last executing test programs:

9.629077663s ago: executing program 4 (id=463):
r0 = socket(0x2b, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000e40)=ANY=[@ANYBLOB="030000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000067e03d57a9a88b0c00000000000000000000000000000000000000000000000000a4ff000000000000"], 0x8c)

8.713218089s ago: executing program 4 (id=466):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000080)="01", 0x1)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a7c2d6c6082161c320fdf999dd7e24908cbeb13e5d4c9ec5a86d3ed68583b84d2dd9eadd2342d729a8e8c6c458d1aa7edfa117020cafd2b7a164eb8bc8279d4f55c117c446839204e63bd7831ef1824738003dd4e6e940b252f4826d65280c7e1f456709f4c0cbb9da5f8a8a9890689274333b5b977c6f3fc9dd26d5f4eb2bb1d"], 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000b00)="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", 0x3d5}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)="f0", 0x1}], 0x1}}], 0x2, 0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

6.681211208s ago: executing program 4 (id=474):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0x9, 0x80, 0xe6b4, 0x0, 0xfffffffffffffffa, 0x1, 0xa, 0x2, 0x2, 0x700000000000000, 0x3, 0x2, 0xfffffffffffffffe, 0x5, 0x6fffffff, 0x2, 0x4, 0x9883, 0xb, 0x6, 0x8, 0x102, 0x4, 0x9, 0x2, 0x1fd, 0x18, 0x81, 0x1, 0x5, 0x5, 0x2, 0x101, 0x40, 0x1, 0x4, 0x9, 0x81, 0x0, 0x6, 0x6, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x8, 0x401, 0x200000000005, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x5, 0x94e, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xa, 0x11, 0xa, 0x5, 0xa8, 0x2, 0xffffffffffffffff, 0x5, 0x87f, 0x7, 0x7, 0xae8e, 0x1e30fa4c, 0xb, 0xfffffffffffffffd, 0x4, 0x49f, 0x3, 0x7, 0xfffffffffffffad7, 0x3, 0xba00, 0x3, 0xd, 0xad65, 0x1, 0x100, 0x7, 0xe, 0x3, 0x1000000003ff, 0x5, 0x21, 0x9, 0xfffffffffffffffe, 0x401, 0x8008, 0x1e4b, 0x2, 0x7fffffff, 0xf, 0x10000, 0xe, 0x2, 0x6, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x1, 0x9, 0x2, 0x1000, 0x80, 0xb, 0xd, 0x4, 0x3, 0x2000020006, 0x8, 0x401, 0x7f, 0x1, 0x7, 0xea7, 0x1]})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x18, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x40000)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x9, 0x1, '(\\%]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8100)
r5 = syz_usb_connect(0x5, 0x4c, &(0x7f0000000580)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023a00010d019002090432a70201039e080929eebdc65cb9a2db082387ac33afe3410725010305f804090507020002040266072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ringbuf_query, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x3, 0x4, 0x8, 0x11}, @ldst={0x3, 0x3, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x4, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1], &(0x7f0000000740)=[{0x2, 0x4, 0x4, 0x2}, {0x3, 0x5, 0x5}, {0x2, 0x3, 0x1, 0x2}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x4, 0xb, 0x4}, {0x2, 0x5, 0x9, 0x7}], 0x10, 0xffffffff}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x2044)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x148, r8, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_IE={0xe3, 0x2a, [@fast_bss_trans={0x37, 0x5d, {0xd, 0x2, "738cbd45722f9fac2a1ec9b32a483b08", "5c0e02a10914ebbecc18c1b758d55573c1fd403bb2ccb640592daced0e3c01fd", "364eff5eec8dd7a78f802a4585005522c92a69c06bb5bf7c11d72568e7e6c276", [{0x2}, {0x4, 0x7, "4349fd0b17c4c7"}]}}, @random_vendor={0xdd, 0x6d, "650c5e03e0221f7213026ccafce6b11ee887da8d8c62ab26ddbbd5195bc2b39b5c1e0d1e0c266bb528505f3d09bfe8b6b7e18a38631dff46a840d3661f89b56da188910a6383658f0b279e3c6671a0c84c1f1a63076fce6bcf4ba1c7131bed4e3b62bbdeb02357d20c021e89a9"}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0xbe29b0ccd122e311}}, @supported_rates={0x1, 0x6, [{0xd}, {0x1, 0x1}, {0xb, 0x1}, {0x6c}, {0x9, 0x1}, {0x30, 0x1}]}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x7}, @supported_rates={0x1, 0x6, [{0x6c, 0x1}, {0x36}, {0x1b, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0xc}]}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x40001}, 0x20004004)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000900)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xc5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}]}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x921}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}]}, @CTA_STATUS={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x7c}}, 0x40000)
syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000bc0)={0xc, &(0x7f0000000b40)={0x40, 0x5, 0x2d, {0x2d, 0x21, "ecf72c6dd86def4643e527acc6f5fac6aa3e01a51f5932cb3b8433e10f9650bbc0ec70940af80dcd5a0b0a"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x10, &(0x7f0000000c00)={0x20, 0x3, 0x96, "d23bba2c69ebcff8b055c48a2b4b6a3cbc4eada5ba2b856866026c27508c638abed8bc37076ab08ef7673f0e170919e2c1c36db1f421cb3a7d1a195f460cc3218e9685f2031fad7528d9e68925246edfb0dba4125c0696e70968d14fb79b51e97669ac438e52714aef46701593ed1be0ce107274c6291839f0310fd2ba01d604243f671ca102906ebcde8faf3b9a9078c971d6ca3cd4"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}})

6.599864421s ago: executing program 3 (id=475):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000c500000005000000bf090000000000006609010000000000060000000b900000180100002020752500000000002020207b9af8ff00140000ad9100000000000037010000f8ffffffb702000008000000b70300000900000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.272397381s ago: executing program 3 (id=481):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x0, 0x10, &(0x7f0000000000), 0x45, 0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, 0x0, 0x10, 0x1}, 0x48)

6.268640273s ago: executing program 2 (id=482):
r0 = socket(0x28, 0x2, 0xa0)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/187, 0xbb}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000600)=""/29, 0x1d}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000740)=""/25, 0x19}, {&(0x7f0000000780)=""/62, 0x3e}], 0x7, &(0x7f0000000800)=""/230, 0xe6}, 0x6}, {{&(0x7f0000000900)=@hci, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000980)=""/251, 0xfb}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/251, 0xfb}, {&(0x7f0000000b80)=""/178, 0xb2}, {&(0x7f0000000c40)=""/172, 0xac}, {&(0x7f0000000d00)=""/156, 0x9c}], 0x6, &(0x7f0000000e00)=""/46, 0x2e}}], 0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x68, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0x1299, 0x9, 0x55b4e85f}, 0x0) (async)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r7, 0x40046103, 0x0) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000e80)={0x9, {{0x2, 0xfffd, @broadcast}}}, 0x84) (async)
setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000002c0)=ANY=[], 0x18c) (async)
r8 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x10000, 0x87)
unlinkat(r8, &(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
unshare(0x1e028180) (async)
semget$private(0x0, 0x3, 0x0)
semctl$SETALL(0x0, 0x0, 0x14, 0x0)
ioctl$TCSETS(r3, 0x5402, 0x0)
write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x191, 0x140, 0xa00, 0x40, 0x8, 0x1, 0x20, 0x0, {}, {0x0, 0xffffffff, 0x1}, {0x0, 0x0, 0xfffffffd}, {0x6, 0x4}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x6, 0x6, 0xff, 0x0, 0x408, 0x4, 0x0, 0x2, 0xa})
semctl$SETVAL(0x0, 0x2, 0x10, 0x0) (async)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000004c0)=""/88) (async)
fsopen(&(0x7f0000000240)='nfsd\x00', 0x1) (async)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, &(0x7f0000000080)={0x1e, {{0xa, 0x4f23, 0x1000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8a}}, {{0xa, 0x0, 0x10002, @local}}}, 0x104)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7abd, {{0xa, 0xfffe, 0x0, @empty, 0x3}}, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x104)

6.183270875s ago: executing program 3 (id=483):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58)
r1 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000180)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000bc0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r4}})
io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = accept4(r0, 0x0, 0x0, 0x800)
accept4$tipc(r5, &(0x7f0000001a00)=@name, 0x0, 0x0)

5.845218406s ago: executing program 3 (id=484):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000300)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00')
read$FUSE(r1, &(0x7f000001b000)={0x2020}, 0xfffffebf)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000300) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_targets\x00') (async)
read$FUSE(r1, &(0x7f000001b000)={0x2020}, 0xfffffebf) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) (async)

5.402149444s ago: executing program 2 (id=486):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "000000ffffff00000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
write$UHID_INPUT(r2, &(0x7f00000029c0)={0xa, {"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", 0x1000}}, 0x1006)
ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000000))
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000580, 0x800005b0, 0x800005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcfffffff80612b2cf6cda971c5228510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000f47100000000000000"]}, 0xe0)

4.736765614s ago: executing program 2 (id=488):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b"]) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) (async)
openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0xc0, 0xe5, 0x8f, 0x10, 0x19d2, 0x330, 0xfc7d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xd0, 0xbf, [{{0x9, 0x4, 0x86, 0xa, 0x0, 0xff, 0xff, 0xff, 0x5}}]}}]}}, &(0x7f0000000f00)={0x0, 0x0, 0x1c, &(0x7f0000000d40)={0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x9c, 0x2, 0x1, 0x0, 0x7, [0x30, 0xc000]}]}}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet(0x2, 0x3, 0x2)
r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x101cc1)
ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4}, 0x6e)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f80)=""/4096)
r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x6, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", "00000010", "000000ff", "1d00193d", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000002c0)={0x6, 0xfffffffa, 0x3})
r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) (async)
socket$inet6(0xa, 0x1, 0x0)

4.443683377s ago: executing program 4 (id=490):
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000012"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000280)={0x18, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0)
r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x44, 0x4004, @fd=r3, 0xa9c0, 0x0, 0x0, 0x2})
io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30)

4.168826886s ago: executing program 0 (id=492):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto(r1, &(0x7f0000000180)="0de268925e2cb061b4e899b7710f0ba171492ae7463410efeb2fb7bb0b1acdfdc29faf50d0cc26e027b20eb7f6c3cbeec787af27ffd5861c5f4c343d1ccc94215d51ed77bab006df3a900f31aa9e1791c97a4b93ee2b31cf899ef481dad38c3d8e7a6359034f2ff12535", 0xfffffffffffffe4d, 0x2c000800, 0x0, 0x63)
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/90, 0x5a}], 0x2}, 0x40000040)

4.119330074s ago: executing program 1 (id=493):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f00000004c0)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4.034604249s ago: executing program 0 (id=494):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0xfff2, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

3.769092488s ago: executing program 2 (id=495):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2b, 0x80801, 0x1)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
unshare(0x22020400)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
close(0x3)
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_open_procfs(0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0xfffffffffffffff9, 0x0, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)

3.716330801s ago: executing program 1 (id=496):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000580)={0x1, 0x0, [{0x487, 0x0, 0xe8}]})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendto(r3, &(0x7f0000000000)="0de268925e2cb061b4e899b7710f0ba1", 0x10, 0x20048080, 0x0, 0x0)
recvmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/90, 0x5a}], 0x2}, 0x40000040)

3.701697113s ago: executing program 0 (id=497):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000080)="01", 0x1)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a7c2d6c6082161c320fdf999dd7e24908cbeb13e5d4c9ec5a86d3ed68583b84d2dd9eadd2342d729a8e8c6c458d1aa7edfa117020cafd2b7a164eb8bc8279d4f55c117c446839204e63bd7831ef1824738003dd4e6e940b252f4826d65280c7e1f456709f4c0cbb9da5f8a8a9890689274333b5b977c6f3fc9dd26d5f4eb2bb1d"], 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

2.737821775s ago: executing program 3 (id=498):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a7c2d6c6082161c320fdf999dd7e24908cbeb13e5d4c9ec5a86d3ed68583b84d2dd9eadd2342d729a8e8c6c458d1aa7edfa117020cafd2b7a164eb8bc8279d4f55c117c446839204e63bd7831ef1824738003dd4e6e940b252f4826d65280c7e1f456709f4c0cbb9da5f8a8a9890689274333b5b977c6f3fc9dd26d5f4eb2bb1d"], 0x64}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

2.736304393s ago: executing program 1 (id=508):
r0 = socket(0x2b, 0x80801, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x200000) (async)
cachestat(r3, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r4 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x334b, 0x80, 0x3, 0x805}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000380)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x80000002}, 0x0)
r7 = gettid()
rt_sigqueueinfo(r7, 0x21, 0x0) (async)
prctl$PR_SET_IO_FLUSHER(0x39, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc600c7, 0x0)
io_uring_enter(r4, 0xbbc, 0xd582, 0x0, 0x0, 0x0) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800f87d, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0cc5640, &(0x7f00000000c0)={0x1, @raw_data="219f345a535f7fd848535633c36c394a1de003201d326f685d1def32fecaedfe67bff9eeb734503985716e328e346cac5c7a6e58049538bc972fd0823c58cc1f150eed627008c13a01db5216271eeb2a5b3f12a1c282d5b2aeb1c73a453e206bdfbf1fce95eca828f959c0de120fcd60bf43e078e971056e757561871a313686345cac5da6d85a04ec47052dd06bd49003379826c60141df097d118c2444c57b085012adef590a7b8e0ea4889f6a3f026ffe08cbedab37b9ee80be9247a4689e6ba32e2f44298657"}) (async)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000140)={0xb, @pix_mp={0x1, 0x2, 0x35323645, 0x5, 0x3, [{0x4, 0xb}, {0x10001, 0xa7000000}, {0x6, 0x6}, {0x9, 0x9}, {0x3, 0x8}, {0x2, 0xe15}, {0x4, 0x5}, {0x9ec, 0xfffffff7}], 0x9, 0x1, 0x6, 0x2, 0x6}}) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0x14, 0x5a, 0x1, 0x2070bd25}, 0x14}}, 0x0) (async)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)

2.520993363s ago: executing program 1 (id=499):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000b5, 0x0, 0xf}]})
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80)
futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2)

2.226617246s ago: executing program 0 (id=500):
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0))
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r4, 0x5402)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2)
r6 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r6, 0x10000)
fcntl$addseals(r6, 0x409, 0x7)
r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000440)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x2)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000040)={{r7}, 0x401, 0x40, 0x4})
connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010102}, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
r8 = add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x33, 0x62, 0x32, 0x35, 0x33, 0x36, 0x62, 0x0, 0x62, 0x61, 0x36, 0x65, 0x64, 0x38, 0x65, 0x64]}, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f262f206465665f756c7420747275737465643a2f64657175656e46657232002034303030323030303030304e3630303620663365370e6266"], 0x43, r8)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0)
syz_emit_ethernet(0xa56, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0)

1.569078771s ago: executing program 2 (id=501):
futex(&(0x7f000000cffc)=0x2, 0x5, 0x2, 0x0, &(0x7f00000001c0), 0x3000000)
r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sync()
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffdc4)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8)
ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x9c0000, 0x20000001, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9a0907, 0x9, '\x00', @p_u16=&(0x7f0000000240)}})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
shmat(r0, &(0x7f0000001000/0x4000)=nil, 0xffffffffffffdfff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, 0x2, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004895}, 0x20000004)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000040)=0x10, 0x4)

1.398605338s ago: executing program 3 (id=502):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000080)="01", 0x1)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f0272890f24383fe450fb26ea7dcefadfa5e48e3bcf5693d"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a7c2d6c6082161c320fdf999dd7e24908cbeb13e5d4c9ec5a86d3ed68583b84d2dd9eadd2342d729a8e8c6c458d1aa7edfa117020cafd2b7a164eb8bc8279d4f55c117c446839204e63bd7831ef1824738003dd4e6e940b252f4826d65280c7e1f456709f4c0cbb9da5f8a8a9890689274333b5b977c6f3fc9dd26d5f4eb2bb1d"], 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

1.060075496s ago: executing program 1 (id=503):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00t\x00'/100}}}}}}, 0x0)

1.017277743s ago: executing program 4 (id=504):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendto(r1, &(0x7f0000000180)="0de268925e2cb061b4e899b7710f0ba171492ae7463410efeb2fb7bb0b1acdfdc29faf50d0cc26e027b20eb7f6c3cbeec787af27ffd5861c5f4c343d1ccc94215d51ed77bab006df3a900f31aa9e1791c97a4b93ee2b31cf899ef481dad38c3d8e7a6359034f2ff12535", 0xfffffffffffffe4d, 0x2c000800, 0x0, 0x63)
recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/90, 0x5a}], 0x2}, 0x40000040)

486.827377ms ago: executing program 1 (id=505):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket(0x1e, 0x4, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c)
r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4605030908770000000000000003000600155eef2e5a020002380000000b03010008000100e10a2000010085fea8b466a7a0e80000030000003d0e0000050000000b0000006e"], 0x58)
close(r9)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000"])
recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r0}]}, 0x3c}, 0x1, 0x620b}, 0x0)

485.461204ms ago: executing program 4 (id=506):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x1, 0x3c0, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0x9, 0x80, 0xe6b4, 0x0, 0xfffffffffffffffa, 0x1, 0xa, 0x2, 0x2, 0x700000000000000, 0x3, 0x2, 0xfffffffffffffffe, 0x5, 0x6fffffff, 0x2, 0x4, 0x9883, 0xb, 0x6, 0x8, 0x102, 0x4, 0x9, 0x2, 0x1fd, 0x18, 0x81, 0x1, 0x5, 0x5, 0x2, 0x101, 0x40, 0x1, 0x4, 0x9, 0x81, 0x0, 0x6, 0x6, 0x2e2, 0x101, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x8, 0x401, 0x200000000005, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x5, 0x94e, 0x7, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xa, 0x11, 0xa, 0x5, 0xa8, 0x2, 0xffffffffffffffff, 0x5, 0x87f, 0x7, 0x7, 0xae8e, 0x1e30fa4c, 0xb, 0xfffffffffffffffd, 0x4, 0x49f, 0x3, 0x7, 0xfffffffffffffad7, 0x3, 0xba00, 0x3, 0xd, 0xad65, 0x1, 0x100, 0x7, 0xe, 0x3, 0x1000000003ff, 0x5, 0x21, 0x9, 0xfffffffffffffffe, 0x401, 0x8008, 0x1e4b, 0x2, 0x7fffffff, 0xf, 0x10000, 0xe, 0x2, 0x6, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x1, 0x9, 0x2, 0x1000, 0x80, 0xb, 0xd, 0x4, 0x3, 0x2000020006, 0x8, 0x401, 0x7f, 0x1, 0x7, 0xea7, 0x1]})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0xb, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0x9, 0x1, '(\\%]\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8100)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x13, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ringbuf_query, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x3, 0x4, 0x8, 0x11}, @ldst={0x3, 0x3, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x10}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x4, 0x7, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1], &(0x7f0000000740)=[{0x2, 0x4, 0x4, 0x2}, {0x3, 0x5, 0x5}, {0x2, 0x3, 0x1, 0x2}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x4, 0xb, 0x4}, {0x2, 0x5, 0x9, 0x7}], 0x10, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r1, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x2044)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8050}, 0x240048c0)
sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x148, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x7}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x23}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xf8}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_IE={0xe3, 0x2a, [@fast_bss_trans={0x37, 0x5d, {0xd, 0x2, "738cbd45722f9fac2a1ec9b32a483b08", "5c0e02a10914ebbecc18c1b758d55573c1fd403bb2ccb640592daced0e3c01fd", "364eff5eec8dd7a78f802a4585005522c92a69c06bb5bf7c11d72568e7e6c276", [{0x2}, {0x4, 0x7, "4349fd0b17c4c7"}]}}, @random_vendor={0xdd, 0x6d, "650c5e03e0221f7213026ccafce6b11ee887da8d8c62ab26ddbbd5195bc2b39b5c1e0d1e0c266bb528505f3d09bfe8b6b7e18a38631dff46a840d3661f89b56da188910a6383658f0b279e3c6671a0c84c1f1a63076fce6bcf4ba1c7131bed4e3b62bbdeb02357d20c021e89a9"}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0xbe29b0ccd122e311}}, @supported_rates={0x1, 0x6, [{0xd}, {0x1, 0x1}, {0xb, 0x1}, {0x6c}, {0x9, 0x1}, {0x30, 0x1}]}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ibss={0x6, 0x2, 0x7}, @supported_rates={0x1, 0x6, [{0x6c, 0x1}, {0x36}, {0x1b, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0xc}]}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x45}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}]}, 0x148}, 0x1, 0x0, 0x0, 0x40001}, 0x20004004)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x7c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x7}]}}, @CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x921}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x804}]}, @CTA_STATUS={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}]}]}, 0x7c}}, 0x40000)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000bc0)={0xc, &(0x7f0000000b40)={0x40, 0x5, 0x2d, {0x2d, 0x21, "ecf72c6dd86def4643e527acc6f5fac6aa3e01a51f5932cb3b8433e10f9650bbc0ec70940af80dcd5a0b0a"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000d40)={0x10, &(0x7f0000000c00)={0x20, 0x3, 0x96, "d23bba2c69ebcff8b055c48a2b4b6a3cbc4eada5ba2b856866026c27508c638abed8bc37076ab08ef7673f0e170919e2c1c36db1f421cb3a7d1a195f460cc3218e9685f2031fad7528d9e68925246edfb0dba4125c0696e70968d14fb79b51e97669ac438e52714aef46701593ed1be0ce107274c6291839f0310fd2ba01d604243f671ca102906ebcde8faf3b9a9078c971d6ca3cd4"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x3}})

429.126201ms ago: executing program 0 (id=507):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x5, {0x0, 0x0, 0x0, r3, {0x0, 0xfffc}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_POLICE={0x850, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x7, 0x4, 0xc, 0x9, {0xd, 0x2, 0x4, 0x4, 0x7, 0x401}, {0x4, 0x1, 0x5, 0x10, 0xfff7, 0x4b2}, 0x6, 0x14ff, 0x3ff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x38, 0x1, 0x1, 0x8, 0x7f, 0x6, 0x3, 0x6, 0x10000, 0x86, 0x9, 0x6, 0x5, 0x9, 0x5f, 0x0, 0x0, 0x13f, 0xfffffffe, 0x0, 0xd31, 0xf54, 0x9, 0x4, 0x4, 0x6, 0x9, 0x7fffffff, 0xfffffffd, 0x7fffffff, 0x8, 0x0, 0xfffffffe, 0x5, 0x5dbd0fd8, 0x8, 0x1887, 0x2, 0x95f, 0x7, 0x6, 0xa, 0x7f, 0xfffffffe, 0x8, 0x2, 0x6, 0x4, 0x6, 0x402f, 0xd, 0x5, 0x6f9d, 0x0, 0x800, 0x3ff, 0x8, 0xa, 0x9, 0x4, 0xd, 0x3, 0xb8f, 0x6, 0x0, 0xffffffff, 0x8000, 0xffffffff, 0x8, 0xfffffffc, 0xee, 0x4, 0x9, 0x2, 0x54eef174, 0xc, 0x9, 0x5, 0xe2, 0x20004, 0x1, 0xffff, 0x5, 0x5, 0x7, 0x5, 0x7, 0x4, 0x4, 0x7, 0x100, 0x8, 0x2, 0x9, 0x0, 0x0, 0xe32, 0x6, 0x8, 0x6, 0x66, 0x7, 0x7, 0x8, 0x5b, 0x7625, 0x51, 0x6, 0xfffffffe, 0x0, 0xa4d, 0x2, 0x10001, 0x7, 0x8, 0x3, 0x8, 0x3, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x400000, 0xc55b, 0x8000, 0xf943, 0x4, 0x3000000, 0x2, 0x10000, 0xd, 0xffffffff, 0x9, 0xd3, 0xfffffffb, 0x4, 0x9, 0x401, 0x82baa23, 0xd, 0x0, 0x6, 0x21a, 0xe, 0x1, 0x1430, 0x8, 0x4, 0x7, 0xe, 0x7dab, 0x4, 0x5, 0x4, 0x3, 0xfffffffe, 0x7, 0x6, 0x8ef6, 0x7239, 0x80000001, 0x0, 0xd41, 0x6, 0x2, 0x4, 0x200, 0x8, 0x5, 0xc14, 0x7324, 0x4, 0x50f6, 0x5, 0x4, 0x3, 0x2, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7767, 0x8, 0xe0ba, 0x4f, 0x3, 0x4, 0x7, 0x7fffffff, 0x3, 0x3, 0x5, 0x8, 0x4, 0x80, 0x401, 0x7, 0x1, 0x0, 0x8, 0x7c4, 0x3, 0x6, 0x6, 0xe8, 0x0, 0x6, 0x6, 0x3, 0x8a4, 0x1, 0x9, 0x9, 0x9, 0x200, 0x7, 0xd235, 0x9, 0x7fffffff, 0xf7d, 0x8001, 0x2, 0x7fff, 0x9f7c, 0x7, 0x4, 0xf, 0x1, 0x2, 0x6, 0x400, 0x5, 0x80, 0x400, 0x5, 0xc, 0xff, 0xffff7002, 0x63c, 0x9, 0x1ff, 0xfff, 0x8, 0x8c, 0x40, 0x8, 0xed6, 0xf6, 0x0, 0x3, 0x9, 0x10, 0x9, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x8, 0x8000, 0x8, 0x2, 0x9, 0x5, 0xfff, 0x3, 0x101, 0xbf7, 0x8, 0xff, 0x6, 0x113, 0xffff, 0x1, 0x8, 0x7fffffff, 0x6, 0x9, 0x33, 0x5, 0x2f7, 0x100, 0x21, 0x4, 0x7, 0xff, 0x6, 0xfffffffe, 0x7, 0x8, 0x1, 0x8, 0xf33c, 0x3, 0x1, 0x80000000, 0x62e, 0x3, 0xdb2, 0x0, 0xe00, 0x4, 0x2, 0x3, 0x2, 0xfffffff6, 0x5, 0x3, 0x7, 0x8, 0x1, 0x7f, 0x8, 0x6, 0x4, 0x3, 0x0, 0x803, 0x1, 0x5, 0x0, 0x8000, 0xfffffffa, 0xb7, 0xc8b6f5a2, 0x6, 0x2f, 0x7ff, 0x9, 0x8, 0x6, 0x0, 0x8, 0x9, 0x0, 0x5, 0x8b34, 0x2, 0x7e, 0x4, 0x4, 0xfeffffff, 0x1, 0xa, 0xfffffffb, 0x3, 0xffffffff, 0x0, 0x4, 0xd6, 0x7, 0x4, 0x3, 0x8, 0x9, 0x8, 0x2de0, 0x5191, 0x6, 0x401, 0x7, 0x9, 0x7, 0x3, 0x6, 0x1, 0xfffffffb, 0xb839, 0xfffffffa, 0x4, 0x768, 0x7, 0x7f, 0x6, 0x7, 0x4, 0x8b, 0x4, 0x2000000, 0x5, 0xf0, 0x42490, 0xd, 0x3, 0x5c, 0x80, 0x2, 0x800, 0x8, 0x6, 0xff, 0xffff0000, 0x3, 0x10000, 0x80000001, 0x5, 0xffffffff, 0x4be24694, 0x2, 0x2, 0x100, 0x5, 0x1, 0x5, 0x4, 0xffffff95, 0x5, 0x0, 0xc, 0x6, 0x1000, 0xa, 0x7, 0x4, 0x340, 0x0, 0x0, 0x7, 0x101, 0x2, 0x7ce2352, 0x7fffffff, 0x5e, 0x8e5b, 0x3, 0x8, 0x9, 0x1, 0x80000000, 0x7, 0x301, 0x91, 0x3, 0x80000001, 0x9, 0x1, 0x3e79, 0xffffffff, 0x8, 0x525, 0x7, 0x6, 0x2470a614, 0xe, 0x8, 0x1, 0x7, 0x0, 0x5, 0x4, 0x1, 0x1, 0xfffffc1f, 0x6, 0x2, 0x1, 0x9, 0x7fff, 0xffffffff, 0x4, 0xffff2b7d, 0x4, 0xcdff, 0x9, 0x0, 0x49, 0x6, 0x0, 0x5, 0x9, 0x7, 0x8, 0x7, 0xea, 0x7, 0x7, 0x2, 0x5, 0xff, 0x6, 0xffff, 0x4cd, 0x7, 0x3, 0x3, 0x10001, 0x0, 0x6, 0x7, 0xffffffff, 0xe000000, 0x1, 0x4, 0x7, 0x8, 0xb, 0x7, 0x0, 0xcb65, 0x6, 0xe, 0x240000, 0x9, 0x8, 0x8, 0xfffffff8, 0x9, 0xf, 0x8, 0x5, 0x9, 0x100]}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

29.253093ms ago: executing program 0 (id=509):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780d206050086dd6018232500182c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa620202"], 0x0)
syz_emit_ethernet(0x56, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b00020100000000b9365394fc379af006b2"], 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x0, 0xc6})
openat$sequencer(0xffffffffffffff9c, 0x0, 0xa082, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001880)={0xf, {"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", 0x1000}}, 0x1006)
socket(0xf, 0xa, 0x400b)
openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_open_dev$vbi(0x0, 0x3, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x802, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b0fb000e000000b8785d9600010000000000000000000000000000040000000000000000000000002900", "2809e8db5240f45f819e01177d3d0a8dd4992861ac0000000000000000000000000000000000000000000000000000000000000000001f00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x9)

0s ago: executing program 2 (id=510):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, r2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = add_key$user(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000380)={r4}, &(0x7f0000000480)=""/82, 0x52, 0x0)
socket(0x1d, 0x2, 0x6)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x6000, 0x0)
pipe(&(0x7f0000000600))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r9, 0x1, 0xfffffffe, 0x10000, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x9f, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x4000000, {{}, {}, {0x14, 0x17, {0x0, 0x401, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008044}, 0x0)
r10 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x0, 0x28b})
io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1)

kernel console output (not intermixed with test programs):

0 maxpacket: 8
[  122.284231][ T5940] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  122.296130][ T5940] usb 4-1: config 179 has no interface number 0
[  122.303096][ T5940] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  122.314704][ T5940] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  122.566999][ T5940] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  122.585894][ T5940] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  122.946233][ T5940] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  123.106353][ T5940] usb 4-1: config 179 interface 65 has no altsetting 0
[  123.120682][ T5940] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  123.138167][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.401296][ T5940] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  123.546616][ T5185] input input9: unable to receive magic message: -110
[  123.729431][ T5940] usb 4-1: USB disconnect, device number 3
[  123.729507][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  123.729860][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  123.964671][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'.
[  125.000474][   T30] audit: type=1326 audit(1762194012.264:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.188973][   T30] audit: type=1326 audit(1762194012.264:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.256853][   T30] audit: type=1326 audit(1762194012.264:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.356980][   T30] audit: type=1326 audit(1762194012.264:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.414394][   T30] audit: type=1326 audit(1762194012.264:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.478616][   T30] audit: type=1326 audit(1762194012.264:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.587064][ T6286] netlink: 32 bytes leftover after parsing attributes in process `syz.3.76'.
[  125.616363][   T30] audit: type=1326 audit(1762194012.264:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.639897][   T30] audit: type=1326 audit(1762194012.394:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.661533][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.716978][   T30] audit: type=1326 audit(1762194012.394:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  125.753282][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'.
[  125.901243][   T30] audit: type=1326 audit(1762194012.404:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  126.997368][ T6311] tipc: Started in network mode
[  127.002369][ T6311] tipc: Node identity ac1414aa, cluster identity 4711
[  127.027409][ T6311] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.037114][ T6311] tipc: Enabled bearer <ib:wg1>, priority 0
[  127.087696][ T6313] tipc: Started in network mode
[  127.092608][ T6313] tipc: Node identity ac1414aa, cluster identity 4711
[  127.132240][ T6313] tipc: Enabled bearer <udp:syz2>, priority 10
[  127.534258][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'.
[  127.591251][ T6313] tipc: Enabled bearer <ib:wg1>, priority 0
[  128.212658][ T5920] tipc: Node number set to 2886997162
[  128.717894][ T5940] tipc: Node number set to 2886997162
[  129.465409][ T6340] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  130.246279][ T5960] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  130.901169][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  130.901200][   T30] audit: type=1800 audit(1762194018.174:20): pid=6345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  130.957241][ T5960] usb 2-1: Using ep0 maxpacket: 32
[  130.973594][ T5960] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  130.983673][ T5960] usb 2-1: config 0 has no interface number 0
[  131.014298][ T5960] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  131.029476][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.047924][ T5960] usb 2-1: Product: syz
[  131.056672][ T5960] usb 2-1: Manufacturer: syz
[  131.079003][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'.
[  131.098603][ T5960] usb 2-1: SerialNumber: syz
[  131.441306][ T5960] usb 2-1: config 0 descriptor??
[  131.468990][ T5960] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  131.496685][ T5960] usb 2-1: selecting invalid altsetting 1
[  131.502889][ T5960] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  131.514321][ T5960] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  131.541136][ T5960] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  131.563503][ T5960] usb 2-1: media controller created
[  131.617031][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.490279][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'.
[  132.780896][ T6342] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  132.844049][ T5960] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  132.887044][ T5960] zl10353_read_register: readreg error (reg=127, ret==-32)
[  133.692084][   T30] audit: type=1800 audit(1762194020.944:21): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.96" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  133.794902][ T6382] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  133.810950][ T6382] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  133.866707][ T5960] usb 2-1: USB disconnect, device number 2
[  134.614256][   T30] audit: type=1800 audit(1762194021.774:22): pid=6389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.98" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  135.227680][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'.
[  136.490982][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  136.497570][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  136.553338][ T6411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'.
[  137.003357][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.103'.
[  137.431059][   T30] audit: type=1800 audit(1762194024.684:23): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.104" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  137.451341][    C0] vkms_vblank_simulate: vblank timer overrun
[  138.069430][ T6432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'.
[  138.684088][ T6437] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  138.706830][ T6437] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  139.573296][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'.
[  139.759075][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'.
[  140.337423][ T6451] tipc: Started in network mode
[  140.349208][ T6451] tipc: Node identity ac1414aa, cluster identity 4711
[  140.357515][ T6451] tipc: Enabled bearer <udp:syz2>, priority 10
[  140.364598][ T6458] tipc: Enabled bearer <ib:wg1>, priority 0
[  141.476440][ T5920] tipc: Node number set to 2886997162
[  141.859967][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.115'.
[  142.026314][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  142.306294][ T5920] usb 5-1: Using ep0 maxpacket: 16
[  142.315657][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short
[  142.334768][ T5920] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  142.366519][ T5920] usb 5-1: config 13 has no interface number 0
[  142.546727][ T5920] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  142.579035][ T5920] usb 5-1: config 13 interface 50 has no altsetting 0
[  142.608566][ T5920] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  142.621270][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.632112][ T5920] usb 5-1: Product: syz
[  142.636844][ T5920] usb 5-1: Manufacturer: syz
[  142.641656][ T5920] usb 5-1: SerialNumber: syz
[  142.883458][ T6469] netlink: 'syz.4.114': attribute type 11 has an invalid length.
[  143.036498][ T5940] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  143.056009][   T30] audit: type=1800 audit(1762194030.324:24): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.118" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  143.140537][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'.
[  143.587589][ T5940] usb 3-1: Using ep0 maxpacket: 16
[  143.603826][ T5940] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  143.613831][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  143.624749][ T5940] usb 3-1: Product: syz
[  143.631365][ T5940] usb 3-1: Manufacturer: syz
[  143.767882][ T5940] usb 3-1: SerialNumber: syz
[  144.022839][ T5940] usb 3-1: config 0 descriptor??
[  144.354937][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'.
[  144.381389][ T6503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'.
[  144.589687][ T5960] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  144.761854][ T5920] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  144.788640][ T6503] input: syz0 as /devices/virtual/input/input10
[  144.802658][ T6503] input: failed to attach handler leds to device input10, error: -6
[  144.820851][ T5960] usb 4-1: Using ep0 maxpacket: 16
[  144.846858][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.862471][ T5960] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.878916][ T5960] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  144.903820][ T5920] usb 5-1: MIDIStreaming interface descriptor not found
[  144.916303][ T5960] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00
[  144.943361][ T5940] usb 3-1: USB disconnect, device number 5
[  144.950317][ T5960] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.046932][ T5960] usb 4-1: config 0 descriptor??
[  145.428949][ T5920] usb 5-1: USB disconnect, device number 5
[  145.481116][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  145.621660][ T5960] aquacomputer_d5next 0003:0C70:F014.0002: unknown main item tag 0x0
[  145.642122][ T5960] aquacomputer_d5next 0003:0C70:F014.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.3-1/input0
[  146.155272][ T6524] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  146.168490][ T6524] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  146.321595][   T30] audit: type=1800 audit(1762194033.594:25): pid=6515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.123" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  146.365625][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'.
[  147.354903][ T5960] usb 4-1: USB disconnect, device number 4
[  147.832260][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'.
[  147.873580][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.129'.
[  149.043660][   T30] audit: type=1800 audit(1762194036.294:26): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.130" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  151.589482][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'.
[  151.658842][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'.
[  151.667813][  T984] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  151.728305][ T6588] input: syz0 as /devices/virtual/input/input11
[  151.736344][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  151.748027][ T6588] input: failed to attach handler leds to device input11, error: -6
[  151.898255][  T984] usb 2-1: Using ep0 maxpacket: 8
[  152.517991][    T9] usb 5-1: Using ep0 maxpacket: 8
[  152.523235][  T984] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  152.542119][  T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  152.569879][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  152.606401][  T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  152.636272][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  152.706557][  T984] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.726739][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  152.776435][  T984] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  152.796978][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  152.825382][  T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.846603][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  152.994362][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.236366][  T984] usb 2-1: GET_CAPABILITIES returned 0
[  153.256309][  T984] usbtmc 2-1:16.0: can't read capabilities
[  153.337987][    T9] usb 5-1: GET_CAPABILITIES returned 0
[  153.351644][    T9] usbtmc 5-1:16.0: can't read capabilities
[  153.439766][  T984] usb 2-1: USB disconnect, device number 3
[  153.552374][ T5960] usb 5-1: USB disconnect, device number 6
[  153.676602][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  153.754972][ T6579] Invalid logical block size (2)
[  153.868628][    T9] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  153.878267][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.889677][    T9] usb 3-1: config 0 descriptor??
[  153.906298][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  153.955751][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.145'.
[  154.056317][ T5920] usb 1-1: Using ep0 maxpacket: 8
[  154.067092][ T5920] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  154.079845][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  154.094042][ T5920] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.105317][ T5920] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.119557][ T5920] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  154.120638][ T6595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.137991][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.142476][ T6595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.309022][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'.
[  154.361672][ T5920] usb 1-1: GET_CAPABILITIES returned 0
[  154.375008][ T5920] usbtmc 1-1:16.0: can't read capabilities
[  154.563239][ T5920] usb 1-1: USB disconnect, device number 2
[  154.693017][   T30] audit: type=1800 audit(1762194041.964:27): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.148" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  154.767903][ T6597] FAULT_INJECTION: forcing a failure.
[  154.767903][ T6597] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  154.796428][ T6597] CPU: 0 UID: 0 PID: 6597 Comm: syz.0.143 Not tainted syzkaller #0 PREEMPT(full) 
[  154.796452][ T6597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  154.796469][ T6597] Call Trace:
[  154.796480][ T6597]  <TASK>
[  154.796495][ T6597]  dump_stack_lvl+0x189/0x250
[  154.796539][ T6597]  ? irqentry_exit+0x74/0x90
[  154.796563][ T6597]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.796593][ T6597]  should_fail_ex+0x414/0x560
[  154.796616][ T6597]  _copy_from_user+0x2d/0xb0
[  154.796633][ T6597]  get_old_timespec32+0x88/0x130
[  154.796647][ T6597]  ? __pfx_get_old_timespec32+0x10/0x10
[  154.796667][ T6597]  do_compat_pselect+0xe2/0x2d0
[  154.796685][ T6597]  ? __pfx_do_compat_pselect+0x10/0x10
[  154.796698][ T6597]  ? ksys_write+0x1e1/0x250
[  154.796717][ T6597]  ? __pfx_ksys_write+0x10/0x10
[  154.796736][ T6597]  __ia32_compat_sys_pselect6_time32+0x149/0x190
[  154.796757][ T6597]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.796775][ T6597]  __do_fast_syscall_32+0xb6/0x2b0
[  154.796795][ T6597]  ? lockdep_hardirqs_on+0x9c/0x150
[  154.796813][ T6597]  do_fast_syscall_32+0x34/0x80
[  154.796831][ T6597]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  154.796846][ T6597] RIP: 0023:0xf708d539
[  154.796865][ T6597] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  154.796878][ T6597] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000134
[  154.796897][ T6597] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0
[  154.796906][ T6597] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000080000300
[  154.796913][ T6597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.796921][ T6597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  154.796930][ T6597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.796950][ T6597]  </TASK>
[  155.177201][ T6617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.149'.
[  155.367118][    T9] usb 3-1: Cannot set autoneg
[  155.372722][    T9] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  155.682541][    T9] usb 3-1: USB disconnect, device number 6
[  156.036387][ T5960] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.222312][ T6630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[  156.266389][ T5960] usb 2-1: Using ep0 maxpacket: 32
[  156.474018][ T5960] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  156.486239][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.583865][ T5960] usb 2-1: config 0 descriptor??
[  157.406114][ T5960] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  157.423143][ T5960] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  157.466941][ T5960] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  157.486106][ T5960] usb 2-1: media controller created
[  157.706449][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  157.733228][ T5960] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.876605][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.902195][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.957805][ T5960] az6027: usb out operation failed. (-71)
[  157.966289][ T5920] usb 4-1: Using ep0 maxpacket: 16
[  157.974747][ T5960] az6027: usb out operation failed. (-71)
[  157.976002][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  157.984500][ T5960] stb0899_attach: Driver disabled by Kconfig
[  158.000658][ T5960] az6027: no front-end attached
[  158.000658][ T5960] 
[  158.002685][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  158.055098][ T5920] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  158.057356][ T5960] az6027: usb out operation failed. (-71)
[  158.101726][ T5920] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  158.112465][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.135899][ T5920] usb 4-1: Product: syz
[  158.144602][ T5960] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  158.160409][ T5920] usb 4-1: Manufacturer: syz
[  158.168671][ T5960] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  158.176923][ T5920] usb 4-1: SerialNumber: syz
[  158.204828][ T5920] usb 4-1: config 0 descriptor??
[  158.214875][ T6638] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  158.240354][ T5920] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  158.246408][ T5960] dvb-usb: schedule remote query interval to 400 msecs.
[  158.249029][ T6646] loop6: detected capacity change from 0 to 7
[  158.261832][ T5920] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  158.268842][ T5920] mcba_usb 4-1:0.0 can0: failed tx_urb -90
[  158.285690][ T5920] mcba_usb 4-1:0.0 can0: Failed to send cmd (169)
[  158.293857][ T6646] Dev loop6: unable to read RDB block 7
[  158.297160][ T5960] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  158.302883][ T6646]  loop6: AHDI p2 p3
[  158.311642][ T5920] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  158.321520][ T6646] loop6: partition table partially beyond EOD, truncated
[  158.339260][ T6646] loop6: p2 size 335544428 extends beyond EOD, truncated
[  158.364076][ T5960] usb 2-1: USB disconnect, device number 4
[  158.487446][ T6128] udevd[6128]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  158.672437][ T5960] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  158.953839][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'.
[  159.807101][ T5960] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  159.928260][    T9] usb 4-1: USB disconnect, device number 5
[  159.937701][    T9] mcba_usb 4-1:0.0 can0: device disconnected
[  160.004712][ T6677] FAULT_INJECTION: forcing a failure.
[  160.004712][ T6677] name fail_futex, interval 1, probability 0, space 0, times 1
[  160.036289][ T5960] usb 1-1: Using ep0 maxpacket: 32
[  160.055454][ T5960] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  160.072644][ T6677] CPU: 1 UID: 0 PID: 6677 Comm: syz.2.164 Not tainted syzkaller #0 PREEMPT(full) 
[  160.072668][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  160.072678][ T6677] Call Trace:
[  160.072685][ T6677]  <TASK>
[  160.072693][ T6677]  dump_stack_lvl+0x189/0x250
[  160.072733][ T6677]  ? __pfx____ratelimit+0x10/0x10
[  160.072754][ T6677]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.072775][ T6677]  ? __pfx__printk+0x10/0x10
[  160.072804][ T6677]  should_fail_ex+0x414/0x560
[  160.072835][ T6677]  get_futex_key+0x1a8/0x1660
[  160.072872][ T6677]  ? __pfx_get_futex_key+0x10/0x10
[  160.072913][ T6677]  futex_wait_setup+0x4f/0x590
[  160.072936][ T6677]  ? __futex_wait+0xb3/0x3d0
[  160.072958][ T6677]  __futex_wait+0x148/0x3d0
[  160.072984][ T6677]  ? __pfx___futex_wait+0x10/0x10
[  160.073005][ T6677]  ? __pfx_futex_wake_mark+0x10/0x10
[  160.073026][ T6677]  ? get_pid_task+0x20/0x1f0
[  160.073061][ T6677]  futex_wait+0x104/0x360
[  160.073081][ T6677]  ? __pfx_futex_wait+0x10/0x10
[  160.073110][ T6677]  ? ksys_write+0x1cb/0x250
[  160.073137][ T6677]  do_futex+0x333/0x420
[  160.073159][ T6677]  ? __pfx_vfs_write+0x10/0x10
[  160.073181][ T6677]  ? __pfx_do_futex+0x10/0x10
[  160.073210][ T6677]  __se_sys_futex_time32+0x360/0x3e0
[  160.073226][ T6677]  ? fput+0xa0/0xd0
[  160.073247][ T6677]  ? __pfx___se_sys_futex_time32+0x10/0x10
[  160.073272][ T6677]  ? __pfx_ksys_write+0x10/0x10
[  160.073295][ T6677]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  160.073319][ T6677]  ? __ia32_sys_futex_time32+0x21/0xf0
[  160.073339][ T6677]  __do_fast_syscall_32+0xb6/0x2b0
[  160.073362][ T6677]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.073387][ T6677]  do_fast_syscall_32+0x34/0x80
[  160.073410][ T6677]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  160.073430][ T6677] RIP: 0023:0xf6ffd539
[  160.073444][ T6677] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  160.073458][ T6677] RSP: 002b:00000000f53ed55c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  160.073476][ T6677] RAX: ffffffffffffffda RBX: 000000008000cffc RCX: 0000000000000000
[  160.073487][ T6677] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  160.073497][ T6677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  160.073507][ T6677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  160.073517][ T6677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  160.073543][ T6677]  </TASK>
[  160.074370][ T5960] usb 1-1: config 0 has no interface number 0
[  160.461631][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.165'.
[  160.494933][ T5960] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  160.508008][ T5960] usb 1-1: config 0 interface 85 has no altsetting 0
[  160.665373][ T5960] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  160.676278][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.684325][ T5960] usb 1-1: Product: syz
[  160.694183][ T5960] usb 1-1: Manufacturer: syz
[  160.708817][ T5960] usb 1-1: SerialNumber: syz
[  160.757155][ T5960] usb 1-1: config 0 descriptor??
[  161.130480][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'.
[  161.413182][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.176'.
[  161.678040][ T5960] appletouch 1-1:0.85: Geyser mode initialized.
[  161.692728][ T5960] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input13
[  162.546335][ T5827] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  162.726344][ T5827] usb 5-1: Using ep0 maxpacket: 16
[  162.738230][ T5827] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  162.756207][ T5827] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  162.768079][ T5827] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  162.781429][ T5827] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.790757][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.800743][ T5827] usb 5-1: Product: syz
[  162.805317][ T5827] usb 5-1: Manufacturer: syz
[  162.813204][ T5827] usb 5-1: SerialNumber: syz
[  163.111707][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.140202][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.195584][ T5827] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  163.283547][ T5827] usb 5-1: USB disconnect, device number 7
[  163.369913][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.576461][ T5904] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  163.762672][ T5904] usb 3-1: Using ep0 maxpacket: 8
[  163.772422][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  163.796290][ T5960] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  163.828772][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  163.874665][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  163.927356][ T5827] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  163.935329][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  163.960791][ T6725] loop6: detected capacity change from 0 to 7
[  163.977250][ T5960] usb 2-1: Using ep0 maxpacket: 8
[  163.986267][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  163.988206][ T5960] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  164.007546][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.019921][ T6725] Dev loop6: unable to read RDB block 7
[  164.025516][ T6725]  loop6: AHDI p2 p3
[  164.052705][ T5920] usb 1-1: USB disconnect, device number 3
[  164.061360][ T6725] loop6: partition table partially beyond EOD, truncated
[  164.071278][ T5960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  164.080744][ T6725] loop6: p2 size 335544428 extends beyond EOD, truncated
[  164.103227][ T5920] appletouch 1-1:0.85: input: appletouch disconnected
[  164.110412][ T5960] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  164.110441][ T5960] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.136750][ T5827] usb 4-1: Using ep0 maxpacket: 8
[  164.167697][ T5827] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  164.184879][ T5960] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  164.194113][ T5827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  164.194144][ T5827] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  164.194177][ T5827] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  164.194220][ T5827] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  164.194262][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.210803][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  164.255682][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.316297][ T5904] usb 3-1: GET_CAPABILITIES returned 0
[  164.322322][ T5904] usbtmc 3-1:16.0: can't read capabilities
[  164.508354][ T5920] usb 3-1: USB disconnect, device number 7
[  164.546071][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'.
[  164.596358][ T5960] usb 2-1: GET_CAPABILITIES returned 0
[  164.601894][ T5960] usbtmc 2-1:16.0: can't read capabilities
[  164.652309][ T6715] cgroup: fork rejected by pids controller in /syz3
[  165.439624][ T5827] usb 4-1: usb_control_msg returned -71
[  165.445344][ T5827] usbtmc 4-1:16.0: can't read capabilities
[  165.464841][ T5960] usb 2-1: USB disconnect, device number 5
[  165.493912][ T6716] FAULT_INJECTION: forcing a failure.
[  165.493912][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.507481][ T5827] usb 4-1: USB disconnect, device number 6
[  165.606434][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.1.172 Not tainted syzkaller #0 PREEMPT(full) 
[  165.606458][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  165.606469][ T6716] Call Trace:
[  165.606476][ T6716]  <TASK>
[  165.606492][ T6716]  dump_stack_lvl+0x189/0x250
[  165.606520][ T6716]  ? __pfx____ratelimit+0x10/0x10
[  165.606543][ T6716]  ? __pfx_dump_stack_lvl+0x10/0x10
[  165.606572][ T6716]  ? __pfx__printk+0x10/0x10
[  165.606593][ T6716]  ? ktime_get_ts64+0xa9/0x3d0
[  165.606621][ T6716]  should_fail_ex+0x414/0x560
[  165.606652][ T6716]  _copy_to_user+0x31/0xb0
[  165.606675][ T6716]  put_old_timespec32+0xbe/0x120
[  165.606693][ T6716]  ? __pfx_put_old_timespec32+0x10/0x10
[  165.606720][ T6716]  poll_select_finish+0x503/0x5e0
[  165.606749][ T6716]  ? __pfx_poll_select_finish+0x10/0x10
[  165.606779][ T6716]  ? __pfx_set_compat_user_sigmask+0x10/0x10
[  165.606809][ T6716]  do_compat_pselect+0x27e/0x2d0
[  165.606832][ T6716]  ? __pfx_do_compat_pselect+0x10/0x10
[  165.606850][ T6716]  ? ksys_write+0x1e1/0x250
[  165.606875][ T6716]  ? __pfx_ksys_write+0x10/0x10
[  165.606899][ T6716]  __ia32_compat_sys_pselect6_time32+0x149/0x190
[  165.606925][ T6716]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.606950][ T6716]  __do_fast_syscall_32+0xb6/0x2b0
[  165.606972][ T6716]  ? lockdep_hardirqs_on+0x9c/0x150
[  165.606997][ T6716]  do_fast_syscall_32+0x34/0x80
[  165.607020][ T6716]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.607040][ T6716] RIP: 0023:0xf70bd539
[  165.607054][ T6716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  165.607068][ T6716] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000134
[  165.607086][ T6716] RAX: ffffffffffffffda RBX: 0000000000000040 RCX: 00000000800001c0
[  165.607103][ T6716] RDX: 0000000000000000 RSI: 00000000800002c0 RDI: 0000000080000300
[  165.607114][ T6716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.607124][ T6716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  165.607134][ T6716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.607160][ T6716]  </TASK>
[  166.245297][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'.
[  166.406280][ T5911] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  166.624357][ T5911] usb 3-1: config 7 has an invalid interface number: 192 but max is 0
[  166.635547][ T5911] usb 3-1: config 7 has no interface number 0
[  166.648041][ T5911] usb 3-1: config 7 interface 192 has no altsetting 0
[  166.674013][ T5911] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  166.685679][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.733896][ T5911] usb 3-1: Product: syz
[  166.778048][ T5911] usb 3-1: Manufacturer: syz
[  166.786333][ T5911] usb 3-1: SerialNumber: syz
[  167.080150][ T6744] capability: warning: `syz.2.178' uses 32-bit capabilities (legacy support in use)
[  167.210127][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.670373][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[  167.723123][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.755454][ T5911] usb 3-1: USB disconnect, device number 8
[  168.094252][   T13] tipc: Resetting bearer <ib:wg1>
[  168.118733][ T6767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.185'.
[  168.350532][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.447532][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.261498][   T12] bridge_slave_1: left allmulticast mode
[  169.276422][   T12] bridge_slave_1: left promiscuous mode
[  169.303714][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.342017][   T12] bridge_slave_0: left allmulticast mode
[  169.356332][   T12] bridge_slave_0: left promiscuous mode
[  169.381419][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.392899][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  169.401577][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  169.409853][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  169.417922][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  169.433017][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  169.533800][ T6783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.187'.
[  169.666449][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  169.846240][    T9] usb 3-1: Using ep0 maxpacket: 32
[  169.897597][    T9] usb 3-1: config 247 has an invalid interface number: 193 but max is 0
[  169.905970][    T9] usb 3-1: config 247 has no interface number 0
[  169.946383][    T9] usb 3-1: config 247 interface 193 has no altsetting 0
[  170.222273][    T9] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=f1.05
[  170.297778][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.312717][    T9] usb 3-1: Product: syz
[  170.324457][    T9] usb 3-1: Manufacturer: syz
[  170.331167][    T9] usb 3-1: SerialNumber: syz
[  170.629890][ T6808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.745033][   T30] audit: type=1800 audit(1762194057.924:28): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.191" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  170.770945][ T6808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.021219][ T5904] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  171.246262][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  171.253603][ T5904] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  171.267465][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  171.446589][ T5904] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  171.463214][    T9] pegasus 3-1:247.193: probe with driver pegasus failed with error -32
[  171.493739][ T5904] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.636974][ T5904] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  171.669026][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.684063][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  171.695253][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  171.708188][   T12] bond0 (unregistering): Released all slaves
[  171.756679][ T5829] Bluetooth: hci1: command tx timeout
[  171.895307][ T6819] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  171.906884][ T5827] usb 3-1: USB disconnect, device number 9
[  171.967957][   T12] : left promiscuous mode
[  172.066695][ T6821] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  172.162035][   T12] tipc: Disabling bearer <udp:syz2>
[  172.173517][   T12] tipc: Disabling bearer <ib:wg1>
[  172.200484][   T12] tipc: Left network mode
[  172.206638][ T6807] FAULT_INJECTION: forcing a failure.
[  172.206638][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.262875][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.1.192 Not tainted syzkaller #0 PREEMPT(full) 
[  172.262898][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  172.262907][ T6807] Call Trace:
[  172.262915][ T6807]  <TASK>
[  172.262923][ T6807]  dump_stack_lvl+0x189/0x250
[  172.262951][ T6807]  ? __pfx____ratelimit+0x10/0x10
[  172.262976][ T6807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.262995][ T6807]  ? __pfx__printk+0x10/0x10
[  172.263023][ T6807]  should_fail_ex+0x414/0x560
[  172.263054][ T6807]  _copy_to_user+0x31/0xb0
[  172.263077][ T6807]  simple_read_from_buffer+0xe1/0x170
[  172.263104][ T6807]  proc_fail_nth_read+0x1b3/0x220
[  172.263128][ T6807]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.263165][ T6807]  ? rw_verify_area+0x2a6/0x4d0
[  172.263187][ T6807]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  172.263208][ T6807]  vfs_read+0x200/0xa30
[  172.263227][ T6807]  ? __pfx_poll_select_finish+0x10/0x10
[  172.263258][ T6807]  ? __pfx_vfs_read+0x10/0x10
[  172.263288][ T6807]  ? do_compat_pselect+0x27e/0x2d0
[  172.263314][ T6807]  ksys_read+0x145/0x250
[  172.263338][ T6807]  ? __pfx_ksys_read+0x10/0x10
[  172.263362][ T6807]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  172.263387][ T6807]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.263417][ T6807]  __do_fast_syscall_32+0xb6/0x2b0
[  172.263440][ T6807]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.263463][ T6807]  do_fast_syscall_32+0x34/0x80
[  172.263485][ T6807]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  172.263503][ T6807] RIP: 0023:0xf70bd539
[  172.263518][ T6807] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  172.263531][ T6807] RSP: 002b:00000000f54ad590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  172.263550][ T6807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54ad620
[  172.263562][ T6807] RDX: 000000000000000f RSI: 00000000f7455ff4 RDI: 0000000000000000
[  172.263572][ T6807] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  172.263582][ T6807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  172.263592][ T6807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  172.263618][ T6807]  </TASK>
[  172.484355][ T5904] usb 2-1: usb_control_msg returned -71
[  172.490018][ T5904] usbtmc 2-1:16.0: can't read capabilities
[  172.531212][ T5904] usb 2-1: USB disconnect, device number 6
[  172.612370][ T6828] netlink: 108 bytes leftover after parsing attributes in process `syz.0.195'.
[  173.506634][    T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  173.586462][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  173.667889][    T9] usb 2-1: Using ep0 maxpacket: 16
[  173.715553][    T9] usb 2-1: config 254 has an invalid interface number: 235 but max is 0
[  173.729981][ T5920] usb 1-1: device descriptor read/64, error -71
[  173.751082][    T9] usb 2-1: config 254 has no interface number 0
[  173.786325][    T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has an invalid bInterval 237, changing to 7
[  173.842452][    T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x6 has invalid maxpacket 42803, setting to 1024
[  173.854188][ T5829] Bluetooth: hci1: command tx timeout
[  173.876376][    T9] usb 2-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  173.903141][    T9] usb 2-1: config 254 interface 235 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  173.941374][    T9] usb 2-1: config 254 interface 235 has no altsetting 0
[  173.950947][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  173.966463][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.986238][    T9] usb 2-1: Product: syz
[  173.990481][    T9] usb 2-1: Manufacturer: syz
[  173.995081][    T9] usb 2-1: SerialNumber: syz
[  174.006687][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  174.159031][ T5920] usb 1-1: device descriptor read/64, error -71
[  174.262226][   T12] hsr_slave_0: left promiscuous mode
[  174.268433][ T5920] usb usb1-port1: attempt power cycle
[  174.281976][   T12] hsr_slave_1: left promiscuous mode
[  174.292354][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.308029][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.311399][ T6864] netlink: 32 bytes leftover after parsing attributes in process `syz.2.203'.
[  174.327952][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.360561][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.377870][ T6866] fuse: Unknown parameter '0x000000000000000a'
[  174.565926][   T12] veth1_macvtap: left promiscuous mode
[  174.571917][   T12] veth0_macvtap: left promiscuous mode
[  174.578663][   T12] veth1_vlan: left promiscuous mode
[  174.587298][   T12] veth0_vlan: left promiscuous mode
[  174.626291][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  174.647068][ T5920] usb 1-1: device descriptor read/8, error -71
[  174.886561][ T5920] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  174.907076][ T5920] usb 1-1: device descriptor read/8, error -71
[  175.026631][ T5920] usb usb1-port1: unable to enumerate USB device
[  175.164403][   T12] team0 (unregistering): Port device team_slave_1 removed
[  175.200470][   T12] team0 (unregistering): Port device team_slave_0 removed
[  175.390950][   T30] audit: type=1800 audit(1762194062.664:29): pid=6873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.205" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  175.921219][ T5829] Bluetooth: hci1: command tx timeout
[  176.077691][ T6788] chnl_net:caif_netlink_parms(): no params data found
[  176.436586][    T9] usbtest 2-1:254.235: couldn't get endpoints, -71
[  176.473422][    T9] usbtest 2-1:254.235: probe with driver usbtest failed with error -71
[  176.641781][    T9] usb 2-1: USB disconnect, device number 7
[  176.830131][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.856904][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.891878][ T6788] bridge_slave_0: entered allmulticast mode
[  176.974825][ T6788] bridge_slave_0: entered promiscuous mode
[  177.016666][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.051416][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.071727][ T6788] bridge_slave_1: entered allmulticast mode
[  177.088516][ T6788] bridge_slave_1: entered promiscuous mode
[  178.039266][ T5829] Bluetooth: hci1: command tx timeout
[  178.336272][ T5911] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  178.508081][ T5911] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  178.519706][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.562669][ T5911] usb 3-1: config 0 descriptor??
[  178.796688][ T5911] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  179.002572][ T5911] [drm:udl_init] *ERROR* Selecting channel failed
[  179.033292][ T5911] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  179.058033][ T5911] [drm] Initialized udl on minor 2
[  179.071719][ T5911] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  179.089375][ T5911] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  179.106303][  T984] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  179.119343][ T5911] usb 3-1: USB disconnect, device number 10
[  179.125738][  T984] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  179.740711][ T6788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.771288][ T6788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.822530][   T30] audit: type=1326 audit(1762194067.094:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  179.865658][ T5911] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.915904][   T30] audit: type=1326 audit(1762194067.094:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  179.956097][   T30] audit: type=1326 audit(1762194067.094:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  179.984366][ T6788] team0: Port device team_slave_0 added
[  179.985015][ T6938] loop6: detected capacity change from 0 to 7
[  180.005767][ T6788] team0: Port device team_slave_1 added
[  180.006042][   T30] audit: type=1326 audit(1762194067.094:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  180.013818][ T6938] Dev loop6: unable to read RDB block 7
[  180.036758][   T30] audit: type=1326 audit(1762194067.224:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  180.054733][ T6938]  loop6: AHDI p2 p3
[  180.063715][   T30] audit: type=1326 audit(1762194067.224:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz.2.218" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  180.067902][ T6938] loop6: partition table partially beyond EOD, 
[  180.087832][ T5911] usb 1-1: Using ep0 maxpacket: 8
[  180.098843][ T5911] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  180.112649][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  180.126129][ T6938] truncated
[  180.129732][ T6938] loop6: p2 size 335544428 extends beyond EOD, truncated
[  180.139191][ T5911] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  180.153048][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  180.162652][ T5911] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  180.166972][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.204356][ T5911] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  180.231887][ T6788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  180.247534][ T6788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  180.254651][ T6788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  180.301083][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  180.324176][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.414548][   T30] audit: type=1800 audit(1762194067.634:36): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.221" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  180.434792][ T6788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  180.671782][ T5911] usb 1-1: GET_CAPABILITIES returned 0
[  180.677447][ T5911] usbtmc 1-1:16.0: can't read capabilities
[  180.687345][ T6788] hsr_slave_0: entered promiscuous mode
[  180.700995][ T6788] hsr_slave_1: entered promiscuous mode
[  180.882870][ T5911] usb 1-1: USB disconnect, device number 8
[  180.997706][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  181.146684][    T9] usb 2-1: Using ep0 maxpacket: 16
[  181.158103][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  181.171237][    T9] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  181.186224][    T9] usb 2-1: config 13 has no interface number 0
[  181.201004][    T9] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.236226][    T9] usb 2-1: config 13 interface 50 has no altsetting 0
[  181.256313][ T5960] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  181.265458][    T9] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  181.284070][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.329197][    T9] usb 2-1: Product: syz
[  181.333402][    T9] usb 2-1: Manufacturer: syz
[  181.365800][    T9] usb 2-1: SerialNumber: syz
[  181.406577][ T5960] usb 3-1: Using ep0 maxpacket: 16
[  181.419662][ T5960] usb 3-1: unable to get BOS descriptor or descriptor too short
[  181.444405][ T5960] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  181.458913][ T5960] usb 3-1: config 13 has no interface number 0
[  181.465163][ T5960] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.479443][ T5960] usb 3-1: config 13 interface 50 has no altsetting 0
[  181.490102][ T5960] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  181.500923][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.511354][ T5960] usb 3-1: Product: syz
[  181.517824][ T5960] usb 3-1: Manufacturer: syz
[  181.522592][ T5960] usb 3-1: SerialNumber: syz
[  181.600734][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.225'.
[  181.692750][ T6952] netlink: 'syz.1.223': attribute type 11 has an invalid length.
[  181.772077][ T6958] netlink: 'syz.2.224': attribute type 11 has an invalid length.
[  182.820504][ T6788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  182.859470][ T6788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  182.880001][ T6788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  182.925021][ T6788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  183.203294][ T6788] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.250400][ T6788] 8021q: adding VLAN 0 to HW filter on device team0
[  183.299115][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.306383][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.335609][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.342801][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.598357][ T6788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.818938][ T6788] veth0_vlan: entered promiscuous mode
[  183.840459][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  183.871975][    T9] usb 2-1: MIDIStreaming interface descriptor not found
[  184.182086][ T6788] veth1_vlan: entered promiscuous mode
[  184.210306][ T7022] loop6: detected capacity change from 0 to 7
[  184.221180][ T5960] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  184.243620][    T9] usb 2-1: USB disconnect, device number 8
[  184.250123][ T5960] usb 3-1: MIDIStreaming interface descriptor not found
[  184.277874][ T7022] Dev loop6: unable to read RDB block 7
[  184.283509][ T7022]  loop6: AHDI p2 p3
[  184.315127][ T7022] loop6: partition table partially beyond EOD, truncated
[  184.348800][ T7022] loop6: p2 size 335544428 extends beyond EOD, truncated
[  184.380931][ T6788] veth0_macvtap: entered promiscuous mode
[  184.427400][ T6788] veth1_macvtap: entered promiscuous mode
[  184.443307][ T5960] usb 3-1: USB disconnect, device number 11
[  184.499414][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.752616][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  184.934238][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  185.204944][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.236'.
[  185.590788][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.691734][ T6788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.800178][ T2992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.857275][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.882887][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.948498][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.272135][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.290352][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.312884][ T7064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.241'.
[  186.364602][ T7065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.239'.
[  186.414727][ T2992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.427881][ T2992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.989513][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  187.186390][    T9] usb 4-1: Using ep0 maxpacket: 16
[  187.195999][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.227303][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.284788][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.286296][   T89] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  187.304269][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.342086][    T9] usb 4-1: Product: syz
[  187.350143][    T9] usb 4-1: Manufacturer: syz
[  187.366527][    T9] usb 4-1: SerialNumber: syz
[  187.486493][   T89] usb 2-1: Using ep0 maxpacket: 16
[  187.502003][   T89] usb 2-1: unable to get BOS descriptor or descriptor too short
[  187.518850][   T89] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  187.546369][   T89] usb 2-1: config 13 has no interface number 0
[  187.566302][   T89] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.610903][    T9] usb 4-1: 0:2 : does not exist
[  187.620858][   T89] usb 2-1: config 13 interface 50 has no altsetting 0
[  187.631393][    T9] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  187.655222][ T5940] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  187.658289][   T89] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  187.696290][   T89] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.724663][   T89] usb 2-1: Product: syz
[  187.734778][   T89] usb 2-1: Manufacturer: syz
[  187.740176][    T9] usb 4-1: USB disconnect, device number 7
[  187.758067][   T89] usb 2-1: SerialNumber: syz
[  187.824448][ T5995] udevd[5995]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  187.866250][ T5940] usb 1-1: Using ep0 maxpacket: 16
[  187.888542][ T5940] usb 1-1: unable to get BOS descriptor or descriptor too short
[  187.908508][ T5940] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  187.939235][ T5940] usb 1-1: config 13 has no interface number 0
[  187.945475][ T5940] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.999142][ T7102] binder: 7093:7102 ioctl ae41 0 returned -22
[  188.008020][ T5940] usb 1-1: config 13 interface 50 has no altsetting 0
[  188.018722][ T7079] netlink: 'syz.1.243': attribute type 11 has an invalid length.
[  188.048917][ T5940] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  188.078206][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.106346][ T5940] usb 1-1: Product: syz
[  188.118808][ T5940] usb 1-1: Manufacturer: syz
[  188.133796][ T5940] usb 1-1: SerialNumber: syz
[  188.266453][ T5904] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  188.382992][ T7087] netlink: 'syz.0.245': attribute type 11 has an invalid length.
[  188.428545][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  188.460631][ T5904] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  188.502941][ T5904] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  188.523408][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.576997][ T5904] usb 5-1: config 0 descriptor??
[  189.971526][   T89] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  190.225970][   T89] usb 2-1: MIDIStreaming interface descriptor not found
[  190.445674][ T5940] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  190.450397][   T89] usb 2-1: USB disconnect, device number 9
[  190.530892][ T5940] usb 1-1: MIDIStreaming interface descriptor not found
[  190.819105][ T5940] usb 1-1: USB disconnect, device number 9
[  190.874400][ T5904] usb 5-1: string descriptor 0 read error: -71
[  190.896411][ T5904] usb 5-1: USB disconnect, device number 8
[  191.210271][ T7146] netlink: 32 bytes leftover after parsing attributes in process `syz.1.251'.
[  191.606072][ T7149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.254'.
[  192.579054][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'.
[  193.136262][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  193.598050][ T5922] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  193.625983][ T7188] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  193.820462][ T5922] usb 1-1: Using ep0 maxpacket: 16
[  193.859138][ T5922] usb 1-1: unable to get BOS descriptor or descriptor too short
[  193.868177][ T5922] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  193.876726][ T5922] usb 1-1: config 13 has no interface number 0
[  193.893166][    T9] usb 4-1: Using ep0 maxpacket: 8
[  193.931625][ T5922] usb 1-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.959314][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  193.970908][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  193.993224][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.015427][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.033696][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  194.053301][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.061484][ T5922] usb 1-1: config 13 interface 50 has no altsetting 0
[  194.109185][ T5922] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  194.169335][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.202931][ T5922] usb 1-1: Product: syz
[  194.228123][ T5922] usb 1-1: Manufacturer: syz
[  194.242506][ T5922] usb 1-1: SerialNumber: syz
[  194.349224][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  194.368701][    T9] usbtmc 4-1:16.0: can't read capabilities
[  194.468288][ T7186] netlink: 'syz.0.261': attribute type 11 has an invalid length.
[  194.592306][   T89] usb 4-1: USB disconnect, device number 8
[  194.660520][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.263'.
[  195.417502][ T7208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'.
[  195.454779][ T7207] binder: 7201:7207 ioctl c0306201 0 returned -14
[  195.869783][ T7213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'.
[  195.992027][ T7207] binder: 7201:7207 ioctl c0306201 0 returned -14
[  196.349273][ T5922] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  196.362027][ T5922] usb 1-1: MIDIStreaming interface descriptor not found
[  196.546287][   T30] audit: type=1800 audit(1762194083.714:37): pid=7220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.271" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  196.566601][    C0] vkms_vblank_simulate: vblank timer overrun
[  196.770424][   T30] audit: type=1800 audit(1762194083.984:38): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.270" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  196.861470][ T7227] FAULT_INJECTION: forcing a failure.
[  196.861470][ T7227] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  196.896338][ T7227] CPU: 0 UID: 0 PID: 7227 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) 
[  196.896362][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  196.896372][ T7227] Call Trace:
[  196.896380][ T7227]  <TASK>
[  196.896388][ T7227]  dump_stack_lvl+0x189/0x250
[  196.896433][ T7227]  ? __pfx____ratelimit+0x10/0x10
[  196.896455][ T7227]  ? __pfx_dump_stack_lvl+0x10/0x10
[  196.896474][ T7227]  ? __pfx__printk+0x10/0x10
[  196.896492][ T7227]  ? __might_fault+0xb0/0x130
[  196.896526][ T7227]  should_fail_ex+0x414/0x560
[  196.896557][ T7227]  _copy_from_user+0x2d/0xb0
[  196.896579][ T7227]  do_ebt_set_ctl+0x322/0xb60
[  196.896601][ T7227]  ? __pfx___mutex_trylock_common+0x10/0x10
[  196.896622][ T7227]  ? __local_bh_enable_ip+0x12d/0x1c0
[  196.896639][ T7227]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  196.896656][ T7227]  ? rcu_is_watching+0x15/0xb0
[  196.896676][ T7227]  ? trace_contention_end+0x39/0x120
[  196.896717][ T7227]  ? aa_sk_perm+0x81e/0x950
[  196.896746][ T7227]  ? __pfx_aa_sk_perm+0x10/0x10
[  196.896774][ T7227]  nf_setsockopt+0x26f/0x290
[  196.896797][ T7227]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  196.896823][ T7227]  do_sock_setsockopt+0x17c/0x1b0
[  196.896845][ T7227]  __ia32_sys_setsockopt+0x13f/0x1b0
[  196.896868][ T7227]  __do_fast_syscall_32+0xb6/0x2b0
[  196.896891][ T7227]  ? lockdep_hardirqs_on+0x9c/0x150
[  196.896916][ T7227]  do_fast_syscall_32+0x34/0x80
[  196.896937][ T7227]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  196.896955][ T7227] RIP: 0023:0xf708d539
[  196.896968][ T7227] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  196.896978][ T7227] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  196.896993][ T7227] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  196.897001][ T7227] RDX: 0000000000000080 RSI: 0000000080000640 RDI: 00000000000000e0
[  196.897008][ T7227] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  196.897017][ T7227] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  196.897026][ T7227] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  196.897051][ T7227]  </TASK>
[  197.243135][ T5922] usb 1-1: USB disconnect, device number 10
[  197.627567][ T7229] netlink: 'syz.2.273': attribute type 4 has an invalid length.
[  197.635253][ T7229] netlink: 152 bytes leftover after parsing attributes in process `syz.2.273'.
[  197.811277][ T7229] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  197.927103][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  197.934010][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  198.026377][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  198.216681][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  198.234071][ T5911] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64
[  198.275287][ T5911] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  198.324371][ T5911] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  198.348282][ T5911] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  198.357738][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.367479][ T5911] usb 3-1: Product: ࠬ
[  198.376667][ T5911] usb 3-1: Manufacturer: 倊
[  198.381289][ T5911] usb 3-1: SerialNumber: Ѝ
[  198.396264][ T5922] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  198.556468][ T5922] usb 4-1: Using ep0 maxpacket: 8
[  198.565938][ T5922] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  198.584081][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  198.617468][ T5922] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  198.632535][ T5922] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.649283][ T5911] cdc_ncm 3-1:1.0: bind() failure
[  198.661203][ T5922] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  198.694695][ T7240] netlink: 60 bytes leftover after parsing attributes in process `syz.4.278'.
[  198.697340][ T5911] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  198.715597][ T5922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.769482][ T5911] cdc_ncm 3-1:1.1: bind() failure
[  198.856727][ T5911] usb 3-1: USB disconnect, device number 12
[  198.961408][ T5922] usb 4-1: GET_CAPABILITIES returned 0
[  198.969811][ T5922] usbtmc 4-1:16.0: can't read capabilities
[  199.176585][ T5911] usb 4-1: USB disconnect, device number 9
[  199.216381][ T7253] netlink: 32 bytes leftover after parsing attributes in process `syz.0.282'.
[  199.574538][   T30] audit: type=1800 audit(1762194086.814:39): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.283" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  200.076046][   T30] audit: type=1800 audit(1762194087.294:40): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.286" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  201.957180][ T7304] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  201.969127][ T7304] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  202.486427][ T5827] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  202.807686][ T5827] usb 3-1: Using ep0 maxpacket: 8
[  202.846924][ T5827] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  202.880102][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  202.915014][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  202.926058][ T5827] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  202.949453][ T5827] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  202.963855][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.209170][ T5827] usb 3-1: GET_CAPABILITIES returned 0
[  203.224110][ T5827] usbtmc 3-1:16.0: can't read capabilities
[  203.433656][ T5922] usb 3-1: USB disconnect, device number 13
[  203.906419][   T30] audit: type=1800 audit(1762194091.164:41): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.305" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  204.040797][   T30] audit: type=1800 audit(1762194091.284:42): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.306" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0
[  204.643442][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  204.826302][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  204.834603][ T5911] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config
[  204.908686][ T5911] usb 4-1: config 220 has no interface number 2
[  204.915033][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  204.974153][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0
[  205.254868][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0
[  205.300560][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'.
[  205.386296][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0
[  205.417720][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'.
[  205.541596][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  205.594813][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.604187][ T5911] usb 4-1: Product: syz
[  205.626329][ T5911] usb 4-1: Manufacturer: syz
[  205.650072][ T5911] usb 4-1: SerialNumber: syz
[  205.912732][ T5827] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  205.978447][ T5911] usb 4-1: selecting invalid altsetting 0
[  206.036346][ T5911] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  206.062049][ T5911] uvcvideo 4-1:220.0: No valid video chain found.
[  206.071329][ T5827] usb 1-1: Using ep0 maxpacket: 8
[  206.092312][ T5827] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  206.103407][ T5827] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  206.113080][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.125822][ T5827] usb 1-1: Product: syz
[  206.139661][ T5911] usb 4-1: selecting invalid altsetting 0
[  206.145794][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  206.160222][ T5827] usb 1-1: Manufacturer: syz
[  206.171525][ T5827] usb 1-1: SerialNumber: syz
[  206.187187][ T5911] usb 4-1: USB disconnect, device number 10
[  206.207182][ T5827] usb 1-1: config 0 descriptor??
[  206.243883][ T5827] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  206.272855][ T5827] usb 1-1: setting power ON
[  206.299451][ T5827] dvb-usb: bulk message failed: -22 (2/0)
[  206.313845][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  206.327211][ T5827] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  206.336051][ T5827] usb 1-1: media controller created
[  206.371537][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.404903][ T5827] usb 1-1: selecting invalid altsetting 6
[  206.412970][ T5827] usb 1-1: digital interface selection failed (-22)
[  206.464689][ T5827] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  206.473756][ T7362] dvb-usb: bulk message failed: -22 (3/0)
[  206.481294][ T7362] dvb-usb: bulk message failed: -22 (3/0)
[  206.525883][ T5827] usb 1-1: setting power OFF
[  206.537626][ T5827] dvb-usb: bulk message failed: -22 (2/0)
[  206.546074][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  206.558685][ T5827] (NULL device *): no alternate interface
[  207.516375][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  207.902539][ T5904] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  207.919283][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.950810][ T5904] usb 2-1: Product: syz
[  207.966316][ T5904] usb 2-1: Manufacturer: syz
[  207.977008][ T5904] usb 2-1: SerialNumber: syz
[  208.050201][ T7391] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  208.078652][ T7391] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  208.269391][ T7393] SET target dimension over the limit!
[  208.269536][ T5904] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  208.304714][ T5904] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  208.306285][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  208.342561][ T5904] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  208.355284][ T5904] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  208.370847][ T5904] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  208.401080][ T5904] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  208.441071][ T5827] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  208.514075][ T5904] usb 2-1: USB disconnect, device number 10
[  208.526449][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  208.552980][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  208.585518][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  208.609484][ T5827] usb 1-1: USB disconnect, device number 11
[  208.623701][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  208.698106][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  208.782417][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  208.792436][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.238499][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.324'.
[  209.388219][   T30] audit: type=1800 audit(1762194096.654:43): pid=7411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.321" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  209.594256][ T5911] usb 4-1: GET_CAPABILITIES returned 0
[  209.599978][ T5911] usbtmc 4-1:16.0: can't read capabilities
[  209.843304][ T5911] usb 4-1: USB disconnect, device number 11
[  210.238726][ T5150] Bluetooth: hci0: command 0x0406 tx timeout
[  210.244788][ T5150] Bluetooth: hci2: command 0x0406 tx timeout
[  210.251423][ T5841] Bluetooth: hci3: command 0x0406 tx timeout
[  210.251482][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  210.557860][ T5940] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  210.750805][ T5940] usb 5-1: Using ep0 maxpacket: 16
[  210.764269][ T5940] usb 5-1: unable to get BOS descriptor or descriptor too short
[  210.777111][ T5940] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  210.785517][ T5940] usb 5-1: config 13 has no interface number 0
[  210.794904][ T5940] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  210.857728][ T5940] usb 5-1: config 13 interface 50 has no altsetting 0
[  210.889244][ T5940] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  210.912305][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.942225][ T5940] usb 5-1: Product: syz
[  211.050521][ T5827] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  211.069139][ T5940] usb 5-1: Manufacturer: syz
[  211.073794][ T5940] usb 5-1: SerialNumber: syz
[  211.090730][ T7429] loop6: detected capacity change from 0 to 7
[  211.194821][ T7413] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  211.215367][ T7429] Dev loop6: unable to read RDB block 7
[  211.237608][ T7429]  loop6: AHDI p2 p3
[  211.255096][ T7429] loop6: partition table partially beyond EOD, truncated
[  211.262610][ T7429] loop6: p2 size 335544428 extends beyond EOD, truncated
[  211.306246][ T5827] usb 2-1: Using ep0 maxpacket: 8
[  211.314137][ T5827] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  211.325670][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  211.336034][ T5827] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  211.365344][ T5827] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.384037][ T7426] kvm: pic: single mode not supported
[  211.384700][ T7426] kvm: pic: single mode not supported
[  211.391036][ T7426] kvm: pic: level sensitive irq not supported
[  211.435042][ T5827] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  211.452771][ T5940] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  211.490544][ T7426] kvm: pic: non byte read
[  211.490927][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.544315][ T5940] usb 5-1: MIDIStreaming interface descriptor not found
[  211.647705][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  211.666956][ T7426] kvm: pic: single mode not supported
[  211.666971][ T7426] kvm: pic: level sensitive irq not supported
[  211.672643][ T7426] kvm: pic: non byte write
[  211.894450][ T5940] usb 5-1: USB disconnect, device number 9
[  212.005028][ T7437] kvm: user requested TSC rate below hardware speed
[  212.055838][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.409801][ T7448] gretap0: entered promiscuous mode
[  212.776685][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  213.024264][ T7458] bridge2: entered promiscuous mode
[  213.076313][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  213.270211][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  213.369134][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  213.387085][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  213.439954][ T5911] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  213.449194][ T5911] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  213.457983][ T5911] usb 4-1: Manufacturer: syz
[  213.501332][ T5911] usb 4-1: config 0 descriptor??
[  213.529995][ T5827] usb 2-1: usb_control_msg returned -71
[  213.572915][ T5827] usbtmc 2-1:16.0: can't read capabilities
[  213.751589][ T5827] usb 2-1: USB disconnect, device number 11
[  214.187362][ T5911] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  214.413318][ T5911] usb 1-1: device descriptor read/64, error -71
[  214.421671][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  214.718628][    T9] usb 3-1: Using ep0 maxpacket: 8
[  214.744093][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  214.755978][ T5911] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  214.780463][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  214.828437][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  214.901493][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  214.928811][ T5911] usb 1-1: device descriptor read/64, error -71
[  214.951567][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  214.974177][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.066735][ T5911] usb usb1-port1: attempt power cycle
[  215.218467][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  215.224085][    T9] usbtmc 3-1:16.0: can't read capabilities
[  215.406310][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  215.447446][ T5911] usb 1-1: device descriptor read/8, error -71
[  215.509533][ T5827] usb 3-1: USB disconnect, device number 14
[  215.736366][ T5911] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  215.762021][ T5911] usb 1-1: device descriptor read/8, error -71
[  215.878594][ T5911] usb usb1-port1: unable to enumerate USB device
[  216.356070][ T5920] usb 4-1: USB disconnect, device number 12
[  216.388016][ T7485] loop6: detected capacity change from 0 to 7
[  216.425180][ T7485] Dev loop6: unable to read RDB block 7
[  216.447446][ T7485]  loop6: AHDI p2 p3
[  216.452828][ T7485] loop6: partition table partially beyond EOD, truncated
[  216.472721][ T7485] loop6: p2 size 335544428 extends beyond EOD, truncated
[  216.613776][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  216.955630][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.350'.
[  217.618911][   T30] audit: type=1800 audit(1762194104.714:44): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.354" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  218.932507][ T7528] mmap: syz.0.359 (7528): VmData 46153728 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  218.945187][   T30] audit: type=1326 audit(1762194106.204:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  218.967316][ T5827] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  219.041342][   T30] audit: type=1326 audit(1762194106.204:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  219.206442][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'.
[  219.456530][ T5827] usb 2-1: Using ep0 maxpacket: 16
[  219.511937][ T5827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.563765][   T30] audit: type=1326 audit(1762194106.204:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf708d539 code=0x7ffc0000
[  219.588266][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.616387][ T5904] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  219.663820][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  219.832241][   T30] audit: type=1326 audit(1762194106.204:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  219.879238][ T5827] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  219.890284][ T5827] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  219.906239][ T5904] usb 1-1: Using ep0 maxpacket: 8
[  219.922529][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  219.933870][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  219.962867][ T5827] usb 2-1: Manufacturer: syz
[  219.993105][   T30] audit: type=1326 audit(1762194106.204:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf708d539 code=0x7ffc0000
[  220.003289][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  220.248945][   T30] audit: type=1326 audit(1762194106.204:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  220.296740][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.310785][ T5827] usb 2-1: config 0 descriptor??
[  220.325546][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  220.334887][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.372251][   T30] audit: type=1326 audit(1762194106.204:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf708d539 code=0x7ffc0000
[  220.412158][   T30] audit: type=1326 audit(1762194106.204:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  220.498752][   T30] audit: type=1326 audit(1762194106.204:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.0.359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000
[  220.571779][ T5904] usb 1-1: GET_CAPABILITIES returned 0
[  220.596330][ T5904] usbtmc 1-1:16.0: can't read capabilities
[  220.713696][ T7540] loop6: detected capacity change from 0 to 7
[  220.734991][ T7540] Dev loop6: unable to read RDB block 7
[  220.769497][ T7540]  loop6: AHDI p2 p3
[  220.773540][ T7540] loop6: partition table partially beyond EOD, truncated
[  220.787451][ T7540] loop6: p2 size 335544428 extends beyond EOD, truncated
[  220.821015][ T5904] usb 1-1: USB disconnect, device number 16
[  220.912492][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  221.106382][ T5960] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  221.129911][ T7550] syz.2.362 uses obsolete (PF_INET,SOCK_PACKET)
[  221.276430][ T5960] usb 5-1: Using ep0 maxpacket: 16
[  221.283978][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  221.297593][ T5960] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  221.307095][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.315113][ T5960] usb 5-1: Product: syz
[  221.320037][ T5960] usb 5-1: Manufacturer: syz
[  221.324674][ T5960] usb 5-1: SerialNumber: syz
[  221.334691][ T5960] usb 5-1: config 0 descriptor??
[  221.359009][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'.
[  221.416893][ T5904] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  221.419904][ T5960] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  221.587908][ T5960] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  221.738259][ T5904] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[  221.754928][ T5904] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  221.779017][ T5904] usb 3-1: config 0 has no interface number 0
[  221.793233][ T5904] usb 3-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  221.814728][ T5904] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  221.825345][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.833867][ T5904] usb 3-1: Product: syz
[  221.839304][ T5904] usb 3-1: Manufacturer: syz
[  221.843956][ T5904] usb 3-1: SerialNumber: syz
[  221.886022][ T5904] usb 3-1: config 0 descriptor??
[  222.035748][ T5960] em28xx 5-1:0.0: chip ID is em2765
[  222.291903][ T5904] usb-storage 3-1:0.20: USB Mass Storage device detected
[  222.338445][ T5904] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  222.354265][ T5911] usb 2-1: USB disconnect, device number 12
[  222.429865][ T5904] usb 3-1: USB disconnect, device number 15
[  222.443305][ T7563] fuse: Bad value for 'fd'
[  222.766310][ T5960] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  222.766888][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  222.766903][   T30] audit: type=1800 audit(1762194110.004:60): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.371" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  222.777474][  T984] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  222.818816][ T5960] em28xx 5-1:0.0: board has no eeprom
[  223.050802][  T984] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  223.060064][  T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.072549][  T984] usb 1-1: Product: syz
[  223.132725][  T984] usb 1-1: Manufacturer: syz
[  223.176440][ T5960] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  223.224234][ T5960] em28xx 5-1:0.0: dvb set to bulk mode.
[  223.456292][   T30] audit: type=1800 audit(1762194110.524:61): pid=7578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.373" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  223.476674][  T984] usb 1-1: SerialNumber: syz
[  223.495641][    T9] em28xx 5-1:0.0: Binding DVB extension
[  223.609004][  T984] usb 1-1: config 0 descriptor??
[  223.826917][  T984] usb-storage 1-1:0.0: USB Mass Storage device detected
[  224.218626][  T984] usb 5-1: USB disconnect, device number 10
[  224.225124][    T9] em28xx 5-1:0.0: Registering input extension
[  224.265043][  T984] em28xx 5-1:0.0: Disconnecting em28xx
[  224.282196][  T984] em28xx 5-1:0.0: Closing input extension
[  224.304883][  T984] em28xx 5-1:0.0: Freeing device
[  224.699086][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.375'.
[  225.167799][ T7598] FAULT_INJECTION: forcing a failure.
[  225.167799][ T7598] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  225.181171][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.4.378 Not tainted syzkaller #0 PREEMPT(full) 
[  225.181195][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  225.181206][ T7598] Call Trace:
[  225.181216][ T7598]  <TASK>
[  225.181224][ T7598]  dump_stack_lvl+0x189/0x250
[  225.181253][ T7598]  ? __pfx____ratelimit+0x10/0x10
[  225.181276][ T7598]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.181299][ T7598]  ? __pfx__printk+0x10/0x10
[  225.181316][ T7598]  ? __might_fault+0xb0/0x130
[  225.181351][ T7598]  should_fail_ex+0x414/0x560
[  225.181381][ T7598]  _copy_from_user+0x2d/0xb0
[  225.181403][ T7598]  get_compat_msghdr+0xad/0x4a0
[  225.181423][ T7598]  ? __lock_acquire+0xab9/0xd20
[  225.181446][ T7598]  ? __pfx_get_compat_msghdr+0x10/0x10
[  225.181466][ T7598]  ? get_pid_task+0x20/0x1f0
[  225.181496][ T7598]  ___sys_recvmsg+0x17f/0x510
[  225.181523][ T7598]  ? __pfx____sys_recvmsg+0x10/0x10
[  225.181567][ T7598]  ? __fget_files+0x3a0/0x420
[  225.181595][ T7598]  __sys_recvmsg+0x161/0x220
[  225.181615][ T7598]  ? __pfx___sys_recvmsg+0x10/0x10
[  225.181639][ T7598]  ? __pfx_ksys_write+0x10/0x10
[  225.181663][ T7598]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  225.181687][ T7598]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.181719][ T7598]  __do_fast_syscall_32+0xb6/0x2b0
[  225.181743][ T7598]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.181781][ T7598]  do_fast_syscall_32+0x34/0x80
[  225.181804][ T7598]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  225.181825][ T7598] RIP: 0023:0xf70ed539
[  225.181841][ T7598] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  225.181855][ T7598] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  225.181875][ T7598] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340
[  225.181887][ T7598] RDX: 0000000040000040 RSI: 0000000000000000 RDI: 0000000000000000
[  225.181898][ T7598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  225.181908][ T7598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  225.181919][ T7598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  225.181946][ T7598]  </TASK>
[  225.437776][ T5827] usb 1-1: USB disconnect, device number 17
[  225.884690][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'.
[  226.444764][ T7621] netlink: 32 bytes leftover after parsing attributes in process `syz.3.384'.
[  226.530380][ T7623] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  226.538939][ T7623] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  226.845159][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  227.018978][    T9] usb 2-1: Using ep0 maxpacket: 8
[  227.063087][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  227.087678][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  227.100234][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  227.110518][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.128495][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  227.171802][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.515359][ T7634] FAULT_INJECTION: forcing a failure.
[  227.515359][ T7634] name failslab, interval 1, probability 0, space 0, times 1
[  227.534743][    T9] usb 2-1: usb_control_msg returned -71
[  227.544659][    T9] usbtmc 2-1:16.0: can't read capabilities
[  227.564322][ T7634] CPU: 0 UID: 0 PID: 7634 Comm: syz.4.391 Not tainted syzkaller #0 PREEMPT(full) 
[  227.564344][ T7634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  227.564353][ T7634] Call Trace:
[  227.564361][ T7634]  <TASK>
[  227.564367][ T7634]  dump_stack_lvl+0x189/0x250
[  227.564395][ T7634]  ? __pfx____ratelimit+0x10/0x10
[  227.564415][ T7634]  ? __pfx_dump_stack_lvl+0x10/0x10
[  227.564435][ T7634]  ? __pfx__printk+0x10/0x10
[  227.564456][ T7634]  ? __pfx___might_resched+0x10/0x10
[  227.564473][ T7634]  ? fs_reclaim_acquire+0x7d/0x100
[  227.564535][ T7634]  should_fail_ex+0x414/0x560
[  227.564564][ T7634]  should_failslab+0xa8/0x100
[  227.564583][ T7634]  __kmalloc_noprof+0xcb/0x7f0
[  227.564603][ T7634]  ? sock_kmalloc+0xd6/0x160
[  227.564628][ T7634]  sock_kmalloc+0xd6/0x160
[  227.564649][ T7634]  af_alg_alloc_areq+0x8d/0x260
[  227.564676][ T7634]  skcipher_recvmsg+0x359/0x11d0
[  227.564699][ T7634]  ? aa_sk_perm+0x81e/0x950
[  227.564736][ T7634]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  227.564775][ T7634]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  227.564790][ T7634]  ? security_socket_recvmsg+0x7e/0x2e0
[  227.564808][ T7634]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  227.564827][ T7634]  sock_recvmsg+0x22c/0x270
[  227.564851][ T7634]  ____sys_recvmsg+0x1c9/0x460
[  227.564878][ T7634]  ? __pfx_____sys_recvmsg+0x10/0x10
[  227.564893][ T7634]  ? get_compat_msghdr+0x37e/0x4a0
[  227.564921][ T7634]  ? get_pid_task+0x20/0x1f0
[  227.564949][ T7634]  ___sys_recvmsg+0x1b5/0x510
[  227.564970][ T7634]  ? __pfx____sys_recvmsg+0x10/0x10
[  227.565005][ T7634]  ? __fget_files+0x3a0/0x420
[  227.565026][ T7634]  __sys_recvmsg+0x161/0x220
[  227.565042][ T7634]  ? __pfx___sys_recvmsg+0x10/0x10
[  227.565063][ T7634]  ? __pfx_ksys_write+0x10/0x10
[  227.565082][ T7634]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  227.565101][ T7634]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.565123][ T7634]  __do_fast_syscall_32+0xb6/0x2b0
[  227.565145][ T7634]  ? lockdep_hardirqs_on+0x9c/0x150
[  227.565167][ T7634]  do_fast_syscall_32+0x34/0x80
[  227.565189][ T7634]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  227.565207][ T7634] RIP: 0023:0xf70ed539
[  227.565222][ T7634] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  227.565235][ T7634] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174
[  227.565255][ T7634] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340
[  227.565267][ T7634] RDX: 0000000040000040 RSI: 0000000000000000 RDI: 0000000000000000
[  227.565278][ T7634] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  227.565287][ T7634] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  227.565298][ T7634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  227.565327][ T7634]  </TASK>
[  228.006384][    T9] usb 2-1: USB disconnect, device number 13
[  228.266291][  T984] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  228.496228][  T984] usb 3-1: Using ep0 maxpacket: 16
[  228.503706][  T984] usb 3-1: unable to get BOS descriptor or descriptor too short
[  228.528414][  T984] usb 3-1: config 13 has an invalid interface number: 50 but max is 0
[  228.536933][  T984] usb 3-1: config 13 has no interface number 0
[  228.583795][ T5904] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  228.594690][  T984] usb 3-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  228.618352][  T984] usb 3-1: config 13 interface 50 has no altsetting 0
[  228.714053][  T984] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  228.724720][  T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.733017][  T984] usb 3-1: Product: syz
[  228.737417][  T984] usb 3-1: Manufacturer: syz
[  228.743044][  T984] usb 3-1: SerialNumber: syz
[  228.759301][ T5904] usb 1-1: Using ep0 maxpacket: 32
[  228.777210][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  228.799204][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  228.873247][ T5904] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  228.926827][ T5904] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  228.942854][ T5904] usb 1-1: Product: syz
[  228.955165][ T5904] usb 1-1: Manufacturer: syz
[  228.979995][ T5904] usb 1-1: SerialNumber: syz
[  229.002021][ T5904] usb 1-1: config 0 descriptor??
[  229.040261][ T5904] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  229.286281][   T13] usb 1-1: Failed to submit usb control message: -71
[  229.338024][   T13] usb 1-1: unable to send the bmi data to the device: -71
[  229.345250][ T7630] netlink: 'syz.2.389': attribute type 11 has an invalid length.
[  229.366545][ T5904] usb 1-1: USB disconnect, device number 18
[  229.391772][   T13] usb 1-1: unable to get target info from device
[  229.423592][   T13] usb 1-1: could not get target info (-71)
[  229.434744][   T13] usb 1-1: could not probe fw (-71)
[  229.895633][ T7669] capability: warning: `syz.4.402' uses deprecated v2 capabilities in a way that may be insecure
[  229.928378][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'.
[  229.937622][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'.
[  229.950431][ T7671] netlink: 'syz.0.401': attribute type 12 has an invalid length.
[  229.958657][ T7671] netlink: 'syz.0.401': attribute type 14 has an invalid length.
[  230.272538][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.404'.
[  230.384096][   T30] audit: type=1800 audit(1762194117.634:62): pid=7682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.403" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0
[  231.199805][  T984] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  231.322286][  T984] usb 3-1: MIDIStreaming interface descriptor not found
[  231.429829][  T984] usb 3-1: USB disconnect, device number 16
[  231.645250][ T7029] udevd[7029]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  231.983093][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'.
[  233.400936][ T7719] tipc: Started in network mode
[  233.405814][ T7719] tipc: Node identity ac1414aa, cluster identity 4711
[  233.413318][ T7719] tipc: Enabled bearer <udp:syz2>, priority 10
[  233.423754][ T7719] tipc: Enabled bearer <ib:wg1>, priority 0
[  233.596446][ T5827] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  233.748040][ T5827] usb 5-1: config 5 has an invalid interface number: 187 but max is 0
[  233.776959][ T5827] usb 5-1: config 5 has no interface number 0
[  233.791067][ T5827] usb 5-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  233.813649][ T5827] usb 5-1: config 5 interface 187 altsetting 8 has an invalid endpoint descriptor of length 5, skipping
[  233.840367][ T5827] usb 5-1: config 5 interface 187 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  233.870826][ T5827] usb 5-1: config 5 interface 187 has no altsetting 0
[  233.887713][ T5827] usb 5-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[  233.896422][ T5940] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  233.904610][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.919259][ T5827] usb 5-1: Product: syz
[  233.928390][ T5827] usb 5-1: Manufacturer: syz
[  233.939399][ T5827] usb 5-1: SerialNumber: syz
[  234.056249][ T5940] usb 2-1: Using ep0 maxpacket: 16
[  234.067785][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short
[  234.093080][ T5940] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  234.123275][ T5940] usb 2-1: config 13 has no interface number 0
[  234.134440][ T5940] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.189920][ T5940] usb 2-1: config 13 interface 50 has no altsetting 0
[  234.201548][ T5827] usb 5-1: USB disconnect, device number 11
[  234.209685][ T5940] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  234.224729][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.244065][ T5940] usb 2-1: Product: syz
[  234.275907][ T5940] usb 2-1: Manufacturer: syz
[  234.289902][ T5940] usb 2-1: SerialNumber: syz
[  234.536320][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  234.540483][ T5904] tipc: Node number set to 2886997162
[  234.696310][    T9] usb 4-1: Using ep0 maxpacket: 8
[  234.709239][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  234.728663][ T7723] netlink: 'syz.1.417': attribute type 11 has an invalid length.
[  234.736585][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  234.778050][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  234.805097][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  234.824908][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'.
[  234.847532][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  234.860765][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.083816][    T9] usb 4-1: GET_CAPABILITIES returned 0
[  235.089808][    T9] usbtmc 4-1:16.0: can't read capabilities
[  235.096939][ T5940] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  235.116391][ T5940] usb 2-1: MIDIStreaming interface descriptor not found
[  235.188605][ T5940] usb 2-1: USB disconnect, device number 14
[  235.295250][    T9] usb 4-1: USB disconnect, device number 13
[  235.455162][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.541085][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.425'.
[  236.673214][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'.
[  237.258522][ T7768] loop6: detected capacity change from 0 to 7
[  237.285495][ T7768] Dev loop6: unable to read RDB block 7
[  237.307052][ T7769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.435'.
[  237.537614][ T7768]  loop6: AHDI p2 p3
[  237.555326][ T7768] loop6: partition table partially beyond EOD, truncated
[  237.647862][ T7768] loop6: p2 size 335544428 extends beyond EOD, truncated
[  237.907938][   T30] audit: type=1800 audit(1762194125.134:63): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.424" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0
[  237.949224][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  240.497361][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.506850][ T7809] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  240.538619][ T5920] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  240.827218][ T5920] usb 5-1: Using ep0 maxpacket: 8
[  240.837049][ T5920] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  240.858744][ T5920] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  240.868284][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.883532][ T5920] usb 5-1: Product: syz
[  240.888393][ T5920] usb 5-1: Manufacturer: syz
[  241.026357][ T5827] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  241.206345][ T5920] usb 5-1: SerialNumber: syz
[  241.221817][ T5920] usb 5-1: config 0 descriptor??
[  241.251861][ T5920] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  241.265007][ T5920] usb 5-1: setting power ON
[  241.281444][ T5827] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  241.293162][ T5827] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  241.314650][ T5920] dvb-usb: bulk message failed: -22 (2/0)
[  241.324726][ T5827] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  241.347297][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  241.366328][ T5827] usb 2-1: config 0 interface 0 has no altsetting 0
[  241.373758][ T5920] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  241.393156][ T5920] usb 5-1: media controller created
[  241.398980][ T5827] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  241.506770][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.597868][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'.
[  241.769560][ T5827] usb 2-1: config 0 descriptor??
[  241.773934][ T7824] loop6: detected capacity change from 0 to 7
[  241.778960][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  241.789873][ T7816] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  241.814932][ T5920] usb 5-1: selecting invalid altsetting 6
[  241.833572][ T5920] usb 5-1: digital interface selection failed (-22)
[  241.849990][ T5967] Dev loop6: unable to read RDB block 7
[  241.860542][ T5920] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  241.973727][ T5920] usb 5-1: setting power OFF
[  242.005061][ T5920] dvb-usb: bulk message failed: -22 (2/0)
[  242.017418][ T5967]  loop6: AHDI p2 p3
[  242.024808][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  242.041371][ T5967] loop6: partition table partially beyond EOD, truncated
[  242.065475][ T5967] loop6: p2 size 335544428 extends beyond EOD, truncated
[  242.087073][ T7824] Dev loop6: unable to read RDB block 7
[  242.092709][ T7824]  loop6: AHDI p2 p3
[  242.112960][ T7824] loop6: partition table partially beyond EOD, truncated
[  242.120173][ T5920] (NULL device *): no alternate interface
[  242.151159][ T7824] loop6: p2 size 335544428 extends beyond EOD, truncated
[  242.412664][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  242.483550][ T5967] udevd[5967]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  242.585104][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'.
[  243.363647][ T5920] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  243.384098][ T5921] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  243.466017][ T5920] usb 5-1: USB disconnect, device number 12
[  243.596406][ T5921] usb 3-1: Using ep0 maxpacket: 16
[  243.612955][ T5921] usb 3-1: too many endpoints for config 0 interface 0 altsetting 4: 34, using maximum allowed: 30
[  243.676352][ T5921] usb 3-1: config 0 interface 0 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  243.734572][ T5827] usbhid 2-1:0.0: can't add hid device: -71
[  243.741012][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  243.756785][ T5921] usb 3-1: config 0 interface 0 altsetting 4 has an endpoint descriptor with address 0xD7, changing to 0x87
[  243.778415][ T5827] usb 2-1: USB disconnect, device number 15
[  243.804778][ T5921] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  243.868746][ T5921] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  243.898225][ T5921] usb 3-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 34
[  243.921517][ T5921] usb 3-1: config 0 interface 0 has no altsetting 0
[  243.944185][ T5921] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  243.955374][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.965143][ T5921] usb 3-1: Product: syz
[  243.984306][ T5921] usb 3-1: Manufacturer: syz
[  243.993266][ T5921] usb 3-1: SerialNumber: syz
[  244.032415][ T5921] usb 3-1: config 0 descriptor??
[  244.222399][   T30] audit: type=1800 audit(1762194131.424:64): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  244.254157][ T7838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.268409][ T7838] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.296009][ T5921] appledisplay 3-1:0.0: Error while getting initial brightness: -71
[  244.333386][ T5921] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71
[  244.463673][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'.
[  244.476613][ T5921] usb 3-1: USB disconnect, device number 17
[  245.657987][ T7871] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  245.714938][ T7871] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  245.890206][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.466'.
[  246.506335][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'.
[  247.324823][   T30] audit: type=1326 audit(1762194134.594:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.357388][   T30] audit: type=1326 audit(1762194134.634:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=294 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.422365][   T30] audit: type=1326 audit(1762194134.694:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.634141][   T30] audit: type=1326 audit(1762194134.694:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.720308][   T30] audit: type=1326 audit(1762194134.814:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.743072][   T30] audit: type=1326 audit(1762194134.814:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.839888][   T30] audit: type=1326 audit(1762194134.814:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.942807][   T30] audit: type=1326 audit(1762194134.814:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  247.971776][   T30] audit: type=1326 audit(1762194134.814:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffd539 code=0x7ffc0000
[  248.208457][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.480'.
[  248.266317][ T5911] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  248.546433][ T5911] usb 5-1: Using ep0 maxpacket: 16
[  248.556757][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short
[  248.569011][ T5911] usb 5-1: config 13 has an invalid interface number: 50 but max is 0
[  248.586832][ T5911] usb 5-1: config 13 has no interface number 0
[  248.597819][ T5911] usb 5-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.631996][ T5911] usb 5-1: config 13 interface 50 has no altsetting 0
[  248.646859][ T5911] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  248.660827][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.674339][ T5911] usb 5-1: Product: syz
[  248.683404][ T5911] usb 5-1: Manufacturer: syz
[  248.691578][ T5911] usb 5-1: SerialNumber: syz
[  248.893751][ T5827] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  248.912225][ T7909] netlink: 'syz.4.474': attribute type 11 has an invalid length.
[  249.092071][ T7935] IPv6: addrconf: prefix option has invalid lifetime
[  249.104208][ T5827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  249.124539][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  249.124571][ T5827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  249.129191][ T5827] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  249.129226][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.129246][ T5827] usb 4-1: Product: syz
[  249.129261][ T5827] usb 4-1: Manufacturer: syz
[  249.129275][ T5827] usb 4-1: SerialNumber: syz
[  249.132142][ T5827] usb 4-1: config 0 descriptor??
[  249.132873][ T7933] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  249.133014][ T7933] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  249.134414][ T5827] usb 4-1: ucan: probing device on interface #0
[  249.305879][ T5911] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  249.315215][ T5911] usb 5-1: MIDIStreaming interface descriptor not found
[  249.488428][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.543423][ T5911] usb 5-1: USB disconnect, device number 13
[  249.571669][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.661727][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  250.276655][ T5911] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  250.317392][ T5827] usb 4-1: ucan: could not read protocol version, ret=-110
[  250.324421][ T7958] loop6: detected capacity change from 0 to 7
[  250.333219][ T7958] Dev loop6: unable to read RDB block 7
[  250.337023][ T5827] usb 4-1: ucan: probe failed; try to update the device firmware
[  250.339814][ T7958]  loop6: AHDI p2 p3
[  250.360154][ T7958] loop6: partition table partially beyond EOD, truncated
[  250.370308][ T7958] loop6: p2 size 335544428 extends beyond EOD, truncated
[  250.437019][ T5911] usb 5-1: Using ep0 maxpacket: 32
[  250.447432][ T5911] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  250.475955][ T5911] usb 5-1: config 0 has no interface number 0
[  250.499230][ T5911] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  250.502550][ T5995] udevd[5995]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  250.512880][ T5911] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  250.531580][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.540894][ T5911] usb 5-1: Product: syz
[  250.545373][ T5911] usb 5-1: Manufacturer: syz
[  250.550489][ T5911] usb 5-1: SerialNumber: syz
[  250.563270][ T5911] usb 5-1: config 0 descriptor??
[  250.617847][ T5911] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  250.649609][ T5911] em28xx 5-1:0.132: Video interface 132 found:
[  250.835129][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'.
[  250.986292][ T5904] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  251.023699][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  251.035502][ T5911] em28xx 5-1:0.132: unknown em28xx chip ID (0)
[  251.042804][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.146245][ T5904] usb 3-1: Using ep0 maxpacket: 8
[  251.153789][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  251.165618][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  251.177574][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  251.187956][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  251.202270][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  251.214059][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.431322][ T5904] usb 3-1: GET_CAPABILITIES returned 0
[  251.439971][ T5904] usbtmc 3-1:16.0: can't read capabilities
[  251.457268][ T5911] em28xx 5-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0)
[  251.472636][ T5911] em28xx 5-1:0.132: board has no eeprom
[  251.557933][ T5940] usb 4-1: USB disconnect, device number 14
[  251.656220][  T984] usb 3-1: USB disconnect, device number 18
[  252.122665][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'.
[  252.463804][ T7991] netlink: 14 bytes leftover after parsing attributes in process `syz.0.500'.
[  252.628725][ T5911] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  252.639581][ T5911] em28xx 5-1:0.132: analog set to bulk mode.
[  252.645695][  T984] em28xx 5-1:0.132: Registering V4L2 extension
[  252.800552][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  252.848873][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  252.866793][ T7991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  252.869859][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  252.889858][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  252.945962][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  252.966041][  T984] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  253.176081][   T30] kauditd_printk_skb: 212 callbacks suppressed
[  253.176109][   T30] audit: type=1800 audit(1762194140.314:286): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.501" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  253.217144][ T7991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.230025][ T5940] usb 5-1: USB disconnect, device number 14
[  253.248280][ T5940] em28xx 5-1:0.132: Disconnecting em28xx
[  253.357886][ T7991] bond0 (unregistering): Released all slaves
[  253.420552][  T984] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  253.518274][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.502'.
[  253.607816][  T984] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  253.616410][  T984] em28xx 5-1:0.132: No AC97 audio processor
[  253.871203][  T984] usb 5-1: Decoder not found
[  253.951175][  T984] em28xx 5-1:0.132: failed to create media graph
[  254.005248][  T984] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  254.067947][  T984] em28xx 5-1:0.132: Remote control support is not available for this card.
[  254.270743][ T5940] em28xx 5-1:0.132: Closing input extension
[  254.292124][ T5940] ==================================================================
[  254.300216][ T5940] BUG: KASAN: slab-use-after-free in media_device_unregister+0x141/0x400
[  254.308648][ T5940] Read of size 8 at addr ffff888029174210 by task kworker/0:6/5940
[  254.316542][ T5940] 
[  254.318869][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  254.318883][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  254.318891][ T5940] Workqueue: usb_hub_wq hub_event
[  254.318908][ T5940] Call Trace:
[  254.318913][ T5940]  <TASK>
[  254.318918][ T5940]  dump_stack_lvl+0x189/0x250
[  254.318943][ T5940]  ? rcu_is_watching+0x15/0xb0
[  254.318955][ T5940]  ? __kasan_check_byte+0x12/0x40
[  254.318965][ T5940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.318977][ T5940]  ? rcu_is_watching+0x15/0xb0
[  254.318988][ T5940]  ? lock_release+0x4b/0x3e0
[  254.318998][ T5940]  ? __virt_addr_valid+0x1c8/0x5c0
[  254.319011][ T5940]  ? __virt_addr_valid+0x4a5/0x5c0
[  254.319023][ T5940]  print_report+0xca/0x240
[  254.319034][ T5940]  ? media_device_unregister+0x141/0x400
[  254.319045][ T5940]  kasan_report+0x118/0x150
[  254.319054][ T5940]  ? media_device_unregister+0x141/0x400
[  254.319067][ T5940]  media_device_unregister+0x141/0x400
[  254.319080][ T5940]  em28xx_release_resources+0xac/0x240
[  254.319095][ T5940]  em28xx_usb_disconnect+0x19f/0x2f0
[  254.319114][ T5940]  usb_unbind_interface+0x26e/0x910
[  254.319126][ T5940]  ? __pfx_usb_unbind_interface+0x10/0x10
[  254.319136][ T5940]  device_release_driver_internal+0x4d9/0x800
[  254.319152][ T5940]  bus_remove_device+0x34d/0x410
[  254.319162][ T5940]  device_del+0x511/0x8e0
[  254.319176][ T5940]  ? __pfx_device_del+0x10/0x10
[  254.319185][ T5940]  ? kobject_put+0x446/0x480
[  254.319201][ T5940]  usb_disable_device+0x3e9/0x8a0
[  254.319211][ T5940]  usb_disconnect+0x330/0x950
[  254.319225][ T5940]  hub_event+0x1cf5/0x4a20
[  254.319239][ T5940]  ? do_raw_spin_lock+0x121/0x290
[  254.319253][ T5940]  ? register_lock_class+0x51/0x320
[  254.319264][ T5940]  ? __pfx_hub_event+0x10/0x10
[  254.319272][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  254.319284][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.319295][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  254.319304][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  254.319314][ T5940]  process_scheduled_works+0xae1/0x17b0
[  254.319329][ T5940]  ? __pfx_process_scheduled_works+0x10/0x10
[  254.319341][ T5940]  worker_thread+0x8a0/0xda0
[  254.319351][ T5940]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.319364][ T5940]  ? __kthread_parkme+0x7b/0x200
[  254.319377][ T5940]  kthread+0x711/0x8a0
[  254.319389][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  254.319398][ T5940]  ? __pfx_kthread+0x10/0x10
[  254.319409][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  254.319420][ T5940]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.319431][ T5940]  ? __pfx_kthread+0x10/0x10
[  254.319442][ T5940]  ret_from_fork+0x4bc/0x870
[  254.319453][ T5940]  ? __pfx_ret_from_fork+0x10/0x10
[  254.319466][ T5940]  ? __switch_to_asm+0x39/0x70
[  254.319479][ T5940]  ? __switch_to_asm+0x33/0x70
[  254.319492][ T5940]  ? __pfx_kthread+0x10/0x10
[  254.319521][ T5940]  ret_from_fork_asm+0x1a/0x30
[  254.319539][ T5940]  </TASK>
[  254.319543][ T5940] 
[  254.601604][ T5940] Allocated by task 984:
[  254.605924][ T5940]  kasan_save_track+0x3e/0x80
[  254.610660][ T5940]  __kasan_kmalloc+0x93/0xb0
[  254.615236][ T5940]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  254.620593][ T5940]  em28xx_v4l2_init+0x10b/0x2e70
[  254.625532][ T5940]  em28xx_init_extension+0x120/0x1c0
[  254.630830][ T5940]  process_scheduled_works+0xae1/0x17b0
[  254.636376][ T5940]  worker_thread+0x8a0/0xda0
[  254.640969][ T5940]  kthread+0x711/0x8a0
[  254.645034][ T5940]  ret_from_fork+0x4bc/0x870
[  254.649611][ T5940]  ret_from_fork_asm+0x1a/0x30
[  254.654358][ T5940] 
[  254.656689][ T5940] Freed by task 984:
[  254.660567][ T5940]  kasan_save_track+0x3e/0x80
[  254.665238][ T5940]  __kasan_save_free_info+0x46/0x50
[  254.670422][ T5940]  __kasan_slab_free+0x5c/0x80
[  254.675181][ T5940]  kfree+0x19a/0x6d0
[  254.679065][ T5940]  em28xx_v4l2_init+0x1683/0x2e70
[  254.684078][ T5940]  em28xx_init_extension+0x120/0x1c0
[  254.689347][ T5940]  process_scheduled_works+0xae1/0x17b0
[  254.694878][ T5940]  worker_thread+0x8a0/0xda0
[  254.699457][ T5940]  kthread+0x711/0x8a0
[  254.703518][ T5940]  ret_from_fork+0x4bc/0x870
[  254.708100][ T5940]  ret_from_fork_asm+0x1a/0x30
[  254.712859][ T5940] 
[  254.715164][ T5940] The buggy address belongs to the object at ffff888029174000
[  254.715164][ T5940]  which belongs to the cache kmalloc-8k of size 8192
[  254.729202][ T5940] The buggy address is located 528 bytes inside of
[  254.729202][ T5940]  freed 8192-byte region [ffff888029174000, ffff888029176000)
[  254.743080][ T5940] 
[  254.745399][ T5940] The buggy address belongs to the physical page:
[  254.751921][ T5940] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29170
[  254.760754][ T5940] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  254.769264][ T5940] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  254.777242][ T5940] page_type: f5(slab)
[  254.781207][ T5940] raw: 00fff00000000040 ffff88801a027280 0000000000000000 dead000000000001
[  254.789774][ T5940] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  254.798347][ T5940] head: 00fff00000000040 ffff88801a027280 0000000000000000 dead000000000001
[  254.806997][ T5940] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  254.815733][ T5940] head: 00fff00000000003 ffffea0000a45c01 00000000ffffffff 00000000ffffffff
[  254.824388][ T5940] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  254.833039][ T5940] page dumped because: kasan: bad access detected
[  254.839513][ T5940] page_owner tracks the page as allocated
[  254.845245][ T5940] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5848, tgid 5848 (syz-executor), ts 88113008916, free_ts 84335342356
[  254.866585][ T5940]  post_alloc_hook+0x240/0x2a0
[  254.871354][ T5940]  get_page_from_freelist+0x2365/0x2440
[  254.876882][ T5940]  __alloc_frozen_pages_noprof+0x181/0x370
[  254.882667][ T5940]  alloc_pages_mpol+0x232/0x4a0
[  254.887496][ T5940]  allocate_slab+0x96/0x350
[  254.891980][ T5940]  ___slab_alloc+0xe94/0x18a0
[  254.896635][ T5940]  __slab_alloc+0x65/0x100
[  254.901042][ T5940]  __kmalloc_noprof+0x471/0x7f0
[  254.905875][ T5940]  cache_create_net+0x92/0x260
[  254.910627][ T5940]  gss_svc_init_net+0x58/0x570
[  254.915370][ T5940]  ops_init+0x35c/0x5c0
[  254.919504][ T5940]  setup_net+0xfe/0x320
[  254.923643][ T5940]  copy_net_ns+0x34e/0x4e0
[  254.928044][ T5940]  create_new_namespaces+0x3f3/0x720
[  254.933316][ T5940]  unshare_nsproxy_namespaces+0x11c/0x170
[  254.939023][ T5940]  ksys_unshare+0x4c8/0x8c0
[  254.943513][ T5940] page last free pid 5817 tgid 5817 stack trace:
[  254.949814][ T5940]  __free_frozen_pages+0xbc4/0xd30
[  254.954910][ T5940]  __folio_put+0x21b/0x2c0
[  254.959310][ T5940]  skb_release_data+0x49a/0x7c0
[  254.964141][ T5940]  __kfree_skb+0x55/0x70
[  254.968361][ T5940]  tcp_ack+0x2266/0x6950
[  254.972591][ T5940]  tcp_rcv_established+0x93c/0x2670
[  254.977771][ T5940]  tcp_v4_do_rcv+0xa90/0x1430
[  254.982433][ T5940]  __release_sock+0x265/0x3a0
[  254.987089][ T5940]  __sk_flush_backlog+0x36/0xc0
[  254.991919][ T5940]  tcp_sendmsg_locked+0x4303/0x5540
[  254.997101][ T5940]  tcp_sendmsg+0x2f/0x50
[  255.001327][ T5940]  __sock_sendmsg+0x19c/0x270
[  255.005987][ T5940]  sock_write_iter+0x279/0x360
[  255.010730][ T5940]  vfs_write+0x5c9/0xb30
[  255.014958][ T5940]  ksys_write+0x145/0x250
[  255.019266][ T5940]  __do_fast_syscall_32+0xb6/0x2b0
[  255.024377][ T5940] 
[  255.026693][ T5940] Memory state around the buggy address:
[  255.032312][ T5940]  ffff888029174100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.040359][ T5940]  ffff888029174180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.048407][ T5940] >ffff888029174200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.056452][ T5940]                          ^
[  255.061025][ T5940]  ffff888029174280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  255.069069][ T5940]  ffff888029174300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  255.077110][ T5940] ==================================================================
[  255.536924][ T8030] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  255.586413][ T8030] tipc: Enabling of bearer <ib:wg1> rejected, already enabled
[  255.767702][ T5940] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  255.774956][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) 
[  255.784327][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  255.794368][ T5940] Workqueue: usb_hub_wq hub_event
[  255.799391][ T5940] Call Trace:
[  255.802652][ T5940]  <TASK>
[  255.805565][ T5940]  dump_stack_lvl+0x99/0x250
[  255.810138][ T5940]  ? __asan_memcpy+0x40/0x70
[  255.814709][ T5940]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.819887][ T5940]  ? __pfx__printk+0x10/0x10
[  255.824458][ T5940]  vpanic+0x237/0x6d0
[  255.828419][ T5940]  ? __pfx_vpanic+0x10/0x10
[  255.832903][ T5940]  ? preempt_schedule+0xae/0xc0
[  255.837739][ T5940]  ? __pfx_preempt_schedule+0x10/0x10
[  255.843088][ T5940]  panic+0xb9/0xc0
[  255.846792][ T5940]  ? __pfx_panic+0x10/0x10
[  255.851194][ T5940]  ? __pfx_panic+0x10/0x10
[  255.855588][ T5940]  ? media_device_unregister+0x141/0x400
[  255.861201][ T5940]  check_panic_on_warn+0x89/0xb0
[  255.866121][ T5940]  ? media_device_unregister+0x141/0x400
[  255.871734][ T5940]  end_report+0x78/0x160
[  255.875953][ T5940]  kasan_report+0x129/0x150
[  255.880434][ T5940]  ? media_device_unregister+0x141/0x400
[  255.886046][ T5940]  media_device_unregister+0x141/0x400
[  255.891485][ T5940]  em28xx_release_resources+0xac/0x240
[  255.896924][ T5940]  em28xx_usb_disconnect+0x19f/0x2f0
[  255.902188][ T5940]  usb_unbind_interface+0x26e/0x910
[  255.907364][ T5940]  ? __pfx_usb_unbind_interface+0x10/0x10
[  255.913059][ T5940]  device_release_driver_internal+0x4d9/0x800
[  255.919107][ T5940]  bus_remove_device+0x34d/0x410
[  255.924020][ T5940]  device_del+0x511/0x8e0
[  255.928328][ T5940]  ? __pfx_device_del+0x10/0x10
[  255.933157][ T5940]  ? kobject_put+0x446/0x480
[  255.937729][ T5940]  usb_disable_device+0x3e9/0x8a0
[  255.942738][ T5940]  usb_disconnect+0x330/0x950
[  255.947399][ T5940]  hub_event+0x1cf5/0x4a20
[  255.951803][ T5940]  ? do_raw_spin_lock+0x121/0x290
[  255.956817][ T5940]  ? register_lock_class+0x51/0x320
[  255.961997][ T5940]  ? __pfx_hub_event+0x10/0x10
[  255.966736][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  255.972434][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  255.977614][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  255.983311][ T5940]  ? process_scheduled_works+0x9ef/0x17b0
[  255.989004][ T5940]  process_scheduled_works+0xae1/0x17b0
[  255.994532][ T5940]  ? __pfx_process_scheduled_works+0x10/0x10
[  256.000497][ T5940]  worker_thread+0x8a0/0xda0
[  256.005067][ T5940]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  256.011385][ T5940]  ? __kthread_parkme+0x7b/0x200
[  256.016303][ T5940]  kthread+0x711/0x8a0
[  256.020353][ T5940]  ? __pfx_worker_thread+0x10/0x10
[  256.025454][ T5940]  ? __pfx_kthread+0x10/0x10
[  256.030036][ T5940]  ? _raw_spin_unlock_irq+0x23/0x50
[  256.035225][ T5940]  ? lockdep_hardirqs_on+0x9c/0x150
[  256.040412][ T5940]  ? __pfx_kthread+0x10/0x10
[  256.044986][ T5940]  ret_from_fork+0x4bc/0x870
[  256.049558][ T5940]  ? __pfx_ret_from_fork+0x10/0x10
[  256.054652][ T5940]  ? __switch_to_asm+0x39/0x70
[  256.059399][ T5940]  ? __switch_to_asm+0x33/0x70
[  256.064140][ T5940]  ? __pfx_kthread+0x10/0x10
[  256.068714][ T5940]  ret_from_fork_asm+0x1a/0x30
[  256.073468][ T5940]  </TASK>
[  256.076753][ T5940] Kernel Offset: disabled
[  256.081140][ T5940] Rebooting in 86400 seconds..