last executing test programs:

11.208436259s ago: executing program 0 (id=680):
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000004600)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/193, 0xc1}], 0x1}}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {0x0}, {&(0x7f0000004700)=""/131, 0x83}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/64, 0x40}], 0x6, &(0x7f00000017c0)=""/207, 0xcf}, 0x2}, {{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001940)=""/73, 0x49}], 0x1, &(0x7f0000001a00)=""/118, 0x76}}, {{&(0x7f0000001a80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b00)=""/159, 0x9f}, {&(0x7f0000001bc0)=""/251, 0xfb}, {&(0x7f0000001cc0)=""/131, 0x83}], 0x3, &(0x7f0000001dc0)=""/200, 0xc8}, 0x1}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000001f40)=""/123, 0x7b}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/132, 0x84}, {&(0x7f0000003080)=""/102, 0x66}, {&(0x7f0000003100)=""/170, 0xaa}, {&(0x7f00000031c0)=""/147, 0x93}], 0x6, &(0x7f00000032c0)=""/36, 0x24}, 0x10001}, {{&(0x7f0000003300), 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/99, 0x63}], 0x1, &(0x7f0000003440)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000004440)=@un=@abs, 0x80, &(0x7f0000004500)=[{&(0x7f00000044c0)=""/46, 0x2e}], 0x1, &(0x7f0000004540)=""/185, 0xb9}, 0x7ff}], 0x7, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
r6 = socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0), 0x18)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

7.547588055s ago: executing program 0 (id=687):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x2d0, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2bc, 0x1, [@m_xt={0x1ec, 0xa, 0x0, 0x0, {{0x7}, {0x18c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x4d, 0x6, {0xb, 'security\x00', 0xfb, 0xf, "db32b67415a858318ca81432b4dc5d5526738147f0b08da046db93b204b3955fb990fa"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x75, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab5dcdfec02de0d97abc573bd4b191e9b7921f6809db7b16573ea41532a0e55cf2f1240cf20766526d"}}, @TCA_IPT_TARG={0x95, 0x6, {0x8001, 'security\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858be560a8a0cb8e4bee920720c0d5e6d1fe7c870c1e2793e60016110210e803f409c55aaa647ce7884c4be946c031bdec6333ecd98218bc11cfd095bbcc904983"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x4c, 0x34, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x80, 0x16, 0x0, 0x0, {{0x9}, {0x4}, {0x51, 0x6, "55fd8478053d3f510dd8fe309e6576ff4b7af915070e1bcf1f1b07fe83b76c4a6154d5e2ac157d732c92c4434971cc84ed0e7c77d90c63ecc55fb5e66e2a989118154bf8f2d4b5d6ec1c4f456d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x9000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

7.170991499s ago: executing program 4 (id=689):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x876, &(0x7f0000000140)={0x0, 0x114df, 0x2000, 0x1, 0x26}, &(0x7f0000000240)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10)
sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0)
getpeername$l2tp6(r5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x200000c0)

7.170299758s ago: executing program 0 (id=699):
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

6.908703258s ago: executing program 0 (id=692):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r2, 0x700, 0x7800, 0xffff, 0x0, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x2, 0x0)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x10000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="23f53736cda55085f18e18330d3a57663eafd4861f6da07fa2768dbdb6fedb673162de113834769ed1774508df819e68d48a9d37cd94bd724590389d7f3b92533a", 0x41}], 0x1, 0x0, 0x0, 0x20000010}}], 0x1, 0x200000c0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7ff, 0x8bb, 0xb5, 0x8, 0x0, 0x8000000000000000, 0x500, 0x3b2, 0x3, 0x5, 0x7, 0x7, 0x7, 0x3, 0x7, 0x200], 0xf000, 0x66000})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000003c0)={0x2a6, 0x0, "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"})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x7000000)

6.036972156s ago: executing program 2 (id=695):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
fcntl$getown(r0, 0x9)
rt_tgsigqueueinfo(0x0, 0x0, 0x1b, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000040), 0x8c480, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f00000007c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)}}], 0x1, 0x931766f6319eed14)
shutdown(r1, 0x1)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x6265, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b79f124], [0x800, 0x2, 0x7aa, 0x0, 0xa7, 0x1, 0x0, 0x2], [0xffffffff, 0x0, 0x2, 0x0, 0x0, 0x800]], '\x00', [{0x0, 0xc278}, {0x0, 0x0, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x100, 0xfffffffc}, {}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {0x0, 0x2700}, {0x1, 0x700}]})
getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f)

6.013279259s ago: executing program 0 (id=696):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async)
pivot_root(&(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000100)=0x405, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="010028bd7000fedbdf250c0000005400038048000200ff010000040000000000000000eb2e2466b3b726c12bfffe5f916f1716088a9129f9d2da6226169a994f49a227f189a859257dea5b53a46afb0f8effa4689efe631ffa5f5e03709c04000100180001801400020076657468305f746f5f626174616476"], 0x80}, 0x1, 0x0, 0x0, 0x881}, 0x8000)
r5 = socket(0x840000000002, 0x3, 0x100)
sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000000000700000010000000000000000200000007000000180000000000000008000000", @ANYBLOB='B<'], 0x34}}], 0x1, 0x0) (async)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x20, 0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async, rerun: 32)
syz_usb_connect(0x0, 0x48, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c36e8240ac051c92fb9d0000000109023600010000000009040000040341000009050a0000000000000905ffff0000000000090505", @ANYRES64], 0x0) (rerun: 32)

6.010307152s ago: executing program 4 (id=697):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980282000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d4000980"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r3, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20004040)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r8 = syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)
wait4(r8, &(0x7f0000001100), 0x0, &(0x7f0000001140))
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2a, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/38}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x400084c)

5.732757731s ago: executing program 2 (id=698):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000121000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r1], 0x68}}, 0x0)

5.608825227s ago: executing program 2 (id=700):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x20, 0x7, {0x7, 0x2, '\x00\x00\x00\x00\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x2, 0x62, &(0x7f0000000080)={{0x12, 0x1, 0xc339149593e3e4ff, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x2, 0x8, 0x3, [{{0x9, 0x4, 0x0, 0x64, 0x2, 0x2, 0x6, 0x0, 0x7, {{0xb, 0x24, 0x6, 0x0, 0x0, "59e85a1b2ae3"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x9, 0xf0, 0xa}, [@ncm={0x6, 0x24, 0x1a, 0x7ff, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x7, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x7, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0xdf, 0xa}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xc, 0x6, 0x2, 0xff, 0x7}, 0x12c, &(0x7f0000000700)={0x5, 0xf, 0x12c, 0x4, [@generic={0xd9, 0x10, 0x4, "8731966bf0e9ddcb84fcda6b98f3b037d84f0269a1195d4a8856ce28457526769d2f5954ed966d740f214ba93eb97a101e2435070b656337c333fd59066ee6a28f8192df54ee77f86dc78966e8a91cfa1ae75200d2fb097fa98dc681f980853c0be11d93df0e03b675699d91729528edaf02ef1144ff7ac6f0945dabdc937c9082aef3150f49bd661ae06ebb65b75c64f87d94bc546fb977a229d7c7ed9be95fb61c8a4d6228a3d2cab88ab4343217afef1b09c4244bd68102723098e76010942001a0ac5d0209e62fcd418b0666ed19fd8f8e380741"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x8, 0x6, 0x7f}, @ptm_cap={0x3}, @generic={0x44, 0x10, 0x3, "b8b0526c4f402a363da778292362a469676ac1b4a0755bd08199e8157b3c9106ed9bcd877941806ef02aeda88fb477ea66d9bd10b001a71d6ea06982606cb71afa"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x446}}, {0x81, &(0x7f00000002c0)=@string={0x81, 0x3, "974572bfcf35b2d7c4bb21b3bcab87848fc2d5c8b33bed42511281d87c208aa9fe66e981a79458f69e9db2409bf2cc49dd3564fe815eb2b3d3a38583a30b56fdf93b4492eff0aafacb834cc3336e5f2ca3257508544552421f91d828adb1f70122ce3a6e307698c3f826095e3ec45541319f3930c7245f42fe52ffb3e438d6"}}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e3100000000000000000014000000110001"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050)
r3 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_ep_write(r3, 0xc, 0x3b, &(0x7f0000000580)="7329cd95fbd806ba54da7e76188413f7aafecb2414fce269480bdcdd3b91f298b8fdc5981409c0f581c8047ae5ace0e8f5b8523e9dd34b37a32fec")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000480)={0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="202319000005000000dee1420030b226513e4e9267b74ca9daebcc4c0980a93aad2df8742138f5be73e71f75a880a8691793a4f2c4cbd1689ed56282c72b84bdc793e496b0f852162c3b4ccb322c690e43d322af3222efcadac861b8d1ab7071bbba2ddb31c28bdeaa7eab35e956eb20a8"], &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="6018b3000000e626debcb5cfbe12ee26fdec1f044d66c8c7826f0821f6c1c597a4ca04565da8b7739a1ef7dd74755b747153b06720ca07000000000000002e323e00f55c97aac096643f250da00a34004f1a6db0fdc75fcbaf30020d4268a7b8e4e77ed0341e3084cf97ceda0fcf96750fe98b22a5ef25bd68a0864f096cd864172097fbdda0b0c9dcd43bc4711f470dc0626143c7df197f733412152ec555cc94749f5c3b537ab9e8b22c3b6eaff8299f187041595de5a400"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x95}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0xb}})

5.010998377s ago: executing program 4 (id=701):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x200, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x16, 0x0, 0x0, 0xda, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
epoll_create(0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4f37d3c0956b9f65, 0x0, 0xffc7)
r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
poll(0x0, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="100000000100", @ANYRES32=r4, @ANYBLOB="100000000100000001000000", @ANYRES32=r4], 0x20, 0x4000000}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
close_range(0xffffffffffffffff, r0, 0x2)
r6 = open_tree(r3, &(0x7f00000001c0)='\x00', 0x0)
read$FUSE(r6, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0}, 0x0)

5.008805719s ago: executing program 3 (id=702):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

3.407834377s ago: executing program 2 (id=706):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0])
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x2133, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xffd, 0x3, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd, 0x1, 0xfc}}}}}]}}]}}, 0x0)
r2 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x1, 0xfe, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x40, 0x80}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x7, 0x9, 0xff, 0x6}, 0x13, &(0x7f0000000100)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0x9, 0x5c, 0x3, 0x6}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x401d}}, {0x5d, &(0x7f00000001c0)=@string={0x5d, 0x3, "72219801a58642748255aeae42a3d4060e964c836a7f3a215ba29120798ceb01c943e33ca405d63168d97211acc011487d27494fe568ccd61ea7606940dc55ea179035b46caa8d0a011f6ab8ea59108bfd20f59ec76bb6f6d0050c"}}, {0x1f, &(0x7f0000000240)=@string={0x1f, 0x3, "d4cb0e9793944f568546a0782cfc9f8082fab89bd2c709f2e4dc01d493"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x820}}, {0xd1, &(0x7f00000002c0)=@string={0xd1, 0x3, "95f7e8f2eb50ec525859ff77d7f01e6a856e0cc0b2bfd4c1a3d143ca8b1baf551cfa9a653a6146b008ebdc555481104fbb8e333d8a91750d50423b17a96de5e7fe752459fb83eb43c31b578297c4ca0be62b90898df1e146b69ff200a086d38f7f8889b0805542efc18da80a0a4c84d9a3c4389a543b00b8ff81798b4efa6677bf977e2f212840682ddcdb4f5930baf7c0e823588954bde65b281e8b4306bc254901457b2fb4df1052d29d700ff64ee1a013411b5131efd560584ed2f933b02e3ccb9ff5b834b3028e619b80e86a00"}}, {0x83, &(0x7f00000003c0)=@string={0x83, 0x3, "5901070a59a3f66dbdc38919784b514204270733bf571522af537e313b3d0968bb12c4bb6e60f5ff7c4a2b1e4f5a039de2612609867d93a114108cb17e909f61c5082e76b2c1ace44bdbbb2db97b97bd0b3479cd6f13fc71006d3d64913b1007982d2a38448ac6ec7c011db1c93c82bc957d412eb0a0f2464654a85a7f857d2f86"}}, {0x3f, &(0x7f0000000480)=@string={0x3f, 0x3, "47e22919052ff778d394f7658e6882698612b264b653bdc5b21707b8232035e51e8d667098e2f1a9df8d36b64defdf2e99b0917b4decb0bb31cb7307d5"}}, {0x7f, &(0x7f00000004c0)=@string={0x7f, 0x3, "271d4147c8cf4e8e39eb591c78c6d6cd3f4ec356bc1e990212262b2981442ac7f317c660a523a382d5703bde74d4dda5c3a8674678002f0e0b4881fe3e0ed8c8b6d3bd18e90f868bf2a98f07b04aae2eaa04030947f499b36dace4964780bfab58de66928f2237126e71422d24717b7fa97327c69911871b30224442cb"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42d}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000740)={0xc, &(0x7f0000000600)={0x20, 0x20, 0x67, {0x67, 0x6, "c2173bcae667e8c87f9701d2b4e8c157a7105a26d7c50cc1a517d3e43abb205fdd4011ef9450bc3ab7c191c7ef766e6f1bd689f15b23475a000923997de7e054aa256329253ac9dd3e8066a9d9c04c7c421a69d03dd0fbe3baf1a931ac3813cac048c3fc2f"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000006c0)={0x40, 0x10, 0x4f, "ccc987cdc5890cd035223ebe5802c1e372976d27f1d14b44720f588ed734774a8a3bb308089235bc36dc1414a4ec8823f2d23d22abc94b7be5f8e5eac7e5aa6c52ae5b04bd77e4d8a3726d2ff4a847"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000880)={0x20, 0x0, 0xad, {0xab, "9a9fe5afe3fe8aa84a718551e1cd66448f2924f74207effeb52945e5c7b6508f931de09504058d5e549d72bdb3550d0900000000000000218c39930f0c9f9a1b62d2e54cf6bd216f095a0867aaaa9c64e525108c04285f7050c123115dd59f20c6aa1029938084f498bb8f683748fa9f947d36c2e55ba5d6599b3c241987cf96aa1a34017dabd099692ad4fd53d3e94866ca3314b583f4a63b97970dd74a0ba77ad9f02aaa20004f7d2f93"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0xd}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x4}})
r3 = epoll_create1(0x0)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd1, &(0x7f0000000040)=0x6, 0x4)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x8000)
write$dsp(r5, &(0x7f0000002200)='D', 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
syz_usb_control_io$hid(r1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0)
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x1800000000000000)
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "13a29094"}]}}, 0x0}, 0x0)

3.253897814s ago: executing program 4 (id=707):
r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x83000811)
inotify_rm_watch(0xffffffffffffffff, r0) (async)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000040)={0x7, 0x0, [{0x40000003, 0x3, 0x7, 0x60e5316b, 0x200, 0x8, 0x3}, {0x80000019, 0x2, 0x0, 0x0, 0x100, 0x6, 0x6}, {0x40000001, 0x0, 0x4, 0x8, 0x0, 0x5, 0x3}, {0x4, 0x9c9d, 0x2, 0xfffffffb, 0x1, 0x47d0, 0x7}, {0x40000000, 0x101, 0x4, 0x9, 0xf716, 0x0, 0x1}, {0x2, 0x8001, 0x0, 0x2, 0x8, 0x6, 0x4}, {0x8, 0x89c, 0x2, 0x5, 0x2, 0xffffffff, 0x3}]}) (async, rerun: 64)
r1 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000180)='./binderfs/binder-control\x00', 0x2, 0x0) (rerun: 64)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x400) (async, rerun: 64)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64)
r3 = dup3(r1, r1, 0x80000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) (async, rerun: 64)
ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000300)) (async, rerun: 64)
r5 = gettid() (async, rerun: 64)
r6 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) (rerun: 64)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r5, 0x7, r6, &(0x7f0000000340)={r3, r2, 0x3}) (async)
setsockopt$sock_int(r3, 0x1, 0x1e, &(0x7f0000000380)=0x6, 0x4) (async, rerun: 64)
connect$vsock_stream(r3, &(0x7f00000003c0)={0x28, 0x0, 0x2710, @host}, 0x10) (async, rerun: 64)
write$usbip_server(r3, &(0x7f0000000400)=@ret_unlink={{0x4, 0x5, 0x0, 0x1, 0x4}, {0x6}}, 0x30)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f0000000440)=0x2)
getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000480)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000004c0)=0x2c)
io_uring_enter(r3, 0x54e2, 0x1904, 0x10, &(0x7f0000000500)={[0x3]}, 0x8) (async)
r7 = syz_usb_connect(0x2, 0x5f8, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x79, 0x9a, 0xf7, 0x8, 0xdf6, 0x4d, 0x9d2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e6, 0x4, 0xd7, 0xc, 0x0, 0x63, [{{0x9, 0x4, 0x4c, 0x3, 0x2, 0xa2, 0x79, 0x2, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x3, 0x80}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x2, 0xb, 'd'}, @mixer_unit={0xa, 0x24, 0x4, 0x3, 0x6, "2971fed1e2"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "b55f"}, {0x5, 0x24, 0x0, 0x881}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x40, 0x8, 0x2}, [@ncm={0x6, 0x24, 0x1a, 0x9, 0x33}]}], [{{0x9, 0x5, 0x80, 0xc, 0x3ff, 0xfd, 0xc, 0x2, [@generic={0x5b, 0x30, "630a51de15371d5bd9228f1065517cf6a4c95a826e4a965e4706ad84a122178d6f8fcfebe9b6cfe50cb285832a8e377447eb0869464de0ae7f95c38d1a0229b21c76b601a5ef3f406135d4a7726b0c604ec021140cbe781a1d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x8, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0x63, 0x6, 0x5, 0xa6, 0x42, 0xc8, 0x10, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0xc4}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x7, 0x2, 0x8, 0x9, "7cf1a3", "a0fa"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x10, 0x8, 0x3e, "259e601aed"}, @as_header={0x7, 0x24, 0x1, 0xf5, 0x7f, 0x1000}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x4, 0x3, 0x4, "", "e8"}]}], [{{0x9, 0x5, 0xf, 0xb, 0x40, 0x6, 0x1, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x9, 0x7, 0x50, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x5, 0x9, 0x6, [@generic={0x3b, 0xe, "6339d2b9248bb594fa542b5f2fc947edf03ac97c679202dec81c7bdae59685941f0eea03f2c67d7bc0f1113c5f92b8af8e20c0b99f70e6818f"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xff, 0x0, 0x81, [@generic={0xb6, 0x23, "58cb769909e302a363974a21e6ce80a6cc5ddb5a819fef3b749407a66384c5bbe6a6c87727f5fe503163683ce5f609f3de27545995d839d9931ef8a0ed7918fb8ecf98fc937847edcd148a800548438371d570086ea129beeee80f102573be185582be76a6c6d47b8eb0dc8ab2ae2e95b4fe737a5ee2517200307d16e5ab87694a5fbc1e2a7910bb781e2088c3f34b59788b6235e8088f1e50cfa4349fb6696db6a2d7c0cdf5dbbf2f73d317465e5b628dc7f31e"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x40, 0x4b, 0xff, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x7ff}]}}]}}, {{0x9, 0x4, 0xac, 0x8, 0x2, 0x8, 0xc2, 0xb3, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "63e7"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x3b3}, {0x6, 0x24, 0x1a, 0x3, 0x4}, [@mdlm_detail={0x71, 0x24, 0x13, 0x1, "2db679eb2f0e6e3f6490b9e08507e36478445125f2668bc889143272f613a9e038476a46a4ed1cf9adefc8c8305e072528275dafe63242b0d6c7ce41eab158e947f3121e54a743b788c76c8014192b29b36c06f688f7747302886dbc4a7d1c2f3e69a03598abf9594ad11614df"}, @network_terminal={0x7, 0x24, 0xa, 0xa, 0xe5, 0x3, 0x10}, @country_functional={0x10, 0x24, 0x7, 0x5, 0x101, [0x6, 0x1, 0x81, 0x3, 0x1]}, @mdlm={0x15, 0x24, 0x12, 0xfffe}, @dmm={0x7, 0x24, 0x14, 0x9, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x6, 0xa000, 0x3a, 0xb, 0xfff7, 0x9}]}], [{{0x9, 0x5, 0xf, 0x0, 0x20, 0x4, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xa}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xff, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x2}, @generic={0x9d, 0x4, "f8d88367a625fa0ac87d43ae13488b402027039e6a5fc4dd6b7cf5679411a413f46817fcbe2d389972724560e5addcffaebe5d85b96d70d7d4f993b89a6167d7942413686b98a7bf094285ca10a39d41dfc8a2fbaf09b409448bbbf8713ccffe3496113e44ed53c7e208421c24bac081caef6c8bdc9e00892487169fa80a34b6b9656c883d8dd21b16ea96b3460d24da7fc84f9390426a839e14b4"}]}}]}}, {{0x9, 0x4, 0xf5, 0xfb, 0x5, 0x5f, 0x44, 0xc4, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x9}, [@selector_unit={0x5, 0x24, 0x5, 0x6, 0xff}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x4, "19b93dc702"}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b20009"}, {0x5, 0x24, 0x0, 0x9a}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x101, 0x0, 0x9}, {0x6, 0x24, 0x1a, 0xfffa, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0xc2, 0x7, 0x2, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x5, 0x9, 0x9, 0x10, 0x5}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xa}]}], [{{0x9, 0x5, 0x7, 0x2, 0x20, 0x0, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3b, 0xf}]}}, {{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x4, 0x6, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0x43, 0x9, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xa, 0x0, 0x2, [@generic={0x88, 0x1, "e0e8bfa9d95277b660d5590d1aa558ceccf52e93758dbcd97396c499a2e23ecabf946966b6529273e75c2bcaa7f841ff66e2fc39593160d3af7e97a02ca6dc32bac5cabb75b5bfb43c8bb26101b99e4faacf4c5aaa9e2af3600f067404c0512b2ff4f2e97eb329a2efdd57b61da4dc8b7fc24f6a6aeeeef7ea39f74984eaa500348c89e7024d"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x40, 0x8, 0xb3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x101}]}}, {{0x9, 0x5, 0x3, 0x1, 0x200, 0x1, 0x3, 0x40, [@generic={0xfb, 0x22, "5f6b5234f23038900df0a8c9e311984c0249e5aca40b7edef29d926f05cc68b13e4eb35661c94ce0101c153a0bd188e3da330c5812bf3e3d4f47913ac6f5a5a61397cc801a01ca5cac2a7b736c5c23d7a39f4d556aa6265214e6818e2e9c11c0b17fc669a806d60ce460dc5d6b044a36fe00dac7fe71dcb6f3e3060508bb22d18cbf63a253b93a0b10aa42ea3d45cd9a506d0f4c08591cde627c128792ebf08dfc14afb3dd7b5b235367207b0ae2d6eb6954689235436b4f893ab23ba2be40d0bb5a66a446b8dab7730f5b74396c0c35997801c83223b6081b895058666926dffe471534b1ed3e1651af3c6b1f049afbea4add1fe811b68cb1"}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x201, 0xb5, 0xf, 0xb, 0xff, 0x6}, 0xcf, &(0x7f0000000b80)={0x5, 0xf, 0xcf, 0x2, [@ptm_cap={0x3}, @generic={0xc7, 0x10, 0x2, "56bb288d9e83b40b96e3dae8cef9599f7fc802f1aa4f7b3881baefa274d608093634f9cacf7452f3aae37341c6abdf5654ff32416896e6d8eb2a9a9f9e5835dee89a71d8c3546c54b8601223617b9f59b49236c846f7e583400683df270c640f0279b3beacaf5149d83d5139e3328c63f6abed37adbcf702e5b81c3789b31e241a334daaf82b03c5c6649ca477de1f652ab3fff05705aad31f62e83e2c5e60c86cf3b2b0d6e0ab0a67a70f840d036a7e0a659f1cdb2c0e3ce833b4a4ee3ffc1ed76606eb"}]}, 0x2, [{0xdf, &(0x7f0000000c80)=@string={0xdf, 0x3, "eda880fb985b602ec1704b6b9b91d0b1bd69cc15b8efd893dbb72f83b2636048738f383301302e02e337b0d10324b231a0c247fae57770bf8554f75308a12adba459535be113ff0a342b79d36d36b7a28335032f2d64acd371f93b82b840240264cc87ef771fedb5db4078a9c212e563afafdcf304f993acb6c97e2178b2fc13f6fb2383788b4237fb5aaf15139cfd8e7f56b7c974136cdace940124f32260f7ad63a7b6cbabb2656c1fd910c096d2d707d963f995b153cc9fb2c343911cd36051bd666e87b3f8eb19a42a60ec0e0acace20bf75049d83077d6d3afc67"}}, {0xc2, &(0x7f0000000d80)=@string={0xc2, 0x3, "a7b6d87dcb7014754dcf8f385cbd92f99300110a171a31e8e0fb402f932fb7f3168b8f589364b10ca9723ae858928739ace951b6f3c10574794a02deaaed45ea297601af31f1a1c5fe6e389e3bb4b8afdcb61832494562b4d075c623b2601e51a55c43e430558fa7960b8304aa1bc4d247d256a80cd097c501d1bc9cd13735e89a3dc5e2d9d7fd1961587f46ad26eca36b34a8c8f1e5ad43a763f8747c2c35ba8d43ee88cac52f54f667ec884c9b8976b9d1cfe658e2fd5f89f933c91e32e169"}}]})
syz_usb_control_io$cdc_ecm(r7, &(0x7f0000000fc0)={0xc, &(0x7f0000000ec0)={0x80, 0x23, 0x8b, {0x8b, 0x23, "4b49a00ed9eb0653ffe01a592a6a08fefaf05bbfa4669c935df1687ecd40c66addf1813b145e52153e46b332e2ebf0f3413ccec23c8ccde9c833fa7ee08235fbe43377329e6d0ec51e1f8eb7373179e8d32b9f3ead7dad97feb7a29e3ead1ef723dd24c8701c1d750565d050acb2ca4f2d2856d462789ee55376d54fe4a9a25cc833eab983b053aa02"}}, &(0x7f0000000f80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001100)={0x10, &(0x7f0000001000)={0x20, 0xe, 0x4c, "bc9693f529635041096d52426ab1083a9108106d6c4e6d82f49fb4b0f6b4bb6db2b548e50ae3a6f6997bdc9f35d9f6f4c8e4f378671c26aecdf702882966f8894a834b49708eb22740e2ca14"}, &(0x7f0000001080)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000010c0)={0x0, 0x8, 0x1, 0xb}}) (async)
syz_usbip_server_init(0x1) (async)
ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000001540)={0x3, 0x0, 0xa, 0x4, 0x13e, &(0x7f0000001140)}) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x810, r6, 0xd7315000) (async)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000d, 0x10, r3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000001580)=0x1, 0x0, 0x4) (async)
userfaultfd(0x0) (async, rerun: 32)
r9 = syz_open_dev$evdev(&(0x7f00000015c0), 0x3ff, 0x430c02) (rerun: 32)
ioctl$EVIOCRMFF(r9, 0x40044581, &(0x7f0000001600)=0x5ba1)
syz_io_uring_submit(r8, 0x0, &(0x7f0000001700)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)='./file0\x00', r3})

3.018210045s ago: executing program 4 (id=709):
r0 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZH\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\xea\x82\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\x0f\x8eS\xaeX\x93\x7f\xd3\xb9a\xe4\xe0\xbd\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x84\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1#\xe7N\x89\xf8\xe8+\xa1\x82\x13\xb2\xa9\xef\xa5\xf8\x8b \x00\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)2\xe2\xd6\x81\x00b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|&k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc2Ru2Ht\re\xa1\xf6\xbd\xaa\xb0\x83}i\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf\xa4O\xb4\xed\xc8\xccH\xd1=\x81\x00\x00\x00\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xd6\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\x86C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17U\xf0\x16K\xf9&@\xb1[\xe2j$F1n@\xde\n%t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5#\x7f\xa8\x1f\x14\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebk\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x850\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96\x87\xc0e\xab\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!\xec\xf7$\xc2\xbaU \x98\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\"k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xec\x01\'\t\x89(\xf9\x98B\xaf\xde*\x91\xd5k\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\xdfC\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84\x0e\xa7U\xc7}\xea.U`\x1b*\xcep\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xc9\xcfw\xf3\x02\x1b\xde\xc3\x86\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x13\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcdQ\xdf\x83\xbdjp,\xe8\xbb\xe6\xc6Db\xb8\xd6\xcd\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd4k7L\x8a\xa3Z\xf9%{\xfax\x9a\x04\'/\x90\xe6\xe2\xe9\xf1@o\x0ez\xb8\xce\xbeF\x0fkE\xf4ry\x92n\xff\xcb\xf8e\xf3j\xc5[wK\x91\xdb\xf7-r\xd3\x1bx\x9b$\x91\x03q~@\xd8R\x11\x05|\x8f\xb4\xc9\x16\x87C\xab\x96\xc4\xef\xea\xb9\r\xf5\xf3\xbe\x8a\t\xc7\x88\xc0sL;.\xcf\x1d\xc4^\xb0l\xbb\x97\xc5\xf6n\xca\x18M\xb8\x81\xff\xa9~\xf7\xa3\xa6\xd3\x15I\xecXG\x89\xa8\b\x8b\xcc\xe8\x88\xa07Z\x03\xff14\x87I\xc7\\vK<m2\x16\x03\xcd\xc1\xa8.\x7f\x16qlk\xf1\xf1y\x8c\xde\xd6|\xa1(\xf4\x12O\xca3\xf8%1\x8d\xd7\a\xfeJ\xe6\x8bc\xb3\x1bKC.\xafB\x8d\xdd\xf9\x1e\x9d\xa7\x13\x00\x14\xc7\xa1\xf3\x1e\xcb\x19\x13z`\xac\xf3\xd1x\x1b#}\xfaYR\xc5#Zoag@\x18\xfa*\xb4\xc4\x04\x03V\x87\xc5\xe7\xb5\x9bJ\x85-\x7f\xfe\xc0\xb7g\xe8\'`\x96q\x88[\xf8\xe8L\x12\x85\xf5t\x99\x0e}\xd3H\xed\xda\xf3>\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14<B\x91\xc0{{\x9d@\xb3a\xad\x14\xe9\xcc|\xd7\xa1\xc6\xb9F\x04\xce]\xb9Y\xbd\xbd\f\xa4F;q\xec\x83\x9bM\x93\xa4\x9c\xdd\x93\xa0\x82E\x02d\xd4RAI\xd9O\x17\xa6P#\xa35\a\xf6\xbb\t>p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7)
open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
r1 = inotify_init1(0x80000)
inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726)
inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x104000100)
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r0, 0x0)
syz_open_dev$vim2m(&(0x7f00000002c0), 0x5, 0x2)
read(r0, &(0x7f0000000000)=""/268, 0x10c)

3.00211696s ago: executing program 1 (id=710):
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40)
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x356, 0x3a, '\xf1', 0x3a, '', 0x3a, './file0', 0x3a, [0x50]}, 0x29)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x881c0)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @mcast2, 0x9}, 0x1c)
sendmsg$nl_netfilter(r0, 0x0, 0x20080084)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x8000203d})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x2, 0x3, 0x0, 0x7, 0x5, 0x800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0x8, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x2, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x18c4, 0x48a302)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x8b, 0x6576, 0x9})
mmap(&(0x7f0000719000/0x1000)=nil, 0x1000, 0x3000006, 0x2010, r0, 0x2e28f000)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x10084, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1f7ff6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x1, 0x1, 0x1})

2.918409207s ago: executing program 4 (id=711):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
r5 = add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
r6 = syz_open_dev$media(&(0x7f0000000040), 0xcf7, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0287c02, &(0x7f0000000080)={{}, {}, 0x4, [0x5, 0x200000]})
r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "f1a1173fb9462d3509e67197f90be6e423ceb0ab4912f9f6a31854ec7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
keyctl$setperm(0x5, r7, 0x10200300)
r8 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000001880)="cc5b6108dbfd2effb4735f06292cc3dd71f44b3a4623c3e735012020d95372ebfa9d3d7f73422a3c9f5fc59dcb4bcf7693a4dd2235e74640fc0f668aabe35e1aaae55f4b69c053492ffc97e6c8cdb2276b1389dc327d801a1ff0d4484e85ef3689eaf8d801a5bb871cda2d076257bd66b60a95b39522e78c55e692d6cc9a2b3ba9c6e7beeb83241829e5dbf2ffff6944b330a7e427d641efa9843e18902cb3d59e796952b275e4c872f50333ae7f62bf40ebbeb4977d8eee6916f0d41e01c7acb76321e105d14b3d5bb239b2ba12d17e45dd289a036450cddd537b6d5fda817aa1c402dab079ef73d2193002bece740844ecd676eb995e9bcb401653fcd5f319779b1655ac1c04ef6c5d0f5a7531a78f317e5fb00f0b9a96da84e743f0b8c1ec24445cf8d56e6ab2c8ac229b9e9cde410321c6c3e1bfcd4595ab8f55cc7da25cffd7faa3175d10f7a442033a9987d9d75b804f3927fba2ce5ae260dfb3d8e1f1ea61ccd6686d20599f430b975111c3fbd581d765d4ad8cc5d4b7603d86304a0f5a764d5dd41bca11ec2a74761dc6644bea5a519eb5f8b59076d9408cb88e3e888fe7c3ce08bd345f5b94c911624a3dad97981f2283ac05a7c6fc97c674428ae94ed1bc60ff4b044c8684d687612de5e868ae98bf3dec9ef3a7ed1287bb155e12aeeb2ee726f0ce95da5553149edcfd83180574e7dd3e102c8a9eebc51a7b3ab325ca3aa2ae3941d8cf2f2def510cf0c70c5f328ab48f24a5fb8b7801d64a4e8d81982d879640488613c89fbafe9ed304e5becaf7f285ec05f067575bffe4275ab821ec13743c70477985e6b296b02e431e8f2c3868f2409d334628c25c2c8ba533bc892a3756fa5641bae88a0c76b653e5369b12fa2c54555abf64e5eac3fcbe9812014ba8ffe92c259a552b8856a6deb4389983451b5cc62152b4205a7be00e314aa6bb5f0942e58d0ebf09596ab6a99b18c4f54b89d8544f2fdd17975281c7978f7020c83f342281f404f91d32a840f3e4845182e7d75a32185aa3228c698faf506c84436105c8d983df1286245a114356cf55be68df7819186ee34051b29cfc8158275cc10783228dd299457d3a7a9ee47fd11f3d27aaefc0034bf119b8a72a2e41375b00cd7f58353e3313a8c9946baa3230ebe60d26da8f36ff95801975c8e7987a71e1f8bf1f2169162974ed6c468f97d8add3d73b8790d9e2878acaa6de35e5d8556ce2acfb43a09ef303bcbc24926d9836d2ecd4db29fdd843cd63da97412e708164de1c027d5a0381c90400df5ed6e20a75447ed7b4ef21a92bb2a6b5afdcb1e055120109248c4da733533c8f8084ceb701d79cc7eeee72e13b5ba00a67ef2c636ce277975ac62e285a4d57496ff545cd540408d9e2318a29684203b64142596d4df8c484a78f786a86d754ea01ee227df9f27ba1190f97a1c5ace9f90624d713f3c73a0ce22ad02e7efe49351ba4dcd36269cd7fb95347dccf66884b5a447e1c2389ad2fc5486579d6012156c3ed7e24f9f3756c6bbdf94872bb778099925821ba7ce77b2da3d4db9203317a3dcf76b9820e835e0be784916327123780314511eeaba76ab4802aef7751d70511bf9a687912de37744477e842913d54511903d97f59ff9d7be3fc7716d24999623920f66e6ace835ad85ae8a923bc21cb724a1f7abcbe04be6686d1d86ed036e2e844a320f3464732e6e97933d986f918abbc24b1571956b078fae9978e41d7a57aea59b7c13d37fb3fb1f12418e56a4aba9d44b78029a22e0db9e0d046f73b50c48774ca13191638c8eaf44a94099e90bc4d2cbfde7f8a61236902576e4702bdfc7061eb47166aeaf9c122af4696d9a63c6c1b0784ebc184b3717985105a6dd0acc765f47dbcc68a686af1e365b171c34730df29c2cdf84b7e441ea283fecd4fef50c000329600e910e4258e2f00b3d3642b38c005301130a52d01ccddc5f7b651508339999a686e007143a81f7c0546481a9a36f86b1476a7581fb1d6fce8878205eae7a6348ed37a797c908b9a3132dcaa02ef2d8af0ed7002ced5156a4bb9a41f1df7b5434fdda1ed119c7e4c061bbb3db186cdee8ae8d0d9ed36f0fd1966b1e28f108633425488bbc84d7226830516fc4f37d4c4bb91ffc17af625f744402dc412893558dd924fb7e49376fca61701a5dc87cb1d3ea386701e47872389235e744e035ba66d78d404a45ef878aff2ea5fdc4363df713118221c6f068f05ceeb09c11f105ecdf20eddd9bb88c79caf2a19145eb802645502d2f1c9374fb260e5c52ad1a564e708e31f09ca8c7d04f2270244883b3f782bba3e6324d7641c58af378ea18e85ea657881fd685529203c356e730ce6c860b0d37a4845c97640f3c46d148eab65d6d170f0cadb2956967ae0a3c067ce216132a8560b80c206d800a8952c10728c96d7720265f5e84cea7cffb50ec99e20f8d00890656373835dc6b524b6c4640463ce60b91b7e73454f336a8a62e81024ae265000d29a970b88bc260d6ab906581e93ebe76a9eb347c3b68b4c3fce483a174319218f5364acde8e5ca4c6cfce1350248d00a3f7ce803c35df8225a61cb256e573be9c329fcf1e2adc44179e809adbb1e20a47355570dabf6b30c04149b38cdbacefad20b2c41760369fe42878cf3a2c40f61d85d2d6df6fad118508502fc50a71e57677128e3b016288ee8c9ea62972ecddeea9bab00a58c4ca3f138d4f099dd6f1060dc2c2facc039a63f1c9ac52c91bc55dadf63b398824a396d65ba4b054158e934ed9f6a685cba1a4f3fdcf0b7217cde43b8176d93c2ce056324183bd3b0573ce42bbdf023ccc82eea764078ff9414c3885df79caa6e14f5aaf2f787b0a27806bf27b5cccd2395471081d9ef8299fcd905d35c83d656728fc9744f6458e95babc7f08fe0067d6a944f5129817b8312abe0da06ac89acb0e2b93be58fc20fe7a3693f5e8e6ed176e93abda5f06dfa13b0c0f5922d535262b7beb623b2bda725d006c2d99b107847dbaf6992645dc929183241c59dc18061226b046b673c19c5e3ea5a95cf93ee3fc15e0aebea89a0e15446ef0c28026603ecc516b10d74294094df539c07ef66286ea4f715a42187ab0ad8fd45e7124e517f91cf32d02559b0d8e95fda99b1f4d4e753c3a42ad94731e591fcbdee8cd881029e03276fac6b17bf1bc9f9dce8874bb82e4b72be835bd02db246cdb1c38ab408ed570c4b863738a9202fc1f6c8f14f5de0614054aebfbf25b944811d7ad76f9bb40297ed1a080ab4e52640dc9e6fb94396e23daceb791fbb0a4ccf37bff1de473e3160b682049978d3291fe307dbe82d28f9821275cd91af9aad9451b51787a57a3cf888656df73d6a31ae1dffb4390e5814380cf17c1dcfcb4b3f1503d54c44b0231b16a5ffe21e4e7d1fbe738bdcce2f4c396db00c13f550c25e691d9c108a3329205a41b58ab48e33e0fed5c6a77dd4deb46c1b94cdc3fa2661380ea2623c73302fe36ef0727d06053ebbfa7c4ca4072eb2e59434bb992606bdd184931d256c56b004d1e7aea956cad07df4b56769cc8865ce8e7a3a025ac6daaf69353b3ce0f34c0c8be27c4109ee666a71fd30e315882c28dd428d138893d35a89032aacc3aabc5595f7a8e40348bef97a24e1becb91035f1e96d65e7cfc83e49f6c751c67bf2e015d32b603e6b84cf3048810c8cd7eaa504aa6c821d6dab5ba511cd19320208132b4edc440c7506a61754a5ea827442c8b226236fd10b6c584746243f282978880f65d27e5c05b2b35927e798b95e9a48699c8abc2f85529995b346e860a04dbfb6d97af7d34bf40cd4a94854b47d9199e4455764baa10613441488e5633f89172134174d486c3c181b0467e01a615a48dac8808b4cecb93004c6baea7a86285feff6a1895e3cbd651bfb4546b30583149a5c34be59862e2d2d408a22c807d85d9f7df1f0955e6ceba059193d023f6a76d8436ed453e4fd588b8d37cc2b2585851729e1b6663532d954f5dea8e6077d5859cd7ed3ad0c1274bc1fb377fb1f2f0bfba3645f21866d97c7bdb149367ea7da16d2d60684aa46a007db8810e1fc9ca2087834fe84198d17eab907ac20470752ff264137d95587de538e4e612bacf3136833d272c23519353e42db5eae4c044640a160822328f82eb3760b5a7ccf690269b33417eec183821754351977f8c1741c90f474a1ad90105d4c239ff7840618efc3b82d08d583e60f87a56d67a6bf582fe3101401fc5d8c556fc9b3e34b12c5a7d9ea65721de8a068c1939cdf3d1c045fb136f79684224e3edc03e878460b2830f3077da297951c8a97b8676fb34e9a17eb5a3093fb72ecd6c77de171043ea165e06b3f35a7d0bd004f57773e1754dfc863e37417d1134a2285c8356d5207ca77d4b7143f5a13f2bf13964f3f827c18f29f43890b8e31642a1a717f596a3e6f993d96e6a56b11eec0daeaba6864be2a7731496c87c24f35a81d64d4e6cb0c61b279b4816b64441e80a1a93a1b3be1e4fdd698b9418b74632b0594a1d9a02d19196b019eeda8f729763483973266756eadd5355285991d2894e46d681b800cedc3f8d500e9a853a8650337a514394cb83e13328939742dcb2d34c7ce97df2fcfbe01626d19b4b0b6b43c0882117e947c6231951aebc4b77e53afa9f33c2dfdd3dedaa809428a90f7f88631b8650adfef6d8757c21fa9abda30137d1ba6f8cb6fce2f39a39ccf138df13da89742cb4c186ae66cb72ceed7d583ba3ad1fe677643d569ec41b0d5372f4567cc7b3bf167a226ac92109a6e88413249355f5618df1b96e490d8e8777ad1bd445873bfc4e017b30811eacba2c39d7bf8a616e0ede9d65358e8afa2ba9ba42b87c54bdb6324662e304c628e7ed8013e3319a45a4a46dd886135ba40af223b21dd4fca1f817b43ecf07286493449fe05ff446493ce097de6e1d4ba6b12b107e29c908daf23d20b13042fae567086a636b3656252074db4ec1185f5bf52aa6c0e0892751a9b256f701e83859511e2632dbf9784517b81fd2f964983db6e47ced289c921ebfea11964d24f4ab7d39bed431b26283c6b22cfb225b56097a38fba61d680e4c26651fa53df433b9ffa5c69fcbaf08be35591f4f1544cded5148f409617571a0f1a6cd6f50b6083c6d323750b494f44c1461997952e2935a82f8a13d8ebb1a513a5b2f707f01423d45a6450983a25c978fd6546f81e4746929c60c3ecd36fe52d34ccb13936cc0081b504bd2af3bc339de22e9b3be6448cbca1719814d5835926d662397ccbeb404971134d55925da9355ef1158083d617f15a2209d8efb9acc852f880af304d5c7cbb48592546707759bc848585c8869b139a8e0747dfee809d33ec4b8a84cac78033b6d672a2a96c1647b53fdb72bd702e8d3a5998b057c9ebc6e92ed364e8cf1df897dcb340f1e4a2f8eb651239d338f30a7c00f07ac13a62882461e2e5afefd4c56ebcee29a418c3f13610fcb54c5cf050b110a6053d020a77d1f326876f37a38c93e3f0400a94470dee4ab09e15a30e56ca1bfc3d01b54fa135871fedf148de530abb265606579ede1580264093b1f3e8e7558e41d26894c416cf2d64d574356971e47e27a46d4da378a21a26787dd5b8e44a25f66ef72504855447cdf6defa45e3a4e24a34d97106f1f91e0ca4d3b8c443d191ae051c6d1676a41e926ea1bab5f79e017f06999ab2294cd997e0f016185f73e0eb914bda7d23b3b5d22b141aeb9bcd3b618448cae41174acbf3f0a76a26fd7b3c26dc9ed928aa22f4df807a5778c3f", 0x1000, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r5, r7, r8}, &(0x7f00000003c0)=""/84, 0x54, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014)
r9 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
r10 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000009cc0), 0x101082, 0x0)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r10, 0x40096100, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x7000, 0x0, 0x3)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
memfd_secret(0x0)
pread64(r11, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
syz_emit_ethernet(0x4e, &(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078000022020000"], 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585", @ANYRESDEC], 0x0)

2.817683318s ago: executing program 3 (id=712):
r0 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8", 0x49, 0x0, 0x0, 0x0)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
r2 = syz_open_dev$sndpcmc(&(0x7f0000005280), 0x0, 0x0)
readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/225, 0xe1}, {0x0}], 0x2)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @empty, 0x10001}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3ff)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'wp256-generic\x00'}})

2.728820896s ago: executing program 0 (id=713):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
write$tcp_mem(r0, &(0x7f0000000180)={0x0, 0x20, 0x0, 0x20, 0x0, 0x2}, 0x48)
ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x285)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r2 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x925, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
prctl$PR_SET_PDEATHSIG(0x1, 0x1f)
bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
sendto$unix(r3, 0x0, 0x0, 0x40000, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
r4 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
r5 = epoll_create1(0x80000)
openat$kvm(0xffffff9c, &(0x7f0000000280), 0x2001, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000002c0)={0x10})
mkdir(&(0x7f0000000200)='./file0\x00', 0x18c)
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f041})
write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x2, {0x20, 0x0, 0x6}}, 0x14)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r6 = getpgid(0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
mq_notify(r0, &(0x7f0000000240)={0x0, 0x17, 0x1, @tid=r6})
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040))
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="2b7069000420"], 0x6)

2.145320304s ago: executing program 3 (id=714):
r0 = socket$inet6(0xa, 0x3, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)

1.865572603s ago: executing program 3 (id=715):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000007b01"])
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) (async, rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r2, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) (async)
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.560532838s ago: executing program 1 (id=717):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="5800000002b366ba4998afbacee686af0306010800000000000000000000000005000400000000000900020073797a31000000000c0007800500140094000000050005000a000000050001000600000011000300686173683a6e65742c6e657400000000"], 0x58}}, 0x8040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
sendmmsg$unix(r3, &(0x7f00000052c0)=[{{&(0x7f0000000c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000380)="8731f4bb28fb3d768db60af05d40d3fe419cf031adddb6db6a7d05033376d4a24dcae2acd23f61f9d5a071d47d71df564239ed57d942280a1dcd06d448ab9d4ea0f9b56132737bd1f8f6f9a9690b3828cf5bdfc912a898d8bfb47266cd786257", 0x60}, {&(0x7f00000004c0)="6b751da83b79b6afc230fd92dc3f5220927322867023e3a2f86a07762dcd6e314e647b1b7d5d505a575fc88788f22f7f8a58d6538cb45c3483adc8b98a08f10ca7b4c51708fcd57f111b498b2d98988d150d2fcf505f3000436a1d407baf87e7a5e03562971dc0684d0dc6865f82953e6f0a75b172b34bf6961fde2b971220f1c35c622d430328bc8d482f2b", 0x8c}, {&(0x7f0000000580)="408936b281e80fc6382c27f3f1fc59dbb4d48913107d25e69aed4ee30b1b496f510a6a6d33c52d5bebfbff77dc193ffa8316fa5d872dc4eaf8eba1aeeccb18eaa1c4d2ccb19fa5502065da3163dabb4a2d08cfe2fdf03c677f2f869dfb1e9fa09e512932564ddc2fe6d7cd42c34a14b881b6d680009bb89c63f35dea264764272ecb9c6c45a40544cade8ffe916f11c4a7a047f21a422ff9ff3b602ebb2b78d584fc49c3a9a04bbda03cd789d23f53fb", 0xb0}, {&(0x7f0000000dc0)="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", 0x124}], 0x4, 0x0, 0x0, 0x40000080}}, {{&(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000780)="fd824f935cc74c66a9e403e71f4417a04104e705e92e948d5c6b18be9f966a318d731246d3000afe651a45771848506f55d3a8ff1b80e370fd370f35ce47e7fd7d5b252e36b670c494a19644670a4810b1a19a32c551f4323f60dc059521054b029d4d35b59a570c1e115dd08e9445c827832f80706057e81b8b935d990024d3b0c797e6fc054346f8de115cb5b85c305af424756060f4f262f1a7b50f2efadfd9f442e54644d1c2dec664caeda42b70a46d40ecd40a1b16284f9faec71a59cbac610b6fccf1c8db9cbf05b0946d6e5e560e594f6315f683992d473c242cea63ce41444e9147996d887945242cb8ee8906", 0xf1}, {&(0x7f0000000d00)="070191be8e1d713f0fa492ca7d63f3e0cd22ef67256b5c9e6bf728cd0d47f2a19ec635802cd63fefe21fbbf3ba81ff6a1be38b1cba205511a9414557fda65eb30aa5ccbc9e0b6b65dcf279b349101ed607ea63e160399e8f6554e4e31b1cfcc4805fe9c61271d07d1c344d0b5ac6591be99bd2f4cef8fd3ff9f30b2b9267c57b0151069db1245527ae1e93d6373947d721b852712a4a849299f92fe0ff299c1be345c8ece744", 0xa6}, {&(0x7f0000000940)="8d422e6faef063c1fac6951af420fc41f7d9ecee823d661faa276969fe92c81223f06f4d044b2c2136b583c6e3f035cb249d54f4610fab37f86c499d9e1e5e443d3f70534ce3616d02eb33ce1ab9c76e497ad6b4a7dfd55a3d1d63fcd455ce06112fc33166ab87924ed9812d3ba1217b9ad5444e048a0574462791ac6db1bb4643eeb3901d3bfd2270edaf7c71644bfa1b56ea17174feaa15c", 0x99}, {&(0x7f00000001c0)="22c0c5d0083f403164242992474ada66a4efe804b67383cb7509b7b25f93a95764b648d42745e1656bb0588bccc692aa1658f0c133d58e1042", 0x39}, {&(0x7f0000000a00)="8d9d2d64c3488226287d292e60e7b69dd66324989ea5ad987c0c506bb7f79b6e70ff8de8aadf38635704284fa93a8052d981f7ac3c2558d3d2530a5c8e7d8902bce19ef3cf0ae0b6b4b5", 0x4a}, {&(0x7f0000000400)="b8f20077b7467ac6cf215d58eb17f37d85bc8c781fd00e5a418936f0f84e1b8b480bb17a3f6528affad417a06d9a6578c244c162f54d2476cfc9f668", 0x3c}, {&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000000a80)="038d2c9facd5ced50038edfc6b352726fdfd3d00b175403ea94b5c2eb5fb984bdb593a61db6b64f28eed0f88261ea8e1317f583a7e856b5227c24fba84e7a6477993299b0647ad0fc049e2e95044cdd4668045818f09580233f96d72c4a284f43db6dafede942980a3b565007cba5d281d47f6f8c7fdd4054d2421278bf5af23141462c3496344465eb608d4cc5810f5d10e9103ec102750e0ff61", 0x9b}], 0x8, &(0x7f0000000f80)=[@cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}], 0x48, 0x8000}}, {{&(0x7f0000001040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005240)=[{&(0x7f00000010c0)="37a4fecc62cb57cd203f7d2a0efb77f19281b9a455d2e40872f181600a6f3976889ea4ae8b486fbacb0103c1a8fb0a11dca25b3c97c3ea7a1fba472a04d08ab8d72a01101d77b1c8033c7cc254d2cc4728d8bbc4421ee4f71a87a6761d0636abe869c1aafbc2c7675ab397979e206ee9d23bf10aea420bffbec726b02db3db13220e2a91e2109475afe952bc3817d1c339defab49b3358da0e4df5a54a074f1eddbe7034a148710d9b69", 0xaa}, {&(0x7f0000001240)="a5c0936d80496bcb5300b24f001e9143fba84ac43153c08cad85ec932d9bfd38870ea46cd298caee696bc04af31e3e8af6da56f17b6c54c8fd0ff99fc4d036865f4892f36dfaf2328013338fe0b0fa840f63c84d904948ddfd8669ba9b56aeafd0499896b968f80ced9b6c0d5f2f26eac40b29d7e934e13d7c6956958a8112c8a54980e3abbafb15e8245bfcc6b2e2dd442909c732b472690b9f60140891e6cb8cc3b67fe4d78e9fb5151eeafa2b81caf02c86e7df6ec005fdcf23", 0xbb}, {&(0x7f0000004140)="919697ae82f7477e23bd7e1c322a07e68059f25144dc7df255c3fab044bbfcb961af24bcd843b06bb3fdc8d6e5a291902b8e108df0a85a4573a450477fd932923866c6f154601f266308b60d9b24c94da4ab04beb7c79bc747503437851202347d3b99c2e7f747ba155ca3d166dcd3d150304a239e07c11c86f016d5430fbb8a0cbf632f366ef25c43d1caa1e71e8525c2e82bd05d2a4db723e25783a609aca911b183d3606d3e746f274faf133228063c2aadc2c1e51da4c1583709f2a38128117656a695dc064c985831e654aeee1927d0c496e09d14ef37624368d66b31b8c1584de5f6c893f1018ab97570e731978a9ab937fb5a7eb1395af783365e6725397d42e1bf07a184c392e9054214d46c9c00d00e36219cf50a6c2c38e7332dc98e7b63042de737ba8919ae74d0fe0226be313add930344c0882aaf90da221e54e4fe5b58b5c9641e87928947610780a9af3f9d71dabe21c92225d01d674fbb61ecc419ed91f2b9a6b2895c34f54d38b3623116ace4f522d89d26f019814f2f900968010d5d7c0175b7ba48f1e3910561d4140e810df5de27fe8b42d83c514788e067a8be3edd74b98276e209d3a6273eed0c5acd9792c0ff001dad3b4340ce263fc438512e947ee8932bc3f754e6c2c0b30751ac9810495a1595672a85187f25a0871857894d980721b77576f7b61c2b3dd1bc16338612dccefe10232f0b3edf475ae452cdb4c277be27f56391958d8e0ffd886bb8a93c82c13ffb3f9acc95e634424950f1e1db970bf3918835aee60fa6d2a56dcc609ca92395b80e89d890e9f24bf5f05d77dbd3603e40cd7ad44d9f1fd42ae13f953724238461ac996d99114047ed1f69213d4586a04102476f353cbbde155eca0ee50f69ac3aa1eff2079a6287edeff09561d5d565fcd6bb13df5b1e19f5f2b6b7c2751a0701c8cb16243dc89a0563e12c1b412fb599defd069eeb34e5265f86daa4bb0ab7ad681bd6daa57986ce41c5de4dd65ba4ef131816111f5689e8d659efb005d8aa0007070f70cf7f1637871a8a6d8d2bdf364f490a3d410dcc587581d605bbe9783b1c80a4602dddc1a41d8372fa81041dad245558127b09f41ca538eb5884cff530e80712be9f0465a41d48bef5d4dbf22650ed89e6bcb6f9d82aee06d113fa4e5b67f36666a768f4b79b365f519d33dc0a29f6ba701a83ac82f04bdb29142d57c1762be2f9861c62b6e9e9e119fab60c8aa3c06dd9361210552340051647b2b2d829367538c3b71fe3434601c86e2817210aa0f118c6cc9d6480f33455e90085f5d7f8da67c4597a71abbb1ad64907a34e63cf4bc0d37c650ce02203f53d66ffd2012db8688ab04ed2b7523f80574566eba3b654893dd69033b337e7b7eafc4cbe706347a71b87589746535b6567bf209be4990c7045e38e98457df9b16c196eb873a091931ea8b58b9652f68f8831cb820fc2a7e24d3a378e3cb04471fb9eb158f165247f513f42464b39b6d3ecaf93ec84cecad371a655113c2e92190a6a431dac696cae8644cf506278860df2cb70c5521e0f92a479250aeb21483c1f9b44ff3a34349ab77468fe50a50d52e73c23bb520cb9700983a5ce6f922564da3ab24c257055540e785b6146051c9c223a433a0ed71c85df965d8cafa4e2abec03e026aae230da0a12c28dc1f8ce07b628405270ab45798798835cb140f23ff9ce684fe8d0685d001a6a8575015f497cdea8021a7063f52369c6ad9cc6374fea047f07da95bdefecc4c47f244898bd8d4ff922798343a2c6347d4a4efd15d07f6fc1e866fabd4a38dfe9f27971983ae121b24cb57a3f7cc703cf151171f7b2993fdf339ee59d4d5bd40979541bfd1acc9f8dc570087743d6db27199f3beabcac96b09af4943f995388dedd2cc79c1f44eaa09367b7a7aebc529c44d2387e41f66b068c45f77e3d6f651d438e5d1cca403d4969559247afa3ab910e373bfe9222dc6c0bc365ca58746f28c3162d88fa3fcd60033aae56120a075185504cd62f977196ab2e743ec4eed34df8c30ef67fdec90e091c65524a5eb794b3d89d22e3350ee9b77e52a5cb96e94f6d45925aecf606580c0f56aa9e6f116f8dc67a18a7fb2eb6d1388fa927ad424c0af39e8fa67701258aa8cbae84bc89294573589e82bd1245d01a53eb07fc40a5280569d45fd723bd24b7b2bb91c69eecc9147d67d6a1e1f4b47a6ee2c92d16d6876851f14ff7002b83eaf26fda24ec08bcb03bd2e717185dfe28b8af92cb2e736d6cfaa0517bcc3194330005847ce120235a25790939b2a21434f84bc55672dd3397c8c80672c1ed164eedd9cc77a6f45af3d2ce1769f2963ace791299efe6f1dd47ee0fea42b5c9f1da8e383cffc98064f1a946936483eb0d6ca75ddd56d957b3fed659c8fa0736e9ca3e06e23d13dd391a0c4b161b23c8483e51ff0abfc6b5e558e6f0091f58c93cc437c2ae4f3cb7be006bf63527a9527d7d64aab917ca73b692e2173ae23f69c5a9541588bd0acffbaed5497baa5727d06cd8a6b9967e17ea3d416055aafe64b67c60cd72a07f9c5769f7a8cd2d4072a6f5200fbbab302361ca74c6e3b44ae30e24de630632f3c3724d9fa0db5377070519a7e25c9ee86b2c0549f86037113bd7816b5b75c64879c16b82ca20c03db5978ff14a3e6465d49a95f35f5a2aecff578e737513c82687efa48f7a614652f58bfceb3b35a0801f4875f0ed9bb7f6b7064345bde87416ff911831aabb80f250bd8619278bc4dda7ac2b8ec88b7e051652c41355192ff31e29ec7c17503401937ce0497b76485b576c9736d68c53648c1edb8500a2b550d4ec20577812e58c638da18f8f371e77ffceec8865360288ac8d2cd376b5c06950c3036912aeab78eb9839e719035b0b02920aa4542844b8604435bf2305702b31f0885f24956394b6e208222c645befede2e9c3e49fd3854c82fca0bf7ecd1bbeeadce21bc2126b1b1c9ece0510497efdb611dd4617dd7801b0d1c72c9ee6c72dde84a4cbb5727ce1562b6d7357b66c717e2a3fe2a1437e626d494a8211dc512fe817fcc9013c1fa079c6713ca3299fadef4196de726171d5df7e6bc55f21a83dd08348d805b415f4e0bff2d78916e8846c8bb9832687b28784bd8b9ea46de40101d2a497023d20194a4b0fd9ac8b0d26b6f2b4828a122117e16ab915f21c3cb54a3f664e3f7ee99f5a97ed1eef88a72e1cda2f41bbc8af7e3d1bdacb8e019edcf177321cc9b9ee95193489b1cd8f181c4e995d320cb5e261b5d640ca561739441c9f55ba6f4b0d019f9534cae2cb26108ad6786944ed2dd07a19cbd17ca013aeed4de0f90c482603cae7a759d64940d251ccf31dfd027c30c471b456c21a1879ac8b5a58f06f05486e887781c21dfdb26b20e5f976b4d7325eb6f9df13d752c4da76d30d0fe2b624578d59062e4200b2f95cdee07d4b202dc55729776f96ec12fb8fe27131e96977ef8761c864478dd442197ca80f16efec764c1a689ed190a9f0ee56d944633d49177508c9030a417f96f431ffc2ee3c78a8bdc122a2d213fdca456c16c9dd07ad14cda5efb5733c842b3b2c01063636f0e2a055d693068838464e85ebc2ae186c04574366906ca84b077f40be9acfd0415a2c89a3e1c0ae4208cbb1ad660e485e41fe51b612b16ea5db5375e20ed4d72bdc2496d77f33a01330e14f8b4fd050ba7109a902eff3a0e19a76b216fb94f5b32f9e5d5d1a3f9903d5badea2c875ed146aac8ab8b1cd1cab8350e0829da9d0497e2eac7cf1ed4fed3acb457a5d0a6ab93b81e25d3a03c434ad9e5b72e1952f3821f84cd7d34a00ea8edc77a1f3e8673ccc935d39c1ee94a223d8d6f94faaeb1948b6b300ae2c756c59e7e4321a8cf84518e3bf721e0b420ed430d0f81dc2c5aa9362f819a654392a9793be333ce18eb63e19fa644b4180033e6024df773bb2e72b7f9304115db00c08731332b61b2b16b0d578deec7b8bf4c4ffd2ab7274359d2a8ff6e7d4756daa1dac1742fbbbe81b8d6906352eeee66435bd4e3cbf87252ac8fb1344d34f67b9e442a1b560f77432c3ca4385602761bdee60230a53fe4f8ed54bd537038ed09259cd927cd0ea2a0ee7b94f2bec335ce89d32eceb57aad7a2ebab76e0cfeb12394bd90b4fcdabaa6fdfb3f88e4818fddac4b3348a678adae4d307525ffe4eb1b2828d9768ba0898f91fc8522320141c51b782f975a36f192bad81e91f53da68402e7d31c76955f35aa2c037751dacdee08d3ee15be6f1bf56fc11c2d34970cf1d85a73ee0dad4e71d37ec69265ba607338775733b7e5c0f530e68916afb37537b9220d255c8e1b2a16f8d48f74c9e32f326851b2348a508a162ca3d16b07d247ce21ad9160eb0be4d123259f9f215f4039e4facd930383391d94e8ca80842ecb1aaa1d31719c73439f76eebc9b810d392f41144a8eb97e856d219a0d68ce860a80b734be6b86b6a53e618b265a3acdad811998b2c4ba12b843b715c30eb9b7665b34edf52f9a00918a13c6289923e90ee8dc0bb1924a5d68794758a78c2e92b2ebc143e835ab8444cee7d0942539f2f4b2934a493fdafbbc8977d266d63ba18f20b9624c1ea918483d838399bed7086ec910e00ce70399f71894e3d29636d9a19abd2b83e6550abfad8df6ffdd60ea57dbce1191f75090d081584c43c705c91950fff176724e699dce66ba153588fda7654691a2200b4fbfb58238df623c10b8cda0bb736b040eb2085223d5b22f38bf9adb313f7d8d45a51b00b4c004e2c408b975c83e8babfee72aad4b2d7e989452a12ce804b52cbaf60b98b72fc26681ddc060843fac316ae982c4af78d5118dc24a8de1fbe5aee0894e3dc0086da1156f88429dc86e833bcb8ee41a78b1fd2ffab22018a9fda1fcbd114b58135d8f9f875302f751c1198d79a51d7fbeba023a6198fdf1e9181a9471a98c3b50dd023318818bbb0757d27bea381e6a913a0bfa3b524f7817c6cc2346f2f4f190986ffaad1c59d5ece791ba97e2482dd864160475ecddf5c20c840357f012b3e6d4c87c1270b5449d4270e022cd168a7e4518dad48180874bbd73e12475dd08bf52dc0d008f485308377f30f9ebb9098aba302a198cabb669e286f97e73248f587ccf21011a0eb94edcbc0f1923e1931a8a65560c7010a980244c912fcda3c3ead0f3c05d84be524492d056d1eed0183be9b595b4361212c8ba0cbb711636a61a80a7694bf3f82f42e6f183c1bc73dd6f39ccf14f54731020dbe1bc595077ae9b0cd0b84aa4df519a4660e59c340ff7e3946ac8ced8774d760b3f9efa9b3f2ae88d300cbb28ddbc6d7fdecfd2d334a2859baaafb4322a4e8fb16a9acfa15de1794ae17245704044a7b1c75dad5ac91d8ab4717ed379181b7827350a23df4affb9f6f6c8f03730b63b7d90d8c23fd0b6d910d7bd3ea5cafe74684e3d69aaaf7d50b9f697fb9de3cca5f4c5bc1ea7f966b7866b3ac6216f554a1bd166598edf9b9fc183d1c4c6b83f9ccefd46a6fc6a146cb96726fcdf3ba0a09f7d8c907160256a20437eb6fc61872bde8dda6f9687c8f963deab35941650824fe2800c6417bf8a77fa7e5364e1958dccc8bec3d33a0c5839b966f41735279cd02c96aec26133d2420dc5aab52cb19bdccad8e7069b952d33912369778ce416c6f156f134eb3fca5a2638892f5ca6e9a7762911bf3ab7fffa0b0257490ac9a20c60681e00933d0036a10a2806cfe2bd02fd2629b3bbd693667aec347598fa4249ae747ef8a2ec7b0a53f8c1d66079dc81a4aebf415ef9a9bc316", 0x1000}, {&(0x7f0000005140)="919de561202825e6b2193eb43e04eca60c24656e43875781530a76ca421ea4b05fb8362180cbf139989ff277108472ff75c3cebc66958a1bcb7ffb5c609ce92cc8a4c20c24546b9a050f9253579a7a213c8f3217f9059a6fbee7a72fb17f03783ad349fbfa2403c9f371bc570df2a8df71e97f170ec7bc56da269ca9213fb0f1b4b7814b63731e8528279276aca7102d0740458df45ba90658bbe37a80a45bb6ebcd5e86dfaa69aca767620f3fea817c9c186e71dd345d15d17197fefea6eab422560e662e73f48555538976357065f685da09390222481ddf276dd27f06eab16f0bea", 0xe3}, {&(0x7f0000000300)="6916256d3742ec58103c72330a33f3ab87ef09680d5c312d13913e6851c10af49ee6c3776e9c8fc913f9a9699bd15f4d5b6f0f0bd3e8af8226908f083a0f1b3d9d3698e8b98def9a23a9fbdbd5abfc5678821144e709654815f3b6f7371f5fa48939166aef68eb63", 0x68}], 0x5, &(0x7f0000000880)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0004fa000000000000f6f400", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x3c, 0x20000000}}], 0x3, 0x20000000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x88, "001bf100eeff0000a2c2000100000000002000"})
r5 = syz_open_pts(r0, 0x28101)
r6 = epoll_create1(0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94)
r7 = syz_io_uring_setup(0x53f, &(0x7f0000000440)={0x0, 0x807734, 0x1000, 0x8, 0xfe}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f00000002c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r10, 0x5420, 0x0)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0)
r12 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r12, &(0x7f00000000c0), 0x10)
sendfile(r12, r11, 0x0, 0x10000001003)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100))
r13 = dup3(r5, r0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r13)

1.551078283s ago: executing program 2 (id=718):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080)
r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x200, 0x1, 0x0, 0x0, 0x205a, 0x1ff, 0x0, 0x96c, 0x6, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x16, 0x0, 0x0, 0xda, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
epoll_create(0x101)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4f37d3c0956b9f65, 0x0, 0xffc7)
r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x1a1300)
poll(0x0, 0x0, 0x0)
openat$mice(0xffffffffffffff9c, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="100000000100", @ANYRES32=r4, @ANYBLOB="100000000100000001000000", @ANYRES32=r4], 0x20, 0x4000000}}], 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
close_range(0xffffffffffffffff, r0, 0x2)
r6 = open_tree(r3, &(0x7f00000001c0)='\x00', 0x0)
read$FUSE(r6, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x2000, 0x40)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0}, 0x0)

599.941237ms ago: executing program 1 (id=719):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x200000c0)

484.861992ms ago: executing program 3 (id=720):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x7000, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f0000000580)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x2c}, @local, {[], {{0x4e22, 0xe24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x6, 0x0, 0x3}}}}}}}, 0x0)

303.516136ms ago: executing program 1 (id=721):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0))

268.324046ms ago: executing program 3 (id=722):
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000004600)=[{{&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/193, 0xc1}], 0x1}}, {{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)=""/227, 0xe3}, {&(0x7f0000004700)=""/131, 0x83}, {&(0x7f0000001600)=""/151, 0x97}, {&(0x7f00000016c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/64, 0x40}], 0x5, &(0x7f00000017c0)=""/207, 0xcf}, 0x2}, {{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001940)=""/73, 0x49}], 0x1, &(0x7f0000001a00)=""/118, 0x76}}, {{&(0x7f0000001a80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001d80)=[{&(0x7f0000001b00)=""/159, 0x9f}, {&(0x7f0000001bc0)=""/251, 0xfb}, {&(0x7f0000001cc0)=""/131, 0x83}], 0x3, &(0x7f0000001dc0)=""/200, 0xc8}, 0x1}, {{&(0x7f0000001ec0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003280)=[{&(0x7f0000001f40)=""/123, 0x7b}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/132, 0x84}, {&(0x7f0000003080)=""/102, 0x66}, {&(0x7f0000003100)=""/170, 0xaa}, {&(0x7f00000031c0)=""/147, 0x93}], 0x6, &(0x7f00000032c0)=""/36, 0x24}, 0x10001}, {{&(0x7f0000003300), 0x80, &(0x7f0000003400)=[{&(0x7f0000003380)=""/99, 0x63}], 0x1, &(0x7f0000003440)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000004440)=@un=@abs, 0x80, &(0x7f0000004500)=[{&(0x7f00000044c0)=""/46, 0x2e}], 0x1, &(0x7f0000004540)=""/185, 0xb9}, 0x7ff}], 0x7, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x80047456, &(0x7f0000000040)={0x3, 0xb, 0xfffffffe, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff})
r6 = socket$inet6(0xa, 0x3, 0x7)
socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0), 0x18)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0)
r7 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)

116.760178ms ago: executing program 1 (id=723):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x50, 0x0, &(0x7f0000000100))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000600)=@ethtool_rxnfc={0x2f, 0x3, 0xcc, {0x89e7fea753d577c4, @usr_ip4_spec={@dev={0xac, 0x14, 0x14, 0x1c}, @broadcast, 0x81, 0x0, 0x1, 0x1b}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, 0x911, 0x200, [0x1, 0xc9f0]}, @hdata="be9e05ff4ef8f06256920b0d2622577f9e052da9046cb04eac4b4002c5fbf69c3b4da037c773e32ea472bba0665d212bde231254", {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x1, 0x5, [0x40002, 0xf]}, 0x7, 0x9}}})
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x22, 0x1, @thr={&(0x7f0000000140), &(0x7f00000001c0)="d095d81afccf634437849bf468084213dd8f394981570073a119b08f597501367fc0c18eb3db374ba200e6d6665326a7a0943e7f8afd068893af464bd34d7d92a9c2fbd6ceba4b77f56b3c340b88bc559822948f7c8bbbd674f272edc09ec0b6d7177d04765bdde8ae11c317d09712f35b76840740fe75d81415df02092c0c3be91a675e5bbaa1edb2ad3487fb626413673f2073c30c65ecb626adf27465b14cf044bd5626cfe23b2682a19d1fce256ca07c8c5c94a60695e5e7199680bd4f05868579b27b0d36a7f05c1b92b33b8f774618df0ad2cc802981f0e874baf7e09c52"}}, &(0x7f00000002c0))
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x10001, <r3=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246)
writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

37.177374ms ago: executing program 1 (id=724):
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}})
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000000)={0x7, 'macvtap0\x00', {0x3c}, 0x5})

0s ago: executing program 2 (id=725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001900), 0x802, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000005c0)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "80"}}, 0x119)
write$UHID_CREATE(r1, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/144, 0x90, 0x8, 0x8, 0x8001, 0x1000, 0x40}}, 0x120)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94)
add_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000500)="9782cb6183baff140baafd525288a1b362491b565d1a85c52048190229dd61ae237f476c76c1c98c7bbee445de2bd986aac68ab1062345fb4d8374b05beb3608592e198d72962bed0c5c796163b3f48c5bded4e7a9e54a676e0ebac7a9aeaf4afa3a0fd8426dff64a528c0fd55748b7e2b11a433397d3f8f72bbe725986a25c567cb7d38c17ada8695082fbfaaa535a760be67359459f99f6fd8565129ec", 0xff6f, 0xfffffffffffffffe)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc010643a, &(0x7f0000000000)={0x20000000, 0x0, 0x2e7})
syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc7)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x20044884)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r6=>0x0)
io_getevents(r6, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}])
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltaction={0x3c, 0x31, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000010)

kernel console output (not intermixed with test programs):


[  196.310502][ T7366]  ? __fget_files+0x2a/0x420
[  196.310510][ T7366]  ? __fget_files+0x3a0/0x420
[  196.310524][ T7366]  __sys_sendmsg+0x164/0x220
[  196.310538][ T7366]  ? __pfx___sys_sendmsg+0x10/0x10
[  196.310558][ T7366]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.310570][ T7366]  __do_fast_syscall_32+0xb6/0x2b0
[  196.310582][ T7366]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.310594][ T7366]  do_fast_syscall_32+0x34/0x80
[  196.310605][ T7366]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  196.310618][ T7366] RIP: 0023:0xf705e539
[  196.310627][ T7366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  196.310636][ T7366] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  196.310648][ T7366] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580
[  196.310655][ T7366] RDX: 0000000000008004 RSI: 0000000000000000 RDI: 0000000000000000
[  196.310661][ T7366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  196.310666][ T7366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  196.310672][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  196.310686][ T7366]  </TASK>
[  196.793908][ T7351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  196.803517][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  197.029795][   T30] audit: type=1326 audit(1757751934.020:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.055841][ T5951] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  197.065741][   T30] audit: type=1326 audit(1757751934.020:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.090686][   T43] usb 2-1: USB disconnect, device number 11
[  197.100989][   T30] audit: type=1326 audit(1757751934.020:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=123 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.240008][   T30] audit: type=1326 audit(1757751934.020:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.263022][ T5951] usb 1-1: Using ep0 maxpacket: 8
[  197.280473][ T5951] usb 1-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=c4.ff
[  197.317870][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.369013][ T5951] usb 1-1: config 0 descriptor??
[  197.381589][   T30] audit: type=1326 audit(1757751934.020:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.414734][ T5951] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  197.444322][ T7375] udevd[7375]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.481057][   T30] audit: type=1326 audit(1757751934.020:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.513418][   T30] audit: type=1326 audit(1757751934.020:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.540246][   T30] audit: type=1326 audit(1757751934.020:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.611911][   T30] audit: type=1326 audit(1757751934.020:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.638672][   T43] usb 1-1: USB disconnect, device number 13
[  197.655752][  T122] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  197.744604][   T30] audit: type=1326 audit(1757751934.020:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7350 comm="syz.1.352" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  197.876214][  T122] usb 3-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.944633][ T5951] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  197.951530][  T122] usb 3-1: config 0 interface 0 has no altsetting 0
[  197.959650][  T122] usb 3-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00
[  197.980185][  T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.996132][  T122] usb 3-1: config 0 descriptor??
[  198.159505][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.180318][ T5951] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  198.217090][ T5951] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  198.229038][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.238279][ T5951] usb 4-1: Product: syz
[  198.366422][  T122] usbhid 3-1:0.0: can't add hid device: -71
[  198.399858][  T122] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  198.449278][  T122] usb 3-1: USB disconnect, device number 21
[  198.483068][ T7396] random: crng reseeded on system resumption
[  198.550717][ T5951] usb 4-1: Manufacturer: syz
[  198.582499][ T5951] usb 4-1: SerialNumber: syz
[  198.657255][ T7404] netlink: 88 bytes leftover after parsing attributes in process `syz.0.365'.
[  198.702183][ T5951] usb 4-1: config 0 descriptor??
[  199.721350][  T122] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  199.873417][  T122] usb 2-1: Using ep0 maxpacket: 8
[  199.972062][ T7416] futex_wake_op: syz.2.366 tries to shift op by 32; fix this program
[  200.023189][  T122] usb 2-1: config 0 has an invalid interface number: 205 but max is 1
[  200.041431][  T122] usb 2-1: config 0 has no interface number 1
[  200.047583][  T122] usb 2-1: config 0 interface 205 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  200.079225][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[  200.099035][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'.
[  200.099524][  T122] usb 2-1: New USB device found, idVendor=413c, idProduct=8180, bcdDevice=25.25
[  200.166246][  T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.175558][  T122] usb 2-1: Product: syz
[  200.180587][  T122] usb 2-1: Manufacturer: syz
[  200.187000][  T122] usb 2-1: SerialNumber: syz
[  200.194977][  T122] usb 2-1: config 0 descriptor??
[  200.200710][ T7420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.370'.
[  200.203438][  T122] option 2-1:0.205: GSM modem (1-port) converter detected
[  200.279577][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz.2.366'.
[  200.335190][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.370'.
[  200.405589][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.569412][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.588218][   T43] usb 2-1: USB disconnect, device number 12
[  200.595140][   T43] option 2-1:0.205: device disconnected
[  200.608735][  T122] usb 4-1: USB disconnect, device number 11
[  200.732514][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.373'.
[  200.975704][ T7432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  201.340316][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'.
[  201.419819][ T7429] tipc: Disabling bearer <eth:syzkaller0>
[  201.646319][ T7444] FAULT_INJECTION: forcing a failure.
[  201.646319][ T7444] name failslab, interval 1, probability 0, space 0, times 0
[  201.675679][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT(full) 
[  201.675706][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  201.675718][ T7444] Call Trace:
[  201.675726][ T7444]  <TASK>
[  201.675735][ T7444]  dump_stack_lvl+0x189/0x250
[  201.675763][ T7444]  ? __pfx____ratelimit+0x10/0x10
[  201.675787][ T7444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.675810][ T7444]  ? __pfx__printk+0x10/0x10
[  201.675839][ T7444]  ? __pfx___might_resched+0x10/0x10
[  201.675858][ T7444]  ? fs_reclaim_acquire+0x7d/0x100
[  201.675880][ T7444]  should_fail_ex+0x414/0x560
[  201.675912][ T7444]  should_failslab+0xa8/0x100
[  201.675940][ T7444]  __kmalloc_noprof+0xcb/0x4f0
[  201.675965][ T7444]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  201.675998][ T7444]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  201.676033][ T7444]  genl_family_rcv_msg_doit+0xb8/0x300
[  201.676067][ T7444]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  201.676102][ T7444]  ? apparmor_capable+0x137/0x1b0
[  201.676128][ T7444]  ? bpf_lsm_capable+0x9/0x20
[  201.676153][ T7444]  ? security_capable+0x7e/0x2e0
[  201.676189][ T7444]  genl_rcv_msg+0x60e/0x790
[  201.676222][ T7444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.676247][ T7444]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  201.676273][ T7444]  ? __asan_memcpy+0x40/0x70
[  201.676295][ T7444]  ? __pfx_ref_tracker_free+0x10/0x10
[  201.676328][ T7444]  netlink_rcv_skb+0x205/0x470
[  201.676346][ T7444]  ? __lock_acquire+0xab9/0xd20
[  201.676375][ T7444]  ? __pfx_genl_rcv_msg+0x10/0x10
[  201.676402][ T7444]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  201.676442][ T7444]  ? down_read+0x1ad/0x2e0
[  201.676467][ T7444]  genl_rcv+0x28/0x40
[  201.676490][ T7444]  netlink_unicast+0x82c/0x9e0
[  201.676529][ T7444]  ? __pfx_netlink_unicast+0x10/0x10
[  201.676559][ T7444]  ? netlink_sendmsg+0x642/0xb30
[  201.676578][ T7444]  ? skb_put+0x11b/0x210
[  201.676603][ T7444]  netlink_sendmsg+0x805/0xb30
[  201.676634][ T7444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.676657][ T7444]  ? __import_iovec+0x5d4/0x7f0
[  201.676680][ T7444]  ? aa_sock_msg_perm+0xf1/0x1d0
[  201.676701][ T7444]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  201.676721][ T7444]  ? __pfx_netlink_sendmsg+0x10/0x10
[  201.676742][ T7444]  __sock_sendmsg+0x21c/0x270
[  201.676775][ T7444]  ____sys_sendmsg+0x505/0x830
[  201.676805][ T7444]  ? __pfx_____sys_sendmsg+0x10/0x10
[  201.676846][ T7444]  ___sys_sendmsg+0x21f/0x2a0
[  201.676873][ T7444]  ? __pfx____sys_sendmsg+0x10/0x10
[  201.676936][ T7444]  ? __fget_files+0x2a/0x420
[  201.676952][ T7444]  ? __fget_files+0x3a0/0x420
[  201.676981][ T7444]  __sys_sendmsg+0x164/0x220
[  201.677007][ T7444]  ? __pfx___sys_sendmsg+0x10/0x10
[  201.677049][ T7444]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.677072][ T7444]  __do_fast_syscall_32+0xb6/0x2b0
[  201.677095][ T7444]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.677118][ T7444]  do_fast_syscall_32+0x34/0x80
[  201.677140][ T7444]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  201.677163][ T7444] RIP: 0023:0xf705e539
[  201.677179][ T7444] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  201.677196][ T7444] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  201.677216][ T7444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  201.677230][ T7444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  201.677241][ T7444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  201.677252][ T7444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  201.677263][ T7444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.677292][ T7444]  </TASK>
[  202.036972][    C0] vkms_vblank_simulate: vblank timer overrun
[  202.454088][ T7452] kvm: user requested TSC rate below hardware speed
[  202.473029][ T7452] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  202.745524][ T7464] FAULT_INJECTION: forcing a failure.
[  202.745524][ T7464] name failslab, interval 1, probability 0, space 0, times 0
[  202.758318][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.4.384 Not tainted syzkaller #0 PREEMPT(full) 
[  202.758333][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  202.758340][ T7464] Call Trace:
[  202.758345][ T7464]  <TASK>
[  202.758350][ T7464]  dump_stack_lvl+0x189/0x250
[  202.758367][ T7464]  ? __pfx____ratelimit+0x10/0x10
[  202.758378][ T7464]  ? __pfx_dump_stack_lvl+0x10/0x10
[  202.758390][ T7464]  ? __pfx__printk+0x10/0x10
[  202.758406][ T7464]  ? __lock_acquire+0xab9/0xd20
[  202.758428][ T7464]  should_fail_ex+0x414/0x560
[  202.758452][ T7464]  should_failslab+0xa8/0x100
[  202.758468][ T7464]  __kmalloc_cache_noprof+0x70/0x3d0
[  202.758482][ T7464]  ? snd_ctl_notify+0x211/0x530
[  202.758496][ T7464]  snd_ctl_notify+0x211/0x530
[  202.758512][ T7464]  snd_mixer_oss_put_volume1_sw+0x328/0x3f0
[  202.758531][ T7464]  snd_mixer_oss_put_recsrc1_sw+0x65/0x90
[  202.758546][ T7464]  ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10
[  202.758559][ T7464]  snd_mixer_oss_set_recsrc+0x269/0x430
[  202.758577][ T7464]  ? __pfx_snd_mixer_oss_set_recsrc+0x10/0x10
[  202.758592][ T7464]  ? __might_fault+0xb0/0x130
[  202.758608][ T7464]  snd_mixer_oss_ioctl1+0xe76/0x19f0
[  202.758624][ T7464]  ? do_vfs_ioctl+0xbe8/0x1430
[  202.758636][ T7464]  ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10
[  202.758649][ T7464]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  202.758669][ T7464]  ? __lock_acquire+0xab9/0xd20
[  202.758692][ T7464]  snd_mixer_oss_ioctl_card+0x10b/0x160
[  202.758707][ T7464]  ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10
[  202.758722][ T7464]  ? __fget_files+0x3a0/0x420
[  202.758733][ T7464]  snd_pcm_oss_ioctl+0x264/0xdd0
[  202.758750][ T7464]  __ia32_compat_sys_ioctl+0x543/0x840
[  202.758765][ T7464]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  202.758778][ T7464]  ? __fget_files+0x3a0/0x420
[  202.758790][ T7464]  ? fput+0xa0/0xd0
[  202.758800][ T7464]  ? ksys_write+0x22a/0x250
[  202.758819][ T7464]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.758830][ T7464]  __do_fast_syscall_32+0xb6/0x2b0
[  202.758842][ T7464]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.758854][ T7464]  do_fast_syscall_32+0x34/0x80
[  202.758865][ T7464]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.758878][ T7464] RIP: 0023:0xf70ae539
[  202.758887][ T7464] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  202.758896][ T7464] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  202.758907][ T7464] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0044dff
[  202.758914][ T7464] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  202.758922][ T7464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.758930][ T7464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  202.758936][ T7464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.758950][ T7464]  </TASK>
[  202.758957][ T7464] snd_dummy snd_dummy.0: No memory available to allocate event
[  203.048042][    C0] vkms_vblank_simulate: vblank timer overrun
[  203.471537][  T122] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  203.788835][  T122] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  203.806774][  T122] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  203.817328][  T122] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  203.831965][  T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.918915][ T7473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  203.973289][  T122] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  204.107342][ T7487] openvswitch: netlink: Actions may not be safe on all matching packets
[  204.154167][ T7487] netlink: 32 bytes leftover after parsing attributes in process `syz.1.390'.
[  205.260623][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.398'.
[  205.641531][  T122] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  205.681338][ T5935] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  205.791240][  T122] usb 5-1: device descriptor read/64, error -71
[  205.833267][ T5935] usb 3-1: config 0 has an invalid interface number: 197 but max is 0
[  205.842217][ T5935] usb 3-1: config 0 has no interface number 0
[  205.853943][ T5935] usb 3-1: New USB device found, idVendor=0df6, idProduct=002c, bcdDevice=e6.e9
[  205.867641][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.900814][ T5935] usb 3-1: Product: syz
[  205.938461][ T5935] usb 3-1: Manufacturer: syz
[  205.991745][ T5935] usb 3-1: SerialNumber: syz
[  206.002794][ T5935] usb 3-1: config 0 descriptor??
[  206.061305][  T122] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  206.201472][  T122] usb 5-1: device descriptor read/64, error -71
[  206.237300][ T5935] usb 3-1: USB disconnect, device number 22
[  206.283469][   T10] usb 4-1: USB disconnect, device number 12
[  206.321861][  T122] usb usb5-port1: attempt power cycle
[  206.718656][  T122] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  206.763584][  T122] usb 5-1: device descriptor read/8, error -71
[  207.001466][  T122] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  207.032757][  T122] usb 5-1: device descriptor read/8, error -71
[  207.151941][  T122] usb usb5-port1: unable to enumerate USB device
[  207.222856][ T7530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.405'.
[  207.232502][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.405'.
[  207.402482][ T7535] futex_wake_op: syz.0.403 tries to shift op by 32; fix this program
[  207.497456][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  207.622102][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'.
[  207.644772][ T7535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.403'.
[  208.056070][ T7540] FAULT_INJECTION: forcing a failure.
[  208.056070][ T7540] name failslab, interval 1, probability 0, space 0, times 0
[  208.091204][ T7540] CPU: 1 UID: 0 PID: 7540 Comm: syz.2.407 Not tainted syzkaller #0 PREEMPT(full) 
[  208.091231][ T7540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  208.091242][ T7540] Call Trace:
[  208.091250][ T7540]  <TASK>
[  208.091258][ T7540]  dump_stack_lvl+0x189/0x250
[  208.091287][ T7540]  ? __pfx____ratelimit+0x10/0x10
[  208.091307][ T7540]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.091330][ T7540]  ? __pfx__printk+0x10/0x10
[  208.091360][ T7540]  ? __pfx___might_resched+0x10/0x10
[  208.091379][ T7540]  ? fs_reclaim_acquire+0x7d/0x100
[  208.091402][ T7540]  should_fail_ex+0x414/0x560
[  208.091436][ T7540]  should_failslab+0xa8/0x100
[  208.091464][ T7540]  __kmalloc_cache_noprof+0x70/0x3d0
[  208.091488][ T7540]  ? sctp_stream_init_ext+0x57/0x180
[  208.091520][ T7540]  sctp_stream_init_ext+0x57/0x180
[  208.091553][ T7540]  sctp_sendmsg_to_asoc+0x12fd/0x1810
[  208.091575][ T7540]  ? __asan_memcpy+0x40/0x70
[  208.091605][ T7540]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  208.091641][ T7540]  ? sctp_connect_new_asoc+0x3f0/0x690
[  208.091663][ T7540]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  208.091686][ T7540]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  208.091717][ T7540]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  208.091741][ T7540]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  208.091762][ T7540]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  208.091785][ T7540]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  208.091808][ T7540]  ? security_sctp_bind_connect+0x7e/0x2e0
[  208.091837][ T7540]  sctp_sendmsg+0x1941/0x2810
[  208.091873][ T7540]  ? __pfx_sctp_sendmsg+0x10/0x10
[  208.091898][ T7540]  ? aa_sk_perm+0x81e/0x950
[  208.091932][ T7540]  ? __pfx_aa_sk_perm+0x10/0x10
[  208.091961][ T7540]  ? sock_rps_record_flow+0x19/0x410
[  208.091985][ T7540]  ? inet_sendmsg+0x2f4/0x370
[  208.092010][ T7540]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  208.092035][ T7540]  __sock_sendmsg+0x19c/0x270
[  208.092066][ T7540]  __sys_sendto+0x3bd/0x520
[  208.092090][ T7540]  ? __pfx___sys_sendto+0x10/0x10
[  208.092108][ T7540]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  208.092143][ T7540]  ? __fget_files+0x3a0/0x420
[  208.092170][ T7540]  ? ksys_write+0x22a/0x250
[  208.092206][ T7540]  __ia32_sys_sendto+0xdd/0x100
[  208.092231][ T7540]  __do_fast_syscall_32+0xb6/0x2b0
[  208.092252][ T7540]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.092273][ T7540]  do_fast_syscall_32+0x34/0x80
[  208.092293][ T7540]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  208.092314][ T7540] RIP: 0023:0xf705e539
[  208.092330][ T7540] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  208.092344][ T7540] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  208.092364][ T7540] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  208.092376][ T7540] RDX: 0000000000020000 RSI: 0000000000044004 RDI: 0000000080000100
[  208.092387][ T7540] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  208.092398][ T7540] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  208.092409][ T7540] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  208.092438][ T7540]  </TASK>
[  208.503668][ T7542] binder: BINDER_SET_CONTEXT_MGR already set
[  208.509992][ T7542] binder: 7541:7542 ioctl 4018620d 80000100 returned -16
[  208.517361][ T7542] binder: BINDER_SET_CONTEXT_MGR already set
[  208.523378][ T7542] binder: 7541:7542 ioctl 4018620d 80000100 returned -16
[  208.530465][ T7542] binder: BINDER_SET_CONTEXT_MGR already set
[  208.536477][ T7542] binder: 7541:7542 ioctl 4018620d 80000100 returned -16
[  208.543616][ T7542] binder: BINDER_SET_CONTEXT_MGR already set
[  208.549595][ T7542] binder: 7541:7542 ioctl 4018620d 80000100 returned -16
[  208.556765][ T7542] binder: BINDER_SET_CONTEXT_MGR already set
[  208.565551][ T7542] binder: 7541:7542 ioctl 4018620d 80000100 returned -16
[  208.821283][   T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  208.971224][   T43] usb 5-1: Using ep0 maxpacket: 8
[  208.993604][   T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  209.001819][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 127, changing to 10
[  209.048707][   T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  209.156993][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14416, setting to 1024
[  209.205738][   T43] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  209.239752][   T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  209.250198][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 127, changing to 10
[  209.272169][ T7564] netlink: 'syz.2.415': attribute type 16 has an invalid length.
[  209.275002][   T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  209.292071][ T5935] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  209.327236][ T7564] netlink: 'syz.2.415': attribute type 17 has an invalid length.
[  209.376544][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14416, setting to 1024
[  209.428184][ T7564] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  209.463713][ T5935] usb 1-1: too many configurations: 205, using maximum allowed: 8
[  209.473701][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -61
[  209.482814][ T5935] usb 1-1: can't read configurations, error -61
[  209.542258][   T43] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  209.563019][   T43] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  209.574553][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 127, changing to 10
[  209.588917][   T43] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  209.603162][   T43] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 14416, setting to 1024
[  209.616626][   T43] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  209.629746][ T5935] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  209.645287][   T43] usb 5-1: string descriptor 0 read error: -22
[  209.652789][   T43] usb 5-1: New USB device found, idVendor=0a07, idProduct=f264, bcdDevice=40.6d
[  209.668525][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.010995][ T5935] usb 1-1: too many configurations: 205, using maximum allowed: 8
[  210.091256][ T7544] program syz.4.409 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  210.100620][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.121693][ T5935] usb 1-1: can't read configurations, error -61
[  210.135858][ T5935] usb usb1-port1: attempt power cycle
[  210.150068][   T43] usb 5-1: USB disconnect, device number 11
[  210.481243][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  210.491365][ T5935] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  210.526033][ T5935] usb 1-1: too many configurations: 205, using maximum allowed: 8
[  210.548590][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.561296][ T5935] usb 1-1: can't read configurations, error -61
[  210.570628][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.418'.
[  210.651329][   T10] usb 3-1: Using ep0 maxpacket: 16
[  210.660790][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  210.671849][   T10] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  210.691098][   T10] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  210.701569][ T5935] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  210.711377][   T10] usb 3-1: Product: syz
[  210.715586][   T10] usb 3-1: Manufacturer: syz
[  210.730768][   T10] usb 3-1: SerialNumber: syz
[  210.742670][ T5935] usb 1-1: too many configurations: 205, using maximum allowed: 8
[  210.754872][ T5935] usb 1-1: unable to read config index 0 descriptor/start: -61
[  210.768519][   T10] usb 3-1: config 0 descriptor??
[  210.781317][ T5935] usb 1-1: can't read configurations, error -61
[  210.792272][ T5935] usb usb1-port1: unable to enumerate USB device
[  210.928046][ T7582] futex_wake_op: syz.3.416 tries to shift op by 32; fix this program
[  210.968417][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'.
[  210.981663][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.416'.
[  211.018200][ T7582] netlink: 36 bytes leftover after parsing attributes in process `syz.3.416'.
[  211.381394][ T5935] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  211.394220][ T5937] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  211.531334][ T5935] usb 5-1: Using ep0 maxpacket: 32
[  211.550254][ T5935] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  211.565049][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.573936][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.593269][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.602220][ T5935] usb 5-1: Product: syz
[  211.606435][ T5935] usb 5-1: Manufacturer: syz
[  211.611063][ T5935] usb 5-1: SerialNumber: syz
[  211.620224][ T5935] usb 5-1: config 0 descriptor??
[  211.629330][ T5935] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  211.894576][   T10] usb 3-1: selecting invalid altsetting 1
[  211.984196][   T10] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  212.015185][   T10] usb 3-1: USB disconnect, device number 23
[  212.150204][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.899388][ T7608] pim6reg: entered allmulticast mode
[  213.361365][   T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  213.848409][ T5935] gspca_ov534_9: reg_r err -71
[  213.865233][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short
[  213.905980][ T5937] usb 2-1: no configurations
[  213.910012][ T7612] trusted_key: encrypted_key: master key parameter '�' is invalid
[  213.954647][ T5937] usb 2-1: can't read configurations, error -22
[  214.061370][ T5935] gspca_ov534_9: Unknown sensor 0000
[  214.061478][ T5935] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  214.088805][ T7614] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  214.107357][ T5935] usb 5-1: USB disconnect, device number 12
[  215.304266][   T30] kauditd_printk_skb: 41 callbacks suppressed
[  215.304280][   T30] audit: type=1326 audit(1757751952.300:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.2.433" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e539 code=0x0
[  215.411447][   T55] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  215.544414][ T7634] fuse: Unknown parameter '0x0000000000000003'
[  215.575283][   T55] usb 5-1: config index 0 descriptor too short (expected 39, got 27)
[  215.581466][ T5935] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  215.608102][   T55] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  215.629130][   T55] usb 5-1: config 0 interface 0 has no altsetting 0
[  215.640893][   T55] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  215.651252][   T55] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  215.659585][   T55] usb 5-1: Product: syz
[  215.664511][   T55] usb 5-1: Manufacturer: syz
[  215.669248][   T55] usb 5-1: SerialNumber: syz
[  215.684158][   T55] usb 5-1: config 0 descriptor??
[  215.693813][   T55] hub 5-1:0.0: bad descriptor, ignoring hub
[  215.720481][   T55] hub 5-1:0.0: probe with driver hub failed with error -5
[  215.734207][   T55] usb 5-1: selecting invalid altsetting 0
[  215.747532][ T5935] usb 3-1: Using ep0 maxpacket: 8
[  215.761028][ T5935] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  215.808778][ T5935] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  216.039566][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  216.059797][ T5935] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  216.084980][ T5935] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  216.104521][ T5935] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  216.117435][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.384675][ T5935] usb 3-1: GET_CAPABILITIES returned 0
[  216.395238][ T7649] netlink: 'syz.0.441': attribute type 16 has an invalid length.
[  216.407755][ T5935] usbtmc 3-1:16.0: can't read capabilities
[  216.455986][   T55] usb 5-1: reset high-speed USB device number 13 using dummy_hcd
[  216.482365][ T7649] netlink: 'syz.0.441': attribute type 17 has an invalid length.
[  216.605865][ T7649] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  216.666131][ T7648] pim6reg: left allmulticast mode
[  216.699396][ T5935] usb 3-1: USB disconnect, device number 24
[  216.706984][ T7626] usbtmc 3-1:16.0: usb_control_msg returned -71
[  217.221243][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'.
[  217.282050][   T43] usb 5-1: USB disconnect, device number 13
[  217.298503][ T1167] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  217.623712][ T7664] futex_wake_op: syz.3.442 tries to shift op by 32; fix this program
[  217.678972][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'.
[  217.754887][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'.
[  217.896797][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'.
[  217.957768][ T7664] netlink: 36 bytes leftover after parsing attributes in process `syz.3.442'.
[  218.071234][ T5935] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  218.223499][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  218.237801][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  218.321290][ T5935] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  218.387956][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.487429][ T5935] usb 1-1: config 0 descriptor??
[  219.016376][ T7688] sg_write: data in/out 97/10 bytes for SCSI command 0xfd-- guessing data in;
[  219.016376][ T7688]    program syz.3.451 not setting count and/or reply_len properly
[  219.045444][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.055697][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.405231][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.419040][ T7691] FAULT_INJECTION: forcing a failure.
[  219.419040][ T7691] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  219.485751][ T7691] CPU: 1 UID: 0 PID: 7691 Comm: syz.2.452 Not tainted syzkaller #0 PREEMPT(full) 
[  219.485779][ T7691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  219.485792][ T7691] Call Trace:
[  219.485800][ T7691]  <TASK>
[  219.485808][ T7691]  dump_stack_lvl+0x189/0x250
[  219.485830][ T7691]  ? __pfx____ratelimit+0x10/0x10
[  219.485842][ T7691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.485853][ T7691]  ? __pfx__printk+0x10/0x10
[  219.485869][ T7691]  ? fs_reclaim_acquire+0x7d/0x100
[  219.485883][ T7691]  should_fail_ex+0x414/0x560
[  219.485901][ T7691]  prepare_alloc_pages+0x213/0x610
[  219.485915][ T7691]  __alloc_frozen_pages_noprof+0x123/0x370
[  219.485927][ T7691]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  219.485940][ T7691]  ? rcu_is_watching+0x15/0xb0
[  219.485952][ T7691]  ? policy_nodemask+0x27c/0x720
[  219.485970][ T7691]  alloc_pages_mpol+0x232/0x4a0
[  219.485989][ T7691]  alloc_pages_noprof+0xa9/0x190
[  219.486005][ T7691]  alloc_skb_with_frags+0x233/0x890
[  219.486025][ T7691]  sock_alloc_send_pskb+0x857/0x990
[  219.486049][ T7691]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  219.486068][ T7691]  ? iov_iter_advance+0x8b/0x1c0
[  219.486081][ T7691]  tun_get_user+0xa43/0x3e20
[  219.486104][ T7691]  ? aa_file_perm+0x44d/0x1550
[  219.486115][ T7691]  ? __pfx_tun_get_user+0x10/0x10
[  219.486126][ T7691]  ? _parse_integer_limit+0x1ae/0x1f0
[  219.486142][ T7691]  ? __lock_acquire+0xab9/0xd20
[  219.486160][ T7691]  ? ref_tracker_alloc+0x318/0x460
[  219.486168][ T7691]  ? __lock_acquire+0xab9/0xd20
[  219.486184][ T7691]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  219.486196][ T7691]  ? tun_get+0x1c/0x2f0
[  219.486209][ T7691]  ? tun_get+0x1c/0x2f0
[  219.486220][ T7691]  ? tun_get+0x1c/0x2f0
[  219.486233][ T7691]  tun_chr_write_iter+0x113/0x200
[  219.486246][ T7691]  vfs_write+0x5c6/0xb30
[  219.486262][ T7691]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  219.486274][ T7691]  ? __pfx_vfs_write+0x10/0x10
[  219.486292][ T7691]  ? __fget_files+0x2a/0x420
[  219.486306][ T7691]  ksys_write+0x145/0x250
[  219.486321][ T7691]  ? __pfx_ksys_write+0x10/0x10
[  219.486335][ T7691]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.486348][ T7691]  __do_fast_syscall_32+0xb6/0x2b0
[  219.486360][ T7691]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.486371][ T7691]  do_fast_syscall_32+0x34/0x80
[  219.486382][ T7691]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  219.486395][ T7691] RIP: 0023:0xf705e539
[  219.486405][ T7691] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  219.486414][ T7691] RSP: 002b:00000000f544e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  219.486427][ T7691] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040
[  219.486434][ T7691] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000
[  219.486440][ T7691] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  219.486445][ T7691] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  219.486451][ T7691] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  219.486465][ T7691]  </TASK>
[  219.803720][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.810762][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.819773][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  219.857497][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'.
[  219.965862][ T5935] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  220.080068][ T5935] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  220.253557][ T5935] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00
[  220.306787][ T7682] syz.1.448 (7682): drop_caches: 2
[  220.536806][ T7668] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38
[  220.653445][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'.
[  221.070135][ T7714] netlink: 'syz.3.459': attribute type 11 has an invalid length.
[  221.174966][ T7717] futex_wake_op: syz.3.459 tries to shift op by 36; fix this program
[  221.651302][ T5935] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71
[  221.690408][ T7728] FAULT_INJECTION: forcing a failure.
[  221.690408][ T7728] name failslab, interval 1, probability 0, space 0, times 0
[  221.733446][ T7728] CPU: 1 UID: 0 PID: 7728 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT(full) 
[  221.733480][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  221.733489][ T7728] Call Trace:
[  221.733496][ T7728]  <TASK>
[  221.733503][ T7728]  dump_stack_lvl+0x189/0x250
[  221.733532][ T7728]  ? __pfx____ratelimit+0x10/0x10
[  221.733551][ T7728]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.733568][ T7728]  ? __pfx__printk+0x10/0x10
[  221.733584][ T7728]  ? __pfx___might_resched+0x10/0x10
[  221.733595][ T7728]  ? fs_reclaim_acquire+0x7d/0x100
[  221.733607][ T7728]  should_fail_ex+0x414/0x560
[  221.733625][ T7728]  should_failslab+0xa8/0x100
[  221.733642][ T7728]  __kmalloc_noprof+0xcb/0x4f0
[  221.733656][ T7728]  ? tomoyo_encode+0x28b/0x550
[  221.733669][ T7728]  tomoyo_encode+0x28b/0x550
[  221.733682][ T7728]  tomoyo_realpath_from_path+0x58d/0x5d0
[  221.733699][ T7728]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  221.733719][ T7728]  tomoyo_path_number_perm+0x1e8/0x5a0
[  221.733738][ T7728]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  221.733762][ T7728]  ? __lock_acquire+0xab9/0xd20
[  221.733789][ T7728]  ? __fget_files+0x2a/0x420
[  221.733800][ T7728]  ? __fget_files+0x3a0/0x420
[  221.733808][ T7728]  ? __fget_files+0x2a/0x420
[  221.733819][ T7728]  security_file_ioctl_compat+0xcb/0x2d0
[  221.733835][ T7728]  __ia32_compat_sys_ioctl+0x128/0x840
[  221.733850][ T7728]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  221.733862][ T7728]  ? __fget_files+0x3a0/0x420
[  221.733874][ T7728]  ? fput+0xa0/0xd0
[  221.733885][ T7728]  ? ksys_write+0x22a/0x250
[  221.733904][ T7728]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.733916][ T7728]  __do_fast_syscall_32+0xb6/0x2b0
[  221.733928][ T7728]  ? lockdep_hardirqs_on+0x9c/0x150
[  221.733940][ T7728]  do_fast_syscall_32+0x34/0x80
[  221.733951][ T7728]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  221.733964][ T7728] RIP: 0023:0xf7fe7539
[  221.733974][ T7728] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  221.733983][ T7728] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  221.733995][ T7728] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0044dff
[  221.734003][ T7728] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  221.734009][ T7728] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  221.734014][ T7728] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  221.734020][ T7728] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  221.734035][ T7728]  </TASK>
[  221.735684][ T7728] ERROR: Out of memory at tomoyo_realpath_from_path.
[  222.201308][ T7707] sctp: [Deprecated]: syz.2.456 (pid 7707) Use of int in maxseg socket option.
[  222.201308][ T7707] Use struct sctp_assoc_value instead
[  222.374688][ T7716] futex_wake_op: syz.1.460 tries to shift op by 32; fix this program
[  222.452019][ T5935] usb 1-1: USB disconnect, device number 19
[  222.469850][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[  222.588446][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[  222.678119][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'.
[  222.744042][ T7740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.460'.
[  222.788500][ T7754] input: syz0 as /devices/virtual/input/input12
[  222.800229][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  222.979932][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.471'.
[  223.091552][   T10] usb 4-1: Using ep0 maxpacket: 8
[  223.100349][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.115161][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.139454][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.396824][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.453889][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.558308][   T10] usb 4-1: Product: 䠊
[  223.574757][   T10] usb 4-1: Manufacturer: 䐊
[  223.581879][   T10] usb 4-1: SerialNumber: ట
[  223.600184][   T10] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  223.657437][   T10] usb 4-1: no configuration chosen from 1 choice
[  224.213012][   T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  224.385435][   T10] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  224.403149][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  224.417960][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  224.570143][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  224.585916][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  224.771830][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  224.817793][ T7787] netlink: 196 bytes leftover after parsing attributes in process `syz.4.477'.
[  224.832099][ T7787] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.840230][ T7787] batadv_slave_0: entered promiscuous mode
[  224.846402][ T7787] batadv_slave_0: entered allmulticast mode
[  224.857019][ T7787] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  224.893012][ T7787] netlink: 'syz.4.477': attribute type 8 has an invalid length.
[  224.995955][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.016357][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.059874][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  225.250855][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.335484][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.362460][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  225.416875][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.468166][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  225.544256][ T5935] usb 4-1: USB disconnect, device number 13
[  225.581792][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  225.643759][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  225.982503][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.030949][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.079336][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.114191][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.153981][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.195331][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.225576][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  226.261221][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  226.313303][ T7802] program syz.3.482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  226.330950][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  226.354373][   T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  226.381684][   T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  226.454695][   T10] usb 2-1: Product: syz
[  226.459478][   T10] usb 2-1: Manufacturer: syz
[  226.471505][   T10] usb 2-1: SerialNumber: syz
[  226.485320][   T10] usb 2-1: config 0 descriptor??
[  226.607162][   T10] usb 2-1: can't set config #0, error -71
[  226.623319][   T10] usb 2-1: USB disconnect, device number 15
[  226.964971][ T7823] netlink: 'syz.4.487': attribute type 16 has an invalid length.
[  227.172314][ T5951] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  227.265858][ T7823] netlink: 'syz.4.487': attribute type 17 has an invalid length.
[  227.300217][ T7825] usb usb7: usbfs: process 7825 (syz.1.488) did not claim interface 0 before use
[  227.363250][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.374191][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  227.432826][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  227.537003][ T7823] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.621659][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.775561][ T7829] futex_wake_op: syz.0.483 tries to shift op by 32; fix this program
[  227.789298][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'.
[  227.799607][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'.
[  227.822695][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'.
[  227.832274][ T5951] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  227.850680][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.926516][ T5951] usb 4-1: config 0 descriptor??
[  228.019273][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'.
[  228.224681][ T5951] usb 4-1: USB disconnect, device number 14
[  228.551993][ T7836] FAULT_INJECTION: forcing a failure.
[  228.551993][ T7836] name failslab, interval 1, probability 0, space 0, times 0
[  228.575521][ T7836] CPU: 0 UID: 0 PID: 7836 Comm: syz.4.490 Not tainted syzkaller #0 PREEMPT(full) 
[  228.575539][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  228.575546][ T7836] Call Trace:
[  228.575551][ T7836]  <TASK>
[  228.575556][ T7836]  dump_stack_lvl+0x189/0x250
[  228.575573][ T7836]  ? __pfx____ratelimit+0x10/0x10
[  228.575585][ T7836]  ? __pfx_dump_stack_lvl+0x10/0x10
[  228.575597][ T7836]  ? __pfx__printk+0x10/0x10
[  228.575612][ T7836]  ? crng_make_state+0x3fc/0x700
[  228.575627][ T7836]  ? crng_make_state+0x13a/0x700
[  228.575644][ T7836]  should_fail_ex+0x414/0x560
[  228.575662][ T7836]  should_failslab+0xa8/0x100
[  228.575678][ T7836]  __kmalloc_cache_noprof+0x70/0x3d0
[  228.575693][ T7836]  ? sctp_add_bind_addr+0x8c/0x370
[  228.575711][ T7836]  sctp_add_bind_addr+0x8c/0x370
[  228.575729][ T7836]  sctp_copy_local_addr_list+0x30b/0x4e0
[  228.575748][ T7836]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  228.575764][ T7836]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  228.575780][ T7836]  ? sctp_v6_is_any+0x64/0x80
[  228.575792][ T7836]  ? sctp_copy_one_addr+0x93/0x360
[  228.575825][ T7836]  sctp_bind_addr_copy+0xb3/0x3c0
[  228.575841][ T7836]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  228.575857][ T7836]  sctp_connect_new_asoc+0x2e0/0x690
[  228.575871][ T7836]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  228.575884][ T7836]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  228.575896][ T7836]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  228.575907][ T7836]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  228.575919][ T7836]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  228.575932][ T7836]  ? security_sctp_bind_connect+0x7e/0x2e0
[  228.575948][ T7836]  sctp_sendmsg+0x155c/0x2810
[  228.575967][ T7836]  ? __pfx_sctp_sendmsg+0x10/0x10
[  228.575980][ T7836]  ? aa_sk_perm+0x81e/0x950
[  228.575996][ T7836]  ? _copy_from_user+0x94/0xb0
[  228.576011][ T7836]  ? __pfx_aa_sk_perm+0x10/0x10
[  228.576028][ T7836]  ? sock_rps_record_flow+0x19/0x410
[  228.576045][ T7836]  ? inet_sendmsg+0x2f4/0x370
[  228.576058][ T7836]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  228.576071][ T7836]  __sock_sendmsg+0x19c/0x270
[  228.576089][ T7836]  ____sys_sendmsg+0x505/0x830
[  228.576105][ T7836]  ? __pfx_____sys_sendmsg+0x10/0x10
[  228.576127][ T7836]  ___sys_sendmsg+0x21f/0x2a0
[  228.576148][ T7836]  ? __pfx____sys_sendmsg+0x10/0x10
[  228.576186][ T7836]  ? __fget_files+0x2a/0x420
[  228.576194][ T7836]  ? __fget_files+0x3a0/0x420
[  228.576209][ T7836]  __sys_sendmsg+0x164/0x220
[  228.576223][ T7836]  ? __pfx___sys_sendmsg+0x10/0x10
[  228.576244][ T7836]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.576256][ T7836]  __do_fast_syscall_32+0xb6/0x2b0
[  228.576268][ T7836]  ? lockdep_hardirqs_on+0x9c/0x150
[  228.576280][ T7836]  do_fast_syscall_32+0x34/0x80
[  228.576291][ T7836]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  228.576304][ T7836] RIP: 0023:0xf70ae539
[  228.576314][ T7836] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  228.576324][ T7836] RSP: 002b:00000000f549e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  228.576336][ T7836] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0
[  228.576343][ T7836] RDX: 0000000000008050 RSI: 0000000000000000 RDI: 0000000000000000
[  228.576350][ T7836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  228.576355][ T7836] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  228.576361][ T7836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  228.576376][ T7836]  </TASK>
[  229.255022][ T7842] netlink: 11 bytes leftover after parsing attributes in process `syz.1.492'.
[  229.986097][ T7869] netlink: 196 bytes leftover after parsing attributes in process `syz.2.495'.
[  230.001321][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.028256][ T7869] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  230.201586][ T7877] IPv4: Oversized IP packet from 172.20.20.24
[  230.209543][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  230.216379][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  230.257034][ T7876] netlink: 'syz.1.499': attribute type 10 has an invalid length.
[  230.267898][ T7876] netlink: 55 bytes leftover after parsing attributes in process `syz.1.499'.
[  230.397026][ T7861] netlink: 'syz.2.495': attribute type 8 has an invalid length.
[  232.151577][ T7902] futex_wake_op: syz.2.504 tries to shift op by 32; fix this program
[  232.184763][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[  232.201329][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[  232.211859][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.504'.
[  232.538694][ T7906] sg_write: data in/out 97/10 bytes for SCSI command 0xfd-- guessing data in;
[  232.538694][ T7906]    program syz.1.506 not setting count and/or reply_len properly
[  233.994008][ T7922] netlink: 'syz.1.511': attribute type 10 has an invalid length.
[  234.002437][ T7922] __nla_validate_parse: 1 callbacks suppressed
[  234.002456][ T7922] netlink: 55 bytes leftover after parsing attributes in process `syz.1.511'.
[  234.248423][ T7930] trusted_key: encrypted_key: master key parameter '00000000000p004093' is invalid
[  236.169613][ T5951] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  236.251392][   T43] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  236.343247][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  236.354615][ T5951] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  236.380414][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.403346][ T5951] usb 1-1: config 0 descriptor??
[  236.409075][ T7962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  236.444403][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  236.462441][   T43] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  236.475891][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.503993][   T43] usb 3-1: config 0 descriptor??
[  236.526950][ T7969] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  236.648293][ T5951] ath6kl: Failed to submit usb control message: -71
[  236.658554][ T5951] ath6kl: unable to send the bmi data to the device: -71
[  236.690101][ T5951] ath6kl: Unable to send get target info: -71
[  236.764773][ T5951] ath6kl: Failed to init ath6kl core: -71
[  236.786756][ T7969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  236.807130][ T5951] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  236.818453][ T7969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  236.891603][ T5951] usb 1-1: USB disconnect, device number 20
[  237.137646][ T7983] futex_wake_op: syz.4.528 tries to shift op by 32; fix this program
[  237.156457][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  237.169543][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  237.182874][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  237.204945][ T7983] netlink: 36 bytes leftover after parsing attributes in process `syz.4.528'.
[  237.494233][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  237.500382][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  237.604812][   T43] usb 3-1: USB disconnect, device number 25
[  238.081806][ T7997] netlink: 'syz.4.532': attribute type 10 has an invalid length.
[  238.098533][ T7997] netlink: 55 bytes leftover after parsing attributes in process `syz.4.532'.
[  241.499573][ T8024] sctp: [Deprecated]: syz.0.541 (pid 8024) Use of int in maxseg socket option.
[  241.499573][ T8024] Use struct sctp_assoc_value instead
[  241.696294][ T8045] netlink: 'syz.2.542': attribute type 21 has an invalid length.
[  241.704334][ T8045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.542'.
[  241.783501][ T8045] netlink: 3 bytes leftover after parsing attributes in process `syz.2.542'.
[  241.993619][   T30] audit: type=1326 audit(1757751978.990:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.041993][   T30] audit: type=1326 audit(1757751978.990:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.124631][   T30] audit: type=1326 audit(1757751978.990:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.178249][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.544'.
[  242.301038][   T30] audit: type=1326 audit(1757751978.990:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.466694][   T30] audit: type=1326 audit(1757751978.990:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.471834][ T8050] FAULT_INJECTION: forcing a failure.
[  242.471834][ T8050] name failslab, interval 1, probability 0, space 0, times 0
[  242.560862][   T30] audit: type=1326 audit(1757751978.990:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf705e539 code=0x7ffc0000
[  242.611900][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.1.543 Not tainted syzkaller #0 PREEMPT(full) 
[  242.611928][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  242.611941][ T8050] Call Trace:
[  242.611948][ T8050]  <TASK>
[  242.611957][ T8050]  dump_stack_lvl+0x189/0x250
[  242.611985][ T8050]  ? __pfx____ratelimit+0x10/0x10
[  242.612004][ T8050]  ? __pfx_dump_stack_lvl+0x10/0x10
[  242.612027][ T8050]  ? __pfx__printk+0x10/0x10
[  242.612055][ T8050]  ? __pfx___might_resched+0x10/0x10
[  242.612074][ T8050]  ? fs_reclaim_acquire+0x7d/0x100
[  242.612095][ T8050]  should_fail_ex+0x414/0x560
[  242.612126][ T8050]  ? __pfx_sock_alloc_inode+0x10/0x10
[  242.612154][ T8050]  should_failslab+0xa8/0x100
[  242.612181][ T8050]  ? __pfx_sock_alloc_inode+0x10/0x10
[  242.612206][ T8050]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[  242.612230][ T8050]  ? sock_alloc_inode+0x28/0xc0
[  242.612258][ T8050]  ? __pfx_sock_alloc_inode+0x10/0x10
[  242.612282][ T8050]  sock_alloc_inode+0x28/0xc0
[  242.612307][ T8050]  alloc_inode+0x67/0x1b0
[  242.612333][ T8050]  __sock_create+0x12d/0x9f0
[  242.612348][ T8050]  ? fput+0xa0/0xd0
[  242.612380][ T8050]  __sys_socket+0xd7/0x1b0
[  242.612403][ T8050]  __ia32_sys_socket+0x7a/0x90
[  242.612423][ T8050]  __do_fast_syscall_32+0xb6/0x2b0
[  242.612445][ T8050]  ? lockdep_hardirqs_on+0x9c/0x150
[  242.612468][ T8050]  do_fast_syscall_32+0x34/0x80
[  242.612489][ T8050]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  242.612513][ T8050] RIP: 0023:0xf706e539
[  242.612529][ T8050] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  242.612546][ T8050] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000167
[  242.612575][ T8050] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 0000000000000002
[  242.612589][ T8050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  242.612599][ T8050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  242.612610][ T8050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  242.612622][ T8050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  242.612649][ T8050]  </TASK>
[  242.612683][ T8050] socket: no more sockets
[  242.933469][   T30] audit: type=1326 audit(1757751978.990:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  243.073641][   T30] audit: type=1326 audit(1757751978.990:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  243.095480][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.209458][ T8058] FAULT_INJECTION: forcing a failure.
[  243.209458][ T8058] name failslab, interval 1, probability 0, space 0, times 0
[  243.221747][   T30] audit: type=1326 audit(1757751978.990:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf705e539 code=0x7ffc0000
[  243.243999][ T8058] CPU: 1 UID: 0 PID: 8058 Comm: syz.0.546 Not tainted syzkaller #0 PREEMPT(full) 
[  243.244026][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  243.244049][ T8058] Call Trace:
[  243.244057][ T8058]  <TASK>
[  243.244065][ T8058]  dump_stack_lvl+0x189/0x250
[  243.244097][ T8058]  ? __pfx____ratelimit+0x10/0x10
[  243.244118][ T8058]  ? __pfx_dump_stack_lvl+0x10/0x10
[  243.244138][ T8058]  ? __pfx__printk+0x10/0x10
[  243.244171][ T8058]  ? __pfx___might_resched+0x10/0x10
[  243.244186][ T8058]  ? fs_reclaim_acquire+0x7d/0x100
[  243.244209][ T8058]  should_fail_ex+0x414/0x560
[  243.244241][ T8058]  should_failslab+0xa8/0x100
[  243.244270][ T8058]  __kmalloc_noprof+0xcb/0x4f0
[  243.244294][ T8058]  ? kfree+0x4d/0x440
[  243.244315][ T8058]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  243.244341][ T8058]  tomoyo_realpath_from_path+0xe3/0x5d0
[  243.244364][ T8058]  ? tomoyo_domain+0xd9/0x130
[  243.244390][ T8058]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  243.244417][ T8058]  tomoyo_path_number_perm+0x1e8/0x5a0
[  243.244448][ T8058]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  243.244503][ T8058]  ? __lock_acquire+0xab9/0xd20
[  243.244551][ T8058]  ? __fget_files+0x2a/0x420
[  243.244573][ T8058]  ? __fget_files+0x3a0/0x420
[  243.244589][ T8058]  ? __fget_files+0x2a/0x420
[  243.244610][ T8058]  security_file_ioctl_compat+0xcb/0x2d0
[  243.244638][ T8058]  __ia32_compat_sys_ioctl+0x128/0x840
[  243.244666][ T8058]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  243.244691][ T8058]  ? __fget_files+0x3a0/0x420
[  243.244724][ T8058]  ? fput+0xa0/0xd0
[  243.244743][ T8058]  ? ksys_write+0x22a/0x250
[  243.244776][ T8058]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.244798][ T8058]  __do_fast_syscall_32+0xb6/0x2b0
[  243.244820][ T8058]  ? lockdep_hardirqs_on+0x9c/0x150
[  243.244842][ T8058]  do_fast_syscall_32+0x34/0x80
[  243.244863][ T8058]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  243.244886][ T8058] RIP: 0023:0xf7fe7539
[  243.244910][ T8058] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  243.244927][ T8058] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  243.244947][ T8058] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040345632
[  243.244961][ T8058] RDX: 0000000080000900 RSI: 0000000000000000 RDI: 0000000000000000
[  243.244972][ T8058] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  243.244983][ T8058] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  243.244994][ T8058] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  243.245021][ T8058]  </TASK>
[  243.245030][ T8058] ERROR: Out of memory at tomoyo_realpath_from_path.
[  243.271591][   T30] audit: type=1326 audit(1757751978.990:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8041 comm="syz.2.542" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000
[  243.577148][ T8060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.617401][ T8060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.831238][ T5937] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  244.021675][ T5935] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  244.560858][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  244.611892][ T5935] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  244.678644][ T5935] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  244.791600][ T5935] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  244.849073][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.849588][ T8094] FAULT_INJECTION: forcing a failure.
[  244.849588][ T8094] name failslab, interval 1, probability 0, space 0, times 0
[  244.894363][ T5935] usb 5-1: Product: syz
[  244.898572][ T5935] usb 5-1: Manufacturer: syz
[  244.912424][ T5935] usb 5-1: SerialNumber: syz
[  244.932496][ T5935] usb 5-1: config 0 descriptor??
[  244.941568][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.1.556 Not tainted syzkaller #0 PREEMPT(full) 
[  244.941594][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  244.941606][ T8094] Call Trace:
[  244.941613][ T8094]  <TASK>
[  244.941620][ T8094]  dump_stack_lvl+0x189/0x250
[  244.941647][ T8094]  ? __pfx____ratelimit+0x10/0x10
[  244.941666][ T8094]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.941687][ T8094]  ? __pfx__printk+0x10/0x10
[  244.941714][ T8094]  ? __pfx___might_resched+0x10/0x10
[  244.941737][ T8094]  ? fs_reclaim_acquire+0x7d/0x100
[  244.941758][ T8094]  should_fail_ex+0x414/0x560
[  244.941787][ T8094]  should_failslab+0xa8/0x100
[  244.941816][ T8094]  __kmalloc_noprof+0xcb/0x4f0
[  244.941841][ T8094]  ? usb_alloc_urb+0x46/0x150
[  244.941865][ T8094]  usb_alloc_urb+0x46/0x150
[  244.941887][ T8094]  do_proc_control+0x1d3/0xe40
[  244.941922][ T8094]  proc_control_compat+0x129/0x170
[  244.941945][ T8094]  ? __pfx_proc_control_compat+0x10/0x10
[  244.941977][ T8094]  usbdev_ioctl+0x13ba/0x20c0
[  244.942000][ T8094]  ? __fget_files+0x2a/0x420
[  244.942019][ T8094]  ? __pfx_usbdev_ioctl+0x10/0x10
[  244.942039][ T8094]  ? __fget_files+0x3a0/0x420
[  244.942056][ T8094]  ? __fget_files+0x2a/0x420
[  244.942077][ T8094]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  244.942106][ T8094]  __ia32_compat_sys_ioctl+0x543/0x840
[  244.942135][ T8094]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  244.942161][ T8094]  ? __fget_files+0x3a0/0x420
[  244.942180][ T8094]  ? fput+0xa0/0xd0
[  244.942199][ T8094]  ? ksys_write+0x22a/0x250
[  244.942230][ T8094]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.942250][ T8094]  __do_fast_syscall_32+0xb6/0x2b0
[  244.942273][ T8094]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.942296][ T8094]  do_fast_syscall_32+0x34/0x80
[  244.942326][ T8094]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  244.942349][ T8094] RIP: 0023:0xf706e539
[  244.942365][ T8094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  244.942382][ T8094] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  244.942402][ T8094] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0105500
[  244.942415][ T8094] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  244.942427][ T8094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  244.942438][ T8094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  244.942449][ T8094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  244.942477][ T8094]  </TASK>
[  244.946627][ T8072] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  245.001521][   T55] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  245.260404][ T8072] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  245.321966][ T5935] usb 5-1: ucan: probing device on interface #0
[  245.567615][   T55] usb 1-1: Using ep0 maxpacket: 16
[  245.581972][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  245.625752][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  245.642058][   T55] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  245.671397][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.721524][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.747124][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.761286][   T55] usb 1-1: config 0 descriptor??
[  245.835194][ T8072] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode
[  246.124421][ T8100] futex_wake_op: syz.2.558 tries to shift op by 32; fix this program
[  246.298930][ T8072] macvtap1: entered promiscuous mode
[  246.300292][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.330698][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.339804][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  246.558241][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  246.615015][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.558'.
[  247.231564][ T8072] mac80211_hwsim hwsim10 wlan1: left promiscuous mode
[  247.236428][ T5935] usb 5-1: ucan: failed to retrieve device info
[  247.454390][ T5935] usb 5-1: ucan: probe failed; try to update the device firmware
[  248.169130][ T8100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.558'.
[  248.767541][   T55] usbhid 1-1:0.0: can't add hid device: -71
[  248.801473][   T55] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  248.905269][   T55] usb 1-1: USB disconnect, device number 21
[  248.966706][ T5935] usb 5-1: USB disconnect, device number 14
[  249.035267][ T8119] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  249.534808][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'.
[  250.643449][ T8153] netlink: 36 bytes leftover after parsing attributes in process `syz.0.568'.
[  251.226945][ T8157] FAULT_INJECTION: forcing a failure.
[  251.226945][ T8157] name failslab, interval 1, probability 0, space 0, times 0
[  251.250721][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.2.571 Not tainted syzkaller #0 PREEMPT(full) 
[  251.250750][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  251.250762][ T8157] Call Trace:
[  251.250772][ T8157]  <TASK>
[  251.250781][ T8157]  dump_stack_lvl+0x189/0x250
[  251.250809][ T8157]  ? __pfx____ratelimit+0x10/0x10
[  251.250829][ T8157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.250851][ T8157]  ? __pfx__printk+0x10/0x10
[  251.250888][ T8157]  ? __pfx___might_resched+0x10/0x10
[  251.250912][ T8157]  should_fail_ex+0x414/0x560
[  251.250946][ T8157]  should_failslab+0xa8/0x100
[  251.250985][ T8157]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  251.251012][ T8157]  ? __alloc_skb+0x112/0x2d0
[  251.251036][ T8157]  __alloc_skb+0x112/0x2d0
[  251.251059][ T8157]  ctrl_getfamily+0x3a1/0x590
[  251.251087][ T8157]  ? __pfx_ctrl_getfamily+0x10/0x10
[  251.251109][ T8157]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  251.251139][ T8157]  genl_family_rcv_msg_doit+0x215/0x300
[  251.251168][ T8157]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  251.251206][ T8157]  genl_rcv_msg+0x60e/0x790
[  251.251233][ T8157]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.251253][ T8157]  ? __pfx_ctrl_getfamily+0x10/0x10
[  251.251275][ T8157]  ? __asan_memcpy+0x40/0x70
[  251.251295][ T8157]  ? __pfx_ref_tracker_free+0x10/0x10
[  251.251317][ T8157]  netlink_rcv_skb+0x205/0x470
[  251.251334][ T8157]  ? __lock_acquire+0xab9/0xd20
[  251.251360][ T8157]  ? __pfx_genl_rcv_msg+0x10/0x10
[  251.251383][ T8157]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  251.251413][ T8157]  ? down_read+0x1ad/0x2e0
[  251.251435][ T8157]  genl_rcv+0x28/0x40
[  251.251456][ T8157]  netlink_unicast+0x82c/0x9e0
[  251.251488][ T8157]  ? __pfx_netlink_unicast+0x10/0x10
[  251.251513][ T8157]  ? netlink_sendmsg+0x642/0xb30
[  251.251530][ T8157]  ? skb_put+0x11b/0x210
[  251.251551][ T8157]  netlink_sendmsg+0x805/0xb30
[  251.251576][ T8157]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.251598][ T8157]  ? aa_sock_msg_perm+0xf1/0x1d0
[  251.251617][ T8157]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  251.251639][ T8157]  ? __pfx_netlink_sendmsg+0x10/0x10
[  251.251661][ T8157]  __sock_sendmsg+0x21c/0x270
[  251.251692][ T8157]  __sys_sendto+0x3bd/0x520
[  251.251717][ T8157]  ? __pfx___sys_sendto+0x10/0x10
[  251.251749][ T8157]  ? __might_fault+0xb0/0x130
[  251.251793][ T8157]  __ia32_compat_sys_socketcall+0x71c/0x9c0
[  251.251815][ T8157]  ? __fget_files+0x3a0/0x420
[  251.251835][ T8157]  ? __pfx___ia32_compat_sys_socketcall+0x10/0x10
[  251.251859][ T8157]  ? fput+0xa0/0xd0
[  251.251879][ T8157]  ? ksys_write+0x22a/0x250
[  251.251913][ T8157]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.251937][ T8157]  __do_fast_syscall_32+0xb6/0x2b0
[  251.251959][ T8157]  ? lockdep_hardirqs_on+0x9c/0x150
[  251.251989][ T8157]  do_fast_syscall_32+0x34/0x80
[  251.252010][ T8157]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  251.252032][ T8157] RIP: 0023:0xf705e539
[  251.252049][ T8157] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  251.252066][ T8157] RSP: 002b:00000000f544d3f0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066
[  251.252087][ T8157] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f544d404
[  251.252100][ T8157] RDX: 0000000000000000 RSI: 00000000f544d550 RDI: 00000000f73e4ff4
[  251.252112][ T8157] RBP: 00000000f544d550 R08: 0000000000000000 R09: 0000000000000000
[  251.252124][ T8157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  251.252135][ T8157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  251.252163][ T8157]  </TASK>
[  252.061976][ T8163] FAULT_INJECTION: forcing a failure.
[  252.061976][ T8163] name failslab, interval 1, probability 0, space 0, times 0
[  252.126400][ T8155] futex_wake_op: syz.1.570 tries to shift op by 32; fix this program
[  252.173698][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[  252.184794][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[  252.196000][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'.
[  252.280808][ T8158] futex_wake_op: syz.4.569 tries to shift op by 32; fix this program
[  252.311489][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.0.573 Not tainted syzkaller #0 PREEMPT(full) 
[  252.311515][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  252.311527][ T8163] Call Trace:
[  252.311535][ T8163]  <TASK>
[  252.311543][ T8163]  dump_stack_lvl+0x189/0x250
[  252.311572][ T8163]  ? __pfx____ratelimit+0x10/0x10
[  252.311591][ T8163]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.311610][ T8163]  ? __pfx__printk+0x10/0x10
[  252.311638][ T8163]  ? __pfx___might_resched+0x10/0x10
[  252.311742][ T8163]  ? fs_reclaim_acquire+0x7d/0x100
[  252.311766][ T8163]  should_fail_ex+0x414/0x560
[  252.311798][ T8163]  ? rhashtable_init_noprof+0x4ee/0xbb0
[  252.311820][ T8163]  should_failslab+0xa8/0x100
[  252.311848][ T8163]  __kvmalloc_node_noprof+0x161/0x5f0
[  252.311876][ T8163]  ? rhashtable_init_noprof+0x4ee/0xbb0
[  252.311904][ T8163]  rhashtable_init_noprof+0x4ee/0xbb0
[  252.311934][ T8163]  rhltable_init_noprof+0x1e/0x60
[  252.311957][ T8163]  nf_tables_newtable+0x68f/0x1890
[  252.312004][ T8163]  nfnetlink_rcv+0x112f/0x2520
[  252.312066][ T8163]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  252.312111][ T8163]  ? ref_tracker_free+0x63a/0x7d0
[  252.312160][ T8163]  ? __netlink_deliver_tap+0x807/0x850
[  252.312180][ T8163]  ? netlink_deliver_tap+0x2e/0x1b0
[  252.312217][ T8163]  netlink_unicast+0x82c/0x9e0
[  252.312255][ T8163]  ? __pfx_netlink_unicast+0x10/0x10
[  252.312286][ T8163]  ? netlink_sendmsg+0x642/0xb30
[  252.312304][ T8163]  ? skb_put+0x11b/0x210
[  252.312331][ T8163]  netlink_sendmsg+0x805/0xb30
[  252.312362][ T8163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.312385][ T8163]  ? __import_iovec+0x5d4/0x7f0
[  252.312408][ T8163]  ? aa_sock_msg_perm+0xf1/0x1d0
[  252.312430][ T8163]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  252.312449][ T8163]  ? __pfx_netlink_sendmsg+0x10/0x10
[  252.312469][ T8163]  __sock_sendmsg+0x21c/0x270
[  252.312502][ T8163]  ____sys_sendmsg+0x505/0x830
[  252.312532][ T8163]  ? __pfx_____sys_sendmsg+0x10/0x10
[  252.312574][ T8163]  ___sys_sendmsg+0x21f/0x2a0
[  252.312601][ T8163]  ? __pfx____sys_sendmsg+0x10/0x10
[  252.312675][ T8163]  ? __fget_files+0x2a/0x420
[  252.312690][ T8163]  ? __fget_files+0x3a0/0x420
[  252.312716][ T8163]  __sys_sendmsg+0x164/0x220
[  252.312741][ T8163]  ? __pfx___sys_sendmsg+0x10/0x10
[  252.312782][ T8163]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.312806][ T8163]  __do_fast_syscall_32+0xb6/0x2b0
[  252.312829][ T8163]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.312853][ T8163]  do_fast_syscall_32+0x34/0x80
[  252.312874][ T8163]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  252.312897][ T8163] RIP: 0023:0xf7fe7539
[  252.312914][ T8163] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  252.312932][ T8163] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  252.312953][ T8163] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  252.312967][ T8163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  252.312978][ T8163] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  252.312990][ T8163] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  252.313002][ T8163] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  252.313031][ T8163]  </TASK>
[  252.644555][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'.
[  252.810560][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'.
[  252.834262][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz.1.570'.
[  252.858609][ T8158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.569'.
[  254.444225][ T8199] netlink: 'syz.4.581': attribute type 16 has an invalid length.
[  254.452145][ T8199] netlink: 'syz.4.581': attribute type 17 has an invalid length.
[  254.931392][ T5935] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  255.081351][ T5935] usb 2-1: Using ep0 maxpacket: 32
[  255.095916][ T5935] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  255.106250][ T5935] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  255.117738][ T5935] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  255.129529][ T5935] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  255.131230][   T55] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  255.148900][ T5935] usb 2-1: config 0 interface 0 has no altsetting 0
[  255.160218][ T5935] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  255.175692][ T5935] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  255.199928][ T5935] usb 2-1: Product: syz
[  255.204225][ T5935] usb 2-1: Manufacturer: syz
[  255.210915][ T5935] usb 2-1: SerialNumber: syz
[  255.223220][ T5935] usb 2-1: config 0 descriptor??
[  255.237678][ T5935] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  255.250477][ T5935] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  255.311908][   T55] usb 4-1: Using ep0 maxpacket: 32
[  255.320825][   T55] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 has invalid maxpacket 1064, setting to 1024
[  255.332139][   T55] usb 4-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024
[  255.342539][   T55] usb 4-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.355599][   T55] usb 4-1: config 1 interface 0 has no altsetting 0
[  255.365183][   T55] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  255.377670][   T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.385986][   T55] usb 4-1: Product: syz
[  255.390263][   T55] usb 4-1: Manufacturer: syz
[  255.396857][   T55] usb 4-1: SerialNumber: syz
[  255.405400][ T8208] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  255.656413][ T8199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  255.700097][ T8210] __nla_validate_parse: 1 callbacks suppressed
[  255.700117][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'.
[  255.756628][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.763102][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  255.834967][ T8214] pim6reg0: tun_chr_ioctl cmd 2147767506
[  256.303615][ T8230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'.
[  256.741270][  T122] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  256.944304][  T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.975213][  T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.985723][  T122] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  256.994994][  T122] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.006853][  T122] usb 5-1: config 0 descriptor??
[  257.837333][   T55] usb 4-1: USB disconnect, device number 16
[  258.091461][ T5937] usb 2-1: USB disconnect, device number 16
[  258.101552][ T8245] FAULT_INJECTION: forcing a failure.
[  258.101552][ T8245] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  258.120229][ T5937] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  258.134222][ T8245] CPU: 0 UID: 0 PID: 8245 Comm: syz.1.595 Not tainted syzkaller #0 PREEMPT(full) 
[  258.134251][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  258.134263][ T8245] Call Trace:
[  258.134270][ T8245]  <TASK>
[  258.134277][ T8245]  dump_stack_lvl+0x189/0x250
[  258.134304][ T8245]  ? __pfx____ratelimit+0x10/0x10
[  258.134324][ T8245]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.134347][ T8245]  ? __pfx__printk+0x10/0x10
[  258.134387][ T8245]  should_fail_ex+0x414/0x560
[  258.134421][ T8245]  _copy_to_user+0x31/0xb0
[  258.134448][ T8245]  simple_read_from_buffer+0xe1/0x170
[  258.134482][ T8245]  proc_fail_nth_read+0x1b3/0x220
[  258.134507][ T8245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  258.134533][ T8245]  ? rw_verify_area+0x2a6/0x4d0
[  258.134555][ T8245]  ? __lock_acquire+0xab9/0xd20
[  258.134582][ T8245]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  258.134606][ T8245]  vfs_read+0x200/0xa30
[  258.134630][ T8245]  ? fdget_pos+0x247/0x320
[  258.134652][ T8245]  ? __pfx___mutex_lock+0x10/0x10
[  258.134673][ T8245]  ? __pfx_vfs_read+0x10/0x10
[  258.134700][ T8245]  ? __fget_files+0x2a/0x420
[  258.134722][ T8245]  ? __fget_files+0x3a0/0x420
[  258.134737][ T8245]  ? __fget_files+0x2a/0x420
[  258.134763][ T8245]  ksys_read+0x145/0x250
[  258.134791][ T8245]  ? __pfx_ksys_read+0x10/0x10
[  258.134820][ T8245]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.134843][ T8245]  __do_fast_syscall_32+0xb6/0x2b0
[  258.134865][ T8245]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.134888][ T8245]  do_fast_syscall_32+0x34/0x80
[  258.134909][ T8245]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  258.134933][ T8245] RIP: 0023:0xf706e539
[  258.134950][ T8245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  258.134967][ T8245] RSP: 002b:00000000f545e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  258.134988][ T8245] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545e620
[  258.135002][ T8245] RDX: 000000000000000f RSI: 00000000f73f4ff4 RDI: 0000000000000000
[  258.135013][ T8245] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  258.135023][ T8245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  258.135035][ T8245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  258.135064][ T8245]  </TASK>
[  258.988381][ T8257] netlink: 'syz.1.597': attribute type 16 has an invalid length.
[  258.999585][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.015713][ T8257] netlink: 'syz.1.597': attribute type 17 has an invalid length.
[  259.027850][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.218749][ T8259] bond0: option packets_per_slave: invalid value (18446744071562067969)
[  259.236729][ T8259] bond0: option packets_per_slave: allowed values 0 - 65535
[  259.401453][   T55] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  259.426666][ T8257] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  259.443949][ T8260] pim6reg: left allmulticast mode
[  259.571381][   T55] usb 1-1: Using ep0 maxpacket: 8
[  259.597476][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  259.643421][   T55] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06
[  259.669853][   T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.700301][   T55] usb 1-1: Product: syz
[  259.710931][   T55] usb 1-1: Manufacturer: syz
[  259.722259][   T55] usb 1-1: SerialNumber: syz
[  259.732628][   T55] usb 1-1: config 0 descriptor??
[  259.946244][ T8273] FAULT_INJECTION: forcing a failure.
[  259.946244][ T8273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  259.972276][ T8273] CPU: 0 UID: 0 PID: 8273 Comm: syz.2.602 Not tainted syzkaller #0 PREEMPT(full) 
[  259.972306][ T8273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  259.972317][ T8273] Call Trace:
[  259.972325][ T8273]  <TASK>
[  259.972332][ T8273]  dump_stack_lvl+0x189/0x250
[  259.972359][ T8273]  ? __pfx____ratelimit+0x10/0x10
[  259.972379][ T8273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.972401][ T8273]  ? __pfx__printk+0x10/0x10
[  259.972427][ T8273]  ? __might_fault+0xb0/0x130
[  259.972464][ T8273]  should_fail_ex+0x414/0x560
[  259.972497][ T8273]  _copy_from_user+0x2d/0xb0
[  259.972523][ T8273]  do_tcp_getsockopt+0x1dd/0x2660
[  259.972555][ T8273]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  259.972576][ T8273]  ? sock_common_getsockopt+0x20/0xb0
[  259.972605][ T8273]  ? __might_fault+0xb0/0x130
[  259.972631][ T8273]  ? _parse_integer_limit+0x1ae/0x1f0
[  259.972649][ T8273]  ? aa_label_sk_perm+0x4cd/0x630
[  259.972683][ T8273]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  259.972731][ T8273]  ? __pfx___might_resched+0x10/0x10
[  259.972754][ T8273]  ? rcu_read_lock_any_held+0xb3/0x120
[  259.972776][ T8273]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  259.972805][ T8273]  ? aa_sk_perm+0x81e/0x950
[  259.972844][ T8273]  ? __pfx_aa_sk_perm+0x10/0x10
[  259.972869][ T8273]  ? __lock_acquire+0xab9/0xd20
[  259.972902][ T8273]  tcp_getsockopt+0x83/0x130
[  259.972921][ T8273]  ? sock_common_getsockopt+0x20/0xb0
[  259.972973][ T8273]  ? sock_common_getsockopt+0x20/0xb0
[  259.973009][ T8273]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  259.973040][ T8273]  do_sock_getsockopt+0x36f/0x450
[  259.973066][ T8273]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  259.973088][ T8273]  ? lockdep_hardirqs_on+0x90/0x150
[  259.973106][ T8273]  ? __fget_files+0x2a/0x420
[  259.973123][ T8273]  ? __fget_files+0x3a0/0x420
[  259.973139][ T8273]  ? __fget_files+0x2a/0x420
[  259.973163][ T8273]  __ia32_sys_getsockopt+0x1a5/0x250
[  259.973185][ T8273]  ? lockdep_hardirqs_on+0x90/0x150
[  259.973205][ T8273]  ? lockdep_hardirqs_on+0x90/0x150
[  259.973227][ T8273]  __do_fast_syscall_32+0xb6/0x2b0
[  259.973248][ T8273]  ? lockdep_hardirqs_on+0x9c/0x150
[  259.973272][ T8273]  do_fast_syscall_32+0x34/0x80
[  259.973292][ T8273]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  259.973316][ T8273] RIP: 0023:0xf705e539
[  259.973332][ T8273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  259.973347][ T8273] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[  259.973369][ T8273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006
[  259.973383][ T8273] RDX: 0000000000000023 RSI: 0000000080000000 RDI: 00000000800000c0
[  259.973396][ T8273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  259.973407][ T8273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  259.973419][ T8273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  259.973447][ T8273]  </TASK>
[  260.314172][   T55] usb 1-1: USB disconnect, device number 22
[  260.348964][  T122] usbhid 5-1:0.0: can't add hid device: -71
[  260.358189][  T122] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  260.365839][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  260.371319][  T122] usb 5-1: USB disconnect, device number 15
[  260.572176][ T5937] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  260.600787][ T8282] netlink: 'syz.1.605': attribute type 10 has an invalid length.
[  260.610657][ T8282] netlink: 55 bytes leftover after parsing attributes in process `syz.1.605'.
[  260.734601][ T5937] usb 4-1: Using ep0 maxpacket: 16
[  260.747785][ T5937] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  260.780607][ T5937] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  260.822933][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'.
[  260.837561][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  260.851866][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.990501][ T5937] usb 4-1: Product: syz
[  261.005985][ T5937] usb 4-1: Manufacturer: syz
[  261.025137][ T5937] usb 4-1: SerialNumber: syz
[  261.172526][ T8290] GUP no longer grows the stack in syz.0.606 (8290): 80005000-80008000 (80004000)
[  261.193169][ T8290] CPU: 0 UID: 0 PID: 8290 Comm: syz.0.606 Not tainted syzkaller #0 PREEMPT(full) 
[  261.193206][ T8290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  261.193220][ T8290] Call Trace:
[  261.193228][ T8290]  <TASK>
[  261.193236][ T8290]  dump_stack_lvl+0x189/0x250
[  261.193271][ T8290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.193297][ T8290]  ? __pfx__printk+0x10/0x10
[  261.193321][ T8290]  ? find_vma+0xe7/0x160
[  261.193361][ T8290]  fixup_user_fault+0x661/0x720
[  261.193394][ T8290]  fault_in_user_writeable+0x72/0xe0
[  261.193419][ T8290]  futex_lock_pi+0x773/0xa90
[  261.193457][ T8290]  ? __pfx_futex_lock_pi+0x10/0x10
[  261.193515][ T8290]  ? __pfx_futex_wake_mark+0x10/0x10
[  261.193560][ T8290]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  261.193604][ T8290]  do_futex+0x292/0x420
[  261.193636][ T8290]  ? __pfx_do_futex+0x10/0x10
[  261.193660][ T8290]  ? __vm_munmap+0x301/0x3d0
[  261.193691][ T8290]  __se_sys_futex_time32+0x360/0x3e0
[  261.193727][ T8290]  ? __pfx___se_sys_futex_time32+0x10/0x10
[  261.193763][ T8290]  ? __ia32_sys_futex_time32+0x21/0xf0
[  261.193794][ T8290]  __do_fast_syscall_32+0xb6/0x2b0
[  261.193823][ T8290]  do_fast_syscall_32+0x34/0x80
[  261.193853][ T8290]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  261.193875][ T8290] RIP: 0023:0xf7fe7539
[  261.193890][ T8290] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  261.193906][ T8290] RSP: 002b:00000000f4c5e55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  261.193928][ T8290] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d
[  261.193942][ T8290] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000
[  261.193952][ T8290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  261.193962][ T8290] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  261.193971][ T8290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  261.193995][ T8290]  </TASK>
[  261.826798][ T8275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.843423][ T8275] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.864353][ T5937] cdc_ncm 4-1:1.0: bind() failure
[  261.900471][ T5937] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  262.006509][ T8299] netlink: 44 bytes leftover after parsing attributes in process `syz.4.610'.
[  262.008723][ T5937] cdc_ncm 4-1:1.1: bind() failure
[  262.044827][ T5937] usb 4-1: USB disconnect, device number 17
[  262.055428][ T8299] openvswitch: netlink: Flow key attr not present in new flow.
[  263.461622][ T5928] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  263.614397][ T5928] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[  263.735347][ T5928] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 115, setting to 64
[  263.772206][ T5928] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  263.792689][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.828623][ T5928] usb 3-1: config 0 descriptor??
[  264.063739][ T8318] : entered promiscuous mode
[  264.076930][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.089850][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.110141][ T8318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.122097][ T8318] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.283475][ T5928] ath6kl: Failed to submit usb control message: -71
[  264.296075][ T5928] ath6kl: unable to send the bmi data to the device: -71
[  264.303712][ T5928] ath6kl: Unable to send get target info: -71
[  264.328935][ T5928] ath6kl: Failed to init ath6kl core: -71
[  264.330067][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  264.330082][   T30] audit: type=1326 audit(1757752001.330:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.377824][ T5928] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  264.401673][ T5928] usb 3-1: USB disconnect, device number 26
[  264.412387][   T30] audit: type=1326 audit(1757752001.370:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.486932][   T30] audit: type=1326 audit(1757752001.370:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.552318][   T30] audit: type=1326 audit(1757752001.370:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.579840][   T30] audit: type=1326 audit(1757752001.370:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.602634][   T30] audit: type=1326 audit(1757752001.370:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.642784][   T30] audit: type=1326 audit(1757752001.370:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.718286][   T30] audit: type=1326 audit(1757752001.370:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=364 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.793994][   T30] audit: type=1326 audit(1757752001.370:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  264.839357][ T5937] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  264.878443][   T30] audit: type=1326 audit(1757752001.370:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000
[  265.041193][ T5937] usb 2-1: Using ep0 maxpacket: 16
[  265.058285][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.188611][ T8333] netlink: 'syz.2.620': attribute type 10 has an invalid length.
[  265.196704][ T8333] netlink: 55 bytes leftover after parsing attributes in process `syz.2.620'.
[  265.244179][ T5937] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.268348][ T5937] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  265.287696][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.386645][ T5937] usb 2-1: config 0 descriptor??
[  265.767458][ T8337] netlink: 'syz.0.621': attribute type 6 has an invalid length.
[  265.780576][ T8337] QAT: failed to copy from user cfg_data.
[  265.808764][ T5937] usbhid 2-1:0.0: can't add hid device: -32
[  265.815140][ T5937] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  266.044744][ T5951] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  266.167447][ T8340] binder: 8328:8340 unknown command 1077961494
[  266.184543][ T8340] binder: 8328:8340 ioctl c0306201 80004a40 returned -22
[  266.350300][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.622'.
[  266.601256][ T5951] usb 1-1: Using ep0 maxpacket: 32
[  266.701480][ T5951] usb 1-1: config index 0 descriptor too short (expected 539, got 27)
[  266.738334][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[  266.874859][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[  267.157623][ T5951] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  267.169202][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'.
[  267.177000][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.261247][ T5951] usb 1-1: Product: syz
[  267.449661][ T5951] usb 1-1: Manufacturer: syz
[  267.509640][ T5951] usb 1-1: SerialNumber: syz
[  267.519111][ T5928] usb 2-1: USB disconnect, device number 17
[  267.546024][ T5951] usb 1-1: config 0 descriptor??
[  267.947648][ T5951] hub 1-1:0.0: bad descriptor, ignoring hub
[  267.975864][ T5951] hub 1-1:0.0: probe with driver hub failed with error -5
[  268.016170][ T5951] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13
[  268.050432][ T5951] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  268.087793][ T5951] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -22
[  268.361529][ T5928] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  268.551206][ T5928] usb 2-1: device descriptor read/64, error -71
[  268.871425][ T5928] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  269.011188][ T5928] usb 2-1: device descriptor read/64, error -71
[  269.121519][ T5928] usb usb2-port1: attempt power cycle
[  269.364212][ T5951] usb 1-1: USB disconnect, device number 23
[  269.472419][ T5928] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  269.517078][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  269.559807][ T5928] usb 2-1: device descriptor read/8, error -71
[  269.614114][ T5937] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  269.805710][ T5937] usb 5-1: config 0 interface 0 has no altsetting 0
[  269.812455][ T5937] usb 5-1: New USB device found, idVendor=249c, idProduct=932c, bcdDevice=f9.1b
[  269.836335][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.891501][ T5928] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  269.911978][ T5928] usb 2-1: device descriptor read/8, error -71
[  269.915891][ T5937] usb 5-1: config 0 descriptor??
[  269.990340][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  269.990354][   T30] audit: type=1800 audit(1757752006.990:265): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.635" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  270.031632][ T5928] usb usb2-port1: unable to enumerate USB device
[  270.069700][ T5937] usb 5-1: selecting invalid altsetting 0
[  270.087833][ T5937] usb 5-1: can't set first interface for hiFace device.
[  270.110234][ T5937] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -5
[  270.359168][ T5937] usb 5-1: USB disconnect, device number 16
[  270.593232][ T8391] netlink: 'syz.3.636': attribute type 10 has an invalid length.
[  270.601703][ T8391] netlink: 55 bytes leftover after parsing attributes in process `syz.3.636'.
[  270.960418][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.637'.
[  272.207441][ T8410] futex_wake_op: syz.1.639 tries to shift op by 32; fix this program
[  272.221229][ T5959] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  272.297760][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  272.309500][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  272.358973][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'.
[  272.373792][ T8410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.639'.
[  272.482038][ T5959] usb 3-1: Using ep0 maxpacket: 16
[  272.562507][ T5959] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.572854][ T5959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 34, changing to 9
[  272.624471][ T5959] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.686287][ T5959] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  272.702688][ T5959] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  272.808014][ T5959] usb 3-1: Manufacturer: syz
[  272.823172][ T8423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.644'.
[  272.854790][ T5959] usb 3-1: config 0 descriptor??
[  272.894395][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'.
[  273.104406][ T8409] netlink: 44 bytes leftover after parsing attributes in process `syz.2.641'.
[  273.115609][ T8409] openvswitch: netlink: Flow key attr not present in new flow.
[  273.125598][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.139449][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.157217][ T5959] usb 3-1: USB disconnect, device number 27
[  273.751626][ T5959] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  274.172521][ T5959] usb 2-1: Using ep0 maxpacket: 8
[  274.191804][ T5959] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  274.205852][ T5959] usb 2-1: config 179 has no interface number 0
[  274.224337][ T5959] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  274.243283][ T5959] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  274.257054][ T5959] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  274.269851][ T5959] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  274.281734][ T5959] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  274.297024][ T5959] usb 2-1: config 179 interface 65 has no altsetting 0
[  274.305369][ T5959] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  274.319217][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.419516][ T5959] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14
[  274.521449][ T5223] input input14: unable to receive magic message: -110
[  274.522639][   T30] audit: type=1400 audit(1757752011.520:266): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8440 comm="syz.2.652"
[  274.559547][ T5223] input input14: unable to receive magic message: -32
[  274.586500][ T5223] input input14: unable to receive magic message: -32
[  274.659942][ T5223] input input14: unable to receive magic message: -32
[  274.731971][ T5223] input input14: unable to receive magic message: -32
[  274.805123][ T8430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.816283][ T8430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  274.939723][ T8446] netlink: 'syz.2.653': attribute type 10 has an invalid length.
[  274.951327][ T8446] netlink: 55 bytes leftover after parsing attributes in process `syz.2.653'.
[  274.968528][ T8447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.015897][ T8447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.069997][ T8430] input input14: unable to receive magic message: -32
[  275.120499][ T5959] usb 2-1: USB disconnect, device number 22
[  275.126578][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  276.504789][ T8460] FAULT_INJECTION: forcing a failure.
[  276.504789][ T8460] name failslab, interval 1, probability 0, space 0, times 0
[  276.518461][ T8460] CPU: 0 UID: 0 PID: 8460 Comm: syz.1.656 Not tainted syzkaller #0 PREEMPT(full) 
[  276.518481][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  276.518488][ T8460] Call Trace:
[  276.518493][ T8460]  <TASK>
[  276.518497][ T8460]  dump_stack_lvl+0x189/0x250
[  276.518515][ T8460]  ? __pfx____ratelimit+0x10/0x10
[  276.518527][ T8460]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.518539][ T8460]  ? __pfx__printk+0x10/0x10
[  276.518556][ T8460]  ? __pfx___might_resched+0x10/0x10
[  276.518570][ T8460]  should_fail_ex+0x414/0x560
[  276.518588][ T8460]  should_failslab+0xa8/0x100
[  276.518604][ T8460]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  276.518619][ T8460]  ? __alloc_skb+0x112/0x2d0
[  276.518633][ T8460]  __alloc_skb+0x112/0x2d0
[  276.518646][ T8460]  netlink_dump+0x1b7/0xe90
[  276.518660][ T8460]  ? __nla_parse+0x40/0x60
[  276.518673][ T8460]  ? __pfx_netlink_dump+0x10/0x10
[  276.518681][ T8460]  ? ip_set_dump_start+0x2ec/0x410
[  276.518705][ T8460]  ? netlink_lookup+0x30/0x200
[  276.518721][ T8460]  ? netlink_lookup+0x30/0x200
[  276.518729][ T8460]  ? netlink_lookup+0x30/0x200
[  276.518742][ T8460]  __netlink_dump_start+0x5cb/0x7e0
[  276.518756][ T8460]  ip_set_dump+0x13e/0x1c0
[  276.518770][ T8460]  ? __pfx_ip_set_dump+0x10/0x10
[  276.518783][ T8460]  ? __pfx_ip_set_dump_start+0x10/0x10
[  276.518797][ T8460]  ? __pfx_ip_set_dump_do+0x10/0x10
[  276.518810][ T8460]  ? __pfx_ip_set_dump_done+0x10/0x10
[  276.518833][ T8460]  nfnetlink_rcv_msg+0xb4d/0x1130
[  276.518849][ T8460]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  276.518874][ T8460]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  276.518888][ T8460]  ? kasan_save_free_info+0x46/0x50
[  276.518926][ T8460]  netlink_rcv_skb+0x205/0x470
[  276.518939][ T8460]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  276.518955][ T8460]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.518972][ T8460]  ? bpf_lsm_capable+0x9/0x20
[  276.518986][ T8460]  ? security_capable+0x7e/0x2e0
[  276.519005][ T8460]  nfnetlink_rcv+0x26a/0x2520
[  276.519022][ T8460]  ? __dev_queue_xmit+0x1d79/0x3b50
[  276.519041][ T8460]  ? __dev_queue_xmit+0x27b/0x3b50
[  276.519062][ T8460]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  276.519076][ T8460]  ? __pfx___dev_queue_xmit+0x10/0x10
[  276.519098][ T8460]  ? ref_tracker_free+0x63a/0x7d0
[  276.519108][ T8460]  ? __asan_memcpy+0x40/0x70
[  276.519119][ T8460]  ? __pfx_ref_tracker_free+0x10/0x10
[  276.519137][ T8460]  ? skb_clone+0x246/0x3a0
[  276.519152][ T8460]  ? __netlink_deliver_tap+0x807/0x850
[  276.519163][ T8460]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.519177][ T8460]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.519191][ T8460]  netlink_unicast+0x82c/0x9e0
[  276.519211][ T8460]  ? __pfx_netlink_unicast+0x10/0x10
[  276.519228][ T8460]  ? netlink_sendmsg+0x642/0xb30
[  276.519237][ T8460]  ? skb_put+0x11b/0x210
[  276.519250][ T8460]  netlink_sendmsg+0x805/0xb30
[  276.519266][ T8460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.519278][ T8460]  ? __import_iovec+0x5d4/0x7f0
[  276.519290][ T8460]  ? aa_sock_msg_perm+0xf1/0x1d0
[  276.519301][ T8460]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  276.519312][ T8460]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.519323][ T8460]  __sock_sendmsg+0x21c/0x270
[  276.519340][ T8460]  ____sys_sendmsg+0x505/0x830
[  276.519356][ T8460]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.519377][ T8460]  ___sys_sendmsg+0x21f/0x2a0
[  276.519391][ T8460]  ? __pfx____sys_sendmsg+0x10/0x10
[  276.519424][ T8460]  ? __fget_files+0x2a/0x420
[  276.519432][ T8460]  ? __fget_files+0x3a0/0x420
[  276.519446][ T8460]  __sys_sendmsg+0x164/0x220
[  276.519460][ T8460]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.519481][ T8460]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.519494][ T8460]  __do_fast_syscall_32+0xb6/0x2b0
[  276.519506][ T8460]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.519518][ T8460]  do_fast_syscall_32+0x34/0x80
[  276.519529][ T8460]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  276.519542][ T8460] RIP: 0023:0xf706e539
[  276.519552][ T8460] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  276.519561][ T8460] RSP: 002b:00000000f545e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  276.519573][ T8460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  276.519580][ T8460] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  276.519586][ T8460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  276.519592][ T8460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  276.519597][ T8460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  276.519612][ T8460]  </TASK>
[  277.024959][ T8462] input: syz1 as /devices/virtual/input/input15
[  277.531547][ T8470] futex_wake_op: syz.0.657 tries to shift op by 32; fix this program
[  277.605768][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[  277.618511][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[  277.631750][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'.
[  277.650135][ T8471] netlink: 36 bytes leftover after parsing attributes in process `syz.0.657'.
[  277.855080][   T30] audit: type=1326 audit(1757752014.860:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8473 comm="syz.1.660" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0
[  278.106907][ T8483] netlink: 'syz.2.663': attribute type 16 has an invalid length.
[  278.170104][ T8483] netlink: 'syz.2.663': attribute type 17 has an invalid length.
[  278.311357][ T8483] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  279.771756][  T122] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  279.783761][ T8509] netlink: 'syz.2.669': attribute type 10 has an invalid length.
[  279.791890][ T8509] netlink: 55 bytes leftover after parsing attributes in process `syz.2.669'.
[  279.811632][ T5937] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  279.995549][ T5937] usb 1-1: Using ep0 maxpacket: 16
[  280.003421][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short
[  280.015927][ T5937] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  280.045211][ T5937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  280.155104][ T5937] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  280.177244][ T5937] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  280.190080][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.199497][ T5937] usb 1-1: Product: syz
[  280.205944][ T5937] usb 1-1: Manufacturer: 햤筫⻝᫏ｬ쎫麷㮞䟹閧ᒎꎿ蟼粔鎈⹕ꃇओ뛣簛努촚羯榎쏒쭘䜸沣ㇵ㬔ſt敪炁⛤倐뷸厰⦶㦏ឹ葉↋뻏ౖ蚂卑┝涩䆿奺얊ᖶ浃ꝕ樔Ꮷ⇐㭅逌꧑օ듓鞏а阄ࡉᘀꏼ㘽渴
[  280.234092][ T5937] usb 1-1: SerialNumber: syz
[  280.245486][  T122] usb 5-1: Using ep0 maxpacket: 16
[  280.344884][  T122] usb 5-1: unable to get BOS descriptor or descriptor too short
[  280.480149][  T122] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.521180][ T5937] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  280.525064][  T122] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  280.531773][ T5937] cdc_ncm 1-1:1.0: bind() failure
[  280.579232][ T5937] usb 1-1: USB disconnect, device number 24
[  280.606047][  T122] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  280.648857][  T122] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  280.660239][  T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.684410][  T122] usb 5-1: Product: syz
[  280.701141][  T122] usb 5-1: Manufacturer: 햤筫⻝᫏ｬ쎫麷㮞䟹閧ᒎꎿ蟼粔鎈⹕ꃇओ뛣簛努촚羯榎쏒쭘䜸沣ㇵ㬔ſt敪炁⛤倐뷸厰⦶㦏ឹ葉↋뻏ౖ蚂卑┝涩䆿奺얊ᖶ浃ꝕ樔Ꮷ⇐㭅逌꧑օ듓鞏а阄ࡉᘀꏼ㘽渴
[  280.726726][    C0] vkms_vblank_simulate: vblank timer overrun
[  280.817853][ T8513] netlink: 'syz.1.670': attribute type 16 has an invalid length.
[  280.831569][  T122] usb 5-1: SerialNumber: syz
[  280.856637][ T8513] netlink: 'syz.1.670': attribute type 17 has an invalid length.
[  280.895413][ T8513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  280.946376][ T8515] loop9: detected capacity change from 0 to 7
[  280.958469][ T8515] Dev loop9: unable to read RDB block 7
[  280.964359][ T8515]  loop9: unable to read partition table
[  280.975836][ T8515] loop9: partition table beyond EOD, truncated
[  280.986931][ T8515] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  281.062622][ T8502] FAULT_INJECTION: forcing a failure.
[  281.062622][ T8502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  281.114543][ T8502] CPU: 1 UID: 0 PID: 8502 Comm: syz.4.667 Not tainted syzkaller #0 PREEMPT(full) 
[  281.114571][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  281.114582][ T8502] Call Trace:
[  281.114590][ T8502]  <TASK>
[  281.114597][ T8502]  dump_stack_lvl+0x189/0x250
[  281.114625][ T8502]  ? __pfx____ratelimit+0x10/0x10
[  281.114645][ T8502]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.114668][ T8502]  ? __pfx__printk+0x10/0x10
[  281.114694][ T8502]  ? __might_fault+0xb0/0x130
[  281.114732][ T8502]  should_fail_ex+0x414/0x560
[  281.114764][ T8502]  _copy_from_user+0x2d/0xb0
[  281.114791][ T8502]  get_compat_msghdr+0xad/0x4a0
[  281.114819][ T8502]  ? __pfx_get_compat_msghdr+0x10/0x10
[  281.114853][ T8502]  ___sys_sendmsg+0x193/0x2a0
[  281.114880][ T8502]  ? __pfx____sys_sendmsg+0x10/0x10
[  281.114939][ T8502]  ? __fget_files+0x2a/0x420
[  281.114956][ T8502]  ? __fget_files+0x3a0/0x420
[  281.114983][ T8502]  __sys_sendmsg+0x164/0x220
[  281.115016][ T8502]  ? __pfx___sys_sendmsg+0x10/0x10
[  281.115056][ T8502]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.115080][ T8502]  __do_fast_syscall_32+0xb6/0x2b0
[  281.115102][ T8502]  ? lockdep_hardirqs_on+0x9c/0x150
[  281.115125][ T8502]  do_fast_syscall_32+0x34/0x80
[  281.115146][ T8502]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  281.115169][ T8502] RIP: 0023:0xf70ae539
[  281.115186][ T8502] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  281.115203][ T8502] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  281.115224][ T8502] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000240
[  281.115238][ T8502] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000
[  281.115249][ T8502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  281.115260][ T8502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.115272][ T8502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  281.115300][ T8502]  </TASK>
[  281.444220][  T122] cdc_ncm 5-1:1.0: bind() failure
[  281.496232][  T122] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  281.546343][  T122] cdc_ncm 5-1:1.1: bind() failure
[  281.623895][  T122] usb 5-1: USB disconnect, device number 17
[  281.894345][ T8545] gretap2: entered promiscuous mode
[  282.112069][ T8552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.678'.
[  283.128292][ T8565] futex_wake_op: syz.2.675 tries to shift op by 32; fix this program
[  283.275597][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[  283.336027][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[  283.346361][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.675'.
[  283.406989][ T8565] netlink: 36 bytes leftover after parsing attributes in process `syz.2.675'.
[  284.317891][ T8572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'.
[  284.748168][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.684'.
[  285.667813][ T8587] netlink: 'syz.2.688': attribute type 16 has an invalid length.
[  285.691465][ T8587] netlink: 'syz.2.688': attribute type 17 has an invalid length.
[  285.747419][ T8587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.698802][ T5951] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  288.017563][ T5951] usb 3-1: config 0 interface 0 altsetting 14 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.041990][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0
[  288.050461][ T5951] usb 3-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00
[  288.091127][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.133660][ T5951] usb 3-1: config 0 descriptor??
[  288.602967][ T5951] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0
[  288.620516][ T5951] hid-rmi 0003:1532:011D.0005: unknown main item tag 0x0
[  288.658072][ T5951] hid-rmi 0003:1532:011D.0005: hidraw0: USB HID v0.00 Device [HID 1532:011d] on usb-dummy_hcd.2-1/input0
[  288.799102][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.810379][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.922594][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.945461][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.016175][ T5935] usb 3-1: USB disconnect, device number 28
[  289.929783][ T5928] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  290.107521][ T5928] usb 3-1: Using ep0 maxpacket: 8
[  290.152230][ T5928] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  290.160531][ T5928] usb 3-1: config 179 has no interface number 0
[  290.198373][ T5928] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  290.241553][ T8664] netlink: 'syz.4.711': attribute type 6 has an invalid length.
[  290.254730][ T8664] QAT: failed to copy from user cfg_data.
[  290.337763][ T5928] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  290.368167][ T5928] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  290.397059][ T5928] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  290.437718][ T5928] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  290.478755][ T5928] usb 3-1: config 179 interface 65 has no altsetting 0
[  290.490525][ T5928] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  290.510151][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.531310][  T122] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  290.569526][ T5928] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16
[  290.581220][ T5951] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  290.641416][ T5223] input input16: unable to receive magic message: -110
[  290.678381][ T5223] input input16: unable to receive magic message: -32
[  290.701607][  T122] usb 5-1: Using ep0 maxpacket: 32
[  290.711266][ T5223] input input16: unable to receive magic message: -32
[  290.745082][ T5951] usb 1-1: Invalid ep0 maxpacket: 16
[  290.845070][  T122] usb 5-1: config index 0 descriptor too short (expected 539, got 27)
[  290.888473][ T5223] input input16: unable to receive magic message: -32
[  290.932002][ T5951] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[  290.943812][  T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[  291.014453][ T8647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.082542][ T8647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.101718][ T5951] usb 1-1: Invalid ep0 maxpacket: 16
[  291.133181][ T5223] input input16: unable to receive magic message: -32
[  291.133355][ T5951] usb usb1-port1: attempt power cycle
[  291.162614][  T122] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[  291.283639][ T5223] input input16: unable to receive magic message: -32
[  291.363392][ T5937] usb 3-1: USB disconnect, device number 29
[  291.363396][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  291.363441][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  291.386524][    C0] vkms_vblank_simulate: vblank timer overrun
[  291.535910][  T122] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  291.571897][ T5951] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[  291.603824][ T5951] usb 1-1: Invalid ep0 maxpacket: 16
[  291.621570][  T122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.701850][  T122] usb 5-1: Product: syz
[  291.831255][ T5951] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[  292.119830][ T5951] usb 1-1: Invalid ep0 maxpacket: 16
[  292.125582][ T5951] usb usb1-port1: unable to enumerate USB device
[  292.144790][  T122] usb 5-1: Manufacturer: syz
[  292.165668][  T122] usb 5-1: SerialNumber: syz
[  292.280127][  T122] usb 5-1: config 0 descriptor??
[  292.293840][  T122] hub 5-1:0.0: bad descriptor, ignoring hub
[  292.299814][  T122] hub 5-1:0.0: probe with driver hub failed with error -5
[  292.309401][  T122] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17
[  292.392105][  T122] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[  292.455081][  T122] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22
[  293.189945][ T5951] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  293.275271][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.283540][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.309817][ T2997] ------------[ cut here ]------------
[  293.315748][ T2997] WARNING: CPU: 0 PID: 2997 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440
[  293.325659][ T2997] Modules linked in:
[  293.330144][ T2997] CPU: 0 UID: 0 PID: 2997 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  293.339778][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  293.350482][ T2997] Workqueue: cfg80211 cfg80211_event_work
[  293.356387][ T2997] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  293.362989][ T2997] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 f9 a3 00 cc e8 32 9c e6 f6 90 0f 0b 90 eb bd e8 27 9c e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 17 9c e6 f6 90 0f 0b 90 e9 de fd
[  293.382715][ T2997] RSP: 0018:ffffc9000bec78e0 EFLAGS: 00010293
[  293.388823][ T2997] RAX: ffffffff8ad922d9 RBX: dffffc0000000000 RCX: ffff88802f080000
[  293.397148][ T2997] RDX: 0000000000000000 RSI: ffffffff8d9b9eb1 RDI: ffffffff8be33d80
[  293.405974][ T2997] RBP: ffffc9000bec79b0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486
[  293.414643][ T2997] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffff88807abfcd90
[  293.422939][ T2997] R13: 1ffff920017d8f24 R14: ffff88802484b338 R15: 0000000000000006
[  293.430929][ T2997] FS:  0000000000000000(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000
[  293.439924][ T2997] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  293.446548][ T2997] CR2: 000000000c3bf9de CR3: 00000000786c8000 CR4: 00000000003526f0
[  293.454682][ T2997] Call Trace:
[  293.457948][ T2997]  <TASK>
[  293.460860][ T2997]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.466086][ T2997]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  293.472010][ T2997]  ? __pfx___mutex_lock+0x10/0x10
[  293.477105][ T2997]  cfg80211_process_wdev_events+0x38a/0x4f0
[  293.483212][ T2997]  cfg80211_process_rdev_events+0xa1/0x110
[  293.489021][ T2997]  cfg80211_event_work+0x31/0x70
[  293.493994][ T2997]  ? process_scheduled_works+0x9ef/0x17b0
[  293.499693][ T2997]  process_scheduled_works+0xae1/0x17b0
[  293.505743][ T2997]  ? __pfx_process_scheduled_works+0x10/0x10
[  293.512207][ T2997]  worker_thread+0x8a0/0xda0
[  293.516807][ T2997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.523182][ T2997]  ? __kthread_parkme+0x7b/0x200
[  293.528146][ T2997]  kthread+0x70e/0x8a0
[  293.532274][ T2997]  ? __pfx_worker_thread+0x10/0x10
[  293.537498][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.542263][ T2997]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.547460][ T2997]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.552714][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.557298][ T2997]  ret_from_fork+0x436/0x7d0
[  293.561918][ T2997]  ? __pfx_ret_from_fork+0x10/0x10
[  293.567177][ T2997]  ? __switch_to_asm+0x39/0x70
[  293.572252][ T2997]  ? __switch_to_asm+0x33/0x70
[  293.577021][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.581620][ T2997]  ret_from_fork_asm+0x1a/0x30
[  293.586399][ T2997]  </TASK>
[  293.589400][ T2997] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  293.596745][ T2997] CPU: 0 UID: 0 PID: 2997 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) 
[  293.606271][ T2997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  293.616347][ T2997] Workqueue: cfg80211 cfg80211_event_work
[  293.622061][ T2997] Call Trace:
[  293.625328][ T2997]  <TASK>
[  293.628244][ T2997]  dump_stack_lvl+0x99/0x250
[  293.632822][ T2997]  ? __asan_memcpy+0x40/0x70
[  293.637409][ T2997]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.642599][ T2997]  ? __pfx__printk+0x10/0x10
[  293.647190][ T2997]  vpanic+0x281/0x750
[  293.651159][ T2997]  ? __pfx__printk+0x10/0x10
[  293.655732][ T2997]  ? __pfx_vpanic+0x10/0x10
[  293.660216][ T2997]  ? is_bpf_text_address+0x26/0x2b0
[  293.665404][ T2997]  panic+0xb9/0xc0
[  293.669107][ T2997]  ? __pfx_panic+0x10/0x10
[  293.673529][ T2997]  __warn+0x31b/0x4b0
[  293.677526][ T2997]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  293.683076][ T2997]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  293.688627][ T2997]  report_bug+0x2be/0x4f0
[  293.692947][ T2997]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  293.698496][ T2997]  ? __cfg80211_ibss_joined+0x3ca/0x440
[  293.704040][ T2997]  ? __cfg80211_ibss_joined+0x3cc/0x440
[  293.709589][ T2997]  handle_bug+0x84/0x160
[  293.713916][ T2997]  exc_invalid_op+0x1a/0x50
[  293.718418][ T2997]  asm_exc_invalid_op+0x1a/0x20
[  293.723259][ T2997] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440
[  293.729416][ T2997] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 58 f9 a3 00 cc e8 32 9c e6 f6 90 0f 0b 90 eb bd e8 27 9c e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 17 9c e6 f6 90 0f 0b 90 e9 de fd
[  293.749032][ T2997] RSP: 0018:ffffc9000bec78e0 EFLAGS: 00010293
[  293.755115][ T2997] RAX: ffffffff8ad922d9 RBX: dffffc0000000000 RCX: ffff88802f080000
[  293.763075][ T2997] RDX: 0000000000000000 RSI: ffffffff8d9b9eb1 RDI: ffffffff8be33d80
[  293.771124][ T2997] RBP: ffffc9000bec79b0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486
[  293.779173][ T2997] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: ffff88807abfcd90
[  293.787145][ T2997] R13: 1ffff920017d8f24 R14: ffff88802484b338 R15: 0000000000000006
[  293.795127][ T2997]  ? __cfg80211_ibss_joined+0x3c9/0x440
[  293.800692][ T2997]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.805922][ T2997]  ? __pfx___cfg80211_ibss_joined+0x10/0x10
[  293.811820][ T2997]  ? __pfx___mutex_lock+0x10/0x10
[  293.816844][ T2997]  cfg80211_process_wdev_events+0x38a/0x4f0
[  293.822843][ T2997]  cfg80211_process_rdev_events+0xa1/0x110
[  293.828659][ T2997]  cfg80211_event_work+0x31/0x70
[  293.833586][ T2997]  ? process_scheduled_works+0x9ef/0x17b0
[  293.839298][ T2997]  process_scheduled_works+0xae1/0x17b0
[  293.844862][ T2997]  ? __pfx_process_scheduled_works+0x10/0x10
[  293.850855][ T2997]  worker_thread+0x8a0/0xda0
[  293.855443][ T2997]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.861790][ T2997]  ? __kthread_parkme+0x7b/0x200
[  293.866727][ T2997]  kthread+0x70e/0x8a0
[  293.870791][ T2997]  ? __pfx_worker_thread+0x10/0x10
[  293.875896][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.880502][ T2997]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.885696][ T2997]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.890907][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.895496][ T2997]  ret_from_fork+0x436/0x7d0
[  293.900172][ T2997]  ? __pfx_ret_from_fork+0x10/0x10
[  293.905275][ T2997]  ? __switch_to_asm+0x39/0x70
[  293.910042][ T2997]  ? __switch_to_asm+0x33/0x70
[  293.914819][ T2997]  ? __pfx_kthread+0x10/0x10
[  293.919415][ T2997]  ret_from_fork_asm+0x1a/0x30
[  293.924196][ T2997]  </TASK>
[  293.927458][ T2997] Kernel Offset: disabled
[  293.931772][ T2997] Rebooting in 86400 seconds..