last executing test programs:

4m9.109441888s ago: executing program 2 (id=351):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000340)=0x81, 0x4)
shutdown(r0, 0x1)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="78000000040801020000002b534039000a00000308000140000000b30800014000000000080001400000048008000140000000fc080001400000000008000140000000020900010073797a310000000006000240001c0000060002408906000004000480050003002f00000000000000000000000000000047af738f6efb90099d0295ec71227506049fb668d59110ebff309508c9f62b6d897cbf6cb41dfd874bf1b5646ed67b9fcbcb875a77642e4231bbe85d27667cd7a44ef99012eaf8a9e619ef028b6aec8ca8a477575be6dc4f5534c2249622068403fc7887f8f2af18bd51bd1f2f1c"], 0x78}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
io_setup(0x1, &(0x7f0000000280))

4m8.707209342s ago: executing program 2 (id=355):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x5f})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, &(0x7f0000000080)="360f01cb0f01c936260fc71d0f20d86635200000000f22d86666f30f1ef8baf80c66b84d90118e66efbafc0cb000ee66b9800000c00f326635008000000f30ba6100b006ee2e0f01c90f20e06635000200000f22e0", 0x55}], 0x1, 0x4f, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
socket$kcm(0x2, 0x3, 0x2)
io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
setxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x200000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000240)={0x4, 0x0, 0x1, {0x80000000, 0x7}, 0x100, 0x8})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80ad}, 0x1c)

4m7.616732427s ago: executing program 2 (id=361):
unshare(0x64000600)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cbba25083b0904a10100010203010902"], 0x0)
r0 = socket(0x10, 0x2, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
recvmmsg(r1, &(0x7f0000000100), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r3=>0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x2daf}})
read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)=ANY=[@ANYBLOB="741000002100100027bd7000fddbdf2500000000000000000000ffffac1e0001fe8000000000000000000000000000bb4e2100004e2000000a0080005c000000", @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="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"], 0x1074}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0)
read$FUSE(r6, &(0x7f0000006300)={0x2020}, 0x402)
r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb)
r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0040d07, &(0x7f0000000040)=0x121)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce010203010902240001000000000904"], 0x0)
write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
r9 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
write$binfmt_format(r9, &(0x7f00000000c0)='-1\x00', 0x3)

4m4.478979368s ago: executing program 2 (id=388):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r1 = epoll_create(0xff9)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, <r4=>0x0}, 0x2020)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x9c}, {0x6}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x50)
write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r3, &(0x7f00000065c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r7, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'})
close(0x3)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0)

4m3.443094179s ago: executing program 2 (id=393):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000000090001db120a001001000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f2ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd3d400ac1949839f92232e7684f2305d906ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c832ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a2e8c2f369545d761d74"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x2, &(0x7f000000cf3d)=""/195}, 0x23)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r6 = syz_open_dev$evdev(&(0x7f0000000180), 0x6, 0x0)
ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f00000001c0)=""/199)
r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg(r8, &(0x7f0000001a00)={&(0x7f00000002c0)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000340)="0c57cb7e27b8b9f31bfbe0b84902d47c7430f81d54fe0868221cebb78206ddeaeee035564304548755123b0f29c47a16e2727c396400f5a121a1e3cd731cb5172a13d68e83bd19340a9377b80e19c6dd1ff18940a0f9c01f6ae674e2cc85afbf5ce3b396a1542fc1536a1980c703b2f2d527c796a3e56cad7c96dd12552ee66893a741e9d633d6436f2d4c63a6e93042a03f0b0184f2457b0ae201048f2cb7ef2b255be80f0329a228bd5e51a6cef394dac124323159e653ac2d1a899ef543ee78aa", 0xc2}, {&(0x7f0000000440)="a2c090a29315ec231e083b79de9a34fb40a909268dc39540e9531dce404cbafdb8d12bfc06316d0d88203aa334d0db8219d51ca6160e9764301c4853b81d125c1d7c97efc4da31c25639b185e8b077243a8c5aeaad0cfeee5a7811a8ff1f5b30604dbf3ef984e70a8e77a78fefa8de900bc5fe91f6bd0197a872c84580", 0x7d}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="a8772b4d5e2b0db6a53d707b325e23de4f81c94b7d7757048c7efed6c52ed781b92bf458165ca9f65fdfd5df8504ec29d13276fa2c60b7fd4ca324bcdaa9815dd537c53fd9d67978ac8eeb464f244e24a8f2bd399bce2fa11c9661d1fa18cc8b662e7beaa6", 0x65}, {&(0x7f0000001540)="b5fad76ebd56b546bda6bdb4a1ad01171a7b9a9b0a2599a33f5c59f4752c6c9db49d46b13f33bcde11360635bae93cc0c8af9e6ac5d9277b1240d159cca8bc2e481960ac8598006d", 0x48}, {&(0x7f00000015c0)="f0824770e50d0fd06c8f41382831d11c18fb2a47eb58dc123b437449f90fab975023cf51d3352550e6aaedb59b215606c512a2a57f16dc9035c4f12d97747bb5a1840bf7dfbe897b6d28db21db1c393f73af164e781665904690188587d965218c61724d9829cd6d25319b6248a6b671f33369a45ca52dffa347fe6298350ed74b588f1fa6d0dd982a8b7cd471e037370ee0bca32e3c5822b884097d3d", 0x9d}, {&(0x7f0000001680)="eb68fe3101204be664d727f20e05328f7fb426f14e74681c085fd3911eba9806bffb052629d24704a471a236e1ba0c97dda452bb833965605b55eef7fbd2ee9ff53df9ca69e4c5579c70103681ba235095e60d3fa55464e4a977aaee63be1f323c3856f5a0e3b00e04fc9310115657d690a7e112bfa136bada6014207b6060a9f80811122b2fcef5c132d540ceaf6c7382ff5bc95568a755298465013a3ad514b7977aae53c75fd05d1e3a2ea24a6708a1f29f2fda3b294e67ff4e29e0b61aba69dce7796f2ceb7f2f0abcdc14d2f3f6de9504df96fe7d097d44c781e3882b2b5282b461f4dd6e7b24dfd5b85988099a2011e1c98ab203ea635431", 0xfb}], 0x7, &(0x7f0000001800)=[{0x98, 0x112, 0x6, "6bfa666e26b58fcf591776b4d73e90c618c2fa054290ce7d0df60c2a7dcd733ee13736554b4aaff01c1ba5fc8608a8268aa95ecb08133107c43e5b5008275d223b04d64ccd33972e78cbb77276f7cf0ba6c0bf35de74775ceb6315af5c3bb536dfc2443654913909d800789eab9aba1fcb5ab2dacdb8130b783ea8f82d3a3bd2c4"}, {0x88, 0xff, 0x5, "aec7c9757f35f4efb35204b6a22e6b3c1b920406111b03abe1137b0c2fe05f54a9f76d270b56f61fa7192ce8578be863853de90b95dea837775bb1d333b69324d3d24b3e26c3a454b6ecc069431aade6d815bc4e64b36bfa62a3398ff03df4283377d06da440150c6c2dd43eab1f2c08c088132e"}, {0x58, 0x114, 0xffffffff, "658b0e5d458d128380ed488bd61b31cc650edea4abb6f7b42443abf801c1b0769b69cfabcd1686df99ce8b5a21fa49ab3b4bcc64a1d2b1067ecfac3f4b3fe781e18a8c604916"}, {0x88, 0x115, 0x6, "fdb892c1de33e3cdb3cd3a1003f71112546424c457be95b35363f1ed98f905de27a171f29f5f906e919394da4ff0b0caf92c31939b9627b3f7f58a4e77ae9218efde928d2012ef452a716d76544b883cabe16ff7e9b089c6f10f9f33ad49683755f48da77b2c08ea0630fd700278ff6cfb232773a3e5f5"}], 0x200}, 0x80010)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r7, 0x300000b, 0x11, r4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r9=>r0, {r0}}, './file0\x00'})
mmap$KVM_VCPU(&(0x7f00004f4000/0x3000)=nil, r7, 0x1000001, 0x40010, r9, 0x0)
sched_setattr(r1, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x2, 0x40, 0x6, 0x80000001, 0x5, 0x7f, 0x32}, 0x0)

4m3.179429646s ago: executing program 2 (id=397):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}], 0x1}}], 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x3, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xa, 0xa9}}, {{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xc, 0x3, 0x97}}]}}]}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x100011, r2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x4101, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300030000000800070005000000080001"], 0x84}}, 0x20008040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000800000091590002200004000000010300eb40080001"], 0x24}, 0x1, 0x0, 0x0, 0x2404c8d4}, 0x20040840)

4m2.822606085s ago: executing program 32 (id=397):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000280)="96bc7002a06addfa3b96a5e4de4cf18b08fa24022c9eb8cd8932ada8710619787de0065d8173252675ba187eaf42654146ec2aa6df89468afd222a853f38363f187b7fbc96f64004fa81182e6eae27df59655f4acab134d99a8bb6b9f7d6a7f0a652b6c6cd366bb5562bef203e119f2a9120a5b524adb8ee0927a0c463d7f29c5d441bf9c29d3f1c6133f911765f2493ed24571da986ec6cd145eca1e3e5d46b458f55720ab8bfa49914be4e38fad34699c2c022421fe730f012", 0xba}], 0x1}}], 0x1, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000015c0)={{0x12, 0x1, 0x110, 0x67, 0xc6, 0xb0, 0x10, 0xeb1a, 0x2875, 0x6f3f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x160, 0x54, [{{0x9, 0x4, 0x73, 0x0, 0x3, 0x80, 0x25, 0x14, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x400, 0x2, 0xa, 0xa9}}, {{0x9, 0x5, 0x8e, 0x0, 0x8, 0xb, 0x6, 0x9}}, {{0x9, 0x5, 0xe, 0x1, 0x8, 0xc, 0x3, 0x97}}]}}]}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x100011, r2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x4101, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000100005000004855a9ffbf21304000000", @ANYRES32, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e00440002800600020001000000080001000100000008000300030000000800070005000000080001"], 0x84}}, 0x20008040)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000800000091590002200004000000010300eb40080001"], 0x24}, 0x1, 0x0, 0x0, 0x2404c8d4}, 0x20040840)

11.959203846s ago: executing program 1 (id=1387):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
getdents64(r0, 0x0, 0x0) (async)
getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000d4567657bc34b2e400090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003000000950000ecffffff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x700, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r8 = accept$alg(r7, 0x0, 0x0)
write$binfmt_script(r8, &(0x7f0000000140)={'#! ', './file0'}, 0xb) (async)
recvmmsg(r8, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xcc00}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) (async)
ioctl$AUTOFS_IOC_READY(r8, 0x9360, 0x8) (async)
write(0xffffffffffffffff, &(0x7f0000000000)="29000000140005b7ff000051915f95eb01dfff02a606a40e07ff0000000000404000e14be264d37c", 0x28)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x5, 0x1000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="64f30fb1472065dbc0650fefd52ef20f38f130660f38823af390660f019a9a00660f388202650fc79be80067660f3a22029c", 0x32}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

11.342272415s ago: executing program 1 (id=1391):
socket(0x40000000015, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0xa, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x5b)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000b004600"], 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
r10 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x5452, &(0x7f0000000000)={r10})
sendmsg$sock(r10, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100003f279ace5e5c1613a8ec451f105ffffffffffffffff00000000a0b75cf848a75325d98e93876d170e743912b1be2724ca3269958edcfecb8df28e563949fed83ccb9221460b011f4efcd72d79a40f7ad4853ee0b6a3fc5e33540e2e44544930fadfcb013dbf9c105c04ec89bad7aca6529ed9e4c5c1df13be6c2d786412ff21c08235c46865930e3d573a045dd8905da5f0dc33ffb1113f00d44d6b87e3070f5cbf", @ANYRES32=0x0, @ANYBLOB="44000000000000001c0012800b0001006272"], 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

9.835401006s ago: executing program 0 (id=1397):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff}, 0x2, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, {0xa, 0x4e22, 0x3, @local, 0x2}, r4, 0xfffffffa}}, 0x48)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a9c000000060a0b040000000000000000020000057000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c080003400000001730000180080001006e617400240002800800074000000000080001400000000008000340fe00001408000240000000020900010073797a30000000000900020073797a32"], 0xc4}, 0x1, 0x0, 0x0, 0x850}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x24, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={<r6=>0x0}, &(0x7f0000000400)=0x8)
syz_usb_connect$cdc_ncm(0x1, 0x93, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0xff, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "16fdf9192d"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xfffffffa, 0x9, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x88ba, 0x10}, [@acm={0x4, 0x24, 0x2, 0x7}, @dmm={0x7, 0x24, 0x14, 0x1, 0xffff}, @mdlm={0x15, 0x24, 0x12, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xe7, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x9}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x0, 0x8, 0x2, 0x40, 0xa}, 0x15, &(0x7f0000000640)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x4, 0xf0f, 0x9, [0xc0]}]}, 0x2, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x455}}, {0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "e72d0eda0c960a2eac213da4bfc6886e6d1fafd75e67cb4e29a765bfb407f5ecbc"}}]})
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000440)={r6, 0x2, 0xb, 0xfffffff8, 0x4, 0x8}, 0x14)
r7 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x306, 0x2, 0xff, 0x8, 0xf, @local}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="ea0a73f040d4f2615a632a123d902c1ccfe3c7e66a2eb2ce8faaa6729001230057633b359aaaad507ad2af7466aa697909c3f745edc37967ef0f", 0x3a}, {&(0x7f0000000080)="4128cc5a6ad3116f1a353406a00e7badb9e0a23a", 0x14}, {&(0x7f0000000140)="bb7a56a9e7d055ad46da8bd6d8abb3c561d23cd438bd3cd08fd22621da74f44ab8ebe262ba374eaa173381dad96557a2d53fdc53b47809bd43b48336b7191e71fd4b272e3271813d6a8345687f0796e42f67f17b286c54bf60d9604252bcd757383f12f1ad7487f421d349631377ed8488554b1e82142fb5447260", 0x7b}], 0x3}}], 0x2, 0x20000020)
setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x21, &(0x7f0000000000)=@ccm_128={{0x285}, "803a2cfac8e86208", "21bc33000e84b3d377a8de853555fb3f", "d7233fe3", "e7d152ba4beb13ec"}, 0x28)

9.504418514s ago: executing program 1 (id=1398):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, <r2=>0x0})
syz_open_procfs(r2, &(0x7f0000000240)='syscall\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0)
r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x21)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x200, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x9, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa5, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x16, 0x96, 0xfffffffe, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x3f00000000000f00)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, 0x0, 0x0)
getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r8, 0x0, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x24, 0x2e, 0x50b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff2, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r11=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e21, 0xced, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x4, 0x3, 0x5f}, &(0x7f0000000200)=0x10)

7.228961741s ago: executing program 1 (id=1406):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000240), &(0x7f00000001c0)=0x8)
r1 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x28180) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080018}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000880)

6.931512973s ago: executing program 1 (id=1407):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYRES32=0x0, @ANYBLOB="9490fd7cf5726ba229c95e689936d940e8cccb1c144e82e49a766e62315610b6b164befe1567875611f4afc246a9d026a38ec77f2592c0ade5ddd2a5c2af7d9a0bd4678df92a3ed8ed8598ede63b9bd7405581be8d454ae9df6738ca8ca0f5dfcd9d95d5bf172d7985e948c66de368188a54b517e17e723073", @ANYBLOB="e2051df5484495b2f257a4788051939334905e07bb3ba460fab441711c24aef67c2b4328eb22e6fdc0bf8427e5a5fb6e655b48f5d1eae23900690daa03973ae086763f0de64d3b0de6a6d25a85e79b2a88e4f1b4bb0f255ed8df8225d525d0b825c838d0bfad9d7454c194ba60886474312c374739888e889f4d0babab7c881100"], 0x0)
accept$alg(r0, 0x0, 0x0)

6.377824128s ago: executing program 0 (id=1408):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=ANY=[@ANYBLOB="500000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200060018008d0004000500160002000000050017"], 0x50}}, 0x0)
r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="520000000500010200000000000000000500000a050003008800000000000480000001400000000200000140000007df00000140000000090000014000000008000001400000000400000140003ff8000000014000006df60000014000000004000001400000000600000145000000060900010073797a31000000000000010073797a3000000000"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40345410, &(0x7f00000004c0)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x80605414, 0xffffffffffffffff)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x2, &(0x7f00000006c0)="0203"}], 0x1})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%pB    \x00'}, 0x20)

4.397878567s ago: executing program 3 (id=1417):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1, 0x4d}, 0x8)
unshare(0x20000400)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
unshare(0xc040800)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x5, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x8001, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x1008, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x80, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x5, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_cache\x00')
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0xa175)
lseek(r1, 0x80, 0x1)
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x4, 0x0, <r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r5, 0xc038943b, &(0x7f0000000180)={0xf13, 0x38, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4)

4.040017613s ago: executing program 4 (id=1418):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
shutdown(r0, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000)=0x8008, 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff011) (fail_nth: 11)

3.908294224s ago: executing program 3 (id=1419):
r0 = socket(0x11, 0x3, 0x20000000)
accept4(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80, 0x80800)
setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=@deltaction={0x270, 0x31, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x90, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9ee}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff00000}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff6d}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r3 = eventfd(0x2641d82c)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000000c0)={0x8985, "b546008318526b06000e00005ba42049956f8a3c1b2cf34b000000001000"})
ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f0000000340)=0x400f)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x12, 0x5e})
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

3.841284765s ago: executing program 1 (id=1420):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e26, @remote}}, 0x0, 0x0, 0x18, 0x0, "58ec87bb53679fd04400889a2da26c4414fab0919616e14e4feb4b5daa18fe922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd000000000200"}, 0xd8)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xd0, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0)
recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

3.215810933s ago: executing program 0 (id=1422):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r9 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close_range(r7, 0xffffffffffffffff, 0x0)
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r10 = msgget$private(0x0, 0x0)
msgrcv(r10, 0x0, 0x0, 0x1, 0x3000)
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r12 = syz_pidfd_open(r11, 0x0)
setns(r12, 0x10000000)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x40)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'hsr0\x00', @broadcast})

3.121130184s ago: executing program 4 (id=1423):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x10, 0x0}}], 0x2c)
socket$kcm(0x10, 0x5, 0x4)
setfsgid(0x0) (async)
r1 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_read(0xffffffffffffffff, 0x98, 0x0, 0x0) (async)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket(0xa, 0x3, 0x3a) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r6=>0x0})
setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x0, 0x0, 0x2, r6, 0x9}, 0xc) (async)
write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) (async)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) (async)
sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="e4be3f82d34df787e25a1275ed65b480b6b8cc50afed140900000001b7b110c39bafc62f4fa476cec0588d74db4d831ad9a0bdd7976acfd05851ad02c832ef93bcd9d0c22ceac5e4c546", 0x4a}, {&(0x7f0000000180)="5c00000014006b0300000770f8471d0002847e00004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd70000000000000000118d000000000000000000", 0x5c}, {&(0x7f00000002c0)="cb8202876ff1d73a626c4b488afa927d995b737456c140865d63723db9bc68e37aa17dc1d9ba09ee21753e37a6b076c486c6b80a826570dfff5ed14458c0ecb0118f8ba81819bf9a93c148ee1a2567e03d5fdc3094a2b81e0627aaf5459940a024c04b4524ebf5085e61bbb49ac19dd0154dbd5319d7867ad8db91b5b9cc3ffd7190baeb5056b517bef8e3638f15c87013ce201c1fc6997e2603d7b00c90ac094b27343725626a57d0eeeb457006053cd3e1a8cd568486cb4044652ccf08f4b5124e4932065657e306956a9f47a664a318d751136bb55eca62f0fcb0e5d3a479c67ab4ac90bb58a4de", 0xe9}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4)

2.793451296s ago: executing program 0 (id=1426):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)=""/177, 0xb1}], 0x1}, 0x8}], 0x1, 0x40000083, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4089, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f0000000540)=""/158, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x812}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

2.599567986s ago: executing program 0 (id=1428):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x1, 0x2}, {0x44, 0x1, 0x9, 0x8016}, {0x1, 0x9, 0x7, 0x5}, {0x6, 0x9, 0x5, 0x5}]})
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000001c0)=0x59ca, 0x4)
setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f00000000c0), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r3=>0x0})
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c0e9f29438946924347e8c9a7f1d228cf082056214904d6eb9350c2d1bf5443d0ef0296b000"}, 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0x811)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x444002, 0x0)
r5 = io_uring_setup(0xbbc, &(0x7f0000000280)={0x0, 0x0, 0x200, 0x0, 0xde, 0x0, r4})
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10)
io_uring_enter(r5, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18)
io_uring_enter(r5, 0x65e7, 0x8d39, 0x60, &(0x7f0000000200)={[0x1]}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001580)={&(0x7f00000003c0), 0xc, &(0x7f0000001540)={&(0x7f0000000400)=@deltfilter={0x1140, 0x2d, 0x100, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x7, 0x3}, {0xfff3, 0xc}, {0x0, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x380, 0x2, [@TCA_U32_SEL={0x2a4, 0x5, {0xe, 0xe, 0x8, 0x9, 0x1000, 0xd, 0xc4, 0x5, [{0x2, 0x2, 0x1, 0xfffffff9}, {0x9, 0x5, 0x800}, {0xb38, 0x4, 0x10, 0xff}, {0xb, 0xfffffff5, 0x200, 0x8}, {0x6, 0x50, 0x2800000, 0xffffffff}, {0xfffffc9c, 0x5, 0x7, 0x7f}, {0xff, 0xfff, 0x7, 0x7}, {0x200, 0x7f, 0x1ff, 0x8}, {0x64, 0x81, 0xa8, 0xabba}, {0x575f, 0x3, 0x40, 0x7fffffff}, {0xd78, 0x8, 0x0, 0x80000000}, {0xffff, 0xff, 0xfffeffff, 0x8000}, {0x40, 0x1, 0x8001, 0x2}, {0x6, 0x4, 0x3, 0x5}, {0x6, 0x4, 0xfff, 0x9}, {0x1, 0xe, 0x9, 0x1}, {0xfffffff7, 0x6, 0x2f}, {0x3, 0x1, 0x8, 0x40}, {0xf, 0x101, 0xfff, 0x81}, {0x5, 0x5, 0xb9b9, 0x2}, {0x56bc, 0x71, 0xd7, 0x8}, {0x5, 0xb07a, 0x7ff}, {0x100, 0x1, 0xa}, {0xe, 0x2, 0x8, 0x5}, {0x0, 0x3, 0xfffffffd}, {0x5, 0x3ff, 0x8e, 0x2}, {0x4, 0xac, 0x10000, 0x10}, {0x4, 0x3, 0xa0a, 0x2}, {0xd81, 0x200, 0x7, 0x9}, {0x1, 0x40a, 0x0, 0x25}, {0x8, 0x3, 0x4a, 0x1576}, {0x6, 0x7, 0x6, 0x8}, {0x6, 0x7, 0x0, 0x70d6}, {0x8001, 0x0, 0x6}, {0xfffffffb, 0xe2, 0x7}, {0x3ff, 0x7fffffff, 0x1000, 0x1}, {0x5, 0x2, 0x8, 0xf7a}, {0x1, 0xb, 0x3}, {0x2, 0xfffffffd, 0xfffffff8, 0xf45f}, {0xf, 0x9b, 0x200}, {0x400, 0xffffffff, 0x1, 0x3ff}]}}, @TCA_U32_HASH={0x8}, @TCA_U32_HASH={0x8}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x8}}, @TCA_U32_SEL={0x84, 0x5, {0xb, 0x3, 0x8, 0xbdbf, 0x0, 0xfe00, 0x7, 0x4, [{0xc400, 0x7, 0x9, 0x1b}, {0x10001, 0x737, 0x0, 0x2}, {0x1dfa3700, 0x9, 0x1, 0x80000000}, {0x6, 0x9, 0x101, 0x7}, {0xc05d, 0x9, 0xf}, {0x6, 0x4, 0x1, 0xc}, {0x81, 0x3, 0x200, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x4, 0x2}}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0x9}}, @TCA_U32_POLICE={0x4}, @TCA_U32_MARK={0x10, 0xa, {0x8, 0xd}}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}, @filter_kind_options=@f_u32={{0x8}, {0x438, 0x2, [@TCA_U32_SEL={0x434, 0x5, {0x2, 0x8, 0x3, 0x9f, 0x5, 0x0, 0x7fff, 0x1, [{0x5, 0xa7, 0x523, 0x237}, {0x2, 0xffff0001, 0x400, 0x3}, {0x10000, 0x400, 0xe, 0x4}, {0x7fffffff, 0x4, 0x100, 0x2}, {0x2, 0x2, 0x3, 0x10001}, {0xc, 0x7f, 0x10, 0x8}, {0x4, 0x80000001}, {0x8001, 0x17, 0x3, 0x7ff}, {0x823, 0x2, 0x9, 0x1}, {0x1, 0x4, 0x4, 0x8293}, {0x9, 0x7, 0x7, 0x1}, {0xc, 0x8, 0x401, 0x5}, {0x1, 0x739d, 0x14e9, 0xbc8}, {0x2, 0x8cca, 0xc5b2, 0x2}, {0x7, 0x7fff, 0x4, 0x7a5}, {0x81, 0x8000, 0x5, 0x5}, {0x4, 0x7f, 0x9, 0x6}, {0x638654ec, 0xffffffff, 0x8001, 0x3}, {0x1, 0x3ff, 0x6, 0xfffffff2}, {0xffffffe9, 0x8, 0x2}, {0x6, 0x6, 0x3, 0x9}, {0xac79, 0x80000001, 0x2}, {0x54c4, 0x6, 0x1}, {0x63c0, 0x9, 0x3, 0x2}, {0x5, 0xd2e, 0xc32, 0x1}, {0x9, 0x6, 0x200, 0xffff}, {0x5, 0xffffffff, 0x7f, 0xbb}, {0xae0, 0xfffff800, 0x0, 0x8000}, {0x8, 0x1, 0x5, 0x2}, {0x80, 0x3, 0x8, 0x7}, {0x4, 0x4, 0x756e, 0x6}, {0x7, 0x3, 0x9, 0xe4}, {0x0, 0xfffffffd, 0xc7b}, {0xfff, 0x0, 0x3}, {0x63f, 0x101, 0x6, 0x8b}, {0x4, 0x3, 0x2, 0xf9}, {0x2, 0x1000, 0x2d64, 0x86c}, {0x0, 0x5, 0x1, 0x7fff}, {0x10000, 0x3, 0xc}, {0x0, 0xc1, 0x6}, {0x9, 0x4, 0x3, 0xf6}, {0x6, 0x9, 0x5bb4, 0xf}, {0x3, 0x2, 0x6, 0x6}, {0x101, 0x8001, 0x9, 0xc557}, {0x4, 0x80000000, 0x1}, {0x3, 0x1, 0x7, 0x3}, {0x6, 0x800, 0x73f4be9a, 0x2}, {0x9, 0x5, 0xfff, 0x6}, {0x4, 0x1, 0xa5, 0x4}, {0xfff, 0x64, 0x323c, 0x7}, {0x101, 0x7ff, 0x0, 0xd7b}, {0x8001, 0x9, 0x7, 0x1}, {0x9, 0x80, 0x3, 0x7fffffff}, {0x7, 0x8, 0x9e}, {0x6, 0x1, 0x1, 0x2}, {0x6, 0xfffffff9, 0x7f, 0xffffffff}, {0x8, 0x8, 0xfffffff8, 0xfff}, {0xa, 0x800, 0xa, 0x3}, {0x1, 0x4, 0xfffffffe, 0x3}, {0xcd9df34f, 0xe7, 0x8, 0xfffffffc}, {0x40, 0x1, 0xffffd9a5, 0x8}, {0x6, 0xfffffffd, 0xffffff98, 0xc}, {0x2, 0xb86e, 0x0, 0xc00000}, {0x68d, 0xc, 0xa, 0x1e98}, {0xc669, 0x2, 0x7ff, 0x6}, {0xb, 0x100, 0x40, 0x9}]}}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x698, 0x2, [@TCA_CGROUP_EMATCHES={0x218, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x74, 0x2, 0x0, 0x1, [@TCF_EM_META={0x38, 0x5, 0x0, 0x0, {{0x0, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3ff, 0x2}, {0x909e, 0x80, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x3, 0x2}, {0x9, 0x6, 0x1}}}, @TCA_EM_META_RVALUE={0x12, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="4f95890fb8c3"]}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xf9f}, {0x6, 0x2, 0x9, 0x5}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xfaa}, {0xa9, 0x6, 0x9, 0x6}}}]}, @TCA_EMATCH_TREE_LIST={0xfc, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xe4, 0x1, 0x0, 0x0, {{0x7ff, 0x0, 0x200}, "de740e31a5434c20032d4f8cf96da8fc8f9739f6375eeb336bca16b411b3b318b9e5271f5a486235607a548a76cb85a6aec83868c895363dc4818097c253fb34b01aa125b706cd08a50dfb784c8ad29b71f4d10c70c4687363ebfe30e78cee89f50f8a131bfaefc92bd754de7165bd5904df19ea960243fcd36e372fd432731dff5094b8c5d92daaa31f80c4df7612c6755551302b0543587b9d12dca7cf886daf7abc53e1585bd00e5202b54db53e2cc9291fcf980ee30363ae0d685cd9b6b4dac414ca76f681bf5b1fb0a11d5377e7d11dcb84545a"}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x92d9, 0x7, 0x8}, {{0x800, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x1}, {0x6c3b, 0x2, 0x1, "3212"}}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0xf, 0x2, 0x6}, {0x7, 0x5, 0x0, "540c33fdf8"}}}, @TCF_EM_META={0x44, 0x2, 0x0, 0x0, {{0x1, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="20e5d5d0409d85", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="1fd5e45f76935959c0d5", @TCF_META_TYPE_VAR="26f2cc059a", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="8dcc37878156ae"]}]}}, @TCF_EM_IPT={0x20, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x81, 0x8, 0x336}, {0x2, 0x2, 0x7}}}]}]}, @TCA_CGROUP_ACT={0x47c, 0x1, [@m_ife={0xe0, 0x13, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xd}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x91, 0x6, "03dbcc9f67684a051aaae39d957eba282c559a38b400704349bb6fb4b3b76faae8ff5a655d853115b4f4d8bc482ad2e6ef318175c2d0d04d323b53bd7fb8769f86e0e2d42009c90e9117fe931c230a75654a6be9f8eea3886479a8f7bcfab2cd57cd7b4d3e8a18f28fce7892834d3ae4c43118e47e820d62d3b3ed0eac6573ef7306d36db8760ba23e12bf8b66"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x110, 0x810, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x7, 0x4, 0x8, 0x200}, 0x2, r3}}]}, {0xc3, 0x6, "33151a97ff1e08e146dd115ae358a32e0644277c73f18639b9b51bb839548524052135aa26af306732ff58a48fa29b2c34fa1486719d1b6b80b69dc8a3b1ab5df2386c1ecd0262b1a2823585d7ebfbcbfd29a745c3997ebe44585d1119c26b969a64593ea5112aab27675c100b597443f04b358b096e3d07776a2aa26956dccf962dcd61d5a7ff609b658dbd9e845052d563f6f71546958574831d15a534b7348df81a7c391745424229c0696d408a150a0a9c2d38d35b7668cce94786f636"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x118, 0x7, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xff, 0x3, 0x1, 0xfffffffa}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4d390cf7, 0xffffffffffffffff, 0x4, 0x7ff}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x717e, 0x2, 0x1, 0x6, 0x400}, 0x1e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0xffffffffdffffffb, 0x5, 0x740c}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8001, 0x6, 0x7bada89, 0x9}, 0x27}}]}, {0x5d, 0x6, "275486904b007b557686262676e3dae274e00481a8042e306ba358863ee2ff31a8a18d2d1b62191f8b9ba428807645da34836426c691baef08ca0e2c06b0ce204f7d5e150e2dd8cc86c307ef2e5b0c2f4df67c5e211e4d6088"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_simple={0x170, 0x1a, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x200, 0x6, 0x3, 0x4}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x0, 0x5e34, 0x18400000}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x1, 0x10000000, 0x3, 0x5}}, @TCA_DEF_DATA={0x9, 0x3, '{)$&\x00'}]}, {0xed, 0x6, "4ba80539a45b3c16c0ef9d01f545bb14ab8100c7ee07bb316a32adfad43b4bb0e080f5632eed4e0584de37e0503f32fb91404b58e7d9488dee4726dd7ff0c60f17a0e23aaef4f963f0dab71b5a538ad56c42e1536e49da8e89bdbee92b193875fabe9663659628f577d4edb236830da37a84cd4565d9e1e21aaebfac45877a6e74575dc7a560e2c666e61181d6ea6cd60d9ace9fb2c8353a627d4cff62360f65cbded0de9e8d5a7d62469d3eca3531733a5948a21338e35a179f9db4e8f4f1b6319377d9ae7250b290d54472680b32ee719d170786f51d462545e5cfb0b9771582badb931e69a2975d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @filter_kind_options=@f_u32={{0x8}, {0x248, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x4}}, @TCA_U32_HASH={0x8, 0x2, 0x10000}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x8c3b413ebd1400c8}}, @TCA_U32_DIVISOR={0x8, 0x4, 0xb3}, @TCA_U32_SEL={0x214, 0x5, {0xa, 0x5, 0x2, 0xc, 0x200, 0x5, 0x1, 0x800, [{0x1, 0x6409, 0x8, 0x7f}, {0x131bcb0f, 0x200, 0x7f}, {0xa37, 0x0, 0x8, 0x3ff}, {0x1, 0xffffffbb, 0xcb, 0x7}, {0x101, 0x1, 0x9, 0xc}, {0x8, 0xfffffff9, 0x9, 0x5}, {0x8, 0xe, 0x2, 0x3}, {0x8000, 0x4, 0x0, 0x9}, {0x592, 0x2, 0xb9, 0x979}, {0x1, 0x7, 0x0, 0x5}, {0x44, 0xfffffffa, 0x1}, {0x0, 0x2, 0x2, 0x9}, {0x3, 0x6, 0x0, 0x5}, {0x9, 0x1, 0x800, 0x7}, {0x20, 0x400, 0x5, 0x3b2}, {0x39, 0x7, 0x8, 0x7}, {0x7, 0x0, 0x7f, 0x8}, {0xe978, 0x0, 0xe, 0xffff}, {0x64e5, 0x6, 0x9, 0x3}, {0x9, 0x8, 0x1, 0xb3}, {0x9, 0x5, 0xffff, 0x4}, {0xfffffffa, 0xdb, 0x9, 0x7fffffff}, {0x4, 0x4, 0x2, 0x7}, {0x469, 0x5028eeaa, 0x8, 0x1}, {0x8, 0x5, 0x40, 0xffffffff}, {0x7ff, 0x9, 0xc, 0x1}, {0x3, 0x2000000, 0x81, 0xb}, {0x5, 0x6, 0x4, 0x4}, {0x0, 0x800, 0x6be4, 0xf0000000}, {0x9, 0x7, 0x7fff, 0x10001}, {0x0, 0x7, 0x7}, {0x9c, 0x6}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @remote}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x29}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x8}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xff000000}]}}, @TCA_CHAIN={0x8, 0xb, 0xc}]}, 0x1140}, 0x1, 0x0, 0x0, 0x20000052}, 0x8000)
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmsg$inet6(r0, &(0x7f0000001ac0)={&(0x7f00000015c0)={0xa, 0x4e24, 0xc19c, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000001800)=[{&(0x7f0000001600)="91f891989fd8a323e10424a9ac24a675601438d084a2334e41da5dad851d01f5aa372f348d2e1416166f3932b272b0b25ab74724285292ff2fc10c8418f775cd43cbf4160052644d7a00a4b812901991d119dd5ea74a33ebfc537e845b9d5e90a6dba642bc8ed3806396b0c3115c8cbd8e6f031700e0780be424747c9980475cf6ad0a8c6863b811b72153a66264e8834b7b741fd85df44d219d3cabab6310", 0x9f}, {&(0x7f00000016c0)="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", 0xfe}, {&(0x7f0000001880)="aa9bf2a9b828335ef70078262ed4a5a6313cb5ce3bd734ce59d4d07ff6a1a975b499c3f8276dd0faf9075d7559ad122cbeb21832a9133b2e0b111b863feba64828b311e693204fd83901c9a24eb6db7e85542fb2fbc9fbdc18d7d19e2bf65cb631fe4ba11bd589b65b92e01b34839aee4fb703ad8623d6eca04b62f7f7af70ff1f397c672cf84f67266152fbf69c5fe08714f6ca914dbd2f2aee1418ab7505ef7e8c55a1855dd89d05ca5fceecaa70a37dc2055bd32af4b68e79aa5c48bb6a183fd0ed887081429f87b4b6d25f401c0af7855ffe166535223f8e78d4b0574451819dbaea68f2bc9666348341969abbfd7c3d81", 0xf3}, {&(0x7f00000017c0)="4e3aba2f9fcfa5e5514df078484c5dbdacbc37", 0x13}], 0x4, &(0x7f0000001980)=[@dstopts_2292={{0x88, 0x29, 0x4, {0x0, 0xd, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xc, 0x3, [0xfd6, 0xdd]}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x8, 0x0, [0xc98, 0x100000001, 0x1]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x1, 0x1, [0x9, 0x1fb3]}}, @hao={0xc9, 0x10, @mcast1}, @pad1, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x73, 0x1, '\x00', [@ra={0x5, 0x2, 0x1}, @ra={0x5, 0x2, 0x1}, @generic={0x26, 0x1, "99"}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x33, 0x6, 0x1, 0x1, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2b}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0xc}}, @tclass={{0x14, 0x29, 0x43, 0x2}}], 0x140}, 0x40004)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000300)={0x2})
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7}}, 0x30000000)

2.433255482s ago: executing program 3 (id=1430):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', <r5=>0x0})
setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202326, @empty, 0x4000008}, 0x1c)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x2, 0x12}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x9}, {0x12, 0x1, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x1adb}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}, @TCA_TBF_PBURST={0x8, 0x7, 0x75d}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4011}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_open_dev$video4linux(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'})
r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
preadv(r11, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0xf73, 0x0)

2.279738067s ago: executing program 5 (id=1431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00010000000000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="04f9000a46"], 0x1c}}, 0x0)

2.17225801s ago: executing program 5 (id=1432):
unshare(0x40600)
r0 = socket(0x10, 0x803, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)

2.066928316s ago: executing program 5 (id=1433):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f00000000c0)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1)
ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0xffff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f0000000000)={[0xffffffff]}, 0x8)
syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0xde, 0x0, 0x65, 0x28, 0xbb4, 0xa74, 0x1c5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x44}}]}}, 0x0)
timer_gettime(r0, &(0x7f0000000080))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.923650979s ago: executing program 4 (id=1434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000001000800090000000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) (fail_nth: 12)

1.59465749s ago: executing program 4 (id=1435):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x82, 0x10, 0x0, 0x4}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup(0xffffffffffffffff)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x2461, &(0x7f0000002140)={0x0, 0x234c, 0x10100, 0x3, 0x196}, &(0x7f0000002080)=<r6=>0x0, &(0x7f0000002100)=<r7=>0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440100001000130429bd7000000000007f000001000000000000000000000000ac1e01010000000000000000000000000000fffe4e280000000000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a01010200000000000000000000000000000000320000007f000001000000000000000000000000ff03000000000000feffffffffffff1f0100800000000000000200000000000003000000000000004e0000000000000081000000000000000000000000000000030000000000000005000000000000000800000000000000080000040000000000000000f9ffffff2000080000000000000000000200018168000000000000000c000800dc00080000070000480001"], 0x144}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r9 = openat$cuse(0xffffffffffffff9c, &(0x7f00000020c0), 0x2, 0x0)
semctl$SETVAL(0x0, 0x1, 0x10, 0x0)
read$FUSE(r9, &(0x7f0000000040)={0x2020}, 0x2020)
r10 = socket$inet6(0xa, 0x2, 0x0)
r11 = fcntl$dupfd(r10, 0x2, r8)
splice(r9, 0x0, r11, 0x0, 0x2000, 0x0)
r12 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0)
readv(r12, &(0x7f0000000100)=[{&(0x7f0000000200)=""/207, 0xcf}], 0x1)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r13 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r13, 0x40045532, &(0x7f0000000840))

1.471537098s ago: executing program 0 (id=1436):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x86, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x5}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}})
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x3, [{{0x9, 0x4, 0x0, 0xfc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x86, 0x1, {0x22, 0x47}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x5}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) (async)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9b0000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0xfffffff7, '\x00', @p_u8=&(0x7f00000000c0)}}) (async)
syz_usb_control_io(r1, &(0x7f00000002c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)

1.122459711s ago: executing program 5 (id=1437):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev, 0xe0}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.014654087s ago: executing program 5 (id=1438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)

905.315302ms ago: executing program 3 (id=1439):
unshare(0x40600)
r0 = socket(0x15, 0x803, 0x0)
r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
pread64(r1, &(0x7f0000000080)=""/4073, 0xfffffffffffffeda, 0x400)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000010c0)={0x2, @vbi={0x5, 0x3234, 0x3, 0x38414262, [0xf, 0x8], [0xb682, 0x7], 0x108}})

884.123366ms ago: executing program 5 (id=1440):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010007000009058dff86"], 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$mixer_OSS_ALSAEMULVER(r1, 0x80044df9, &(0x7f0000000040))
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
fcntl$setstatus(r2, 0x4, 0x42400)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x1d, 0x6, 0x27, 0x40, 0x1df7, 0x2500, 0x5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x20, 0x1, [{{0x9, 0x4, 0x1, 0xcf, 0x0, 0x38, 0x36, 0x7c, 0x1}}, {{0x9, 0x4, 0x8e, 0x0, 0x0, 0x83, 0xb5, 0x75, 0xb}}]}}]}}, 0x0)

530.820008ms ago: executing program 3 (id=1441):
socket(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x86dd}}}]}, 0x38}}, 0x20044050) (fail_nth: 5)

372.651959ms ago: executing program 3 (id=1442):
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, 0xffffffffffffffff, 0x4}, 0x38)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000402505070000000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000edff05241a"], 0x0)

213.194295ms ago: executing program 4 (id=1443):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4)

0s ago: executing program 4 (id=1444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x1})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000180)='attr/current\x00')
read$FUSE(r3, &(0x7f0000003040)={0x2020}, 0x2020)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000040)={"06632cd4", 0x6c20, 0x6, 0x9, 0x1, 0x8, "f83c69a18c0e6f0a44003012b9fc1e", "00f440d0", "9db66f23", "fa638c25", ["0a4280d7478a118472f3cc12", "1aa04ea737952d801ef7b22e", "1afaa6ce122877ae0e400620", "92ce5fe79e98d9e4d2f930c5"]})
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

kernel console output (not intermixed with test programs):

   T10] usb 6-1: Using ep0 maxpacket: 16
[  341.567492][   T10] usb 6-1: config 0 has an invalid interface number: 68 but max is 0
[  341.581650][   T10] usb 6-1: config 0 has no interface number 0
[  341.589676][   T10] usb 6-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.637666][   T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  341.661649][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.702099][   T10] usb 6-1: Product: syz
[  341.726102][   T10] usb 6-1: Manufacturer: syz
[  341.787388][   T10] usb 6-1: SerialNumber: syz
[  341.800442][   T10] usb 6-1: config 0 descriptor??
[  341.857688][   T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  342.030387][ T3013] usb 6-1: Failed to submit usb control message: -71
[  342.037593][ T3013] usb 6-1: unable to send the bmi data to the device: -71
[  342.048784][ T3013] usb 6-1: unable to get target info from device
[  342.062697][ T5923] usb 6-1: USB disconnect, device number 29
[  342.080773][ T3013] usb 6-1: could not get target info (-71)
[  342.087266][ T3013] usb 6-1: could not probe fw (-71)
[  342.242879][   T10] usb 5-1: USB disconnect, device number 62
[  342.664697][   T10] usb 5-1: new low-speed USB device number 63 using dummy_hcd
[  342.850229][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  342.862849][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  342.881512][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.893419][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  342.912818][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  342.935602][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  342.943231][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  342.954629][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  342.973248][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  342.984774][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  342.997711][   T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  343.005570][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  343.016531][   T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  343.029663][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  343.043930][   T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  343.059366][   T10] usb 5-1: string descriptor 0 read error: -22
[  343.065839][   T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  343.077977][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.097829][   T10] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  343.168291][   T10] usb 4-1: USB disconnect, device number 73
[  343.297366][ T5923] usb 5-1: USB disconnect, device number 63
[  343.459123][T10011] fuse: Invalid rootmode
[  343.685617][ T7523] gspca_stk1135: reg_w 0x350 err -110
[  343.695398][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.709804][ T7523] gspca_stk1135: Sensor write failed
[  343.716918][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.723483][ T7523] gspca_stk1135: Sensor write failed
[  343.730879][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.737718][ T7523] gspca_stk1135: Sensor read failed
[  343.743875][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.751569][ T7523] gspca_stk1135: Sensor read failed
[  343.758217][ T7523] gspca_stk1135: Detected sensor type unknown (0x0)
[  343.765309][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.772533][ T7523] gspca_stk1135: Sensor read failed
[  343.779424][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.786409][ T7523] gspca_stk1135: Sensor read failed
[  343.792280][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.799494][ T7523] gspca_stk1135: Sensor write failed
[  343.805360][ T7523] gspca_stk1135: serial bus timeout: status=0x00
[  343.844731][ T7523] gspca_stk1135: Sensor write failed
[  343.863479][ T7523] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110
[  343.919381][  T925] usb 2-1: USB disconnect, device number 57
[  344.052074][T10023] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  344.115654][   T30] audit: type=1804 audit(1769240805.911:157): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1108" name="/newroot/225/file1" dev="fuse" ino=1 res=1 errno=0
[  344.285529][ T7523] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  344.444997][ T7523] usb 5-1: Using ep0 maxpacket: 8
[  344.451919][ T7523] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  344.463587][ T7523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  344.473778][ T7523] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  344.484510][ T7523] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  344.494541][ T7523] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  344.495176][  T925] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  344.507717][ T7523] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  344.526905][ T7523] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.540190][ T7523] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22
[  344.585016][ T5923] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  344.600125][T10031] support for the xor transformation has been removed.
[  344.700117][  T925] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  344.720098][  T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.729098][  T925] usb 4-1: Product: syz
[  344.733617][  T925] usb 4-1: Manufacturer: syz
[  344.735462][T10033] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1113'.
[  344.741901][  T925] usb 4-1: SerialNumber: syz
[  344.764686][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  344.775338][ T5923] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  344.790705][  T925] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  344.800176][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.828668][   T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  344.840055][ T5923] usb 2-1: Product: syz
[  344.850168][ T5923] usb 2-1: Manufacturer: syz
[  344.887098][T10033] team0: Port device batadv0 removed
[  344.894657][ T5923] usb 2-1: SerialNumber: syz
[  344.916691][ T5923] usb 2-1: config 0 descriptor??
[  344.928964][ T5923] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  344.994771][  T925] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  345.154752][  T925] usb 6-1: Using ep0 maxpacket: 16
[  345.175606][  T925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.199755][  T925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.212064][  T925] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  345.222034][  T925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.246644][T10027] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1110'.
[  345.265949][  T925] usb 6-1: config 0 descriptor??
[  345.291752][T10027] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12)
[  345.298604][T10027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  345.309996][T10027] vhci_hcd vhci_hcd.0: Device attached
[  345.537568][ T5923] gspca_sonixj: reg_w1 err -71
[  345.543817][ T5923] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  345.554364][ T5923] usb 2-1: USB disconnect, device number 58
[  345.585078][ T7523] usb 40-1: SetAddress Request (2) to port 0
[  345.591534][ T7523] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd
[  345.691245][  T925] kye 0003:0458:5016.0017: control desc unexpectedly large
[  345.704072][  T925] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0017/input/input26
[  345.783392][  T925] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0017/input/input27
[  345.859479][  T925] kye 0003:0458:5016.0017: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[  345.915190][ T5882] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  345.922900][   T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  345.944878][   T10] ath9k_htc: Failed to initialize the device
[  345.979984][   T10] usb 4-1: ath9k_htc: USB layer deinitialized
[  346.115020][ T5882] usb 1-1: Using ep0 maxpacket: 32
[  346.121979][ T5882] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  346.130231][ T5882] usb 1-1: config 0 has no interface number 0
[  346.139495][ T5882] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  346.148897][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.157069][ T5882] usb 1-1: Product: syz
[  346.161380][ T5882] usb 1-1: Manufacturer: syz
[  346.166004][ T5882] usb 1-1: SerialNumber: syz
[  346.173056][ T5882] usb 1-1: config 0 descriptor??
[  346.180509][ T5882] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  346.251370][T10040] vhci_hcd: connection reset by peer
[  346.258741][   T60] vhci_hcd vhci_hcd.3: stop threads
[  346.263974][   T60] vhci_hcd vhci_hcd.3: release socket
[  346.284395][   T60] vhci_hcd vhci_hcd.3: disconnect device
[  346.324834][ T5923] usb 2-1: new full-speed USB device number 59 using dummy_hcd
[  346.375660][ T6159] usb 4-1: USB disconnect, device number 74
[  346.400156][ T5882] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  346.416020][ T5882] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  346.491159][ T5923] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  346.514733][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.523017][ T5923] usb 2-1: Product: syz
[  346.531844][ T5923] usb 2-1: Manufacturer: syz
[  346.536567][ T5923] usb 2-1: SerialNumber: syz
[  346.544514][ T5923] usb 2-1: config 0 descriptor??
[  346.553915][ T5923] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  346.820051][T10035] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1114'.
[  346.829908][T10035] netlink: 488 bytes leftover after parsing attributes in process `syz.5.1114'.
[  346.934868][ T6159] usb 6-1: reset high-speed USB device number 30 using dummy_hcd
[  347.052739][ T5882] usb 5-1: USB disconnect, device number 64
[  347.665455][ T5923] gspca_stk1135: reg_w 0x5 err -110
[  347.675152][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  347.693061][ T5923] gspca_stk1135: Sensor write failed
[  347.707845][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  347.726109][ T7055] usb 6-1: USB disconnect, device number 30
[  347.741080][ T5923] gspca_stk1135: Sensor write failed
[  347.767733][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  347.791194][ T5923] gspca_stk1135: Sensor read failed
[  347.821678][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  347.861094][ T5923] gspca_stk1135: Sensor read failed
[  347.867590][ T5923] gspca_stk1135: Detected sensor type unknown (0x0)
[  347.918453][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  347.940555][ T5923] gspca_stk1135: Sensor read failed
[  347.980829][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  348.012821][ T5923] gspca_stk1135: Sensor read failed
[  348.038172][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  348.076069][ T5923] gspca_stk1135: Sensor write failed
[  348.209459][T10071] fuse: Invalid rootmode
[  348.211037][ T5923] gspca_stk1135: serial bus timeout: status=0x00
[  348.233987][ T5923] gspca_stk1135: Sensor write failed
[  348.266924][ T5923] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110
[  348.329678][ T5923] usb 2-1: USB disconnect, device number 59
[  348.342563][T10081] futex_wake_op: syz.5.1122 tries to shift op by 32; fix this program
[  348.352168][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1122'.
[  348.712449][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  348.712941][ T7055] usb 1-1: USB disconnect, device number 67
[  348.764923][ T5882] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  348.906972][ T7055] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  348.967829][ T7055] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  348.987045][ T5882] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.021487][ T5882] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  349.064066][ T5882] usb 6-1: config 0 interface 0 has no altsetting 0
[  349.067874][ T7055] quatech2 1-1:0.51: device disconnected
[  349.470269][ T5882] usb 6-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00
[  349.491881][ T5882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.520212][ T5882] usb 6-1: config 0 descriptor??
[  349.597840][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input28
[  349.996916][  T925] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  350.055257][ T7055] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  350.169665][  T925] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  350.183903][  T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.194688][  T925] usb 4-1: Product: syz
[  350.201887][  T925] usb 4-1: Manufacturer: syz
[  350.211952][  T925] usb 4-1: SerialNumber: syz
[  350.222668][  T925] usb 4-1: config 0 descriptor??
[  350.257900][ T7055] usb 2-1: config 64 has an invalid interface number: 146 but max is 0
[  350.284379][ T7055] usb 2-1: config 64 has no interface number 0
[  350.299444][ T7055] usb 2-1: config 64 interface 146 has no altsetting 0
[  350.314955][ T6159] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  350.334011][ T7055] usb 2-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  350.357919][ T7055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.380343][ T7055] usb 2-1: Product: syz
[  350.384560][ T7055] usb 2-1: Manufacturer: syz
[  350.418787][ T7055] usb 2-1: SerialNumber: syz
[  350.436360][  T925] hso 4-1:0.0: Failed to find INT IN ep
[  350.442710][  T925] usb-storage 4-1:0.0: USB Mass Storage device detected
[  350.494791][ T6159] usb 1-1: Using ep0 maxpacket: 8
[  350.502511][ T6159] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  350.513977][ T6159] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  350.524365][ T6159] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  350.535470][ T6159] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  350.585237][ T6159] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  350.615565][ T6159] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  350.625201][ T6159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.652185][  T925] usb 4-1: USB disconnect, device number 75
[  350.671925][ T7523] usb 40-1: device descriptor read/8, error -110
[  350.773423][ T6159] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  350.783146][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'.
[  350.843635][ T7055] ftdi_sio 2-1:64.146: FTDI USB Serial Device converter detected
[  350.852533][ T7055] ftdi_sio ttyUSB0: unknown device type: 0x5343
[  350.860399][ T7055] usb 2-1: USB disconnect, device number 60
[  350.886536][ T7055] ftdi_sio 2-1:64.146: device disconnected
[  351.186448][ T7523] usb usb40-port1: attempt power cycle
[  351.650719][ T5191] bcm5974 6-1:0.0: could not read from device
[  351.672226][ T5191] bcm5974 6-1:0.0: could not read from device
[  351.684513][ T5191] bcm5974 6-1:0.0: could not read from device
[  351.703904][ T5191] bcm5974 6-1:0.0: could not read from device
[  351.733878][ T5882] usb 6-1: USB disconnect, device number 31
[  351.763718][ T5851] bcm5974 6-1:0.0: could not read from device
[  352.066092][ T7523] usb usb40-port1: unable to enumerate USB device
[  352.180082][T10129] fuse: Invalid rootmode
[  352.234888][ T5882] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  352.395271][ T5882] usb 4-1: Using ep0 maxpacket: 32
[  352.403475][ T5882] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  352.428184][ T5882] usb 4-1: config 0 has no interface number 0
[  352.434399][ T5882] usb 4-1: config 0 interface 12 altsetting 243 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  352.448161][ T5882] usb 4-1: config 0 interface 12 has no altsetting 0
[  352.456729][ T5882] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  352.465949][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.473921][ T5882] usb 4-1: Product: syz
[  352.478216][ T5882] usb 4-1: Manufacturer: syz
[  352.482986][ T5882] usb 4-1: SerialNumber: syz
[  352.494055][ T5882] usb 4-1: config 0 descriptor??
[  352.504341][ T5882] f81534 4-1:0.12: required endpoints missing
[  352.745290][T10139] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  352.753120][T10139] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  352.775423][   T30] audit: type=1804 audit(1769240814.571:158): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1138" name="/newroot/159/file1" dev="fuse" ino=1 res=1 errno=0
[  352.875102][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  353.063803][ T5882] usb 1-1: USB disconnect, device number 68
[  353.484929][ T5882] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  353.645996][ T5882] usb 1-1: too many configurations: 15, using maximum allowed: 8
[  353.668873][ T5882] usb 1-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[  353.681635][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.713687][ T5882] usb 1-1: config 0 descriptor??
[  353.753949][ T5882] hub 1-1:0.0: Invalid hub with more than one config or interface
[  353.781079][ T5882] hub 1-1:0.0: probe with driver hub failed with error -22
[  353.804399][ T5882] sierra 1-1:0.0: Sierra USB modem converter detected
[  353.986185][ T5882] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  354.116114][ T5882] usb 1-1: USB disconnect, device number 69
[  354.157077][ T5882] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  354.195773][ T5882] sierra 1-1:0.0: device disconnected
[  354.741472][T10209] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1147'.
[  354.893452][T10217] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  354.913140][T10217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  354.950234][T10220] fuse: Bad value for 'rootmode'
[  354.966603][   T30] audit: type=1804 audit(1769240816.771:159): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1149" name="/newroot/229/file1" dev="fuse" ino=1 res=1 errno=0
[  355.042960][T10223] syzkaller0: entered promiscuous mode
[  355.052270][T10223] syzkaller0: entered allmulticast mode
[  355.065586][ T7523] usb 4-1: USB disconnect, device number 76
[  356.205116][ T7055] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  356.244750][ T7523] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  356.407606][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1159'.
[  356.427609][ T7055] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  356.439431][ T7523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  356.473509][ T7055] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  356.492803][ T7523] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  356.513284][ T7523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.521441][ T7055] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  356.562375][ T7523] usb 1-1: config 0 descriptor??
[  356.569861][ T7055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.595260][ T7055] usb 5-1: config 0 descriptor??
[  356.633397][ T7055] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  356.714740][ T5882] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  356.864821][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  356.898566][ T5882] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  356.907946][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.925291][ T5882] usb 2-1: config 0 descriptor??
[  356.940281][ T5882] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input29
[  357.041679][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.052476][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.159106][ T7523] usbhid 1-1:0.0: can't add hid device: -71
[  357.166269][ T7523] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  357.178825][ T7523] usb 1-1: USB disconnect, device number 70
[  357.360315][T10267] loop3: detected capacity change from 0 to 7
[  357.372902][T10267] Dev loop3: unable to read RDB block 7
[  357.392012][T10267]  loop3: unable to read partition table
[  357.401381][T10267] loop3: partition table beyond EOD, truncated
[  357.410374][T10267] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  357.614533][T10274] fuse: Bad value for 'rootmode'
[  357.677567][  T925] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  357.846531][  T925] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  357.854967][  T925] usb 4-1: config 0 has no interface number 0
[  357.863636][  T925] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  357.874386][  T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.882564][  T925] usb 4-1: Product: syz
[  357.888378][  T925] usb 4-1: Manufacturer: syz
[  357.893072][  T925] usb 4-1: SerialNumber: syz
[  357.901561][  T925] usb 4-1: config 0 descriptor??
[  357.910958][  T925] s2255 4-1:0.83: Could not find bulk-in endpoint
[  357.919415][  T925] Sensoray 2255 driver load failed: 0xfffffff4
[  357.925660][  T925] s2255 4-1:0.83: probe with driver s2255 failed with error -12
[  358.618329][ T7523] usb 4-1: USB disconnect, device number 77
[  358.699941][  T925] usb 5-1: USB disconnect, device number 65
[  358.987979][T10291] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1171'.
[  358.995254][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1173'.
[  359.044353][T10291] netlink: 'syz.0.1171': attribute type 31 has an invalid length.
[  359.155579][ T5191] bcm5974 2-1:0.0: could not read from device
[  359.191710][ T5882] usb 2-1: USB disconnect, device number 61
[  359.205837][ T5191] bcm5974 2-1:0.0: could not read from device
[  359.247949][ T5847] bcm5974 2-1:0.0: could not read from device
[  359.356053][T10296] usb usb8: usbfs: process 10296 (syz.1.1175) did not claim interface 0 before use
[  359.377478][T10297] IPv6: sit1: Disabled Multicast RS
[  359.684907][ T5882] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  360.084711][   T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  360.130737][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  360.149758][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  360.174672][ T5882] usb 2-1: no configurations
[  360.179306][ T5882] usb 2-1: can't read configurations, error -22
[  360.244742][   T10] usb 6-1: Using ep0 maxpacket: 32
[  360.277176][T10311] fuse: Bad value for 'rootmode'
[  360.295754][   T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  360.303877][   T10] usb 6-1: config 0 has no interface number 0
[  360.354671][ T5882] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  360.446237][   T10] usb 6-1: config 0 interface 12 has no altsetting 0
[  360.472364][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  360.481863][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.498960][   T10] usb 6-1: Product: syz
[  360.508861][   T10] usb 6-1: Manufacturer: syz
[  360.525766][   T10] usb 6-1: SerialNumber: syz
[  360.543851][   T10] usb 6-1: config 0 descriptor??
[  360.627698][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  360.637182][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  360.653804][ T5882] usb 2-1: no configurations
[  360.661067][ T5882] usb 2-1: can't read configurations, error -22
[  360.673074][ T5882] usb usb2-port1: attempt power cycle
[  360.694732][  T925] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  360.792565][T10316] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  360.800170][T10316] syzkaller0: entered promiscuous mode
[  360.806265][T10316] syzkaller0: entered allmulticast mode
[  360.835123][T10316] tipc: Resetting bearer <eth:syzkaller0>
[  360.841182][T10316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.856190][  T925] usb 5-1: config 0 has an invalid interface number: 37 but max is 0
[  360.864577][  T925] usb 5-1: config 0 has no interface number 0
[  360.872942][  T925] usb 5-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62
[  360.882475][  T925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.892611][  T925] usb 5-1: Product: syz
[  360.898124][  T925] usb 5-1: Manufacturer: syz
[  360.902933][  T925] usb 5-1: SerialNumber: syz
[  360.911154][  T925] usb 5-1: config 0 descriptor??
[  360.974822][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.044796][ T5882] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  361.077184][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  361.085444][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  361.093198][ T5882] usb 2-1: no configurations
[  361.098183][ T5882] usb 2-1: can't read configurations, error -22
[  361.115070][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.234805][ T5882] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  361.254707][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.267022][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  361.275733][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  361.283830][ T5882] usb 2-1: no configurations
[  361.288769][ T5882] usb 2-1: can't read configurations, error -22
[  361.295547][ T5882] usb usb2-port1: unable to enumerate USB device
[  361.394694][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.534725][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.548309][T10314] tipc: Resetting bearer <eth:syzkaller0>
[  361.564525][T10314] tipc: Disabling bearer <eth:syzkaller0>
[  361.644366][T10322] loop3: detected capacity change from 0 to 7
[  361.653232][T10322] Dev loop3: unable to read RDB block 7
[  361.658988][T10322]  loop3: unable to read partition table
[  361.666244][T10322] loop3: partition table beyond EOD, truncated
[  361.672449][T10322] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  361.934715][ T5882] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[  362.107222][ T5882] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  362.115633][ T5882] usb 4-1: config 0 has no interface number 0
[  362.123860][ T5882] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  362.133087][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.134742][ T7523] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  362.141191][ T5882] usb 4-1: Product: syz
[  362.153125][ T5882] usb 4-1: Manufacturer: syz
[  362.157916][ T5882] usb 4-1: SerialNumber: syz
[  362.164869][ T5882] usb 4-1: config 0 descriptor??
[  362.172357][ T5882] s2255 4-1:0.83: Could not find bulk-in endpoint
[  362.179007][ T5882] Sensoray 2255 driver load failed: 0xfffffff4
[  362.185248][ T5882] s2255 4-1:0.83: probe with driver s2255 failed with error -12
[  362.296988][ T7523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.308316][ T7523] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  362.332179][ T7523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.347549][ T7523] usb 1-1: config 0 descriptor??
[  362.560269][ T7523] usbhid 1-1:0.0: can't add hid device: -71
[  362.566440][ T7523] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  362.578227][ T7523] usb 1-1: USB disconnect, device number 71
[  362.763673][T10324] sctp: [Deprecated]: syz.0.1183 (pid 10324) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.763673][T10324] Use struct sctp_sack_info instead
[  362.764682][ T5882] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  362.831563][   T10] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  362.840461][   T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  362.848469][   T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  362.856572][   T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  362.868242][   T10] usb 6-1: USB disconnect, device number 32
[  362.898814][ T7523] usb 4-1: USB disconnect, device number 78
[  362.916220][ T5882] usb 2-1: device descriptor read/64, error -71
[  363.077286][ T7055] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  363.113560][   T10] usb 5-1: USB disconnect, device number 66
[  363.174710][ T5882] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  363.216727][ T7055] usb 1-1: device descriptor read/64, error -71
[  363.305129][ T5882] usb 2-1: device descriptor read/64, error -71
[  363.364762][  T925] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  363.417179][ T5882] usb usb2-port1: attempt power cycle
[  363.454774][ T7055] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  363.502720][T10340] program syz.5.1188 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  363.568611][T10341] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11)
[  363.575254][T10341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  363.594746][ T7055] usb 1-1: device descriptor read/64, error -71
[  363.604122][  T925] usb 4-1: config 255 has too many interfaces: 223, using maximum allowed: 32
[  363.614268][  T925] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 223
[  363.635640][T10341] vhci_hcd vhci_hcd.0: Device attached
[  363.655574][  T925] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  363.705142][ T7055] usb usb1-port1: attempt power cycle
[  363.724457][  T925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.733504][  T925] usb 4-1: Product: syz
[  363.737740][  T925] usb 4-1: Manufacturer: syz
[  363.752899][  T925] usb 4-1: SerialNumber: syz
[  363.778930][  T925] gspca_main: sq930x-2.14.0 probing 2770:930c
[  363.790634][ T5882] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  363.807568][T10349] netlink: 'syz.5.1189': attribute type 1 has an invalid length.
[  363.845867][ T5882] usb 2-1: device descriptor read/8, error -71
[  363.914867][ T7523] usb 42-1: SetAddress Request (2) to port 0
[  363.921062][ T7523] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  364.027085][T10351] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  364.043285][T10351] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  364.055262][ T7055] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  364.064261][T10342] vhci_hcd: connection reset by peer
[  364.074345][ T5980] vhci_hcd vhci_hcd.4: stop threads
[  364.079924][ T5980] vhci_hcd vhci_hcd.4: release socket
[  364.094748][ T5882] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  364.096921][ T7055] usb 1-1: device descriptor read/8, error -71
[  364.119445][ T5980] vhci_hcd vhci_hcd.4: disconnect device
[  364.147227][ T5882] usb 2-1: device descriptor read/8, error -71
[  364.265029][ T5882] usb usb2-port1: unable to enumerate USB device
[  364.273315][T10351] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1189'.
[  364.334820][  T925] gspca_sq930x: reg_r 001f failed -110
[  364.340384][  T925] sq930x 4-1:255.0: probe with driver sq930x failed with error -110
[  364.364741][ T7055] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  364.390951][T10349] bond1: (slave gretap1): making interface the new active one
[  364.403058][T10349] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  364.443991][ T7055] usb 1-1: device descriptor read/8, error -71
[  364.531214][  T925] usb 4-1: USB disconnect, device number 79
[  364.565314][ T7055] usb usb1-port1: unable to enumerate USB device
[  365.130093][T10369] fuse: Unknown parameter 'use00000000000000000000'
[  365.984853][T10379] loop3: detected capacity change from 0 to 7
[  365.993108][T10379] Dev loop3: unable to read RDB block 7
[  366.000001][T10379]  loop3: unable to read partition table
[  366.025201][T10379] loop3: partition table beyond EOD, truncated
[  366.040461][T10379] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  366.109349][ T5206] Dev loop3: unable to read RDB block 7
[  366.115369][ T5206]  loop3: unable to read partition table
[  366.121367][ T5206] loop3: partition table beyond EOD, truncated
[  366.141257][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1198'.
[  366.150799][T10390] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1198'.
[  366.444809][T10394] =======================================================
[  366.444809][T10394] WARNING: The mand mount option has been deprecated and
[  366.444809][T10394]          and is ignored by this kernel. Remove the mand
[  366.444809][T10394]          option from the mount to silence this warning.
[  366.444809][T10394] =======================================================
[  366.444926][ T7055] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  366.564729][ T6159] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  366.660232][ T7055] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  366.721502][ T7055] usb 5-1: config 0 has no interface number 0
[  366.745780][ T7055] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  366.775758][ T7055] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.788022][ T6159] usb 1-1: config 0 has an invalid interface number: 37 but max is 0
[  366.792931][T10405] xt_TCPMSS: Only works on TCP SYN packets
[  366.804755][ T7055] usb 5-1: Product: syz
[  366.809105][ T6159] usb 1-1: config 0 has no interface number 0
[  366.815724][ T7055] usb 5-1: Manufacturer: syz
[  366.825943][ T7055] usb 5-1: SerialNumber: syz
[  366.846807][ T7055] usb 5-1: config 0 descriptor??
[  366.852934][ T6159] usb 1-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62
[  366.875106][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.883570][ T7055] s2255 5-1:0.83: Could not find bulk-in endpoint
[  366.904767][ T7055] Sensoray 2255 driver load failed: 0xfffffff4
[  366.910967][ T7055] s2255 5-1:0.83: probe with driver s2255 failed with error -12
[  366.918757][ T6159] usb 1-1: Product: syz
[  366.922927][ T6159] usb 1-1: Manufacturer: syz
[  366.935037][ T6159] usb 1-1: SerialNumber: syz
[  366.971258][ T6159] usb 1-1: config 0 descriptor??
[  367.005260][T10411] fuse: Unknown parameter 'use00000000000000000000'
[  367.083767][  T925] usb 5-1: USB disconnect, device number 67
[  367.224730][ T6159] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  367.379282][ T6159] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  367.404708][ T6159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.412712][ T6159] usb 6-1: Product: syz
[  367.428001][ T6159] usb 6-1: Manufacturer: syz
[  367.432613][ T6159] usb 6-1: SerialNumber: syz
[  367.446836][ T6159] usb 6-1: config 0 descriptor??
[  367.457850][ T6159] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  367.466913][ T5206] Dev loop3: unable to read RDB block 7
[  367.484430][ T5206]  loop3: unable to read partition table
[  367.491570][ T5206] loop3: partition table beyond EOD, truncated
[  367.884727][ T5923] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  367.913041][T10422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1209'.
[  367.945232][T10422] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1209'.
[  368.044690][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  368.056087][ T5923] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  368.064271][ T5923] usb 4-1: config 0 has no interface number 0
[  368.070525][ T5923] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  368.092096][ T5923] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  368.105970][ T5882] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  368.111637][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.154737][ T5923] usb 4-1: Product: syz
[  368.159042][ T5923] usb 4-1: Manufacturer: syz
[  368.168175][ T6159] gspca_stk1135: reg_w 0x0 err -110
[  368.179697][ T5923] usb 4-1: SerialNumber: syz
[  368.184450][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.197439][ T6159] gspca_stk1135: Sensor write failed
[  368.205989][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.218813][ T5923] usb 4-1: config 0 descriptor??
[  368.225455][ T6159] gspca_stk1135: Sensor write failed
[  368.233830][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.269505][ T5882] usb 2-1: device descriptor read/64, error -71
[  368.280126][ T5923] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  368.295141][ T6159] gspca_stk1135: Sensor read failed
[  368.303180][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.313722][ T6159] gspca_stk1135: Sensor read failed
[  368.322983][ T6159] gspca_stk1135: Detected sensor type unknown (0x0)
[  368.334868][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.345471][ T6159] gspca_stk1135: Sensor read failed
[  368.354511][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.367504][ T6159] gspca_stk1135: Sensor read failed
[  368.378775][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.390546][ T6159] gspca_stk1135: Sensor write failed
[  368.404510][ T6159] gspca_stk1135: serial bus timeout: status=0x00
[  368.417003][ T6159] gspca_stk1135: Sensor write failed
[  368.426650][ T6159] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110
[  368.449375][ T6159] usb 6-1: USB disconnect, device number 33
[  368.455576][ T5923] usb 4-1: qt2_setup_urbs - submit read urb failed -8
[  368.464144][ T5923] quatech2 4-1:0.51: probe with driver quatech2 failed with error -8
[  368.464676][  T925] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  368.544845][ T5882] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  368.638043][  T925] usb 5-1: config index 0 descriptor too short (expected 65183, got 72)
[  368.650664][  T925] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  368.660374][  T925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.675654][ T5882] usb 2-1: device descriptor read/64, error -71
[  368.682375][  T925] usb 5-1: Product: syz
[  368.687362][  T925] usb 5-1: Manufacturer: syz
[  368.693328][  T925] usb 5-1: SerialNumber: syz
[  368.743179][  T925] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  368.811493][ T5882] usb usb2-port1: attempt power cycle
[  368.870982][   T10] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  368.959728][ T7523] usb 42-1: device descriptor read/8, error -110
[  369.082621][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.117862][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.157538][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.193147][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.210545][  T925] usb 1-1: USB disconnect, device number 76
[  369.226683][ T5882] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  369.244027][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.291595][ T5882] usb 2-1: device descriptor read/8, error -71
[  369.301095][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.372745][ T7523] usb usb42-port1: attempt power cycle
[  369.537923][T10436] FAULT_INJECTION: forcing a failure.
[  369.537923][T10436] name failslab, interval 1, probability 0, space 0, times 0
[  369.559721][T10436] CPU: 0 UID: 0 PID: 10436 Comm: syz.0.1212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  369.559750][T10436] Tainted: [L]=SOFTLOCKUP
[  369.559757][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  369.559776][T10436] Call Trace:
[  369.559784][T10436]  <TASK>
[  369.559792][T10436]  dump_stack_lvl+0xe8/0x150
[  369.559822][T10436]  should_fail_ex+0x412/0x560
[  369.559853][T10436]  should_failslab+0xa8/0x100
[  369.559885][T10436]  __kmalloc_cache_noprof+0x83/0x6e0
[  369.559904][T10436]  ? __pfx_stack_trace_save+0x10/0x10
[  369.559931][T10436]  ? rtnl_newlink+0x136/0x1be0
[  369.559961][T10436]  rtnl_newlink+0x136/0x1be0
[  369.559988][T10436]  ? kasan_save_track+0x4f/0x80
[  369.560005][T10436]  ? kasan_save_track+0x3e/0x80
[  369.560022][T10436]  ? kasan_save_free_info+0x46/0x50
[  369.560045][T10436]  ? __kasan_slab_free+0x5c/0x80
[  369.560062][T10436]  ? kmem_cache_free+0x195/0x610
[  369.560081][T10436]  ? __dev_queue_xmit+0x14ed/0x32b0
[  369.560101][T10436]  ? __netlink_deliver_tap+0x5ad/0x850
[  369.560120][T10436]  ? netlink_deliver_tap+0x19c/0x1b0
[  369.560137][T10436]  ? netlink_unicast+0x7e3/0x9b0
[  369.560161][T10436]  ? netlink_sendmsg+0x813/0xb40
[  369.560181][T10436]  ? __pfx_rtnl_newlink+0x10/0x10
[  369.560205][T10436]  ? do_syscall_64+0xe2/0xf80
[  369.560228][T10436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.560279][T10436]  ? kasan_quarantine_put+0xbb/0x1f0
[  369.560298][T10436]  ? lockdep_hardirqs_on+0x7a/0x110
[  369.560326][T10436]  ? kmem_cache_free+0x195/0x610
[  369.560344][T10436]  ? nlmon_xmit+0xb0/0x100
[  369.560375][T10436]  ? __lock_acquire+0x6b5/0x2cf0
[  369.560404][T10436]  ? __local_bh_enable_ip+0xd0/0x130
[  369.560424][T10436]  ? lockdep_hardirqs_on+0x7a/0x110
[  369.560447][T10436]  ? __dev_queue_xmit+0x2a7/0x32b0
[  369.560466][T10436]  ? __local_bh_enable_ip+0xd0/0x130
[  369.560484][T10436]  ? __dev_queue_xmit+0x2a7/0x32b0
[  369.560511][T10436]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  369.560550][T10436]  ? __pfx_rtnl_newlink+0x10/0x10
[  369.560575][T10436]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  369.560604][T10436]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  369.560629][T10436]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  369.560654][T10436]  ? lockdep_hardirqs_on+0x7a/0x110
[  369.560678][T10436]  ? irqentry_exit+0x59c/0x620
[  369.560714][T10436]  netlink_rcv_skb+0x232/0x4b0
[  369.560735][T10436]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  369.560762][T10436]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  369.560792][T10436]  ? netlink_deliver_tap+0x2e/0x1b0
[  369.560819][T10436]  netlink_unicast+0x80f/0x9b0
[  369.560853][T10436]  ? __pfx_netlink_unicast+0x10/0x10
[  369.560883][T10436]  ? __alloc_skb+0x193/0x390
[  369.560908][T10436]  ? netlink_sendmsg+0x650/0xb40
[  369.560927][T10436]  ? skb_put+0x11b/0x210
[  369.560956][T10436]  netlink_sendmsg+0x813/0xb40
[  369.560985][T10436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.561007][T10436]  ? aa_file_perm+0x12d/0x1630
[  369.561031][T10436]  ? aa_sock_msg_perm+0xf1/0x1b0
[  369.561056][T10436]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  369.561073][T10436]  ? __pfx_netlink_sendmsg+0x10/0x10
[  369.561095][T10436]  __sock_sendmsg+0x21c/0x270
[  369.561120][T10436]  ____sys_sendmsg+0x4d7/0x810
[  369.561138][T10436]  ? __might_fault+0xaf/0x130
[  369.561167][T10436]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.561194][T10436]  ? import_iovec+0x73/0xa0
[  369.561217][T10436]  ___sys_sendmsg+0x2a5/0x360
[  369.561235][T10436]  ? __lock_acquire+0x6b5/0x2cf0
[  369.561258][T10436]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.561309][T10436]  ? __fget_files+0x2a/0x420
[  369.561330][T10436]  ? __fget_files+0x3a0/0x420
[  369.561362][T10436]  __x64_sys_sendmsg+0x1bd/0x2a0
[  369.561383][T10436]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  369.561411][T10436]  ? __pfx_ksys_write+0x10/0x10
[  369.561440][T10436]  do_syscall_64+0xe2/0xf80
[  369.561465][T10436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.561483][T10436]  ? trace_irq_disable+0x37/0x100
[  369.561506][T10436]  ? clear_bhb_loop+0x60/0xb0
[  369.561528][T10436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.561552][T10436] RIP: 0033:0x7f584759acb9
[  369.561570][T10436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  369.561584][T10436] RSP: 002b:00007f5848460028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  369.561604][T10436] RAX: ffffffffffffffda RBX: 00007f5847815fa0 RCX: 00007f584759acb9
[  369.561617][T10436] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  369.561629][T10436] RBP: 00007f5848460090 R08: 0000000000000000 R09: 0000000000000000
[  369.561640][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  369.561651][T10436] R13: 00007f5847816038 R14: 00007f5847815fa0 R15: 00007f584793fa48
[  369.561679][T10436]  </TASK>
[  370.051122][ T5882] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  370.061088][   T10] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  370.069418][   T10] ath9k_htc: Failed to initialize the device
[  370.116070][ T5882] usb 2-1: device descriptor read/8, error -71
[  370.154667][   T10] usb 5-1: ath9k_htc: USB layer deinitialized
[  370.224955][ T5882] usb usb2-port1: unable to enumerate USB device
[  370.248971][ T7523] usb usb42-port1: unable to enumerate USB device
[  370.327953][T10429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.379413][T10446] openvswitch: netlink: Multiple metadata blocks provided
[  370.412110][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1214'.
[  370.425200][T10429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.487841][ T5923] usb 5-1: USB disconnect, device number 68
[  370.524955][ T7523] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  370.697777][ T7523] usb 1-1: Using ep0 maxpacket: 32
[  370.724994][ T7523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  370.743246][ T7523] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  370.764939][ T7523] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  370.774295][ T7523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.823599][ T7523] usb 1-1: config 0 descriptor??
[  370.838296][ T7523] hub 1-1:0.0: USB hub found
[  371.094432][ T7523] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  371.134425][T10456] loop3: detected capacity change from 0 to 7
[  371.147112][T10456] Dev loop3: unable to read RDB block 7
[  371.147941][ T7523] usbhid 1-1:0.0: can't add hid device: -71
[  371.174217][T10456]  loop3: unable to read partition table
[  371.192409][ T7523] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  371.193363][T10456] loop3: partition table beyond EOD, 
[  371.238572][   T10] usb 4-1: USB disconnect, device number 80
[  371.278804][T10456] truncated
[  371.299367][T10456] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  371.303144][ T7523] usb 1-1: USB disconnect, device number 77
[  371.319335][T10463] fuse: Unknown parameter 'use00000000000000000000'
[  371.452706][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1220'.
[  371.465679][T10465] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1220'.
[  371.518391][ T6159] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  371.545282][ T5206] Dev loop3: unable to read RDB block 7
[  371.555125][ T5206]  loop3: unable to read partition table
[  371.563432][ T5206] loop3: partition table beyond EOD, truncated
[  371.604691][ T5923] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  371.676487][ T6159] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  371.686753][ T6159] usb 5-1: config 0 has no interface number 0
[  371.707677][ T6159] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  371.726611][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.742282][ T6159] usb 5-1: Product: syz
[  371.751027][ T6159] usb 5-1: Manufacturer: syz
[  371.761595][ T6159] usb 5-1: SerialNumber: syz
[  371.769673][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.786434][ T6159] usb 5-1: config 0 descriptor??
[  371.797617][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  371.813732][ T6159] s2255 5-1:0.83: Could not find bulk-in endpoint
[  371.824989][ T5923] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[  371.837939][ T6159] Sensoray 2255 driver load failed: 0xfffffff4
[  371.848448][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.858510][ T6159] s2255 5-1:0.83: probe with driver s2255 failed with error -12
[  371.871048][ T5923] usb 2-1: Product: syz
[  371.878807][ T5923] usb 2-1: Manufacturer: syz
[  371.887017][ T5923] usb 2-1: SerialNumber: syz
[  371.901689][ T5923] usb 2-1: config 0 descriptor??
[  371.927703][ T5923] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  371.942227][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  371.956978][ T5923] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  371.970547][ T5923] usb 2-1: media controller created
[  371.991859][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  372.034269][T10456] ip6gre1: entered promiscuous mode
[  372.051827][T10456] ip6gre1: entered allmulticast mode
[  372.099065][ T5923] DVB: Unable to find symbol tda10046_attach()
[  372.105997][ T5923] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  372.118415][ T5923] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  372.534753][   T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  372.722480][ T6159] usb 5-1: USB disconnect, device number 69
[  372.835237][   T10] usb 1-1: config 0 has an invalid interface number: 37 but max is 0
[  372.887590][   T10] usb 1-1: config 0 has no interface number 0
[  372.908094][   T10] usb 1-1: New USB device found, idVendor=2639, idProduct=0003, bcdDevice=fd.62
[  372.953967][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.017717][   T10] usb 1-1: Product: syz
[  373.068224][   T10] usb 1-1: Manufacturer: syz
[  373.082782][   T10] usb 1-1: SerialNumber: syz
[  373.113523][   T10] usb 1-1: config 0 descriptor??
[  373.653815][T10487] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1226'.
[  373.671186][T10487] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1226'.
[  373.695762][T10488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  373.706638][T10488] team0: Port device batadv0 added
[  373.838601][T10490] hub 9-0:1.0: USB hub found
[  373.844716][T10490] hub 9-0:1.0: 1 port detected
[  374.166011][ T6159] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  374.179458][ T5923] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -110
[  374.445025][   T10] usb 2-1: USB disconnect, device number 74
[  374.466746][ T6159] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  374.520567][ T6159] usb 5-1: config 0 has no interface number 0
[  374.533013][ T6159] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  374.559304][ T6159] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  374.571154][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'.
[  374.592164][ T6159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.600496][ T6159] usb 5-1: Product: syz
[  374.605760][ T6159] usb 5-1: Manufacturer: syz
[  374.611245][ T6159] usb 5-1: SerialNumber: syz
[  374.624964][ T6159] usb 5-1: config 0 descriptor??
[  374.630860][T10491] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  374.652019][ T6159] usb-storage 5-1:0.20: USB Mass Storage device detected
[  374.674845][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'.
[  374.685022][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'.
[  374.688434][ T6159] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  374.787948][   T10] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  374.826610][T10509] loop3: detected capacity change from 0 to 7
[  374.840197][ T5847] Dev loop3: unable to read RDB block 7
[  374.847097][ T5847]  loop3: unable to read partition table
[  374.854039][ T5847] loop3: partition table beyond EOD, truncated
[  374.879510][T10509] Dev loop3: unable to read RDB block 7
[  374.888259][T10509]  loop3: unable to read partition table
[  374.899014][T10509] loop3: partition table beyond EOD, truncated
[  374.905758][ T6159] scsi host1: usb-storage 5-1:0.20
[  374.915715][T10509] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  374.934890][   T10] usb 6-1: device descriptor read/64, error -71
[  375.110429][ T7055] usb 5-1: USB disconnect, device number 70
[  375.146317][ T6159] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  375.171899][ T5923] usb 1-1: USB disconnect, device number 78
[  375.185882][   T10] usb 6-1: new full-speed USB device number 35 using dummy_hcd
[  375.316425][ T6159] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  375.324795][   T10] usb 6-1: device descriptor read/64, error -71
[  375.332209][ T6159] usb 4-1: config 0 has no interface number 0
[  375.349043][ T6159] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=92.20
[  375.359402][ T6159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.367596][ T6159] usb 4-1: Product: syz
[  375.373129][ T6159] usb 4-1: Manufacturer: syz
[  375.378046][ T6159] usb 4-1: SerialNumber: syz
[  375.395081][ T6159] usb 4-1: config 0 descriptor??
[  375.405883][ T6159] s2255 4-1:0.83: Could not find bulk-in endpoint
[  375.416801][ T6159] Sensoray 2255 driver load failed: 0xfffffff4
[  375.423144][ T6159] s2255 4-1:0.83: probe with driver s2255 failed with error -12
[  375.435027][   T10] usb usb6-port1: attempt power cycle
[  375.611087][T10509] ip6gre1: entered promiscuous mode
[  375.616532][T10509] ip6gre1: entered allmulticast mode
[  375.794772][   T10] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  375.833358][   T10] usb 6-1: device descriptor read/8, error -71
[  375.844941][T10521] openvswitch: netlink: Multiple metadata blocks provided
[  375.854542][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1236'.
[  376.133749][T10509] syz.3.1233 (10509) used greatest stack depth: 18592 bytes left
[  376.164693][   T10] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  376.188277][ T5882] usb 4-1: USB disconnect, device number 81
[  376.195496][   T10] usb 6-1: device descriptor read/8, error -71
[  376.345147][   T10] usb usb6-port1: unable to enumerate USB device
[  376.387935][ T6159] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  376.456916][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'.
[  376.555043][ T6159] usb 1-1: Using ep0 maxpacket: 32
[  376.566844][ T6159] usb 1-1: config 2 has an invalid interface number: 88 but max is 0
[  376.592647][ T6159] usb 1-1: config 2 has no interface number 0
[  376.612892][ T6159] usb 1-1: config 2 interface 88 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  376.635357][ T6159] usb 1-1: config 2 interface 88 has no altsetting 0
[  376.652868][ T6159] usb 1-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  376.667703][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.683247][ T6159] usb 1-1: Product: syz
[  376.691921][ T6159] usb 1-1: Manufacturer: syz
[  376.703749][ T6159] usb 1-1: SerialNumber: syz
[  376.725518][ T6159] asix 1-1:2.88: probe with driver asix failed with error -22
[  376.844700][   T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  377.011055][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  377.022293][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.032412][   T10] usb 5-1: Product: syz
[  377.040744][   T10] usb 5-1: Manufacturer: syz
[  377.045385][   T10] usb 5-1: SerialNumber: syz
[  377.246720][T10539] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1242'.
[  377.264850][T10539] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1242'.
[  377.323330][   T30] audit: type=1326 audit(1769240839.121:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.3.1243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9eb179acb9 code=0x0
[  377.475364][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  377.493264][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  377.531586][T10544] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1243'.
[  378.491552][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  378.497986][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  378.530125][T10556] syzkaller0: entered promiscuous mode
[  378.551279][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  378.563333][T10556] syzkaller0: entered allmulticast mode
[  378.580645][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  378.628048][   T10] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  378.701713][   T10] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[  379.749411][ T5882] usb 5-1: USB disconnect, device number 71
[  380.080779][T10582] FAULT_INJECTION: forcing a failure.
[  380.080779][T10582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.121151][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1253'.
[  380.175540][T10582] CPU: 0 UID: 0 PID: 10582 Comm: syz.4.1254 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  380.175572][T10582] Tainted: [L]=SOFTLOCKUP
[  380.175579][T10582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  380.175592][T10582] Call Trace:
[  380.175600][T10582]  <TASK>
[  380.175608][T10582]  dump_stack_lvl+0xe8/0x150
[  380.175637][T10582]  should_fail_ex+0x412/0x560
[  380.175667][T10582]  _copy_from_iter+0x1d3/0x1670
[  380.175699][T10582]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  380.175727][T10582]  ? __pfx__copy_from_iter+0x10/0x10
[  380.175753][T10582]  ? __build_skb_around+0x22d/0x3c0
[  380.175778][T10582]  ? __alloc_skb+0x193/0x390
[  380.175801][T10582]  ? netlink_sendmsg+0x650/0xb40
[  380.175819][T10582]  ? skb_put+0x11b/0x210
[  380.175847][T10582]  netlink_sendmsg+0x6c0/0xb40
[  380.175875][T10582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  380.175897][T10582]  ? aa_sock_msg_perm+0xf1/0x1b0
[  380.175923][T10582]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  380.175940][T10582]  ? __pfx_netlink_sendmsg+0x10/0x10
[  380.175967][T10582]  __sock_sendmsg+0x21c/0x270
[  380.175993][T10582]  ____sys_sendmsg+0x500/0x810
[  380.176010][T10582]  ? __might_fault+0xaf/0x130
[  380.176041][T10582]  ? __pfx_____sys_sendmsg+0x10/0x10
[  380.176068][T10582]  ? import_iovec+0x73/0xa0
[  380.176090][T10582]  ___sys_sendmsg+0x2a5/0x360
[  380.176108][T10582]  ? __lock_acquire+0x6b5/0x2cf0
[  380.176131][T10582]  ? __pfx____sys_sendmsg+0x10/0x10
[  380.176147][T10582]  ? __lock_acquire+0x6b5/0x2cf0
[  380.176169][T10582]  ? kstrtouint+0x6e/0xe0
[  380.176228][T10582]  __sys_sendmmsg+0x27c/0x4e0
[  380.176251][T10582]  ? __pfx___sys_sendmmsg+0x10/0x10
[  380.176266][T10582]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  380.176316][T10582]  ? ksys_write+0x242/0x270
[  380.176336][T10582]  ? __pfx_ksys_write+0x10/0x10
[  380.176359][T10582]  __x64_sys_sendmmsg+0xa0/0xc0
[  380.176380][T10582]  do_syscall_64+0xe2/0xf80
[  380.176404][T10582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.176420][T10582]  ? trace_irq_disable+0x37/0x100
[  380.176442][T10582]  ? clear_bhb_loop+0x60/0xb0
[  380.176464][T10582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.176482][T10582] RIP: 0033:0x7fb0b2b9acb9
[  380.176499][T10582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.176515][T10582] RSP: 002b:00007fb0b3af4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  380.176535][T10582] RAX: ffffffffffffffda RBX: 00007fb0b2e15fa0 RCX: 00007fb0b2b9acb9
[  380.176549][T10582] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004
[  380.176565][T10582] RBP: 00007fb0b3af4090 R08: 0000000000000000 R09: 0000000000000000
[  380.176577][T10582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  380.176589][T10582] R13: 00007fb0b2e16038 R14: 00007fb0b2e15fa0 R15: 00007fb0b2f3fa48
[  380.176618][T10582]  </TASK>
[  380.626175][T10583] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1253'.
[  380.831888][ T6159] usb 1-1: USB disconnect, device number 79
[  380.875012][T10588] FAULT_INJECTION: forcing a failure.
[  380.875012][T10588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  380.911434][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'.
[  380.944727][T10588] CPU: 1 UID: 0 PID: 10588 Comm: syz.4.1256 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  380.944756][T10588] Tainted: [L]=SOFTLOCKUP
[  380.944764][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  380.944774][T10588] Call Trace:
[  380.944782][T10588]  <TASK>
[  380.944790][T10588]  dump_stack_lvl+0xe8/0x150
[  380.944822][T10588]  should_fail_ex+0x412/0x560
[  380.944850][T10588]  _copy_from_user+0x2d/0xb0
[  380.944871][T10588]  ___sys_recvmsg+0x175/0x590
[  380.944891][T10588]  ? __pfx____sys_recvmsg+0x10/0x10
[  380.944910][T10588]  ? __fget_files+0x2a/0x420
[  380.944955][T10588]  do_recvmmsg+0x334/0x800
[  380.944980][T10588]  ? __pfx_do_recvmmsg+0x10/0x10
[  380.945008][T10588]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  380.945047][T10588]  __x64_sys_recvmmsg+0x198/0x250
[  380.945068][T10588]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  380.945097][T10588]  do_syscall_64+0xe2/0xf80
[  380.945119][T10588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.945133][T10588]  ? trace_irq_disable+0x37/0x100
[  380.945153][T10588]  ? clear_bhb_loop+0x60/0xb0
[  380.945176][T10588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.945194][T10588] RIP: 0033:0x7fb0b2b9acb9
[  380.945210][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.945225][T10588] RSP: 002b:00007fb0b3ad3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  380.945244][T10588] RAX: ffffffffffffffda RBX: 00007fb0b2e16090 RCX: 00007fb0b2b9acb9
[  380.945256][T10588] RDX: 0000000000000414 RSI: 0000200000000840 RDI: 0000000000000004
[  380.945268][T10588] RBP: 00007fb0b3ad3090 R08: 0000000000000000 R09: 0000000000000000
[  380.945278][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  380.945288][T10588] R13: 00007fb0b2e16128 R14: 00007fb0b2e16090 R15: 00007fb0b2f3fa48
[  380.945316][T10588]  </TASK>
[  380.945415][T10591] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  381.167866][   T30] audit: type=1804 audit(1769240842.971:161): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1255" name="/newroot/188/file1" dev="fuse" ino=1 res=1 errno=0
[  381.388345][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1257'.
[  381.473294][T10602] openvswitch: netlink: Multiple metadata blocks provided
[  381.483969][T10602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'.
[  381.931887][T10611] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1261'.
[  383.536454][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'.
[  383.672791][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1270'.
[  383.853812][T10643] FAULT_INJECTION: forcing a failure.
[  383.853812][T10643] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  383.871785][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.3.1273 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.871815][T10643] Tainted: [L]=SOFTLOCKUP
[  383.871823][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  383.871834][T10643] Call Trace:
[  383.871842][T10643]  <TASK>
[  383.871851][T10643]  dump_stack_lvl+0xe8/0x150
[  383.871880][T10643]  should_fail_ex+0x412/0x560
[  383.871909][T10643]  _copy_from_user+0x2d/0xb0
[  383.871931][T10643]  do_sock_getsockopt+0x165/0x3f0
[  383.871961][T10643]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  383.871987][T10643]  ? __fget_files+0x3a0/0x420
[  383.872009][T10643]  ? __fget_files+0x2a/0x420
[  383.872036][T10643]  __x64_sys_getsockopt+0x1a4/0x240
[  383.872063][T10643]  do_syscall_64+0xe2/0xf80
[  383.872088][T10643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.872106][T10643]  ? trace_irq_disable+0x37/0x100
[  383.872129][T10643]  ? clear_bhb_loop+0x60/0xb0
[  383.872150][T10643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.872169][T10643] RIP: 0033:0x7f9eb179acb9
[  383.872186][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.872203][T10643] RSP: 002b:00007f9eb2646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  383.872223][T10643] RAX: ffffffffffffffda RBX: 00007f9eb1a15fa0 RCX: 00007f9eb179acb9
[  383.872237][T10643] RDX: 0000000000000009 RSI: 000000000000010e RDI: 0000000000000003
[  383.872249][T10643] RBP: 00007f9eb2646090 R08: 0000200000000100 R09: 0000000000000000
[  383.872261][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  383.872272][T10643] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007f9eb1b3fa48
[  383.872310][T10643]  </TASK>
[  384.157374][T10648] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  384.165794][T10648] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  385.233570][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'.
[  385.365220][ T6159] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  385.516569][T10681] FAULT_INJECTION: forcing a failure.
[  385.516569][T10681] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  385.530503][T10681] CPU: 1 UID: 0 PID: 10681 Comm: syz.5.1284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  385.530533][T10681] Tainted: [L]=SOFTLOCKUP
[  385.530540][T10681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  385.530552][T10681] Call Trace:
[  385.530560][T10681]  <TASK>
[  385.530569][T10681]  dump_stack_lvl+0xe8/0x150
[  385.530598][T10681]  should_fail_ex+0x412/0x560
[  385.530629][T10681]  prepare_alloc_pages+0x22a/0x650
[  385.530659][T10681]  __alloc_frozen_pages_noprof+0x12f/0x380
[  385.530686][T10681]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  385.530712][T10681]  ? lruvec_stat_mod_folio+0x6f/0x2d0
[  385.530739][T10681]  ? policy_nodemask+0x27c/0x710
[  385.530766][T10681]  alloc_pages_mpol+0x232/0x4a0
[  385.530794][T10681]  vma_alloc_folio_noprof+0xea/0x210
[  385.530816][T10681]  ? page_table_check_set+0x148/0x610
[  385.530836][T10681]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  385.530856][T10681]  ? css_rstat_updated+0x23a/0x530
[  385.530889][T10681]  ? ___pte_offset_map+0x29/0x240
[  385.530916][T10681]  folio_prealloc+0x30/0x170
[  385.530945][T10681]  do_pte_missing+0x14e8/0x3310
[  385.530986][T10681]  handle_mm_fault+0x1b8c/0x32a0
[  385.531026][T10681]  ? handle_mm_fault+0xee/0x32a0
[  385.531059][T10681]  ? __pfx_handle_mm_fault+0x10/0x10
[  385.531084][T10681]  ? follow_page_pte+0x825/0x1460
[  385.531118][T10681]  ? __pfx_follow_page_pte+0x10/0x10
[  385.531155][T10681]  __get_user_pages+0x165b/0x29d0
[  385.531212][T10681]  __gup_longterm_locked+0x3db/0x1630
[  385.531264][T10681]  gup_fast_fallback+0x1d82/0x22e0
[  385.531318][T10681]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  385.531352][T10681]  ? __pfx_gup_fast_fallback+0x10/0x10
[  385.531378][T10681]  ? is_valid_gup_args+0x11f/0x200
[  385.531404][T10681]  ? pin_user_pages_fast+0x4d/0xb0
[  385.531430][T10681]  pfn_reader_user_pin+0xdbe/0x11a0
[  385.531461][T10681]  ? __pfx_pfn_reader_user_pin+0x10/0x10
[  385.531480][T10681]  ? kasan_save_track+0x4f/0x80
[  385.531500][T10681]  ? interval_tree_span_iter_first+0xea/0xd70
[  385.531533][T10681]  iopt_pages_fill_xarray+0x529/0xf20
[  385.531565][T10681]  ? __pfx_iopt_pages_fill_xarray+0x10/0x10
[  385.531619][T10681]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  385.531638][T10681]  ? iopt_area_add_access+0x1f2/0x4c0
[  385.531663][T10681]  iopt_area_add_access+0x210/0x4c0
[  385.531689][T10681]  iommufd_access_pin_pages+0x6e0/0xc30
[  385.531733][T10681]  ? __pfx_iommufd_access_pin_pages+0x10/0x10
[  385.531761][T10681]  ? __kvmalloc_node_noprof+0x5ba/0x8d0
[  385.531791][T10681]  iommufd_test+0x411c/0x5540
[  385.531823][T10681]  ? __lock_acquire+0x6b5/0x2cf0
[  385.531842][T10681]  ? __pfx_iommufd_test+0x10/0x10
[  385.531873][T10681]  ? tomoyo_path_number_perm+0x219/0x630
[  385.531897][T10681]  ? tomoyo_path_number_perm+0x219/0x630
[  385.531925][T10681]  ? __might_fault+0xaf/0x130
[  385.531950][T10681]  ? __might_fault+0xaf/0x130
[  385.531999][T10681]  iommufd_fops_ioctl+0x4b5/0x5d0
[  385.532027][T10681]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  385.532057][T10681]  ? __fget_files+0x2a/0x420
[  385.532084][T10681]  ? __fget_files+0x2a/0x420
[  385.532110][T10681]  ? bpf_lsm_file_ioctl+0x9/0x20
[  385.532131][T10681]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  385.532156][T10681]  __se_sys_ioctl+0xfc/0x170
[  385.532184][T10681]  do_syscall_64+0xe2/0xf80
[  385.532209][T10681]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.532227][T10681]  ? trace_irq_disable+0x37/0x100
[  385.532249][T10681]  ? clear_bhb_loop+0x60/0xb0
[  385.532272][T10681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  385.532290][T10681] RIP: 0033:0x7fe60519acb9
[  385.532307][T10681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  385.532324][T10681] RSP: 002b:00007fe60604b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  385.532349][T10681] RAX: ffffffffffffffda RBX: 00007fe605416090 RCX: 00007fe60519acb9
[  385.532362][T10681] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000004
[  385.532375][T10681] RBP: 00007fe60604b090 R08: 0000000000000000 R09: 0000000000000000
[  385.532387][T10681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  385.532398][T10681] R13: 00007fe605416128 R14: 00007fe605416090 R15: 00007fe60553fa48
[  385.532432][T10681]  </TASK>
[  385.995040][T10675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'.
[  386.025113][ T6159] usb 5-1: Using ep0 maxpacket: 32
[  386.057764][ T6159] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  386.075519][ T6159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.226182][ T6159] usb 5-1: config 0 descriptor??
[  386.234826][ T6159] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  386.444952][T10689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  386.785221][   T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  386.980786][   T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  387.000131][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  387.041733][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  387.080440][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  387.111526][   T10] usb 6-1: SerialNumber: syz
[  387.155073][  T925] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  387.314754][  T925] usb 4-1: Using ep0 maxpacket: 16
[  387.326256][  T925] usb 4-1: config 0 has no interfaces?
[  387.381255][T10709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  387.425352][   T30] audit: type=1804 audit(1769240849.221:162): pid=10708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1290" name="/newroot/261/file1" dev="fuse" ino=1 res=1 errno=0
[  387.577676][  T925] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  387.589277][  T925] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  387.598402][  T925] usb 4-1: Manufacturer: syz
[  387.627127][  T925] usb 4-1: config 0 descriptor??
[  388.244866][ T6159] gspca_vc032x: reg_w err -110
[  388.250886][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.259704][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.315559][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.323376][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.353762][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.417612][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.434161][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.452902][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.471003][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.522752][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.596774][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.708190][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.825693][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.859876][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.891767][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.917267][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.938913][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.961162][ T6159] gspca_vc032x: I2c Bus Busy Wait 00
[  388.983343][ T6159] gspca_vc032x: Unknown sensor...
[  389.034341][ T6159] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  389.083954][ T6159] usb 5-1: USB disconnect, device number 72
[  389.118830][ T5923] usb 4-1: USB disconnect, device number 82
[  390.310072][   T10] usb 6-1: 0:2 : does not exist
[  390.334827][   T10] usb 6-1: unit 5 not found!
[  390.393956][   T10] usb 6-1: USB disconnect, device number 38
[  390.440464][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.636834][T10743] syzkaller1: entered promiscuous mode
[  390.642411][T10743] syzkaller1: entered allmulticast mode
[  390.745088][   T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  390.940496][   T10] usb 5-1: config 2 has an invalid interface number: 174 but max is 0
[  390.970159][   T10] usb 5-1: config 2 has no interface number 0
[  390.983626][   T10] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  391.007118][   T10] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  391.030142][   T10] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  391.087752][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  391.099671][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.111816][   T10] usb 5-1: Product: syz
[  391.116689][   T10] usb 5-1: Manufacturer: syz
[  391.122254][   T10] usb 5-1: SerialNumber: syz
[  391.146361][T10739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  391.157289][T10739] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  391.244768][ T5923] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  391.386018][ T5923] usb 2-1: device descriptor read/64, error -71
[  391.408675][ T6159] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  391.551050][   T10] usb 5-1: probing VID:PID(0424:012C)   
[  391.558659][   T10] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E
[  391.565284][   T10] usb 5-1: vub300 testing BULK IN EndPoint(1) 82
[  391.571647][   T10] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  391.575479][ T6159] usb 1-1: Using ep0 maxpacket: 8
[  391.585929][ T6159] usb 1-1: config 0 has an invalid interface number: 48 but max is 12
[  391.586446][   T10] vub300 5-1:2.174: probe with driver vub300 failed with error -22
[  391.594111][ T6159] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13
[  391.594136][ T6159] usb 1-1: config 0 has no interface number 0
[  391.594170][ T6159] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[  391.611236][   T10] usb 5-1: USB disconnect, device number 73
[  391.622325][ T6159] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  391.648729][ T5923] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  391.658588][  T925] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  391.686501][ T6159] usb 1-1: config 0 interface 48 has no altsetting 0
[  391.704963][ T6159] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  391.714012][ T6159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.735462][ T6159] usb 1-1: Product: syz
[  391.739661][ T6159] usb 1-1: Manufacturer: syz
[  391.744240][ T6159] usb 1-1: SerialNumber: syz
[  391.768792][ T6159] usb 1-1: config 0 descriptor??
[  391.794765][ T5923] usb 2-1: device descriptor read/64, error -71
[  391.816361][  T925] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  391.833386][  T925] usb 6-1: config 0 interface 0 has no altsetting 0
[  391.842563][  T925] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  391.853043][  T925] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  391.862872][  T925] usb 6-1: Product: syz
[  391.868351][  T925] usb 6-1: Manufacturer: syz
[  391.873453][  T925] usb 6-1: SerialNumber: syz
[  391.896525][  T925] usb 6-1: config 0 descriptor??
[  391.905129][ T5923] usb usb2-port1: attempt power cycle
[  391.979946][    C1] raw-gadget.2 gadget.0: ignoring, device is not running
[  391.996812][ T6159] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  391.998425][  T925] usb 6-1: selecting invalid altsetting 0
[  392.005503][ T6159] gspca_zc3xx: reg_w_i err -71
[  392.374860][ T5923] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  392.441873][ T5923] usb 2-1: device descriptor read/8, error -71
[  392.604749][ T6159] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  392.704446][ T6159] gspca_zc3xx 1-1:0.48: probe with driver gspca_zc3xx failed with error -71
[  392.714706][ T5923] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  392.768153][ T6159] usb 1-1: USB disconnect, device number 80
[  392.786820][ T5923] usb 2-1: device descriptor read/8, error -71
[  392.821966][T10778] netlink: 'syz.4.1309': attribute type 5 has an invalid length.
[  392.905904][ T5923] usb usb2-port1: unable to enumerate USB device
[  393.657392][  T925] usb 6-1: USB disconnect, device number 39
[  393.883833][T10799] usb usb8: usbfs: process 10799 (syz.4.1314) did not claim interface 0 before use
[  394.228274][ T6159] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  394.454698][ T6159] usb 5-1: Using ep0 maxpacket: 32
[  394.475029][ T6159] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.534668][ T6159] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.670475][ T6159] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  394.739998][ T6159] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  394.767256][ T6159] usb 5-1: Product: syz
[  394.774888][ T6159] usb 5-1: Manufacturer: syz
[  394.803894][ T6159] hub 5-1:4.0: USB hub found
[  395.071290][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.317458][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.333760][T10821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  395.470633][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.561315][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.601236][ T6159] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  396.068240][  T925] usb 5-1: USB disconnect, device number 74
[  396.392806][T10831] xt_hashlimit: size too large, truncated to 1048576
[  396.844677][ T5923] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  396.844865][  T925] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  396.896207][   T30] audit: type=1326 audit(1769240858.701:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  396.921166][   T30] audit: type=1326 audit(1769240858.721:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  396.950276][   T30] audit: type=1326 audit(1769240858.721:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  396.976567][   T30] audit: type=1326 audit(1769240858.721:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.000614][   T30] audit: type=1326 audit(1769240858.721:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.023965][   T30] audit: type=1326 audit(1769240858.721:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.046682][  T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.046714][  T925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.058530][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  397.072677][  T925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  397.073923][   T30] audit: type=1326 audit(1769240858.721:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.095836][  T925] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  397.116971][ T5923] usb 2-1: config 64 has an invalid interface number: 19 but max is 0
[  397.125536][ T5923] usb 2-1: config 64 has no interface number 0
[  397.131876][ T5923] usb 2-1: config 64 interface 19 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  397.143373][ T5923] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  397.152870][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.162334][   T30] audit: type=1326 audit(1769240858.721:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.186691][   T30] audit: type=1326 audit(1769240858.721:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b2b9acb9 code=0x7ffc0000
[  397.210036][  T925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.219304][ T5923] usb 2-1: probing VID:PID(2201:012C)   
[  397.237978][   T30] audit: type=1326 audit(1769240858.721:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10842 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb0b2b9aa22 code=0x7ffc0000
[  397.260946][ T5923] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 02
[  397.270237][ T5923] usb 2-1: vub300 ignoring EndPoint(0) 02
[  397.276240][ T5923] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  397.284328][ T5923] vub300 2-1:64.19: probe with driver vub300 failed with error -22
[  397.312155][  T925] usb 1-1: config 0 descriptor??
[  397.554921][  T925] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  397.641633][  T925] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0
[  397.695637][  T925] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  397.832633][  T925] usb 1-1: USB disconnect, device number 81
[  397.976977][T10860] fido_id[10860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  397.983400][T10868] netlink: 'syz.4.1331': attribute type 1 has an invalid length.
[  398.128603][T10838] could not allocate digest TFM handle md5
[  398.436349][ T5949] usb 2-1: USB disconnect, device number 79
[  398.454696][  T925] usb 5-1: new low-speed USB device number 75 using dummy_hcd
[  398.614676][  T925] usb 5-1: Invalid ep0 maxpacket: 16
[  398.692445][T10873] FAULT_INJECTION: forcing a failure.
[  398.692445][T10873] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  398.707963][T10873] CPU: 0 UID: 0 PID: 10873 Comm: syz.5.1334 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  398.707992][T10873] Tainted: [L]=SOFTLOCKUP
[  398.707999][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  398.708010][T10873] Call Trace:
[  398.708018][T10873]  <TASK>
[  398.708025][T10873]  dump_stack_lvl+0xe8/0x150
[  398.708052][T10873]  should_fail_ex+0x412/0x560
[  398.708081][T10873]  _copy_from_iter+0x1d3/0x1670
[  398.708117][T10873]  ? __pfx__copy_from_iter+0x10/0x10
[  398.708141][T10873]  ? sock_alloc_send_pskb+0x896/0x990
[  398.708165][T10873]  ? __pfx__copy_from_iter+0x10/0x10
[  398.708193][T10873]  ? page_copy_sane+0x16a/0x270
[  398.708212][T10873]  copy_page_from_iter+0xdd/0x170
[  398.708234][T10873]  skb_copy_datagram_from_iter+0x306/0x710
[  398.708264][T10873]  tun_get_user+0xc38/0x3dd0
[  398.708296][T10873]  ? aa_file_perm+0x12d/0x1630
[  398.708324][T10873]  ? aa_file_perm+0x440/0x1630
[  398.708348][T10873]  ? __pfx_tun_get_user+0x10/0x10
[  398.708369][T10873]  ? __lock_acquire+0x6b5/0x2cf0
[  398.708391][T10873]  ? kstrtoull+0x12f/0x1d0
[  398.708421][T10873]  ? ref_tracker_alloc+0x363/0x4d0
[  398.708447][T10873]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  398.708474][T10873]  ? tun_get+0x1c/0x2f0
[  398.708494][T10873]  ? tun_get+0x1c/0x2f0
[  398.708518][T10873]  ? tun_get+0x1c/0x2f0
[  398.708536][T10873]  ? tun_get+0x1c/0x2f0
[  398.708559][T10873]  tun_chr_write_iter+0x113/0x200
[  398.708581][T10873]  vfs_write+0x61d/0xb90
[  398.708607][T10873]  ? __pfx_vfs_write+0x10/0x10
[  398.708634][T10873]  ? __fget_files+0x2a/0x420
[  398.708662][T10873]  ksys_write+0x150/0x270
[  398.708681][T10873]  ? __pfx_ksys_write+0x10/0x10
[  398.708709][T10873]  do_syscall_64+0xe2/0xf80
[  398.708733][T10873]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.708750][T10873]  ? trace_irq_disable+0x37/0x100
[  398.708771][T10873]  ? clear_bhb_loop+0x60/0xb0
[  398.708792][T10873]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  398.708810][T10873] RIP: 0033:0x7fe60519acb9
[  398.708827][T10873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  398.708842][T10873] RSP: 002b:00007fe60606c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  398.708862][T10873] RAX: ffffffffffffffda RBX: 00007fe605415fa0 RCX: 00007fe60519acb9
[  398.708875][T10873] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000004
[  398.708887][T10873] RBP: 00007fe60606c090 R08: 0000000000000000 R09: 0000000000000000
[  398.708899][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  398.708910][T10873] R13: 00007fe605416038 R14: 00007fe605415fa0 R15: 00007fe60553fa48
[  398.708944][T10873]  </TASK>
[  398.984182][  T925] usb 5-1: new low-speed USB device number 76 using dummy_hcd
[  399.115034][ T5949] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  399.123636][   T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  399.134691][  T925] usb 5-1: Invalid ep0 maxpacket: 16
[  399.140284][  T925] usb usb5-port1: attempt power cycle
[  399.278703][ T5949] usb 4-1: config 2 has an invalid interface number: 174 but max is 0
[  399.289551][ T5949] usb 4-1: config 2 has no interface number 0
[  399.296685][   T10] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  399.311484][ T5949] usb 4-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  399.323618][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.332092][ T5949] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  399.342705][   T10] usb 1-1: Product: syz
[  399.354753][   T10] usb 1-1: Manufacturer: syz
[  399.359351][   T10] usb 1-1: SerialNumber: syz
[  399.364511][ T5949] usb 4-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  399.376834][   T10] usb 1-1: config 0 descriptor??
[  399.395731][ T5949] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  399.405731][   T10] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 082
[  399.413682][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.422734][ T5949] usb 4-1: Product: syz
[  399.427599][ T5949] usb 4-1: Manufacturer: syz
[  399.432553][ T5949] usb 4-1: SerialNumber: syz
[  399.444066][T10871] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  399.457844][T10871] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  399.494960][  T925] usb 5-1: new low-speed USB device number 77 using dummy_hcd
[  399.811353][   T10]  (null): failure setting delay to 10us
[  399.823249][   T10] i2c-tiny-usb 1-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  399.837094][   T10] usb 1-1: USB disconnect, device number 82
[  399.845526][  T925] usb 5-1: Invalid ep0 maxpacket: 16
[  399.974792][  T925] usb 5-1: new low-speed USB device number 78 using dummy_hcd
[  400.006116][  T925] usb 5-1: Invalid ep0 maxpacket: 16
[  400.026552][  T925] usb usb5-port1: unable to enumerate USB device
[  400.306972][T10900] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  400.441173][ T5949] usb 4-1: probing VID:PID(0424:012C)   
[  400.460601][ T5949] usb 4-1: vub300 testing BULK IN EndPoint(0) 8E
[  400.475168][ T5949] usb 4-1: vub300 testing BULK IN EndPoint(1) 82
[  400.489605][ T5949] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  400.506995][ T5949] vub300 4-1:2.174: probe with driver vub300 failed with error -22
[  400.534128][ T5949] usb 4-1: USB disconnect, device number 83
[  400.728265][T10904] syzkaller0: entered promiscuous mode
[  400.733774][T10904] syzkaller0: entered allmulticast mode
[  401.058385][T10913] IPVS: stopping backup sync thread 10915 ...
[  401.059495][T10915] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 2, id = 0
[  401.078473][ T5923] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  401.129934][ T5949] IPVS: starting estimator thread 0...
[  401.235016][T10919] IPVS: using max 34 ests per chain, 81600 per kthread
[  401.244747][ T5923] usb 6-1: device descriptor read/64, error -71
[  401.423932][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'.
[  401.428617][T10926] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1351'.
[  401.450624][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1352'.
[  401.504715][ T5923] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  401.573324][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1354'.
[  401.644791][ T5923] usb 6-1: device descriptor read/64, error -71
[  401.731742][T10936] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1353'.
[  401.765511][ T5923] usb usb6-port1: attempt power cycle
[  402.048745][T10942] netlink: 'syz.0.1356': attribute type 1 has an invalid length.
[  402.104722][ T5923] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  402.125868][ T5923] usb 6-1: device descriptor read/8, error -71
[  402.365835][ T5923] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  402.421229][ T5923] usb 6-1: device descriptor read/8, error -71
[  402.555611][ T5923] usb usb6-port1: unable to enumerate USB device
[  402.655020][ T5949] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  402.832098][T10961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'.
[  403.444898][ T5949] usb 5-1: device descriptor read/64, error -71
[  403.694735][ T5949] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  403.845093][ T5949] usb 5-1: device descriptor read/64, error -71
[  403.968087][ T5949] usb usb5-port1: attempt power cycle
[  404.020157][T10974] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  404.144006][T10975] geneve2: entered promiscuous mode
[  404.149653][T10975] geneve2: entered allmulticast mode
[  404.234754][   T10] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  404.377153][ T5949] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  404.405402][ T5949] usb 5-1: device descriptor read/8, error -71
[  404.464673][   T10] usb 4-1: Using ep0 maxpacket: 32
[  404.471677][   T10] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[  404.483828][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.503924][   T10] usb 4-1: config 0 descriptor??
[  404.520603][   T10] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  404.534506][   T10] gspca_mr97310a: reg write [21] error -22
[  404.546612][   T10] mr97310a 4-1:0.0: probe with driver mr97310a failed with error -22
[  404.638842][T10980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1367'.
[  404.648995][ T5949] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  404.679037][ T5949] usb 5-1: device descriptor read/8, error -71
[  404.696942][T10980] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1367'.
[  404.777953][T10980] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1367'.
[  404.795279][ T5949] usb usb5-port1: unable to enumerate USB device
[  404.889106][T10988] FAULT_INJECTION: forcing a failure.
[  404.889106][T10988] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.028176][T10988] CPU: 1 UID: 0 PID: 10988 Comm: syz.5.1369 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.028195][T10988] Tainted: [L]=SOFTLOCKUP
[  405.028200][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  405.028207][T10988] Call Trace:
[  405.028212][T10988]  <TASK>
[  405.028217][T10988]  dump_stack_lvl+0xe8/0x150
[  405.028235][T10988]  should_fail_ex+0x412/0x560
[  405.028251][T10988]  _copy_from_user+0x2d/0xb0
[  405.028263][T10988]  ___sys_sendmsg+0x1c6/0x360
[  405.028274][T10988]  ? __lock_acquire+0x6b5/0x2cf0
[  405.028287][T10988]  ? __pfx____sys_sendmsg+0x10/0x10
[  405.028318][T10988]  ? __fget_files+0x2a/0x420
[  405.028330][T10988]  ? __fget_files+0x3a0/0x420
[  405.028346][T10988]  __x64_sys_sendmsg+0x1bd/0x2a0
[  405.028357][T10988]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  405.028371][T10988]  ? __pfx_ksys_write+0x10/0x10
[  405.028386][T10988]  do_syscall_64+0xe2/0xf80
[  405.028400][T10988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.028409][T10988]  ? trace_irq_disable+0x37/0x100
[  405.028422][T10988]  ? clear_bhb_loop+0x60/0xb0
[  405.028434][T10988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.028444][T10988] RIP: 0033:0x7fe60519acb9
[  405.028453][T10988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.028462][T10988] RSP: 002b:00007fe60606c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.028474][T10988] RAX: ffffffffffffffda RBX: 00007fe605415fa0 RCX: 00007fe60519acb9
[  405.028481][T10988] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  405.028488][T10988] RBP: 00007fe60606c090 R08: 0000000000000000 R09: 0000000000000000
[  405.028494][T10988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.028500][T10988] R13: 00007fe605416038 R14: 00007fe605415fa0 R15: 00007fe60553fa48
[  405.028515][T10988]  </TASK>
[  405.354674][ T5949] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  405.506771][ T5949] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  405.521362][ T5949] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  405.554245][ T5949] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  405.648679][ T5949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  405.665993][ T5949] usb 2-1: SerialNumber: syz
[  405.864702][ T6159] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  405.968361][T11005] netlink: 'syz.0.1374': attribute type 2 has an invalid length.
[  406.026314][ T6159] usb 5-1: no configurations
[  406.031322][ T6159] usb 5-1: can't read configurations, error -22
[  406.165584][ T6159] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  406.325622][ T6159] usb 5-1: no configurations
[  406.330545][ T6159] usb 5-1: can't read configurations, error -22
[  406.341235][ T6159] usb usb5-port1: attempt power cycle
[  406.422054][ T5949] usb 2-1: 0:2 : does not exist
[  406.455801][ T5949] usb 2-1: USB disconnect, device number 80
[  406.501268][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  406.686411][ T6159] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  406.726519][ T6159] usb 5-1: no configurations
[  406.743701][ T6159] usb 5-1: can't read configurations, error -22
[  406.894840][ T6159] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  406.918505][ T5923] usb 4-1: USB disconnect, device number 84
[  406.949460][ T6159] usb 5-1: no configurations
[  406.962764][ T6159] usb 5-1: can't read configurations, error -22
[  406.998101][ T6159] usb usb5-port1: unable to enumerate USB device
[  407.370022][T11022] macvtap0: entered allmulticast mode
[  407.387487][T11022] veth0_macvtap: entered allmulticast mode
[  407.745689][T11036] loop2: detected capacity change from 0 to 7
[  407.749123][T11038] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  407.778886][T11036] Dev loop2: unable to read RDB block 7
[  407.784496][T11036]  loop2: unable to read partition table
[  407.814312][   T30] kauditd_printk_skb: 78 callbacks suppressed
[  407.814329][   T30] audit: type=1804 audit(1769240869.611:251): pid=11028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1385" name="/newroot/278/file1" dev="fuse" ino=1 res=1 errno=0
[  407.814953][T11036] loop2: partition table beyond EOD, truncated
[  407.881471][T11036] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  409.218411][T11067] vlan0: entered promiscuous mode
[  410.104696][ T7055] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  410.301429][ T7055] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  410.354352][ T7055] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.408818][ T7055] usb 4-1: config 0 descriptor??
[  410.536460][ T5949] usb 1-1: new low-speed USB device number 83 using dummy_hcd
[  410.635510][T11089] netlink: 'syz.5.1399': attribute type 10 has an invalid length.
[  410.643799][ T7055] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  410.662466][T11089] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1399'.
[  410.672425][T11089] team0: entered promiscuous mode
[  410.678036][T11089] team_slave_0: entered promiscuous mode
[  410.684438][T11089] team_slave_1: entered promiscuous mode
[  410.691334][T11089] bridge0: port 3(team0) entered blocking state
[  410.698334][T11089] bridge0: port 3(team0) entered disabled state
[  410.706742][T11089] team0: entered allmulticast mode
[  410.712652][ T5949] usb 1-1: No LPM exit latency info found, disabling LPM.
[  410.713233][T11089] team_slave_0: entered allmulticast mode
[  410.728856][ T5949] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  410.729535][T11089] team_slave_1: entered allmulticast mode
[  410.748332][ T5949] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  410.749989][T11089] bridge0: port 3(team0) entered blocking state
[  410.764661][T11089] bridge0: port 3(team0) entered forwarding state
[  410.771515][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1395'.
[  410.783647][ T5949] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  410.857603][   T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  411.019618][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.044230][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  411.056468][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  411.086958][   T10] usb 2-1: Product: syz
[  411.134883][   T10] usb 2-1: Manufacturer: syz
[  411.167274][   T10] usb 2-1: SerialNumber: syz
[  411.460082][   T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 81 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  411.996004][   T10] usb 2-1: USB disconnect, device number 81
[  412.145451][   T10] usblp0: removed
[  412.552443][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1404'.
[  413.414698][ T5924] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  413.567226][ T5949] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  413.579387][ T5949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.693461][ T5949] usb 1-1: can't set config #1, error -71
[  413.699391][ T5924] usb 2-1: device descriptor read/64, error -71
[  413.723598][ T5949] usb 1-1: USB disconnect, device number 83
[  414.024668][ T5924] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  414.134677][ T5949] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  414.194688][ T5924] usb 2-1: device descriptor read/64, error -71
[  414.274663][ T5949] usb 1-1: device descriptor read/64, error -71
[  414.316841][ T5924] usb usb2-port1: attempt power cycle
[  414.464682][   T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  414.524655][ T5949] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  414.626616][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  414.636170][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.653308][   T10] pwc: Logitech/Cisco VT Camera webcam detected.
[  414.664881][ T5924] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  414.672768][ T5949] usb 1-1: device descriptor read/64, error -71
[  414.705463][ T5924] usb 2-1: device descriptor read/8, error -71
[  414.710388][T11136] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  414.785912][ T5949] usb usb1-port1: attempt power cycle
[  414.852324][   T10] pwc: Failed to set LED on/off time (-71)
[  414.864442][   T10] pwc: send_video_command error -71
[  414.869740][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  414.877640][   T10] Philips webcam 5-1:127.0: probe with driver Philips webcam failed with error -71
[  414.890039][   T10] usb 5-1: USB disconnect, device number 87
[  414.944655][ T5924] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  414.965265][ T5924] usb 2-1: device descriptor read/8, error -71
[  415.075375][ T5924] usb usb2-port1: unable to enumerate USB device
[  415.134800][ T5949] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  415.166567][ T5949] usb 1-1: device descriptor read/8, error -71
[  415.424667][ T5949] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  415.465430][ T5949] usb 1-1: device descriptor read/8, error -71
[  415.529114][T11145] netlink: 'syz.4.1416': attribute type 15 has an invalid length.
[  415.580848][ T5949] usb usb1-port1: unable to enumerate USB device
[  415.674944][ T7055] [drm:udl_init] *ERROR* Selecting channel failed
[  416.080489][T11152] FAULT_INJECTION: forcing a failure.
[  416.080489][T11152] name failslab, interval 1, probability 0, space 0, times 0
[  416.140911][ T7055] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  416.147679][ T7055] [drm] Initialized udl on minor 2
[  416.158143][ T7055] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  416.170955][ T7055] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  416.181406][ T5923] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0
[  416.226124][ T5923] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  416.266419][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.4.1418 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.266449][T11152] Tainted: [L]=SOFTLOCKUP
[  416.266457][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  416.266468][T11152] Call Trace:
[  416.266476][T11152]  <TASK>
[  416.266485][T11152]  dump_stack_lvl+0xe8/0x150
[  416.266512][T11152]  should_fail_ex+0x412/0x560
[  416.266541][T11152]  should_failslab+0xa8/0x100
[  416.266565][T11152]  __kmalloc_noprof+0xde/0x7e0
[  416.266584][T11152]  ? tls_get_rec+0xbf/0x670
[  416.266611][T11152]  tls_get_rec+0xbf/0x670
[  416.266640][T11152]  ? __local_bh_enable_ip+0xd0/0x130
[  416.266666][T11152]  tls_sw_sendmsg+0x4ce/0x2360
[  416.266685][T11152]  ? register_lock_class+0x31/0x2e0
[  416.266742][T11152]  ? __pfx_tls_sw_sendmsg+0x10/0x10
[  416.266765][T11152]  ? __pfx_aa_sk_perm+0x10/0x10
[  416.266786][T11152]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  416.266811][T11152]  ? sock_rps_record_flow+0x19/0x400
[  416.266834][T11152]  ? inet_send_prepare+0x67/0x270
[  416.266857][T11152]  ? inet6_sendmsg+0x101/0x120
[  416.266883][T11152]  __sock_sendmsg+0xe5/0x270
[  416.266908][T11152]  sock_sendmsg+0x192/0x290
[  416.266929][T11152]  ? __lock_acquire+0x6b5/0x2cf0
[  416.266951][T11152]  ? __pfx_sock_sendmsg+0x10/0x10
[  416.266982][T11152]  ? __asan_memset+0x22/0x50
[  416.267006][T11152]  ? iov_iter_bvec+0xb8/0x180
[  416.267027][T11152]  splice_to_socket+0xae2/0x11f0
[  416.267072][T11152]  ? __pfx_splice_to_socket+0x10/0x10
[  416.267099][T11152]  ? current_time+0x22a/0x370
[  416.267146][T11152]  ? touch_atime+0xf1/0x6d0
[  416.267191][T11152]  ? __pfx_splice_to_socket+0x10/0x10
[  416.267214][T11152]  direct_splice_actor+0x101/0x160
[  416.267239][T11152]  splice_direct_to_actor+0x53a/0xc70
[  416.267272][T11152]  ? __pfx_direct_splice_actor+0x10/0x10
[  416.267302][T11152]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  416.267335][T11152]  do_splice_direct+0x195/0x290
[  416.267360][T11152]  ? __pfx_do_splice_direct+0x10/0x10
[  416.267378][T11152]  ? common_file_perm+0x1b4/0x220
[  416.267402][T11152]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  416.267431][T11152]  ? bpf_lsm_file_permission+0x9/0x20
[  416.267449][T11152]  ? security_file_permission+0x75/0x260
[  416.267471][T11152]  ? rw_verify_area+0x255/0x4d0
[  416.267500][T11152]  do_sendfile+0x535/0x7c0
[  416.267532][T11152]  ? __pfx_do_sendfile+0x10/0x10
[  416.267553][T11152]  ? __fget_files+0x3a0/0x420
[  416.267585][T11152]  __se_sys_sendfile64+0x144/0x1a0
[  416.267609][T11152]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  416.267640][T11152]  do_syscall_64+0xe2/0xf80
[  416.267665][T11152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.267683][T11152]  ? trace_irq_disable+0x37/0x100
[  416.267705][T11152]  ? clear_bhb_loop+0x60/0xb0
[  416.267727][T11152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.267745][T11152] RIP: 0033:0x7fb0b2b9acb9
[  416.267762][T11152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.267778][T11152] RSP: 002b:00007fb0b3ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  416.267798][T11152] RAX: ffffffffffffffda RBX: 00007fb0b2e16090 RCX: 00007fb0b2b9acb9
[  416.267812][T11152] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[  416.267823][T11152] RBP: 00007fb0b3ad3090 R08: 0000000000000000 R09: 0000000000000000
[  416.267835][T11152] R10: 00000ffffffff011 R11: 0000000000000246 R12: 0000000000000002
[  416.267847][T11152] R13: 00007fb0b2e16128 R14: 00007fb0b2e16090 R15: 00007fb0b2f3fa48
[  416.267877][T11152]  </TASK>
[  416.644939][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  416.656265][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.793143][T11159] FAULT_INJECTION: forcing a failure.
[  416.793143][T11159] name failslab, interval 1, probability 0, space 0, times 0
[  416.822970][T11159] CPU: 0 UID: 0 PID: 11159 Comm: syz.5.1421 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  416.823001][T11159] Tainted: [L]=SOFTLOCKUP
[  416.823008][T11159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  416.823019][T11159] Call Trace:
[  416.823027][T11159]  <TASK>
[  416.823035][T11159]  dump_stack_lvl+0xe8/0x150
[  416.823062][T11159]  should_fail_ex+0x412/0x560
[  416.823091][T11159]  should_failslab+0xa8/0x100
[  416.823115][T11159]  kmem_cache_alloc_noprof+0x87/0x6e0
[  416.823142][T11159]  ? security_file_alloc+0x34/0x310
[  416.823165][T11159]  security_file_alloc+0x34/0x310
[  416.823186][T11159]  init_file+0x93/0x2f0
[  416.823212][T11159]  alloc_empty_file+0x6e/0x1d0
[  416.823234][T11159]  alloc_file_pseudo+0x155/0x240
[  416.823257][T11159]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  416.823277][T11159]  ? evm_inode_alloc_security+0x40/0xb0
[  416.823296][T11159]  ? security_inode_alloc+0xd5/0x310
[  416.823328][T11159]  sock_alloc_file+0xb8/0x2e0
[  416.823351][T11159]  do_accept+0x3a0/0x760
[  416.823380][T11159]  ? __pfx_do_accept+0x10/0x10
[  416.823422][T11159]  __sys_accept4+0x139/0x230
[  416.823448][T11159]  ? __pfx___sys_accept4+0x10/0x10
[  416.823470][T11159]  ? __pfx_ksys_write+0x10/0x10
[  416.823495][T11159]  __x64_sys_accept+0x7d/0x90
[  416.823519][T11159]  do_syscall_64+0xe2/0xf80
[  416.823542][T11159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.823559][T11159]  ? trace_irq_disable+0x37/0x100
[  416.823580][T11159]  ? clear_bhb_loop+0x60/0xb0
[  416.823601][T11159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.823620][T11159] RIP: 0033:0x7fe60519acb9
[  416.823637][T11159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  416.823652][T11159] RSP: 002b:00007fe60606c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b
[  416.823670][T11159] RAX: ffffffffffffffda RBX: 00007fe605415fa0 RCX: 00007fe60519acb9
[  416.823683][T11159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  416.823694][T11159] RBP: 00007fe60606c090 R08: 0000000000000000 R09: 0000000000000000
[  416.823704][T11159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  416.823713][T11159] R13: 00007fe605416038 R14: 00007fe605415fa0 R15: 00007fe60553fa48
[  416.823741][T11159]  </TASK>
[  417.125049][ T5924] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  417.324660][ T5924] usb 2-1: Using ep0 maxpacket: 32
[  417.335120][ T5924] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  417.343226][ T5924] usb 2-1: config 0 has no interface number 0
[  417.353487][ T5924] usb 2-1: config 0 interface 89 has no altsetting 0
[  417.363438][ T5924] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  417.374853][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.382869][ T5924] usb 2-1: Product: syz
[  417.387054][   T30] audit: type=1326 audit(1769240879.181:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11172 comm="syz.0.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f584759acb9 code=0x0
[  417.388598][T11173] netlink: 'syz.5.1427': attribute type 1 has an invalid length.
[  417.412705][ T5924] usb 2-1: Manufacturer: syz
[  417.422075][ T5924] usb 2-1: SerialNumber: syz
[  417.448099][ T5924] usb 2-1: config 0 descriptor??
[  417.453639][T11173] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1427'.
[  417.500826][ T5924] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  417.505477][T11176] bridge0: entered allmulticast mode
[  417.530834][T11178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'.
[  417.534645][ T5924] em28xx 2-1:0.89: Video interface 89 found: bulk
[  417.566778][T11178] bridge_slave_1: left allmulticast mode
[  417.587169][T11178] bridge_slave_1: left promiscuous mode
[  417.592975][T11178] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.607376][T11178] bridge_slave_0: left allmulticast mode
[  417.613183][T11178] bridge_slave_0: left promiscuous mode
[  417.619829][T11178] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.691929][T11178] bridge0 (unregistering): left allmulticast mode
[  418.096563][T11196] FAULT_INJECTION: forcing a failure.
[  418.096563][T11196] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  418.115133][T11196] CPU: 1 UID: 0 PID: 11196 Comm: syz.4.1434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  418.115164][T11196] Tainted: [L]=SOFTLOCKUP
[  418.115172][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  418.115183][T11196] Call Trace:
[  418.115193][T11196]  <TASK>
[  418.115202][T11196]  dump_stack_lvl+0xe8/0x150
[  418.115226][T11196]  should_fail_ex+0x412/0x560
[  418.115245][T11196]  _copy_to_user+0x31/0xb0
[  418.115259][T11196]  simple_read_from_buffer+0xe1/0x170
[  418.115275][T11196]  proc_fail_nth_read+0x1bb/0x230
[  418.115296][T11196]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  418.115318][T11196]  ? rw_verify_area+0x2a6/0x4d0
[  418.115343][T11196]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  418.115363][T11196]  vfs_read+0x20c/0xa70
[  418.115378][T11196]  ? fdget_pos+0x246/0x320
[  418.115405][T11196]  ? __pfx___mutex_lock+0x10/0x10
[  418.115432][T11196]  ? __pfx_vfs_read+0x10/0x10
[  418.115451][T11196]  ? __fget_files+0x2a/0x420
[  418.115476][T11196]  ? __fget_files+0x3a0/0x420
[  418.115497][T11196]  ? __fget_files+0x2a/0x420
[  418.115527][T11196]  ksys_read+0x150/0x270
[  418.115551][T11196]  ? __pfx_ksys_read+0x10/0x10
[  418.115580][T11196]  do_syscall_64+0xe2/0xf80
[  418.115604][T11196]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.115621][T11196]  ? trace_irq_disable+0x37/0x100
[  418.115641][T11196]  ? clear_bhb_loop+0x60/0xb0
[  418.115660][T11196]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  418.115678][T11196] RIP: 0033:0x7fb0b2b5b58e
[  418.115694][T11196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  418.115709][T11196] RSP: 002b:00007fb0b3af3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  418.115729][T11196] RAX: ffffffffffffffda RBX: 00007fb0b3af46c0 RCX: 00007fb0b2b5b58e
[  418.115743][T11196] RDX: 000000000000000f RSI: 00007fb0b3af40a0 RDI: 0000000000000005
[  418.115755][T11196] RBP: 00007fb0b3af4090 R08: 0000000000000000 R09: 0000000000000000
[  418.115768][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  418.115779][T11196] R13: 00007fb0b2e16038 R14: 00007fb0b2e15fa0 R15: 00007fb0b2f3fa48
[  418.115811][T11196]  </TASK>
[  418.495487][ T5924] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  418.795082][ T5949] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  418.969611][ T5949] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.001532][ T5949] usb 1-1: config 0 interface 0 has no altsetting 0
[  419.034711][ T5949] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  419.079253][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.097761][ T5949] usb 1-1: config 0 descriptor??
[  419.193721][T11215] FAULT_INJECTION: forcing a failure.
[  419.193721][T11215] name failslab, interval 1, probability 0, space 0, times 0
[  419.207696][T11215] CPU: 1 UID: 0 PID: 11215 Comm: syz.3.1441 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  419.207726][T11215] Tainted: [L]=SOFTLOCKUP
[  419.207733][T11215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  419.207744][T11215] Call Trace:
[  419.207752][T11215]  <TASK>
[  419.207768][T11215]  dump_stack_lvl+0xe8/0x150
[  419.207797][T11215]  should_fail_ex+0x412/0x560
[  419.207826][T11215]  should_failslab+0xa8/0x100
[  419.207849][T11215]  kmem_cache_alloc_noprof+0x87/0x6e0
[  419.207873][T11215]  ? __netlink_lookup+0xc6/0x8b0
[  419.207893][T11215]  ? skb_clone+0x212/0x3a0
[  419.207916][T11215]  skb_clone+0x212/0x3a0
[  419.207938][T11215]  __netlink_deliver_tap+0x404/0x850
[  419.207969][T11215]  ? netlink_deliver_tap+0x2e/0x1b0
[  419.207987][T11215]  netlink_deliver_tap+0x19c/0x1b0
[  419.208008][T11215]  netlink_unicast+0x7e3/0x9b0
[  419.208044][T11215]  ? __pfx_netlink_unicast+0x10/0x10
[  419.208068][T11215]  ? __alloc_skb+0x193/0x390
[  419.208086][T11215]  ? netlink_sendmsg+0x650/0xb40
[  419.208095][T11215]  ? skb_put+0x11b/0x210
[  419.208110][T11215]  netlink_sendmsg+0x813/0xb40
[  419.208126][T11215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.208144][T11215]  ? aa_file_perm+0x12d/0x1630
[  419.208168][T11215]  ? aa_sock_msg_perm+0xf1/0x1b0
[  419.208193][T11215]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  419.208211][T11215]  ? __pfx_netlink_sendmsg+0x10/0x10
[  419.208228][T11215]  __sock_sendmsg+0x21c/0x270
[  419.208242][T11215]  ____sys_sendmsg+0x4d7/0x810
[  419.208252][T11215]  ? __might_fault+0xaf/0x130
[  419.208269][T11215]  ? __pfx_____sys_sendmsg+0x10/0x10
[  419.208288][T11215]  ? import_iovec+0x73/0xa0
[  419.208312][T11215]  ___sys_sendmsg+0x2a5/0x360
[  419.208330][T11215]  ? __lock_acquire+0x6b5/0x2cf0
[  419.208353][T11215]  ? __pfx____sys_sendmsg+0x10/0x10
[  419.208389][T11215]  ? __fget_files+0x2a/0x420
[  419.208401][T11215]  ? __fget_files+0x3a0/0x420
[  419.208417][T11215]  __x64_sys_sendmsg+0x1bd/0x2a0
[  419.208430][T11215]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  419.208458][T11215]  ? __pfx_ksys_write+0x10/0x10
[  419.208488][T11215]  do_syscall_64+0xe2/0xf80
[  419.208511][T11215]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.208525][T11215]  ? trace_irq_disable+0x37/0x100
[  419.208537][T11215]  ? clear_bhb_loop+0x60/0xb0
[  419.208549][T11215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.208559][T11215] RIP: 0033:0x7f9eb179acb9
[  419.208571][T11215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.208584][T11215] RSP: 002b:00007f9eb2646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  419.208603][T11215] RAX: ffffffffffffffda RBX: 00007f9eb1a15fa0 RCX: 00007f9eb179acb9
[  419.208617][T11215] RDX: 0000000020044050 RSI: 00002000000000c0 RDI: 0000000000000004
[  419.208628][T11215] RBP: 00007f9eb2646090 R08: 0000000000000000 R09: 0000000000000000
[  419.208639][T11215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.208650][T11215] R13: 00007f9eb1a16038 R14: 00007f9eb1a15fa0 R15: 00007f9eb1b3fa48
[  419.208681][T11215]  </TASK>
[  419.516113][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.525781][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.557579][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.574179][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.592750][ T5924] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  419.601032][   T10] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  419.608722][ T5924] em28xx 2-1:0.89: board has no eeprom
[  419.629010][T11219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.657905][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.666552][T11217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.675581][ T5924] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  419.682834][ T5924] em28xx 2-1:0.89: analog set to bulk mode.
[  419.689254][T11219] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.700055][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.714196][  T925] em28xx 2-1:0.89: Registering V4L2 extension
[  419.760890][ T5924] usb 2-1: USB disconnect, device number 86
[  419.770735][T11216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.781739][ T5924] em28xx 2-1:0.89: Disconnecting em28xx
[  419.806427][  T925] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  419.819666][  T925] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  419.827272][   T10] usb 6-1: too many configurations: 9, using maximum allowed: 8
[  419.844955][T11217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.854036][  T925] em28xx 2-1:0.89: No AC97 audio processor
[  419.860491][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.873103][T11216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.883995][  T925] usb 2-1: Decoder not found
[  419.892852][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  419.903930][  T925] em28xx 2-1:0.89: failed to create media graph
[  419.934704][  T925] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  419.941550][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  419.948868][ T5949] usbhid 1-1:0.0: can't add hid device: -71
[  419.960426][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  419.973380][ T5949] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  419.983114][  T925] em28xx 2-1:0.89: Registering snapshot button...
[  419.994050][T11223] ==================================================================
[  420.002125][T11223] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  420.009492][T11223] Read of size 8 at addr ffff888027e80740 by task v4l_id/11223
[  420.017014][T11223] 
[  420.019328][T11223] CPU: 1 UID: 0 PID: 11223 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.019349][T11223] Tainted: [L]=SOFTLOCKUP
[  420.019354][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  420.019364][T11223] Call Trace:
[  420.019371][T11223]  <TASK>
[  420.019377][T11223]  dump_stack_lvl+0xe8/0x150
[  420.019397][T11223]  print_report+0xba/0x230
[  420.019412][T11223]  ? v4l2_fh_open+0xac/0x420
[  420.019429][T11223]  kasan_report+0x117/0x150
[  420.019446][T11223]  ? v4l2_fh_open+0xac/0x420
[  420.019466][T11223]  v4l2_fh_open+0xac/0x420
[  420.019483][T11223]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  420.019508][T11223]  em28xx_v4l2_open+0x157/0x9a0
[  420.019526][T11223]  ? do_raw_spin_lock+0x12b/0x2f0
[  420.019547][T11223]  v4l2_open+0x1bf/0x3a0
[  420.019567][T11223]  chrdev_open+0x4cd/0x5e0
[  420.019583][T11223]  ? __pfx_chrdev_open+0x10/0x10
[  420.019598][T11223]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  420.019619][T11223]  ? __pfx_chrdev_open+0x10/0x10
[  420.019633][T11223]  do_dentry_open+0x7ce/0x1420
[  420.019654][T11223]  vfs_open+0x3b/0x340
[  420.019670][T11223]  ? path_openat+0x346e/0x3e20
[  420.019683][T11223]  path_openat+0x3486/0x3e20
[  420.019705][T11223]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  420.019725][T11223]  ? getname_flags+0xb7/0x540
[  420.019740][T11223]  ? __pfx_path_openat+0x10/0x10
[  420.019758][T11223]  ? __lock_acquire+0x6b5/0x2cf0
[  420.019776][T11223]  do_filp_open+0x22d/0x490
[  420.019789][T11223]  ? __pfx_do_filp_open+0x10/0x10
[  420.019808][T11223]  ? _raw_spin_unlock+0x28/0x50
[  420.019824][T11223]  ? alloc_fd+0x64b/0x6c0
[  420.019843][T11223]  do_sys_openat2+0x12f/0x220
[  420.019860][T11223]  ? __pfx_do_sys_openat2+0x10/0x10
[  420.019878][T11223]  ? exc_page_fault+0x6a/0xc0
[  420.019897][T11223]  ? do_user_addr_fault+0xc7c/0x1360
[  420.019912][T11223]  __x64_sys_openat+0x138/0x170
[  420.019931][T11223]  do_syscall_64+0xe2/0xf80
[  420.019949][T11223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.019963][T11223]  ? trace_irq_disable+0x37/0x100
[  420.019981][T11223]  ? clear_bhb_loop+0x60/0xb0
[  420.019996][T11223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.020010][T11223] RIP: 0033:0x7f4a56ea7407
[  420.020024][T11223] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  420.020036][T11223] RSP: 002b:00007ffcef797e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  420.020051][T11223] RAX: ffffffffffffffda RBX: 00007f4a5755f880 RCX: 00007f4a56ea7407
[  420.020062][T11223] RDX: 0000000000000000 RSI: 00007ffcef798f1c RDI: ffffffffffffff9c
[  420.020071][T11223] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  420.020080][T11223] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  420.020089][T11223] R13: 00007ffcef798090 R14: 00007f4a576c6000 R15: 000055d895bcb4d8
[  420.020104][T11223]  </TASK>
[  420.020110][T11223] 
[  420.303040][T11223] Allocated by task 925:
[  420.307262][T11223]  kasan_save_track+0x3e/0x80
[  420.311924][T11223]  __kasan_kmalloc+0x93/0xb0
[  420.316494][T11223]  __kmalloc_cache_noprof+0x3d1/0x6e0
[  420.321879][T11223]  em28xx_v4l2_init+0x10b/0x2e70
[  420.326799][T11223]  em28xx_init_extension+0x120/0x1c0
[  420.332066][T11223]  process_scheduled_works+0xaec/0x17a0
[  420.337601][T11223]  worker_thread+0x89f/0xd90
[  420.342190][T11223]  kthread+0x726/0x8b0
[  420.346298][T11223]  ret_from_fork+0x51b/0xa40
[  420.350900][T11223]  ret_from_fork_asm+0x1a/0x30
[  420.355656][T11223] 
[  420.357961][T11223] Freed by task 925:
[  420.361830][T11223]  kasan_save_track+0x3e/0x80
[  420.366489][T11223]  kasan_save_free_info+0x46/0x50
[  420.371498][T11223]  __kasan_slab_free+0x5c/0x80
[  420.376244][T11223]  kfree+0x1be/0x650
[  420.380122][T11223]  em28xx_v4l2_init+0x1683/0x2e70
[  420.385138][T11223]  em28xx_init_extension+0x120/0x1c0
[  420.390410][T11223]  process_scheduled_works+0xaec/0x17a0
[  420.395938][T11223]  worker_thread+0x89f/0xd90
[  420.400510][T11223]  kthread+0x726/0x8b0
[  420.404567][T11223]  ret_from_fork+0x51b/0xa40
[  420.409143][T11223]  ret_from_fork_asm+0x1a/0x30
[  420.413891][T11223] 
[  420.416196][T11223] The buggy address belongs to the object at ffff888027e80000
[  420.416196][T11223]  which belongs to the cache kmalloc-8k of size 8192
[  420.430231][T11223] The buggy address is located 1856 bytes inside of
[  420.430231][T11223]  freed 8192-byte region [ffff888027e80000, ffff888027e82000)
[  420.444191][T11223] 
[  420.446501][T11223] The buggy address belongs to the physical page:
[  420.452927][T11223] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27e80
[  420.461717][T11223] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  420.470204][T11223] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  420.478166][T11223] page_type: f5(slab)
[  420.482140][T11223] raw: 00fff00000000040 ffff88813ff27280 ffffea0000a68a00 0000000000000005
[  420.490705][T11223] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  420.499269][T11223] head: 00fff00000000040 ffff88813ff27280 ffffea0000a68a00 0000000000000005
[  420.507922][T11223] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  420.516573][T11223] head: 00fff00000000003 ffffea00009fa001 00000000ffffffff 00000000ffffffff
[  420.525244][T11223] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  420.533897][T11223] page dumped because: kasan: bad access detected
[  420.540287][T11223] page_owner tracks the page as allocated
[  420.545990][T11223] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5949, tgid 5949 (kworker/0:9), ts 400453832299, free_ts 400355033858
[  420.567420][T11223]  post_alloc_hook+0x228/0x280
[  420.572173][T11223]  get_page_from_freelist+0x24dc/0x2580
[  420.577701][T11223]  __alloc_frozen_pages_noprof+0x18d/0x380
[  420.583493][T11223]  alloc_pages_mpol+0x232/0x4a0
[  420.588329][T11223]  allocate_slab+0x86/0x3a0
[  420.592817][T11223]  ___slab_alloc+0xd82/0x1760
[  420.597474][T11223]  __slab_alloc+0x65/0x100
[  420.601872][T11223]  __kmalloc_noprof+0x46c/0x7e0
[  420.606700][T11223]  mmc_alloc_host+0x2d/0x810
[  420.611277][T11223]  devm_mmc_alloc_host+0x48/0xb0
[  420.616198][T11223]  vub300_probe+0x367/0x2f60
[  420.620772][T11223]  usb_probe_interface+0x668/0xc90
[  420.625866][T11223]  really_probe+0x26d/0xac0
[  420.630348][T11223]  __driver_probe_device+0x18c/0x320
[  420.635616][T11223]  driver_probe_device+0x4f/0x240
[  420.640623][T11223]  __device_attach_driver+0x279/0x430
[  420.646016][T11223] page last free pid 5195 tgid 5195 stack trace:
[  420.652324][T11223]  __free_frozen_pages+0xbb0/0xd10
[  420.657419][T11223]  __slab_free+0x2ce/0x320
[  420.661821][T11223]  qlist_free_all+0x97/0x100
[  420.666407][T11223]  kasan_quarantine_reduce+0x148/0x160
[  420.671847][T11223]  __kasan_slab_alloc+0x22/0x80
[  420.676681][T11223]  __kmalloc_cache_noprof+0x36f/0x6e0
[  420.682037][T11223]  syslog_print+0x103/0x610
[  420.686545][T11223]  do_syslog+0x583/0x7d0
[  420.690772][T11223]  __x64_sys_syslog+0x7c/0x90
[  420.695431][T11223]  do_syscall_64+0xe2/0xf80
[  420.699920][T11223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  420.705797][T11223] 
[  420.708101][T11223] Memory state around the buggy address:
[  420.713707][T11223]  ffff888027e80600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  420.721746][T11223]  ffff888027e80680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  420.729786][T11223] >ffff888027e80700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  420.737823][T11223]                                            ^
[  420.743955][T11223]  ffff888027e80780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  420.751994][T11223]  ffff888027e80800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  420.760033][T11223] ==================================================================
[  420.772953][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  420.788889][  T925] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input31
[  420.799848][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  420.811574][ T5949] usb 1-1: USB disconnect, device number 88
[  420.817826][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  420.829601][  T925] em28xx 2-1:0.89: Remote control support is not available for this card.
[  420.841311][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  420.852275][ T5924] em28xx 2-1:0.89: Closing input extension
[  420.858552][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  420.866972][ T5924] em28xx 2-1:0.89: Deregistering snapshot button
[  420.883251][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[  420.892218][   T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  420.912450][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  420.924218][T11223] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  420.931440][T11223] CPU: 1 UID: 0 PID: 11223 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  420.942031][T11223] Tainted: [L]=SOFTLOCKUP
[  420.946388][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[  420.956447][T11223] Call Trace:
[  420.959719][T11223]  <TASK>
[  420.962632][T11223]  vpanic+0x1e0/0x670
[  420.966609][T11223]  panic+0xc5/0xd0
[  420.970346][T11223]  ? __pfx_panic+0x10/0x10
[  420.974780][T11223]  ? preempt_schedule_common+0x82/0xd0
[  420.980258][T11223]  ? v4l2_fh_open+0xac/0x420
[  420.984862][T11223]  check_panic_on_warn+0x89/0xb0
[  420.989813][T11223]  ? v4l2_fh_open+0xac/0x420
[  420.994419][T11223]  end_report+0x6f/0x140
[  420.998677][T11223]  kasan_report+0x128/0x150
[  421.003194][T11223]  ? v4l2_fh_open+0xac/0x420
[  421.007804][T11223]  v4l2_fh_open+0xac/0x420
[  421.012237][T11223]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  421.018224][T11223]  em28xx_v4l2_open+0x157/0x9a0
[  421.023088][T11223]  ? do_raw_spin_lock+0x12b/0x2f0
[  421.028113][T11223]  v4l2_open+0x1bf/0x3a0
[  421.032354][T11223]  chrdev_open+0x4cd/0x5e0
[  421.036762][T11223]  ? __pfx_chrdev_open+0x10/0x10
[  421.041688][T11223]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  421.048013][T11223]  ? __pfx_chrdev_open+0x10/0x10
[  421.052934][T11223]  do_dentry_open+0x7ce/0x1420
[  421.057693][T11223]  vfs_open+0x3b/0x340
[  421.061751][T11223]  ? path_openat+0x346e/0x3e20
[  421.066503][T11223]  path_openat+0x3486/0x3e20
[  421.071088][T11223]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  421.076707][T11223]  ? getname_flags+0xb7/0x540
[  421.081370][T11223]  ? __pfx_path_openat+0x10/0x10
[  421.086290][T11223]  ? __lock_acquire+0x6b5/0x2cf0
[  421.091226][T11223]  do_filp_open+0x22d/0x490
[  421.095714][T11223]  ? __pfx_do_filp_open+0x10/0x10
[  421.100733][T11223]  ? _raw_spin_unlock+0x28/0x50
[  421.105576][T11223]  ? alloc_fd+0x64b/0x6c0
[  421.109893][T11223]  do_sys_openat2+0x12f/0x220
[  421.114563][T11223]  ? __pfx_do_sys_openat2+0x10/0x10
[  421.119753][T11223]  ? exc_page_fault+0x6a/0xc0
[  421.124424][T11223]  ? do_user_addr_fault+0xc7c/0x1360
[  421.129692][T11223]  __x64_sys_openat+0x138/0x170
[  421.134528][T11223]  do_syscall_64+0xe2/0xf80
[  421.139023][T11223]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.145076][T11223]  ? trace_irq_disable+0x37/0x100
[  421.150087][T11223]  ? clear_bhb_loop+0x60/0xb0
[  421.154756][T11223]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  421.160634][T11223] RIP: 0033:0x7f4a56ea7407
[  421.165037][T11223] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  421.184629][T11223] RSP: 002b:00007ffcef797e40 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  421.193033][T11223] RAX: ffffffffffffffda RBX: 00007f4a5755f880 RCX: 00007f4a56ea7407
[  421.200991][T11223] RDX: 0000000000000000 RSI: 00007ffcef798f1c RDI: ffffffffffffff9c
[  421.208943][T11223] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  421.216898][T11223] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  421.224854][T11223] R13: 00007ffcef798090 R14: 00007f4a576c6000 R15: 000055d895bcb4d8
[  421.232815][T11223]  </TASK>
[  421.236169][T11223] Kernel Offset: disabled
[  421.240478][T11223] Rebooting in 86400 seconds..