   T10] usb 2-1: config 4 has an invalid interface number: 88 but max is 0
[  243.803580][   T10] usb 2-1: config 4 has no interface number 0
[  243.803624][   T10] usb 2-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  243.803641][   T10] usb 2-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  243.803660][   T10] usb 2-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  243.803681][   T10] usb 2-1: config 4 interface 88 has no altsetting 0
[  243.807979][   T10] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3
[  243.807997][   T10] usb 2-1: Manufacturer: syz
[  243.808008][   T10] usb 2-1: SerialNumber: syz
[  243.845801][   T25] usb 5-1: Using ep0 maxpacket: 16
[  243.848589][   T25] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  243.858297][   T25] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  243.858370][   T25] usb 5-1: config 0 has an invalid interface descriptor of length 5, skipping
[  243.858486][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  243.858545][   T25] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  243.884830][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.884912][   T25] usb 5-1: Product: syz
[  243.884946][   T25] usb 5-1: Manufacturer: syz
[  243.884988][   T25] usb 5-1: SerialNumber: syz
[  243.933692][   T25] r8152-cfgselector 5-1: Unknown version 0x0000
[  243.933765][   T25] r8152-cfgselector 5-1: config 0 descriptor??
[  243.985127][ T8268] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  244.450774][   T10] usb 2-1: USB disconnect, device number 25
[  245.099990][ T8290] FAULT_INJECTION: forcing a failure.
[  245.099990][ T8290] name failslab, interval 1, probability 0, space 0, times 0
[  245.100031][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.3.668 Not tainted syzkaller #0 PREEMPT(full) 
[  245.100048][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  245.100060][ T8290] Call Trace:
[  245.100066][ T8290]  <TASK>
[  245.100073][ T8290]  dump_stack_lvl+0xe8/0x150
[  245.100100][ T8290]  should_fail_ex+0x410/0x560
[  245.100124][ T8290]  should_failslab+0xa8/0x100
[  245.100165][ T8290]  __kmalloc_cache_noprof+0xa3/0x600
[  245.100184][ T8290]  ? __kmalloc_cache_noprof+0x14d/0x600
[  245.100200][ T8290]  ? sctp_add_bind_addr+0x8c/0x370
[  245.100217][ T8290]  ? sctp_add_bind_addr+0x8c/0x370
[  245.100239][ T8290]  sctp_add_bind_addr+0x8c/0x370
[  245.100259][ T8290]  sctp_copy_local_addr_list+0x31a/0x4e0
[  245.100278][ T8290]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  245.100299][ T8290]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  245.100320][ T8290]  ? sctp_v4_is_any+0x35/0x60
[  245.100338][ T8290]  ? sctp_copy_one_addr+0x93/0x360
[  245.100358][ T8290]  sctp_bind_addr_copy+0xb3/0x3c0
[  245.100376][ T8290]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  245.100403][ T8290]  sctp_connect_new_asoc+0x2ff/0x6b0
[  245.100428][ T8290]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  245.100455][ T8290]  ? __local_bh_enable_ip+0xd6/0x140
[  245.100476][ T8290]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  245.100500][ T8290]  ? security_sctp_bind_connect+0x7e/0x2c0
[  245.100549][ T8290]  sctp_sendmsg+0x159b/0x2d00
[  245.100601][ T8290]  ? __pfx_sctp_sendmsg+0x10/0x10
[  245.100642][ T8290]  ? __lock_acquire+0x747/0x2de0
[  245.100670][ T8290]  ? aa_sock_msg_perm+0xfc/0x210
[  245.100692][ T8290]  ? sock_rps_record_flow+0x19/0x350
[  245.100713][ T8290]  ? inet_sendmsg+0x298/0x320
[  245.100733][ T8290]  ? __pfx_inet_sendmsg+0x10/0x10
[  245.100750][ T8290]  sock_sendmsg_nosec+0x10e/0x180
[  245.100772][ T8290]  ____sys_sendmsg+0x54e/0x850
[  245.100800][ T8290]  ? __pfx_____sys_sendmsg+0x10/0x10
[  245.100853][ T8290]  ? import_iovec+0x73/0xa0
[  245.100878][ T8290]  ___sys_sendmsg+0x2a5/0x360
[  245.100901][ T8290]  ? __lock_acquire+0x747/0x2de0
[  245.100921][ T8290]  ? __pfx____sys_sendmsg+0x10/0x10
[  245.100972][ T8290]  ? __fget_files+0x2a/0x420
[  245.100995][ T8290]  ? __fget_files+0x3a2/0x420
[  245.101026][ T8290]  __x64_sys_sendmsg+0x1b1/0x290
[  245.101053][ T8290]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  245.101096][ T8290]  do_syscall_64+0x166/0x520
[  245.101119][ T8290]  ? trace_irq_disable+0x3b/0x140
[  245.101137][ T8290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.101153][ T8290]  ? clear_bhb_loop+0x70/0xc0
[  245.101173][ T8290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.101189][ T8290] RIP: 0033:0x7f8b4039e159
[  245.101203][ T8290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  245.101217][ T8290] RSP: 002b:00007f8b411e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  245.101234][ T8290] RAX: ffffffffffffffda RBX: 00007f8b40625fa0 RCX: 00007f8b4039e159
[  245.101245][ T8290] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  245.101255][ T8290] RBP: 00007f8b411e3090 R08: 0000000000000000 R09: 0000000000000000
[  245.101265][ T8290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  245.101275][ T8290] R13: 00007f8b40626038 R14: 00007f8b40625fa0 R15: 00007f8b4074fa48
[  245.101299][ T8290]  </TASK>
[  245.750732][   T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  245.901441][   T25] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  245.906091][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.906152][   T25] usb 3-1: Product: syz
[  245.906171][   T25] usb 3-1: Manufacturer: syz
[  245.906189][   T25] usb 3-1: SerialNumber: syz
[  245.958932][   T25] usb 3-1: config 0 descriptor??
[  245.987181][   T25] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  246.089235][   T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  246.100944][   T25] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  246.100990][   T25] usb 3-1: media controller created
[  246.243128][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  246.246774][ T8293] dvb-usb: bulk message failed: -22 (7/0)
[  246.557640][   T25] DVB: Unable to find symbol mt352_attach()
[  246.736881][   T25] DVB: Unable to find symbol nxt6000_attach()
[  246.736896][   T25] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  246.743583][  T943] r8152-cfgselector 5-1: USB disconnect, device number 23
[  246.794429][   T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  246.836528][   T25] dvb-usb: schedule remote query interval to 1000 msecs.
[  246.836547][   T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  246.836592][   T25] dvb-usb: bulk message failed: -22 (7/0)
[  246.836603][   T25] dvb-usb: bulk message failed: -22 (7/0)
[  246.877028][   T25] usb 3-1: USB disconnect, device number 38
[  247.105137][   T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  247.174539][ T8331] FAULT_INJECTION: forcing a failure.
[  247.174539][ T8331] name failslab, interval 1, probability 0, space 0, times 0
[  247.174566][ T8331] CPU: 1 UID: 0 PID: 8331 Comm: syz.2.680 Not tainted syzkaller #0 PREEMPT(full) 
[  247.174584][ T8331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  247.174594][ T8331] Call Trace:
[  247.174600][ T8331]  <TASK>
[  247.174607][ T8331]  dump_stack_lvl+0xe8/0x150
[  247.174635][ T8331]  should_fail_ex+0x410/0x560
[  247.174659][ T8331]  should_failslab+0xa8/0x100
[  247.174683][ T8331]  __kmalloc_cache_noprof+0xa3/0x600
[  247.174701][ T8331]  ? __kmalloc_cache_noprof+0x14d/0x600
[  247.174718][ T8331]  ? sctp_add_bind_addr+0x8c/0x370
[  247.174734][ T8331]  ? sctp_add_bind_addr+0x8c/0x370
[  247.174756][ T8331]  sctp_add_bind_addr+0x8c/0x370
[  247.174776][ T8331]  sctp_copy_local_addr_list+0x31a/0x4e0
[  247.174820][ T8331]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  247.174847][ T8331]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  247.174877][ T8331]  ? sctp_v4_is_any+0x35/0x60
[  247.174910][ T8331]  ? sctp_copy_one_addr+0x93/0x360
[  247.174938][ T8331]  sctp_bind_addr_copy+0xb3/0x3c0
[  247.174971][ T8331]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  247.174999][ T8331]  sctp_connect_new_asoc+0x2ff/0x6b0
[  247.175024][ T8331]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  247.175051][ T8331]  ? __local_bh_enable_ip+0xd6/0x140
[  247.175072][ T8331]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  247.175097][ T8331]  ? security_sctp_bind_connect+0x7e/0x2c0
[  247.175119][ T8331]  sctp_sendmsg+0x159b/0x2d00
[  247.175150][ T8331]  ? __pfx_sctp_sendmsg+0x10/0x10
[  247.175175][ T8331]  ? __lock_acquire+0x747/0x2de0
[  247.175203][ T8331]  ? aa_sock_msg_perm+0xfc/0x210
[  247.175225][ T8331]  ? sock_rps_record_flow+0x19/0x350
[  247.175246][ T8331]  ? inet_sendmsg+0x298/0x320
[  247.175266][ T8331]  ? __pfx_inet_sendmsg+0x10/0x10
[  247.175283][ T8331]  sock_sendmsg_nosec+0x10e/0x180
[  247.175304][ T8331]  ____sys_sendmsg+0x54e/0x850
[  247.175355][ T8331]  ? __pfx_____sys_sendmsg+0x10/0x10
[  247.175396][ T8331]  ? import_iovec+0x73/0xa0
[  247.175422][ T8331]  ___sys_sendmsg+0x2a5/0x360
[  247.175449][ T8331]  ? __lock_acquire+0x747/0x2de0
[  247.175469][ T8331]  ? __pfx____sys_sendmsg+0x10/0x10
[  247.175520][ T8331]  ? __fget_files+0x2a/0x420
[  247.175543][ T8331]  ? __fget_files+0x3a2/0x420
[  247.175574][ T8331]  __x64_sys_sendmsg+0x1b1/0x290
[  247.175601][ T8331]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  247.175641][ T8331]  do_syscall_64+0x166/0x520
[  247.175665][ T8331]  ? trace_irq_disable+0x3b/0x140
[  247.175682][ T8331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.175699][ T8331]  ? clear_bhb_loop+0x70/0xc0
[  247.175718][ T8331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.175734][ T8331] RIP: 0033:0x7f579b19e159
[  247.175749][ T8331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  247.175763][ T8331] RSP: 002b:00007f579c134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  247.175781][ T8331] RAX: ffffffffffffffda RBX: 00007f579b425fa0 RCX: 00007f579b19e159
[  247.175793][ T8331] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  247.175803][ T8331] RBP: 00007f579c134090 R08: 0000000000000000 R09: 0000000000000000
[  247.175813][ T8331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  247.175822][ T8331] R13: 00007f579b426038 R14: 00007f579b425fa0 R15: 00007f579b54fa48
[  247.175847][ T8331]  </TASK>
[  247.381292][  T943] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  247.535030][  T943] usb 5-1: Invalid ep0 maxpacket: 64
[  247.672032][  T943] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  247.824760][  T943] usb 5-1: Invalid ep0 maxpacket: 64
[  247.825995][  T943] usb usb5-port1: attempt power cycle
[  248.171079][  T943] usb 5-1: new low-speed USB device number 26 using dummy_hcd
[  248.192700][  T943] usb 5-1: Invalid ep0 maxpacket: 64
[  248.322985][  T943] usb 5-1: new low-speed USB device number 27 using dummy_hcd
[  248.341283][  T943] usb 5-1: Invalid ep0 maxpacket: 64
[  248.341476][  T943] usb usb5-port1: unable to enumerate USB device
[  249.211793][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  249.325869][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  249.702912][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'.
[  249.745738][ T8354] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  249.750324][ T8354] gretap0: entered promiscuous mode
[  249.758451][ T8352] fuse: Bad value for 'fd'
[  249.768363][ T8354] debugfs: 'hsr1' already exists in 'hsr'
[  249.768387][ T8354] Cannot create hsr debugfs directory
[  249.791483][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'.
[  250.393128][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.690'.
[  250.440888][  T943] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  250.591954][  T943] usb 3-1: Using ep0 maxpacket: 16
[  250.594765][  T943] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  250.598699][  T943] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.598726][  T943] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  250.598767][  T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.627437][  T943] usb 3-1: config 0 descriptor??
[  250.651387][   T25] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  250.810302][   T25] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  250.818772][   T25] usb 1-1: config 0 has an invalid interface number: 6 but max is 0
[  250.818854][   T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  250.818912][   T25] usb 1-1: config 0 has no interface number 0
[  250.819019][   T25] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  250.819110][   T25] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 65054, setting to 64
[  250.885300][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.885321][   T25] usb 1-1: Product: syz
[  250.885331][   T25] usb 1-1: Manufacturer: syz
[  250.885342][   T25] usb 1-1: SerialNumber: syz
[  250.912885][   T25] usb 1-1: config 0 descriptor??
[  250.929778][ T8365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  250.929860][ T8365] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  250.968770][   T25] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'.
[  251.666211][   T25] usb 3-1: USB disconnect, device number 39
[  251.926836][ T8389] capability: warning: `syz.3.693' uses 32-bit capabilities (legacy support in use)
[  252.400647][   T25] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  252.553324][   T25] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  252.561827][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.587504][   T25] usb 4-1: config 0 descriptor??
[  253.138756][   T25] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  253.139216][   T25] [drm:udl_init] *ERROR* Selecting channel failed
[  253.265298][   T25] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1
[  253.265331][   T25] [drm] Initialized udl on minor 1
[  253.325702][   T25] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  253.350439][   T25] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  253.380260][   T25] usb 4-1: USB disconnect, device number 39
[  253.474731][ T5676] usb 1-1: USB disconnect, device number 32
[  253.672274][  T943] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  253.822184][  T943] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  253.825850][  T943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.825908][  T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.860423][  T943] usb 5-1: config 0 descriptor??
[  253.886144][  T943] pwc: Askey VC010 type 2 USB webcam detected.
[  254.015924][ T8420] FAULT_INJECTION: forcing a failure.
[  254.015924][ T8420] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  254.015991][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.2.707 Not tainted syzkaller #0 PREEMPT(full) 
[  254.016016][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  254.016030][ T8420] Call Trace:
[  254.016039][ T8420]  <TASK>
[  254.016049][ T8420]  dump_stack_lvl+0xe8/0x150
[  254.016087][ T8420]  should_fail_ex+0x410/0x560
[  254.016121][ T8420]  _copy_to_user+0x31/0xb0
[  254.016155][ T8420]  copy_siginfo_to_user+0x22/0xc0
[  254.016188][ T8420]  x64_setup_rt_frame+0x764/0xc50
[  254.016243][ T8420]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  254.016287][ T8420]  arch_do_signal_or_restart+0x456/0x860
[  254.016323][ T8420]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  254.016375][ T8420]  exit_to_user_mode_loop+0x10e/0x770
[  254.016402][ T8420]  ? rcu_is_watching+0x16/0xb0
[  254.016434][ T8420]  do_syscall_64+0x328/0x520
[  254.016468][ T8420]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.016490][ T8420]  ? clear_bhb_loop+0x70/0xc0
[  254.016519][ T8420]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.016546][ T8420] RIP: 0033:0x7f579b19e157
[  254.016566][ T8420] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  254.016585][ T8420] RSP: 002b:00007f579c134028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  254.016610][ T8420] RAX: 0000000000000113 RBX: 00007f579b425fa0 RCX: 00007f579b19e159
[  254.016626][ T8420] RDX: 000000000000000b RSI: 0000000000000000 RDI: 0000000000000003
[  254.016639][ T8420] RBP: 00007f579c134090 R08: 0000000080000000 R09: 0000000000000000
[  254.016653][ T8420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.016667][ T8420] R13: 00007f579b426038 R14: 00007f579b425fa0 R15: 00007f579b54fa48
[  254.016701][ T8420]  </TASK>
[  254.200490][ T8406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.227831][ T8406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.390171][ T8424] syzkaller0: entered promiscuous mode
[  254.390224][ T8424] syzkaller0: entered allmulticast mode
[  254.471977][  T943] pwc: recv_control_msg error -32 req 02 val 2b00
[  254.477612][  T943] pwc: recv_control_msg error -32 req 02 val 2700
[  254.621679][  T943] pwc: recv_control_msg error -32 req 02 val 2c00
[  254.624099][  T943] pwc: recv_control_msg error -32 req 04 val 1000
[  254.823997][ T5676] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  254.950755][ T5676] usb 2-1: device descriptor read/64, error -71
[  254.985637][  T943] pwc: recv_control_msg error -71 req 04 val 1300
[  254.986166][  T943] pwc: recv_control_msg error -71 req 04 val 1400
[  254.986603][  T943] pwc: recv_control_msg error -71 req 02 val 2000
[  254.987155][  T943] pwc: recv_control_msg error -71 req 02 val 2100
[  254.987591][  T943] pwc: recv_control_msg error -71 req 04 val 1500
[  254.989542][  T943] pwc: recv_control_msg error -71 req 02 val 2500
[  255.000417][  T943] pwc: recv_control_msg error -71 req 02 val 2400
[  255.005782][  T943] pwc: recv_control_msg error -71 req 02 val 2600
[  255.007931][  T943] pwc: recv_control_msg error -71 req 02 val 2900
[  255.009803][  T943] pwc: recv_control_msg error -71 req 02 val 2800
[  255.032922][  T943] pwc: recv_control_msg error -71 req 04 val 1100
[  255.037307][  T943] pwc: recv_control_msg error -71 req 04 val 1200
[  255.108869][  T943] pwc: Registered as video103.
[  255.122514][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'.
[  255.124997][  T943] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  255.172789][  T943] usb 5-1: USB disconnect, device number 28
[  255.201660][ T5676] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  255.330835][ T5676] usb 2-1: device descriptor read/64, error -71
[  255.441231][ T5676] usb usb2-port1: attempt power cycle
[  255.639693][ T8452] FAULT_INJECTION: forcing a failure.
[  255.639693][ T8452] name failslab, interval 1, probability 0, space 0, times 0
[  255.639720][ T8452] CPU: 0 UID: 0 PID: 8452 Comm: syz.2.716 Not tainted syzkaller #0 PREEMPT(full) 
[  255.639738][ T8452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  255.639747][ T8452] Call Trace:
[  255.639754][ T8452]  <TASK>
[  255.639760][ T8452]  dump_stack_lvl+0xe8/0x150
[  255.639818][ T8452]  should_fail_ex+0x410/0x560
[  255.639860][ T8452]  should_failslab+0xa8/0x100
[  255.639895][ T8452]  __kmalloc_cache_noprof+0xa3/0x600
[  255.639914][ T8452]  ? __kmalloc_cache_noprof+0x14d/0x600
[  255.639931][ T8452]  ? sctp_add_bind_addr+0x8c/0x370
[  255.639948][ T8452]  ? sctp_add_bind_addr+0x8c/0x370
[  255.639969][ T8452]  sctp_add_bind_addr+0x8c/0x370
[  255.639989][ T8452]  sctp_copy_local_addr_list+0x31a/0x4e0
[  255.640009][ T8452]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  255.640027][ T8452]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  255.640048][ T8452]  ? sctp_v4_is_any+0x35/0x60
[  255.640066][ T8452]  ? sctp_copy_one_addr+0x93/0x360
[  255.640086][ T8452]  sctp_bind_addr_copy+0xb3/0x3c0
[  255.640104][ T8452]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  255.640132][ T8452]  sctp_connect_new_asoc+0x2ff/0x6b0
[  255.640156][ T8452]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  255.640183][ T8452]  ? __local_bh_enable_ip+0xd6/0x140
[  255.640204][ T8452]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  255.640229][ T8452]  ? security_sctp_bind_connect+0x7e/0x2c0
[  255.640251][ T8452]  sctp_sendmsg+0x159b/0x2d00
[  255.640285][ T8452]  ? __pfx_sctp_sendmsg+0x10/0x10
[  255.640310][ T8452]  ? __lock_acquire+0x747/0x2de0
[  255.640337][ T8452]  ? aa_sock_msg_perm+0xfc/0x210
[  255.640362][ T8452]  ? sock_rps_record_flow+0x19/0x350
[  255.640386][ T8452]  ? inet_sendmsg+0x298/0x320
[  255.640406][ T8452]  ? __pfx_inet_sendmsg+0x10/0x10
[  255.640423][ T8452]  sock_sendmsg_nosec+0x10e/0x180
[  255.640445][ T8452]  ____sys_sendmsg+0x54e/0x850
[  255.640474][ T8452]  ? __pfx_____sys_sendmsg+0x10/0x10
[  255.640506][ T8452]  ? import_iovec+0x73/0xa0
[  255.640554][ T8452]  ___sys_sendmsg+0x2a5/0x360
[  255.640586][ T8452]  ? __lock_acquire+0x747/0x2de0
[  255.640614][ T8452]  ? __pfx____sys_sendmsg+0x10/0x10
[  255.640683][ T8452]  ? __fget_files+0x2a/0x420
[  255.640715][ T8452]  ? __fget_files+0x3a2/0x420
[  255.640770][ T8452]  __x64_sys_sendmsg+0x1b1/0x290
[  255.640806][ T8452]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  255.640869][ T8452]  do_syscall_64+0x166/0x520
[  255.640901][ T8452]  ? trace_irq_disable+0x3b/0x140
[  255.640925][ T8452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.640948][ T8452]  ? clear_bhb_loop+0x70/0xc0
[  255.640975][ T8452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.640998][ T8452] RIP: 0033:0x7f579b19e159
[  255.641019][ T8452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  255.641038][ T8452] RSP: 002b:00007f579c134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  255.641063][ T8452] RAX: ffffffffffffffda RBX: 00007f579b425fa0 RCX: 00007f579b19e159
[  255.641080][ T8452] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  255.641101][ T8452] RBP: 00007f579c134090 R08: 0000000000000000 R09: 0000000000000000
[  255.641111][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  255.641120][ T8452] R13: 00007f579b426038 R14: 00007f579b425fa0 R15: 00007f579b54fa48
[  255.641144][ T8452]  </TASK>
[  255.781942][ T5676] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  255.805124][ T5676] usb 2-1: device descriptor read/8, error -71
[  255.807565][ T1310] ieee802154 phy0 wpan0: encryption failed: -22
[  255.807717][ T1310] ieee802154 phy1 wpan1: encryption failed: -22
[  255.841500][   T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  256.021767][   T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  256.024071][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 47434, setting to 1024
[  256.024105][   T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  256.029669][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.029708][   T10] usb 5-1: Product: syz
[  256.029725][   T10] usb 5-1: Manufacturer: syz
[  256.029741][   T10] usb 5-1: SerialNumber: syz
[  256.062310][ T5676] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  256.088406][ T5676] usb 2-1: device descriptor read/8, error -71
[  256.105664][ T8448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  256.168205][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  256.191237][ T5676] usb usb2-port1: unable to enumerate USB device
[  256.198062][ T8454] vlan0: entered promiscuous mode
[  256.313582][   T10] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  256.905116][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  257.000873][ T5676] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  257.153423][ T5676] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  257.155095][ T5676] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 28780, setting to 1024
[  257.155131][ T5676] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  257.158494][ T5676] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.158590][ T5676] usb 1-1: Product: syz
[  257.158629][ T5676] usb 1-1: Manufacturer: syz
[  257.158646][ T5676] usb 1-1: SerialNumber: syz
[  257.208472][ T8474] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  257.211629][  T943] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  257.242814][ T5676] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  257.248297][ T5676] ums-sddr09 1-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  257.248297][ T5676]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  257.362278][  T943] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  257.364039][  T943] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  257.364068][  T943] usb 4-1: config 1 has no interface number 0
[  257.364150][  T943] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x5B, changing to 0xB
[  257.364180][  T943] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  257.364207][  T943] usb 4-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  257.368194][  T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.368266][  T943] usb 4-1: Product: syz
[  257.368283][  T943] usb 4-1: Manufacturer: syz
[  257.368299][  T943] usb 4-1: SerialNumber: syz
[  257.400298][ T8478] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  257.402408][ T8478] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  257.433048][  T943] usb 4-1: Expected 3 endpoints, found: 2
[  257.967461][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'.
[  257.970778][  T943] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  257.992339][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.996773][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.122126][  T943] usb 2-1: Using ep0 maxpacket: 16
[  258.123092][  T943] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  258.125146][  T943] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  258.125180][  T943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  258.129301][  T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.129358][  T943] usb 2-1: Product: syz
[  258.129376][  T943] usb 2-1: Manufacturer: syz
[  258.129392][  T943] usb 2-1: SerialNumber: syz
[  258.193589][  T943] usb 2-1: config 0 descriptor??
[  258.214321][  T943] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  258.214357][  T943] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  258.424350][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.425011][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.462782][  T943] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  258.463680][  T943] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  258.566383][   T25] usb 5-1: USB disconnect, device number 29
[  258.603793][   T25] usblp0: removed
[  258.666279][  T943] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  258.667271][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  258.668076][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  258.695638][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  258.696715][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  258.698998][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  258.866315][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  258.866343][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  258.866361][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  258.866377][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  258.866394][  T943] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  258.867971][ T8498] ------------[ cut here ]------------
[  258.867984][ T8498] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva)
[  258.868000][ T8498] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#1: syz.4.728/8498
[  258.925463][ T8498] Modules linked in:
[  258.929457][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.4.728 Not tainted syzkaller #0 PREEMPT(full) 
[  258.938788][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  258.949169][ T8498] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[  258.955353][ T8498] Code: c6 05 3b f0 22 0f 01 48 c7 c7 0a d4 3f 8e be 43 04 00 00 48 c7 c2 c0 42 02 8c e8 eb dd 62 00 e9 81 ee ff ff e8 01 38 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[  258.975236][ T8498] RSP: 0018:ffffc9000fe97360 EFLAGS: 00010287
[  258.981461][ T8498] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000
[  258.989544][ T8498] RDX: ffffc90005be9000 RSI: 00000000000003d6 RDI: 00000000000003d7
[  258.997636][ T8498] RBP: ffffc9000fe974e8 R08: ffffffff907a657f R09: 1ffffffff20f4caf
[  259.006507][ T8498] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 1ffff92001fd2e80
[  259.014672][ T8498] R13: ffff888054e09b60 R14: ffff888000000000 R15: ffffffffffffff01
[  259.022765][ T8498] FS:  00007f10bf6c56c0(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000
[  259.031904][ T8498] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.038584][ T8498] CR2: 0000200000001000 CR3: 000000007b8ac000 CR4: 00000000003526f0
[  259.046696][ T8498] Call Trace:
[  259.050048][ T8498]  <TASK>
[  259.053112][ T8498]  ? lock_acquire+0x115/0x350
[  259.057898][ T8498]  ? kvm_gpc_refresh+0x31/0x110
[  259.063350][ T8498]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  259.068964][ T8498]  kvm_gpc_refresh+0xe1/0x110
[  259.074159][ T8498]  ? kvm_xen_set_evtchn+0x11e/0x220
[  259.079853][ T8498]  kvm_xen_set_evtchn+0x14f/0x220
[  259.085233][ T8498]  kvm_xen_vcpu_get_attr+0x5b0/0xb20
[  259.090959][ T8498]  kvm_arch_vcpu_ioctl+0x1552/0x23a0
[  259.096348][ T8498]  ? lock_acquire+0x115/0x350
[  259.101209][ T8498]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  259.106929][ T8498]  ? lock_acquire+0x115/0x350
[  259.111856][ T8498]  ? is_bpf_text_address+0x26/0x2b0
[  259.117154][ T8498]  ? is_bpf_text_address+0x292/0x2b0
[  259.122611][ T8498]  ? is_bpf_text_address+0x26/0x2b0
[  259.127888][ T8498]  ? kernel_text_address+0xa5/0xe0
[  259.133118][ T8498]  ? __kernel_text_address+0xd/0x30
[  259.138387][ T8498]  ? unwind_get_return_address+0x4d/0x90
[  259.144225][ T8498]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  259.150491][ T8498]  ? arch_stack_walk+0xfb/0x150
[  259.155525][ T8498]  ? stack_trace_save+0xa9/0x100
[  259.160598][ T8498]  ? __pfx_stack_trace_save+0x10/0x10
[  259.166129][ T8498]  ? kasan_save_track+0x4f/0x80
[  259.171124][ T8498]  ? stack_depot_save_flags+0x33/0x7f0
[  259.176694][ T8498]  ? __lock_acquire+0x747/0x2de0
[  259.181770][ T8498]  ? kfree+0x1c5/0x650
[  259.185918][ T8498]  ? __se_sys_ioctl+0x47/0x170
[  259.190831][ T8498]  ? do_syscall_64+0x166/0x520
[  259.195682][ T8498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.201923][ T8498]  ? __mutex_trylock_common+0x15f/0x270
[  259.207554][ T8498]  ? __pfx___mutex_trylock_common+0x10/0x10
[  259.213613][ T8498]  ? rcu_is_watching+0x16/0xb0
[  259.218459][ T8498]  ? trace_contention_end+0x3d/0x140
[  259.223913][ T8498]  ? __mutex_lock+0x30b/0x1550
[  259.228769][ T8498]  ? kasan_quarantine_put+0xbb/0x1f0
[  259.234180][ T8498]  ? __pfx___mutex_lock+0x10/0x10
[  259.239299][ T8498]  ? tomoyo_path_number_perm+0x219/0x5f0
[  259.245269][ T8498]  ? do_vfs_ioctl+0x116f/0x1530
[  259.250209][ T8498]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  259.255403][ T8498]  kvm_vcpu_ioctl+0x7e3/0xfd0
[  259.260169][ T8498]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.265498][ T8498]  ? hook_file_ioctl+0x1f2/0x600
[  259.270593][ T8498]  ? __fget_files+0x2a/0x420
[  259.275423][ T8498]  ? __fget_files+0x2a/0x420
[  259.280100][ T8498]  ? __fget_files+0x3a2/0x420
[  259.284894][ T8498]  ? __fget_files+0x2a/0x420
[  259.289570][ T8498]  ? bpf_lsm_file_ioctl+0x9/0x20
[  259.294731][ T8498]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.300004][ T8498]  __se_sys_ioctl+0xfc/0x170
[  259.304724][ T8498]  do_syscall_64+0x166/0x520
[  259.309431][ T8498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.315647][ T8498]  ? clear_bhb_loop+0x70/0xc0
[  259.320398][ T8498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.326465][ T8498] RIP: 0033:0x7f10be79e159
[  259.331005][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.350772][ T8498] RSP: 002b:00007f10bf6c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.359271][ T8498] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159
[  259.367402][ T8498] RDX: 0000200000000200 RSI: 00000000c048aeca RDI: 0000000000000008
[  259.375562][ T8498] RBP: 00007f10be83506b R08: 0000000000000000 R09: 0000000000000000
[  259.383650][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.391733][ T8498] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007f10beb4fa48
[  259.399803][ T8498]  </TASK>
[  259.403383][ T8498] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  259.410721][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.4.728 Not tainted syzkaller #0 PREEMPT(full) 
[  259.419950][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  259.430039][ T8498] Call Trace:
[  259.433348][ T8498]  <TASK>
[  259.436319][ T8498]  vpanic+0x56d/0xa60
[  259.440359][ T8498]  ? __pfx__printk+0x10/0x10
[  259.445020][ T8498]  ? __pfx_vpanic+0x10/0x10
[  259.449595][ T8498]  ? is_bpf_text_address+0x292/0x2b0
[  259.454929][ T8498]  ? is_bpf_text_address+0x26/0x2b0
[  259.460190][ T8498]  panic+0xc5/0xd0
[  259.463967][ T8498]  ? __pfx_panic+0x10/0x10
[  259.468457][ T8498]  __warn+0x315/0x4c0
[  259.472486][ T8498]  ? __kvm_gpc_refresh+0x1510/0x1710
[  259.477826][ T8498]  ? __kvm_gpc_refresh+0x1510/0x1710
[  259.483166][ T8498]  __report_bug+0x276/0x570
[  259.487717][ T8498]  ? check_path+0x21/0x40
[  259.492100][ T8498]  ? __kvm_gpc_refresh+0x1510/0x1710
[  259.497448][ T8498]  ? __pfx___report_bug+0x10/0x10
[  259.502528][ T8498]  ? lockdep_unlock+0x5c/0xd0
[  259.507239][ T8498]  ? __lock_acquire+0x1511/0x2de0
[  259.512348][ T8498]  ? __bfs+0x153/0x290
[  259.516494][ T8498]  ? __kvm_gpc_refresh+0x1510/0x1710
[  259.521999][ T8498]  report_bug+0x16b/0x220
[  259.526394][ T8498]  ? __kvm_gpc_refresh+0x1510/0x1710
[  259.531721][ T8498]  ? __kvm_gpc_refresh+0x1512/0x1710
[  259.537044][ T8498]  handle_bug+0x9c/0x200
[  259.541332][ T8498]  exc_invalid_op+0x1a/0x50
[  259.545879][ T8498]  asm_exc_invalid_op+0x1a/0x20
[  259.550760][ T8498] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710
[  259.556709][ T8498] Code: c6 05 3b f0 22 0f 01 48 c7 c7 0a d4 3f 8e be 43 04 00 00 48 c7 c2 c0 42 02 8c e8 eb dd 62 00 e9 81 ee ff ff e8 01 38 87 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff
[  259.576350][ T8498] RSP: 0018:ffffc9000fe97360 EFLAGS: 00010287
[  259.582503][ T8498] RAX: ffffffff8140d4cf RBX: ffff888000000000 RCX: 0000000000080000
[  259.590531][ T8498] RDX: ffffc90005be9000 RSI: 00000000000003d6 RDI: 00000000000003d7
[  259.598563][ T8498] RBP: ffffc9000fe974e8 R08: ffffffff907a657f R09: 1ffffffff20f4caf
[  259.606568][ T8498] R10: dffffc0000000000 R11: fffffbfff20f4cb0 R12: 1ffff92001fd2e80
[  259.614586][ T8498] R13: ffff888054e09b60 R14: ffff888000000000 R15: ffffffffffffff01
[  259.622608][ T8498]  ? __kvm_gpc_refresh+0x150f/0x1710
[  259.627988][ T8498]  ? lock_acquire+0x115/0x350
[  259.632725][ T8498]  ? kvm_gpc_refresh+0x31/0x110
[  259.637640][ T8498]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  259.643173][ T8498]  kvm_gpc_refresh+0xe1/0x110
[  259.647935][ T8498]  ? kvm_xen_set_evtchn+0x11e/0x220
[  259.653184][ T8498]  kvm_xen_set_evtchn+0x14f/0x220
[  259.658265][ T8498]  kvm_xen_vcpu_get_attr+0x5b0/0xb20
[  259.663613][ T8498]  kvm_arch_vcpu_ioctl+0x1552/0x23a0
[  259.668948][ T8498]  ? lock_acquire+0x115/0x350
[  259.673662][ T8498]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  259.679350][ T8498]  ? lock_acquire+0x115/0x350
[  259.684082][ T8498]  ? is_bpf_text_address+0x26/0x2b0
[  259.689333][ T8498]  ? is_bpf_text_address+0x292/0x2b0
[  259.694689][ T8498]  ? is_bpf_text_address+0x26/0x2b0
[  259.699938][ T8498]  ? kernel_text_address+0xa5/0xe0
[  259.705095][ T8498]  ? __kernel_text_address+0xd/0x30
[  259.710335][ T8498]  ? unwind_get_return_address+0x4d/0x90
[  259.716025][ T8498]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  259.722221][ T8498]  ? arch_stack_walk+0xfb/0x150
[  259.727123][ T8498]  ? stack_trace_save+0xa9/0x100
[  259.732103][ T8498]  ? __pfx_stack_trace_save+0x10/0x10
[  259.737547][ T8498]  ? kasan_save_track+0x4f/0x80
[  259.742461][ T8498]  ? stack_depot_save_flags+0x33/0x7f0
[  259.747975][ T8498]  ? __lock_acquire+0x747/0x2de0
[  259.752958][ T8498]  ? kfree+0x1c5/0x650
[  259.757056][ T8498]  ? __se_sys_ioctl+0x47/0x170
[  259.761859][ T8498]  ? do_syscall_64+0x166/0x520
[  259.766702][ T8498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.772838][ T8498]  ? __mutex_trylock_common+0x15f/0x270
[  259.778442][ T8498]  ? __pfx___mutex_trylock_common+0x10/0x10
[  259.784367][ T8498]  ? rcu_is_watching+0x16/0xb0
[  259.789155][ T8498]  ? trace_contention_end+0x3d/0x140
[  259.794472][ T8498]  ? __mutex_lock+0x30b/0x1550
[  259.799280][ T8498]  ? kasan_quarantine_put+0xbb/0x1f0
[  259.804597][ T8498]  ? __pfx___mutex_lock+0x10/0x10
[  259.809655][ T8498]  ? tomoyo_path_number_perm+0x219/0x5f0
[  259.815324][ T8498]  ? do_vfs_ioctl+0x116f/0x1530
[  259.820305][ T8498]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  259.825370][ T8498]  kvm_vcpu_ioctl+0x7e3/0xfd0
[  259.830107][ T8498]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.835334][ T8498]  ? hook_file_ioctl+0x1f2/0x600
[  259.840332][ T8498]  ? __fget_files+0x2a/0x420
[  259.844959][ T8498]  ? __fget_files+0x2a/0x420
[  259.849583][ T8498]  ? __fget_files+0x3a2/0x420
[  259.854288][ T8498]  ? __fget_files+0x2a/0x420
[  259.858905][ T8498]  ? bpf_lsm_file_ioctl+0x9/0x20
[  259.863877][ T8498]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  259.869102][ T8498]  __se_sys_ioctl+0xfc/0x170
[  259.873721][ T8498]  do_syscall_64+0x166/0x520
[  259.878336][ T8498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.884421][ T8498]  ? clear_bhb_loop+0x70/0xc0
[  259.889137][ T8498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.895052][ T8498] RIP: 0033:0x7f10be79e159
[  259.899496][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  259.919122][ T8498] RSP: 002b:00007f10bf6c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  259.927577][ T8498] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159
[  259.935561][ T8498] RDX: 0000200000000200 RSI: 00000000c048aeca RDI: 0000000000000008
[  259.943554][ T8498] RBP: 00007f10be83506b R08: 0000000000000000 R09: 0000000000000000
[  259.951554][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  259.959565][ T8498] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007f10beb4fa48
[  259.967599][ T8498]  </TASK>
[  259.971232][ T8498] Kernel Offset: disabled
[  259.975588][ T8498] Rebooting in 86400 seconds..