last executing test programs:

8.99038877s ago: executing program 4 (id=387):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000800)=0xa, 0x4)
socket$inet(0x2, 0x3, 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x9113, 0xfffffff5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
r7 = epoll_create1(0x80000)
r8 = socket(0x1, 0x80802, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001})
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000140)={0x60000008})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x4, 0x2, 0x9, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x4, 0x8, 0x4, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xcea, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x1, 0x4516, 0xffffff23}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
r12 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r11, r12, 0x22, 0x0, @val=@kprobe_multi=@addrs={0x1, 0xa, 0x0, &(0x7f0000000580)=[0x9, 0x10, 0x9, 0x75, 0x5, 0x3, 0x92, 0x7, 0x1000, 0x2], 0x6}}, 0x30)

8.841025042s ago: executing program 0 (id=388):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x12c, &(0x7f0000001340)={@random="ceeac06d39d4", @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x11e, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"a2ff66d1e12fd55ae997f140600889a0c11959d00c47a16c72c708efc574820f8f856f023b5555bebe3475a7b3d88a7ea52fe6afe249d01ee916b3af3892d0e82f072ce4a56db15ecbc511aabdc6beb14bc4fa996acdd3457dfc6ed11f285b71a53efbc5fc686096970447f358a9c75fefe96dd521c954c4c7dfef50f85de1f5d3068664bf8ef2b95780544806a83c4cfdfe272506e536b1f6e5a1c93f3a4fe0baa8aa650abf8c0b8eba4494b8ab07b411c617d2912559bbe97b0b0b13cd324ffd122b3a4f32692590db27c9b9da2322670e75385f2f4dbf813cd2206c2c919b2b01820f98ecbf1fc3bc82d13af8b26d73bbb20412e0"}}}}}}, 0x0)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r5=>r1, {0x3, 0x80000000}}, './file0\x00'})
write$P9_RLOCK(r5, &(0x7f0000001480)={0x8, 0x35, 0x2, 0x2}, 0x8)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="fe"])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40882}, 0x20040044)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$nl_route(r7, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x3, 0x1, 0x1ff, 0x7, 0x8000, 0x7e, 0xffffffffffffffff, 0x1, 0x6}, 0x0)
r9 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20)

7.433757123s ago: executing program 1 (id=392):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d00000063a60864160af36514001ac00400020208000200030074e60aab7f9f9f4156a705251e618294ff003af60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300)

7.315922501s ago: executing program 2 (id=393):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00')
preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x4, 0x0)
syz_io_uring_complete(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = userfaultfd(0x80001)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f00000006c0)=[{0x40, 0x200, 0x51, &(0x7f0000000140)="25700b30d4eb12a25ebc8c03a04fa1ab56f4baccf074f41a43a4c7e69014c061e639387eee43e15b86c050c1985dc406d59f470fdeeba58b52c76fad45440720f6ad439fdec53195576a1737035ec3b5f4"}, {0x0, 0x1811, 0x4e, &(0x7f0000000200)="53e1ef3d401b75645ffdab4e185945fe541f78ea817638b7c211a828fc8823cd47733f432c215f53d090f82ba1c08d0b0c6ecdcab2ff6e8e24278b7af5a208f9f4afbdabfc1b077ec7ab8b698ed7"}, {0xd, 0x8200, 0x36, &(0x7f00000003c0)="798bfc715b1b06ed9bd6f50effaa1b600127da2d4e165dde5650147ddde5eec272d422bb8efe0d9411fec804c205830b557508452da5"}, {0x4557, 0x1810, 0xdc, &(0x7f0000000480)="e079f061d025c0f78f4e2a9e8f5d65a32fb391a5347859e3dd74eaf50d63956c89ceeaed95a6a6efbcf1907e8b94fcf4490cf7b81a28335284b69ce870c94ea3e52642e08d4049b4d447092becf7215795895998b743673ba8f29def82805f0197bbbe216d2c62584b8c1d25c9b1807a4557efb34f869c504e6ce39c96696d55be926dbb596965a8c00c2258bca2bca14681c5ef2bcbe27f9bc76942d96cebace0ab84443e077495113d1268bf086f72b4c8c1e6d43ce22fb0b25b3d9e6385ba167c1ebe0f9b59db7bf11a621fe72201c7ba35f313c1a1136f887e12"}, {0xa000, 0xc01, 0x18, &(0x7f0000000400)="e49f925745b2e169578230de8bb0e460f5cf6e666afccfaa"}, {0x1ff, 0x400, 0x55, &(0x7f0000000580)="5bc924b0076af5873c3bb58a56432f2d558255d22a2c9436f1bc5500f4810bd3bfe8834b6955f774f8592d723a88de16526efa8d83a21b7414f05617cba0e2a771614baa7a8ea2784c4f554a0cac5daae070d82d04"}, {0x80, 0x8000, 0xb5, &(0x7f0000000600)="838eb756198d66ce9ff412ee18bd1a28e09d8a630202314b808bfebc13d84325b68058b06ef85aafb25688c04ad0625dfd619b3a00c29bc284597dd8f40fe96181184d6dc6d341ac684a7599f1c15b833a2786530189bc61ea31faacac0bea4503df742e0e3687ffa5123030379614f908f73a48fcf9faeabbb099d49c529902f873de2cb4f90005cb44c9e3e806d622a6d3d010df252d11319ce388cc1b012a405e15a55a4252c6e946cac02f89173a0ee6c1469b"}], 0x7})
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$FICLONE(r3, 0x40049409, r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0xc080)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000030605000000000000000000070000010900020073797a30000000000900020073797a32000000000900020073797a310000000005000100070000007232b03d07cee06f3c4e905f3033dfb62b918e8a352cacd2f8d334e06e941933420bf33761d39cf724f20b014eaa7a8bd3cbe7db3cff70fdca6b931d56b53735bbd33212771297ffd0dd39cab6d1"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

7.253634367s ago: executing program 1 (id=395):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000080}, 0x4004800)
r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b50000000100"], 0xc8)
dup3(r3, r2, 0x0)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0)

6.841722493s ago: executing program 4 (id=396):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000800)=0xa, 0x4)
socket$inet(0x2, 0x3, 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x9113, 0xfffffff5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
r7 = epoll_create1(0x80000)
r8 = socket(0x1, 0x80802, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001})
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000140)={0x60000008})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x4, 0x2, 0x9, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x4, 0x8, 0x4, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xcea, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x1, 0x4516, 0xffffff23}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
r12 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r11, r12, 0x22, 0x0, @val=@kprobe_multi=@addrs={0x1, 0xa, 0x0, &(0x7f0000000580)=[0x9, 0x10, 0x9, 0x75, 0x5, 0x3, 0x92, 0x7, 0x1000, 0x2], 0x6}}, 0x30)

6.523721394s ago: executing program 1 (id=397):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000000000000080000", @ANYRES64=r1, @ANYBLOB="6ccb0070b1508b42c12575d868f3bb0b1554d2841352915d45ea9e320d2572cfa806016173dc9bcaa7b91b5228e4574de0f5d0214d87bbcbf325a26b249cfa4395d014b97b53768e8716ca33a855b27c8f7a97d6f2d7780ebf18b092ada7dbfacd2f797c4533", @ANYRES16=r4, @ANYBLOB="002a8e904aa31b5ec2548ee5934dbae6445214d292b6c4785266e10d519dc7d4fe015cb25403f476f4f6341d50e902b09b9e0e561c882b848ed29f3ba1cf266cee6b2ea4d6fa455509fe9a1c617b266a5e452b0df397b4cc68426006812d19a1a81d42d4c44f99c04e3f2db5e39e451e85679ccb634d374cff6c3e1a01c3201a0a60653282369787eba5aa8135b14e71b8b764111ff6f95efce6c8650aaee7771ac31148b4f77399f86018266b361fcc8a63b4302f765c2d5dec7d6c1ed7e23b23c63e5a78cb9a7a", @ANYRESHEX=r4])
ioctl$KVM_RUN(r5, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x40007, @private2={0xfc, 0x2, '\x00', 0x4}, 0x7fffffff}, 0x1c)
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000"])
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x35)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x1, &(0x7f00000004c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000), 0x0, 0x1000000, 0x0, 0x10}])

5.707931613s ago: executing program 0 (id=398):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x101cc1)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4}, 0x6e)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f80)=""/4096)
r3 = syz_open_dev$cec(0x0, 0x0, 0x0)
r4 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000240), 0x1, 0x0)
write$khugepaged_scan(r4, &(0x7f0000000140), 0x8)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000002c0)={0x6, 0x10000})
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r7 = openat$mixer(0xffffff9c, &(0x7f0000000340), 0x183100, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000380))
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r9, &(0x7f00000000c0)=""/144, 0x90, 0x5e)

5.584407608s ago: executing program 4 (id=399):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x10000, 0x8, 0x9, 0x3}, 0x0)
listen(0xffffffffffffffff, 0x3)
close(0x3)
socket(0x10, 0x3, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @multicast2}}, 0x1e)
connect$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @empty}}, 0x1e)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x2178, 0x2c, 0xe27, 0xfffffff9, 0x0, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0x214c, 0x2, [@TCA_FW_POLICE={0x838, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffffd, 0x81, 0x0, 0x6, 0x80, 0x9, 0x8, 0x7, 0x401, 0x7ff, 0x80000000, 0x4, 0x7, 0x2, 0x4, 0x10000, 0x9, 0x1, 0x5, 0x4, 0x2, 0xca2, 0xec36, 0x2, 0xffffffff, 0x1ff, 0x9, 0x4b, 0x6, 0x40, 0x9, 0xa1f, 0x4, 0x4, 0x76, 0x9, 0x2, 0xff, 0x6, 0x9, 0x1ff, 0x3, 0xfffffe01, 0x5, 0x1, 0xcc, 0x6, 0x80, 0x800, 0x401, 0x9, 0x5, 0x8, 0x100, 0x8, 0x3, 0x71af, 0x6, 0xcea, 0x8, 0x3a850b50, 0x6, 0x4, 0x4a7, 0x6, 0x0, 0xd6, 0x10, 0x5d, 0xfffff800, 0x6, 0x8ff, 0x1, 0xb53, 0xb, 0x3ff, 0x1, 0x6, 0x1000, 0x9, 0x4e6, 0xb575, 0x5, 0x1, 0xcd, 0x3, 0x6, 0x4, 0x2, 0x31bf16f9, 0x61, 0x3, 0xffffffff, 0x5, 0x0, 0x1, 0x400, 0x4, 0x7, 0x5, 0x5, 0x8, 0x3, 0x3, 0x8, 0x0, 0x9, 0xd, 0x1200, 0x47, 0x5, 0x40, 0x9, 0x4, 0x1, 0x8, 0x9, 0x3ff, 0x7, 0x2, 0x400, 0x9, 0xf421, 0x5, 0x0, 0x9beb, 0xfffffff9, 0x100000, 0x8, 0x7, 0x7, 0xbf57, 0x8, 0xffffffff, 0x63, 0x80000001, 0xe, 0x14, 0xe, 0x1, 0x5, 0xdb, 0x80000001, 0x380, 0x7e59, 0x1ff, 0x80000001, 0x9, 0x0, 0x5, 0x34ea, 0x1ff, 0x400, 0x7, 0x6, 0x6, 0x97ef, 0x10001, 0x8001, 0x2, 0x9, 0x100, 0x0, 0x6, 0x8, 0xfffffff8, 0xfffffffc, 0x6, 0x5, 0x8, 0x3, 0x77, 0x10000, 0x9, 0xc, 0x1, 0x7ff, 0x9, 0x3, 0x101, 0x986, 0x1ff, 0x7, 0x8, 0x6, 0x8, 0x4, 0x3ff, 0x2, 0x2, 0x7, 0x3, 0x1, 0x6, 0x0, 0x80000001, 0x6, 0x0, 0xa, 0x3, 0x8, 0x6f, 0xfffffffa, 0x400, 0xf2b2, 0x2, 0x7, 0x10000, 0x40, 0x5, 0xd, 0xff, 0x8bbc, 0xfff, 0x9, 0x33, 0x7, 0xa66b, 0x7, 0x9, 0x1, 0xe, 0x4, 0x1, 0xb6, 0xff, 0x47c063de, 0x7ff, 0x3, 0x7fff, 0xfff, 0x0, 0x1, 0xfffffffc, 0x6c, 0x6, 0x8, 0x6, 0x81, 0x0, 0x9, 0x87, 0x9, 0x2, 0x2, 0x0, 0xfff, 0x0, 0x62cf, 0x9, 0x9, 0x5, 0x7f, 0x2, 0xfff, 0x3d0832d5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x16c}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x91, 0x7, 0x1, 0x8, 0x0, 0x1, 0x58, 0x7fff, 0xa, 0x860, 0x968, 0x2, 0x4, 0x5, 0xb, 0x0, 0x2, 0xfffffffc, 0x9, 0xb9, 0x7, 0x5, 0xd, 0x2, 0x1, 0x7, 0x10, 0x0, 0x6, 0x4a42, 0x0, 0x720, 0x68, 0x1b, 0x900, 0x9, 0x4, 0x8, 0x1, 0x9, 0x4, 0xd, 0x8000, 0x9, 0x6, 0x70b0, 0x1, 0x8, 0x0, 0x8, 0x4, 0x400, 0x5, 0x5e, 0x0, 0x2, 0x167a, 0x4, 0x8, 0x5, 0x0, 0x7f, 0x7fff, 0x9, 0x1000, 0x20a6, 0x10001, 0x4, 0x1, 0x1, 0xc, 0x1ad, 0x2, 0xfffffff9, 0x6, 0x4, 0x0, 0x10, 0xfffffffe, 0x2, 0x8, 0x6, 0x1, 0x4, 0x418, 0x1, 0x3, 0x4, 0x3, 0x3ff, 0x6, 0xab26, 0x4, 0x4, 0xb21b, 0x9, 0x1, 0x4, 0x200, 0x8, 0x4, 0x2, 0x9, 0x0, 0x64, 0xa2, 0xfffffe98, 0xac9e, 0x9c7, 0x7, 0x3, 0x0, 0x1, 0xffff, 0x1, 0x7, 0x7, 0x2e9c, 0x2, 0xdf08, 0x1, 0x3, 0x40, 0x6, 0x4, 0x3, 0x200, 0x50080000, 0x8000, 0x9, 0x9, 0x3, 0x9, 0xffffffff, 0x3, 0x638, 0x3, 0xc, 0x10001, 0x9, 0x80a, 0x8000, 0x60, 0x40, 0x1, 0x0, 0x1, 0xff, 0x3, 0x7, 0x4, 0xdefe, 0x496, 0x6, 0x0, 0x40, 0x8, 0x5, 0x1, 0x2, 0x785, 0x7a56, 0x3, 0x7, 0xffffffff, 0x18031717, 0x7f, 0x8, 0x4, 0x5, 0x6, 0x2, 0x81, 0x1ff, 0x4, 0xf4d, 0x6, 0x6, 0x2, 0xc, 0x7, 0x1ff, 0x9caa, 0xd, 0x10001, 0x81, 0xc7, 0x7fff, 0xffffff00, 0x8, 0x101, 0xffffffff, 0x9, 0xdc2, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x2, 0x8, 0x8, 0x0, 0xc, 0x4, 0x8000, 0x2, 0x7, 0x4, 0x0, 0x7, 0x1, 0x1, 0x2, 0x4, 0xef0d, 0x0, 0x3, 0x7c9d, 0x80000001, 0x1, 0x8, 0x100, 0x0, 0x4, 0x7fff, 0x7, 0xc00, 0x400, 0x0, 0x4, 0x5, 0x80, 0x2, 0xd3, 0xe6, 0x10000, 0x0, 0x97b, 0xce7, 0xe714, 0x9, 0x7, 0xb, 0x1000, 0x7, 0xa, 0x2, 0x80, 0xa1, 0x10000, 0x80000001, 0x401]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x808e}]}, @TCA_FW_POLICE={0x30, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7ff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x5}}, @TCA_FW_POLICE={0x10a4, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffffc, 0x8, 0xb5fa, 0x8, 0x9f9, 0x78ec, 0x6, 0xe, 0x7, 0x6, 0x7, 0xfffffff9, 0x374, 0x100, 0x8001, 0x4, 0x8, 0x8ef, 0x4, 0xa, 0x1b7f121f, 0x4, 0x1ff, 0x3b, 0x40, 0x2, 0x5, 0xa4, 0xa, 0xfffffffc, 0x96, 0xa46, 0x0, 0x9, 0x8000, 0x9, 0xb8, 0x401, 0x1, 0x10001, 0x5, 0x5, 0x8, 0x1ff, 0x4, 0x9, 0x8, 0x6, 0x9, 0x9, 0x6, 0x3603, 0x2, 0x6, 0xfffffff8, 0x2, 0xfd5, 0xc5f6, 0xffffffff, 0x9, 0x1c, 0x3, 0x5, 0x1, 0x4, 0x7, 0x1, 0xc, 0x5e39, 0xe0, 0x80, 0x2, 0x3, 0x5, 0xb13a, 0x4, 0xff, 0x0, 0x5, 0xe6, 0x200, 0xffffffff, 0xb, 0x2, 0x5, 0x2, 0x81, 0x1, 0x6, 0x6b00c64f, 0x5e, 0x2, 0x81, 0x5, 0x7ff, 0x7, 0x7ff, 0xcf, 0xe1b, 0x8a5, 0x6, 0x0, 0xf, 0x2, 0xc, 0x1, 0x7, 0x7, 0x1, 0x1, 0xa, 0x0, 0xfffffff9, 0x3, 0x0, 0x7, 0x1, 0x3, 0x1, 0x9, 0x1, 0x4, 0x2, 0x9, 0x3, 0x9, 0x9, 0x8, 0x7, 0x8000, 0x5, 0x2, 0x40c, 0x5d, 0x1, 0xe96, 0x18000, 0x2, 0x40, 0x6, 0x2, 0x7, 0x7fffffff, 0x4, 0x914, 0x9, 0x135c0017, 0xf05, 0x7f, 0xcb6, 0x7, 0x12, 0x5, 0xfff, 0x80, 0x3, 0x0, 0x3, 0x7fff, 0x1, 0x8, 0x6, 0xffffffff, 0x2, 0xc, 0xff, 0xfffff801, 0x401, 0x0, 0x3d, 0x3, 0x80, 0x8000, 0x2, 0x81, 0x4, 0x9, 0x1000, 0x7fa, 0xfff, 0xfffffffd, 0xc6a0, 0x2, 0xfee, 0x7fff, 0x400d, 0x800, 0xf58, 0x4, 0xfff, 0x5, 0x7, 0x4, 0xffff, 0x9, 0x5, 0x50000, 0x3, 0xd, 0x5, 0x8, 0x0, 0x1, 0x30000, 0xe7, 0x0, 0x3, 0x2, 0x3, 0x1, 0x4, 0xe, 0x8001, 0x8001, 0x9, 0x3, 0x3, 0xba8, 0x82, 0x0, 0x6, 0x1a, 0x6, 0x8, 0xea7c, 0x5, 0x5, 0x8001, 0x2, 0x1, 0xffffffff, 0x7fffffff, 0x1ff, 0x100, 0x101, 0x1a, 0x2, 0x7, 0x0, 0x516, 0x3, 0x4, 0x5fb1, 0x5, 0x7, 0x101, 0x8, 0x2, 0x80000001, 0x3, 0x401, 0x8, 0x808, 0x3, 0x9c3a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x3, 0x40, 0x7, 0x1, {0x70, 0x2, 0xfff, 0x2, 0x6}, {0xb, 0x1, 0xa3, 0x3, 0xb6fe, 0x5}, 0xd, 0x9ee3, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x3, 0x1, 0x9, {0x61, 0x2, 0x6, 0x101, 0x76, 0xf}, {0x4, 0x0, 0xff, 0x5, 0x5, 0x1dd}, 0x7fff, 0xff, 0x60000000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xfb, 0x2, 0x6, 0x3, 0x2, 0x541, 0x10001, 0x704738dc, 0x4, 0x10001, 0x2, 0xd, 0xc6e, 0x7, 0x9, 0x5, 0x1, 0x8, 0xe38, 0x5, 0x8, 0x2f23eaec, 0x7, 0x309baf6d, 0x9, 0x9, 0x5, 0x100, 0x4, 0x6, 0x3, 0x0, 0x8, 0x3ff, 0x72, 0x3, 0x61d, 0x7, 0x81, 0x677d, 0x9, 0x3, 0x8e4, 0x10001, 0xff, 0xc7e9, 0xc73, 0x5, 0x9, 0xffff, 0x3, 0xd009, 0xd692, 0x9, 0x101, 0x7, 0x5f, 0x5, 0xc9, 0x4, 0x1, 0xfffffeff, 0x1, 0xfffffffc, 0x6, 0x0, 0x7, 0x200, 0x3, 0xfffff073, 0x8399, 0x0, 0x1, 0x10, 0x0, 0x6, 0x0, 0x800, 0x6, 0x6, 0x8, 0x5bd, 0x3, 0x7, 0x4, 0x0, 0xf4d, 0x5, 0x10000, 0x0, 0xc0000000, 0xde18, 0x10, 0x141000, 0x3, 0x7, 0x8001, 0x4, 0x80000001, 0x7, 0x2, 0x9, 0x7972, 0x7ff, 0x8, 0x8, 0x88, 0x628e, 0x5d, 0xe12, 0x1, 0x40, 0x4, 0x6, 0x7ff, 0x80, 0x0, 0x3, 0x9, 0x100, 0xffffffff, 0x7ff, 0x49f6, 0x100000, 0xfffffffa, 0x9, 0xa1ae, 0x9, 0xa, 0x101, 0x3, 0x99, 0x2, 0x2, 0x1, 0x9, 0x5f5, 0x6, 0xffffffff, 0x5, 0x9, 0x200, 0x3, 0x40, 0x10001, 0x4, 0x7fffffff, 0xa331, 0x5, 0x4249e618, 0xfffffffd, 0x8, 0x12, 0xe, 0xfffffffe, 0x10001, 0x0, 0x4, 0x0, 0x4, 0x7fff, 0x2b4, 0x3ff, 0x1ff, 0xe, 0x1d, 0x8, 0x3, 0x4, 0x8, 0x100, 0x6, 0x1, 0xfd4, 0xf58d, 0x3, 0xa283, 0x8, 0x101, 0xc0000000, 0x9, 0x6, 0x9, 0x9, 0x5, 0x1, 0xb, 0x7fff, 0x7, 0x8, 0x6ad, 0x6d0, 0xfffffffe, 0x4, 0x11, 0xffff, 0x6, 0x4, 0x0, 0x7, 0x101, 0x8, 0x8, 0xfffffffe, 0xffffffff, 0x2, 0xffff8000, 0x8, 0x4, 0x4, 0x7, 0x80000001, 0x9, 0x6, 0x101, 0x5, 0x6, 0x590, 0x5, 0x7, 0x3, 0xb, 0x1, 0x6, 0x2165, 0x2, 0x2, 0x3, 0x5, 0x9, 0x6, 0x7a9, 0x4, 0x8, 0xbc700000, 0x9, 0x7fffffff, 0x90, 0x9, 0x5, 0x3, 0x3, 0x4, 0x5, 0x1, 0x7f, 0x0, 0x101, 0x2, 0x5, 0x6, 0x4dd, 0x4, 0x3, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf2a1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x62e, 0x3, 0x6, 0x7, 0x5, 0x60, 0x1, 0x4, 0x9, 0xf, 0x2, 0x8, 0xc6f, 0xe, 0x1, 0x3, 0xa96, 0x6, 0x9, 0xffff, 0x75f, 0x6, 0x9, 0x8, 0x6, 0x8, 0x800, 0xffff, 0x8, 0x7, 0x8001, 0x80000001, 0x1ff, 0x17, 0x5, 0x7, 0x10, 0x5198, 0x6, 0x9, 0x9, 0x8, 0x1, 0x8, 0x2, 0x25, 0x5, 0x6, 0x0, 0x0, 0x7ff, 0x100, 0x7fffffff, 0x4, 0x2, 0x4, 0x101, 0x5, 0x1, 0x65c, 0x3, 0x7, 0x1765, 0x0, 0x5efb, 0x8000, 0x7, 0x27, 0x3, 0x7, 0x1, 0x1000, 0x3, 0x9, 0x5, 0x2, 0x3, 0x3, 0x2, 0x8001, 0x80000000, 0x9, 0x4, 0x4, 0x6, 0x8000, 0x6, 0x7, 0x71, 0x2, 0x3, 0x200, 0x5, 0xd7b5, 0x1, 0x9, 0xb2a, 0x5, 0x80, 0x0, 0xf, 0x2d22, 0x8, 0x4, 0x7, 0x7fff, 0x2, 0xf, 0xd7, 0x5, 0x3ff, 0x5c26, 0x5, 0x0, 0x51e, 0x7fffffff, 0x7ff, 0x8000, 0x6, 0xffff, 0x0, 0x1, 0x5fc9, 0x2c5, 0xfffffe01, 0x2000000, 0x5, 0x2, 0x2abe, 0x80000000, 0x8, 0x9, 0xe, 0x0, 0xf022, 0x8, 0x6, 0x0, 0x8, 0x7, 0x200000, 0xc6d, 0x7, 0x40, 0xfffffff8, 0xeda, 0x3, 0x101, 0xffff8001, 0x5, 0x8, 0x3, 0x5, 0x2bf2, 0x1, 0x7, 0x8001, 0x6, 0x9, 0x0, 0xfa9, 0x2, 0xf06d, 0x9, 0x80000000, 0x5, 0x2, 0x8, 0x4, 0xa, 0x4, 0xfffffffd, 0x2, 0x8000, 0xb, 0x1, 0x1, 0xffffffff, 0x2, 0x1, 0x0, 0x2, 0x8, 0x6, 0x4, 0x2, 0x2, 0x4, 0x6, 0xe, 0x2, 0x6b0, 0x4, 0x7, 0x6, 0x10000, 0x6, 0xffffffff, 0x1, 0x0, 0x3, 0x7, 0x8, 0x2, 0x2, 0x5f76, 0x100, 0xfffffff8, 0x40, 0x1, 0x3, 0xdfd, 0x6, 0x2, 0xffffff7f, 0x6, 0x40, 0x8, 0x6, 0xe, 0x7384, 0x8374, 0xffffffff, 0x4, 0x6, 0x6, 0x7fffffff, 0x3, 0x8, 0x4, 0xda, 0x2, 0x8fc6, 0xcb6, 0x8, 0x6a, 0x1, 0x9, 0x8000, 0x9013, 0x6, 0x6, 0xb, 0x4, 0xed3, 0xfffffffa, 0x4, 0x6, 0x5, 0x5, 0x6, 0xfffffffa, 0x7fff, 0xff, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x6, 0x9, 0x4, 0x4, 0x3, 0x35, 0x80000000, 0x80000001, 0x8, 0x3, 0x175a, 0x8, 0x9, 0xef2, 0x9, 0x89f, 0x5, 0x2, 0x2, 0xffffffc7, 0x100, 0x9, 0x0, 0x1, 0x4, 0x5, 0x8, 0xe7, 0x65, 0x4, 0x5, 0x80000000, 0x3ff, 0xeb3, 0xae, 0x0, 0x6, 0x571eb3e7, 0x80, 0xeac7, 0x1, 0xfffffffa, 0x7, 0x3, 0x5, 0x80000000, 0x9, 0x401, 0x2000000, 0x5, 0x2, 0x7fff, 0xff9, 0x6, 0x1ff, 0x1, 0x8, 0x1, 0x9, 0x1, 0x6, 0x4, 0x0, 0x5, 0x0, 0x0, 0x5, 0xab, 0x8, 0x1, 0x56fd, 0x0, 0x5e83, 0x4, 0xffffffff, 0x6, 0x101, 0x9, 0x9, 0x2, 0x8, 0x7, 0x9, 0x4, 0x0, 0xd2a, 0x9, 0x327, 0x1ff, 0x0, 0x663c, 0x9, 0x101, 0xadb8, 0x10, 0x101, 0x14600, 0x1, 0x0, 0x5, 0xa8b, 0x9, 0x0, 0x67a, 0x8, 0x0, 0x5b, 0x8000, 0xff, 0x7ff, 0xffff8000, 0x401, 0x7, 0x0, 0x3, 0x1, 0x9, 0x8000, 0x7, 0xf24, 0x40, 0x80, 0x101, 0x4b, 0xf, 0x6, 0x1bdb, 0x5, 0xf7f, 0x1, 0x4, 0x5, 0xfffffffc, 0x40, 0x3, 0x9, 0xfffffffe, 0xc, 0x2e400000, 0x0, 0xcf, 0x4, 0x1, 0x80000000, 0x6, 0x6, 0xfffffffb, 0x8000, 0x1, 0x2f, 0x0, 0x5d7ea074, 0x6, 0x1, 0xaa, 0x3, 0xbb, 0x8000, 0x1, 0x6, 0x800, 0x6, 0x4, 0x8, 0x9, 0xfffffff8, 0x2, 0x4, 0x4, 0xfffffffd, 0xe1, 0x4, 0x7, 0x8, 0xfffffffc, 0x1, 0x6, 0x5, 0x8, 0x7, 0xfffffeff, 0x5, 0x4, 0x1839, 0x0, 0x83d, 0x9, 0xa, 0x10000, 0x1fffe, 0x3, 0x0, 0x81, 0x10001, 0x800, 0x2, 0x9, 0x5, 0x6, 0x2, 0xa, 0x8, 0x80000000, 0x1, 0x3ff, 0xffffffff, 0xffff, 0x2, 0x7, 0x45, 0x0, 0x12000000, 0x8, 0xed83, 0x6, 0x1ff, 0xd, 0xb, 0x4, 0xfc, 0xe, 0xfffffffa, 0x7fff, 0x1, 0x2, 0x8, 0x200, 0x130, 0x2, 0x2, 0x800, 0x0, 0x40, 0x4, 0xfffff000, 0xfffffffb, 0x7b, 0xc, 0x10, 0x8, 0x7, 0x9, 0x3, 0x4, 0x0, 0x7, 0x53c7, 0x800, 0x82b0, 0x5, 0xffffffff, 0x1000, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8b}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7b1a}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffe0}}, @TCA_FW_POLICE={0x818, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x5, 0x8, 0x7, 0x10001, 0x8, 0xa, 0x10000, 0x7ff, 0x100, 0x0, 0x81, 0xe3, 0x0, 0x4, 0x784, 0x5, 0x3, 0x10, 0x4, 0x3c2e, 0x2, 0x50, 0x7f00, 0xf762, 0x9, 0x2, 0x0, 0x2, 0x7c87, 0x2, 0xa, 0x6, 0x10000, 0x81, 0x7, 0x8001, 0x78, 0xc, 0x473, 0x6, 0x5ea, 0x200, 0xffffffff, 0xb, 0x8, 0x8, 0x4, 0x0, 0x7, 0x5a77c17c, 0x74, 0x6, 0x7ff, 0xffff, 0x40, 0x6, 0x7, 0xfc, 0x34, 0x7, 0xd78, 0x6, 0x52, 0x7, 0x4, 0x8, 0x1, 0x5, 0x7fffffff, 0x9, 0x0, 0x4, 0x1000, 0x5, 0x1, 0x1, 0x4, 0x8, 0x7, 0x6, 0x0, 0x1, 0x80000000, 0x4, 0x51, 0x7, 0x7, 0x6, 0x35, 0x4d2fa1a7, 0x8000, 0x5f77, 0x80, 0x185, 0x8, 0x1, 0xdc, 0x5d, 0xe646, 0xffffffff, 0x0, 0x4, 0x3, 0x6, 0x2fab, 0x9, 0x2, 0x3, 0xa862, 0xffffffff, 0x45, 0x4c, 0xffff, 0x961c, 0x80, 0x901, 0x1, 0x3ff, 0x1, 0xfffffe01, 0x2, 0x4, 0x5, 0x6bbe, 0x0, 0x7, 0x0, 0x1, 0x9, 0xc3, 0x1a, 0x3, 0xa, 0x7, 0x9, 0x7, 0x5, 0x9, 0x0, 0xe, 0x9fb, 0x7ff, 0x2, 0x8, 0x5, 0xc, 0x80000001, 0x9, 0x7, 0x2, 0x0, 0xf, 0x7ff, 0x4, 0x8, 0x5, 0x62, 0x6, 0x7f, 0x9, 0x40000000, 0x0, 0x6, 0x9, 0x0, 0x3, 0x7fffffff, 0xfffffff4, 0x1, 0x8, 0x6, 0x3, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x1000, 0xfc000000, 0x4, 0xffffffff, 0x4, 0x5, 0x72, 0xc, 0xfffffff5, 0x5, 0x2800000, 0x5, 0x9, 0xfff, 0x8, 0x10, 0x857, 0x80000001, 0x3, 0xffff, 0x18, 0x1, 0x5, 0x8000, 0xffffff3a, 0x8a, 0x1, 0x40000, 0x5, 0xc9a4, 0x3, 0x20a5, 0x9, 0x37c5, 0x3, 0x7, 0x6f2, 0x1, 0x401, 0x3, 0x4aa, 0x8, 0xda, 0x8, 0xfffff000, 0x7, 0x2, 0x2, 0x3, 0x4000000, 0x6, 0x5, 0x5, 0x8, 0x68a8, 0x4, 0xffffffff, 0x8, 0x8, 0xfffff53f, 0x401, 0x3, 0x4, 0x0, 0xfb76, 0x1, 0xfffffffe, 0x6, 0x1, 0x10001, 0x3, 0x5, 0x0, 0x1000, 0xfffffff9, 0x6, 0x2093190c]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x9, 0x1, 0x9, 0x8, 0x9d, 0x0, 0x9, 0x5, 0xc, 0x2, 0xd1, 0x1, 0xadd5, 0xda6, 0x5, 0x7ff, 0x2, 0x7fff, 0x1ff, 0x807b, 0x4, 0x8c89, 0x2, 0x3, 0xe, 0xffff, 0x35, 0x4, 0x6, 0x7, 0xffffffff, 0xfffffff7, 0x5, 0x271, 0x3, 0x4, 0x2, 0x4, 0x100, 0x5, 0x6, 0x9, 0x1, 0x5f29, 0x7fffffff, 0x1, 0x6, 0x7, 0xffffffff, 0x1, 0x100, 0x7257becb, 0x0, 0x0, 0x5, 0x73152f2d, 0x7, 0x6, 0x3, 0xd, 0x80, 0x4, 0x3, 0xfffffff7, 0x1, 0x8, 0x0, 0x10, 0xffff, 0x5, 0x3, 0x4, 0xc78, 0x9c, 0xffffffff, 0x4, 0x8, 0x10000, 0xe0, 0x100, 0x4, 0x5, 0x80, 0x1, 0x7, 0x200, 0xcb, 0x6, 0x59, 0x1, 0x3, 0xfffffffd, 0x2, 0x2, 0x11c869be, 0x10000, 0xe, 0x8, 0x4, 0x5, 0x0, 0x5, 0x80000001, 0x8, 0x3, 0xfff, 0x80000001, 0xfffffffe, 0xa, 0x1, 0x4, 0xd25, 0x6, 0x2, 0x2, 0xcfb, 0x5, 0x8207, 0x8, 0x9, 0x3, 0x7ff, 0xf405, 0x2, 0x7fffffff, 0x8000, 0xfffffff6, 0x4, 0x1000, 0xf, 0x8d1e, 0x7, 0x4, 0x81, 0xc1, 0x3f0, 0x7, 0xffff, 0x3, 0x40, 0x44, 0x783, 0x7fffffff, 0xffffff01, 0x3, 0x401, 0x4, 0x1, 0xfffffffa, 0x7, 0x80, 0x5, 0x5, 0x4, 0x41, 0x7, 0x4, 0xfffffff7, 0x8, 0xfffffffe, 0x6, 0x2, 0x1, 0x8, 0x1, 0x59ee, 0x0, 0x3, 0x8, 0x3, 0x0, 0x7, 0xfffffb28, 0x6b, 0x8, 0x903a, 0x6, 0x7, 0x4, 0x1d, 0x9, 0x800, 0x8, 0x5, 0x0, 0x0, 0x459, 0x4, 0x200, 0x9, 0xe, 0xa7e9, 0x4, 0x5, 0xff, 0x2, 0x9, 0xfb, 0x8, 0xff, 0x4, 0x7, 0x8, 0x0, 0x57f, 0x8, 0x3, 0x3, 0x1, 0x0, 0x6fa8, 0x1, 0x6, 0x8, 0x6, 0x57, 0x694, 0x7f, 0x401, 0x6, 0x8, 0x2, 0x7, 0x0, 0x800, 0xf, 0x3, 0x6, 0x7fffffff, 0x1, 0x4, 0x40, 0x5, 0x2, 0x2, 0x80000000, 0xf4e, 0x6, 0xfa, 0x7, 0x9, 0xb1cd, 0x9, 0x5, 0xca, 0x8, 0x0, 0xfffffffb, 0x80, 0x2, 0x8, 0x4, 0x8, 0x4, 0x400]}]}]}}]}, 0x2178}}, 0x20040054)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_int(r3, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0)
r9 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="2b637075a0"], 0x5)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

5.431164182s ago: executing program 0 (id=400):
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x20201)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)

5.202901053s ago: executing program 1 (id=401):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300737904000000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a300000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

5.148465781s ago: executing program 0 (id=402):
socket$nl_route(0x10, 0x3, 0x0)
r0 = gettid()
getxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6f735b00000000b1263fb6219b5bc1"], 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', <r2=>0x0, 0x29, 0xd, 0x7, 0x4, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0xf886, 0x3, 0x4}})
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x1, 0x0, 0x0, 0xfbff, 0x38, "008e63360800"})
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x1, r2, 0x4}, 0xc)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
clock_gettime(0x6, &(0x7f0000000000))

4.807035157s ago: executing program 1 (id=404):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa"], 0x98}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

3.738861237s ago: executing program 2 (id=405):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100000e, 0x4)

3.681998685s ago: executing program 1 (id=406):
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x22, 0x2, 0x24)
close(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0xc45f3000)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, 0x0, 0x0)
connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}})
shutdown(r5, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0)
r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', &(0x7f0000000400)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', 0x0, 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
setsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0)
close(r7)
sendmmsg$inet(r4, 0x0, 0x0, 0xf00)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000280)=@ethtool_dump={0x4e, 0x9, 0x9, 0xeb, "1e12dc86b41d583cda5ff046953c2ec9ff9d35dd7b4f3031eb14474a8b0c8a430e5f963e8d2c9b192a745e988ec6c78431de5bc0520c7ba83650c178974c9d0587e5ab75d8d44f82e1f493ae99c06ddc9c9fdaba0a41267ecd10db4cbb68235c3ad13f1c6741c1509e460f12cb579842f9b785a488d9628a07ed86a3a4a9ac133436db5a050a19690a0a4d6e779139e1ceff9843037590d8a7938ea9eab37ec31d84581103ff79111ab6fb3b97c5c121ac1f9fa3a5fee5310ce8aeca59f7b6767a12b5c53e088847e18c62d6c0cd3b40b89ffc4cb2e1076987312d7457289ee68e158057e1cab868f28263"}})
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007e625c08e604050073005ad830a9341ead01010203010902120001fd00680009"], 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000005e00), 0x0, 0x0)

3.420564049s ago: executing program 2 (id=408):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0)
r1 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
r4 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'sit0\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000080)={0x11, 0xd, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = io_uring_setup(0x2bb8, &(0x7f0000000100)={0x0, 0x48c7, 0x0, 0x100, 0x1008168})
futex(&(0x7f0000002000), 0x9, 0x0, &(0x7f0000002040)={0x77359400}, 0x0, 0x1)
r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r7}, 0x94)
close_range(r6, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, 0x0, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10)
write$cgroup_int(r8, &(0x7f0000000180)=0xfe5f, 0x12)
write$P9_RAUTH(r8, &(0x7f00000003c0)={0x14, 0x67, 0x2, {0x40, 0x4, 0x8}}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x70f)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.354345572s ago: executing program 3 (id=409):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f0000000800)=0xa, 0x4)
socket$inet(0x2, 0x3, 0x2)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x1, 0x2, 0x9113, 0xfffffff5})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
r7 = epoll_create1(0x80000)
r8 = socket(0x1, 0x80802, 0x0)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x10000001})
r10 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000140)={0x60000008})
io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x12, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x484, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x1, 0x4, 0x2, 0x9, 0x8, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x4, 0x8, 0x4, 0x10, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xcea, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x5, 0x1, 0x4516, 0xffffff23}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
r12 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r11, r12, 0x22, 0x0, @val=@kprobe_multi=@addrs={0x1, 0xa, 0x0, &(0x7f0000000580)=[0x9, 0x10, 0x9, 0x75, 0x5, 0x3, 0x92, 0x7, 0x1000, 0x2], 0x6}}, 0x30)

3.213457744s ago: executing program 4 (id=410):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x101cc1)
ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4}, 0x6e)
ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000f80)=""/4096)
r3 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
r4 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0)
write$khugepaged_scan(r4, &(0x7f0000000140), 0x8)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000002c0)={0x6, 0x10000})
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2})
ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"})
r7 = openat$mixer(0xffffff9c, &(0x7f0000000340), 0x183100, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, &(0x7f0000000380))
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0dd7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000007d5e1cace81ed6c117ab5d6d69bda651297f9583b89965f52df514039e81f86f60f0bffece0b4", 0xd8}], 0x1}, 0x14)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r9, &(0x7f00000000c0)=""/144, 0x90, 0x5e)

3.005016979s ago: executing program 0 (id=411):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x9, 0x800)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000000c0)=0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640), 0x0, 0x0)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000005c0)={r5, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r4, 0x22, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}})
ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r4)

2.924610443s ago: executing program 2 (id=412):
epoll_create1(0x0)
syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x20201)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/input/handlers\x00', 0x0, 0x0)
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)

2.590828698s ago: executing program 4 (id=413):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xf3ff, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, r1, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_MIIMON={0x8, 0x3, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000)

2.487029525s ago: executing program 2 (id=414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)

2.296612027s ago: executing program 2 (id=415):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='uid_map\x00')
preadv(r2, &(0x7f0000000440)=[{&(0x7f0000000000)=""/103, 0x67}], 0x1, 0x4, 0x0)
syz_io_uring_complete(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = userfaultfd(0x80001)
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000340)={&(0x7f00000006c0)=[{0x40, 0x200, 0x51, &(0x7f0000000140)="25700b30d4eb12a25ebc8c03a04fa1ab56f4baccf074f41a43a4c7e69014c061e639387eee43e15b86c050c1985dc406d59f470fdeeba58b52c76fad45440720f6ad439fdec53195576a1737035ec3b5f4"}, {0x0, 0x1811, 0x4e, &(0x7f0000000200)="53e1ef3d401b75645ffdab4e185945fe541f78ea817638b7c211a828fc8823cd47733f432c215f53d090f82ba1c08d0b0c6ecdcab2ff6e8e24278b7af5a208f9f4afbdabfc1b077ec7ab8b698ed7"}, {0xd, 0x8200, 0x36, &(0x7f00000003c0)="798bfc715b1b06ed9bd6f50effaa1b600127da2d4e165dde5650147ddde5eec272d422bb8efe0d9411fec804c205830b557508452da5"}, {0x4557, 0x1810, 0xdc, &(0x7f0000000480)="e079f061d025c0f78f4e2a9e8f5d65a32fb391a5347859e3dd74eaf50d63956c89ceeaed95a6a6efbcf1907e8b94fcf4490cf7b81a28335284b69ce870c94ea3e52642e08d4049b4d447092becf7215795895998b743673ba8f29def82805f0197bbbe216d2c62584b8c1d25c9b1807a4557efb34f869c504e6ce39c96696d55be926dbb596965a8c00c2258bca2bca14681c5ef2bcbe27f9bc76942d96cebace0ab84443e077495113d1268bf086f72b4c8c1e6d43ce22fb0b25b3d9e6385ba167c1ebe0f9b59db7bf11a621fe72201c7ba35f313c1a1136f887e12"}, {0xa000, 0xc01, 0x18, &(0x7f0000000400)="e49f925745b2e169578230de8bb0e460f5cf6e666afccfaa"}, {0x1ff, 0x400, 0x55, &(0x7f0000000580)="5bc924b0076af5873c3bb58a56432f2d558255d22a2c9436f1bc5500f4810bd3bfe8834b6955f774f8592d723a88de16526efa8d83a21b7414f05617cba0e2a771614baa7a8ea2784c4f554a0cac5daae070d82d04"}, {0x80, 0x8000, 0xb5, &(0x7f0000000600)="838eb756198d66ce9ff412ee18bd1a28e09d8a630202314b808bfebc13d84325b68058b06ef85aafb25688c04ad0625dfd619b3a00c29bc284597dd8f40fe96181184d6dc6d341ac684a7599f1c15b833a2786530189bc61ea31faacac0bea4503df742e0e3687ffa5123030379614f908f73a48fcf9faeabbb099d49c529902f873de2cb4f90005cb44c9e3e806d622a6d3d010df252d11319ce388cc1b012a405e15a55a4252c6e946cac02f89173a0ee6c1469b"}], 0x7})
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$FICLONE(r3, 0x40049409, r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x26d2}, [@IFLA_BROADCAST={0xa}]}, 0x2c}}, 0xc080)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000030605000000000000000000070000010900020073797a30000000000900020073797a32000000000900020073797a310000000005000100070000007232b03d07cee06f3c4e905f3033dfb62b918e8a352cacd2f8d334e06e941933420bf33761d39cf724f20b014eaa7a8bd3cbe7db3cff70fdca6b931d56b53735bbd33212771297ffd0dd39cab6d1"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)

2.132932961s ago: executing program 4 (id=416):
pipe2$9p(0x0, 0x100)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f00000005c0))
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_ACT={0x58, 0x3, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x0, 0x9}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8848}, 0x20000080)
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5})
inotify_init1(0x800)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="38000000100039042abd7000edffffff000003e4", @ANYRES32=0x0, @ANYBLOB="57800000100100001800128008000100736974000c00028005"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4008840)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000207d1e2e2c000000000001090224000100110000090400000103000000092100000001220700090581030000000000f87a3c4c49be9307ae2715ceaf386acefd01ac35bb2d98a30eefe28d7c2aa43e52418360b64ad83855f7bf28df24a6941fe5da85429f0e09022984b9abacd4c68ac326e5e694769f625e0bfcaa5c8925ed867b60435cc5b76477c45bad508a3bb868f22b875cd1e445aade30357b73494c8417a7c952346c9f90a2686a7401cea123620d11c5591323cd3b9b9d9ed687381ccfebd2b868ecea7d31a1613266891ed8e18db61e9018ee5bacf4497b375bec527afb84af39b5909e6a810bea0c71"], 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000280)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

2.034113353s ago: executing program 3 (id=417):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000fcfcff000020030005000000000002000000acf913aa00000000000000000a0008"], 0xb0}, 0x1, 0x7}, 0x800)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
readv(r1, &(0x7f0000000200), 0x10000000000000d2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r2=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x4, 0x2, 0x80}, 0x5, 0x10000050, 0xee0, r2, 0x4, 0x1, 'syz1\x00', &(0x7f00000000c0)=['\x00', '', '\x00', '{/(,\x00'], 0x7})

1.634111978s ago: executing program 3 (id=418):
r0 = socket$inet(0xa, 0x801, 0x84)
listen(r0, 0xfffffffd)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1)

1.404454523s ago: executing program 3 (id=419):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0xa, r2}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x100000e, 0x4)

1.11019906s ago: executing program 3 (id=420):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0], [0xffffffff], [], [0xfffffffffffffffc]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r7}) (fail_nth: 5)

24.608538ms ago: executing program 3 (id=421):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0], [0xffffffff], [], [0xfffffffffffffffc]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c64d2, &(0x7f0000000040)={r7})

0s ago: executing program 0 (id=422):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file1/../file0', [{0x20, 'cgroup.stat\x00'}, {0x20, '\x00x\xca)n\xd5\x01\x00\x00\x00\x00'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b07283af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b474591444d6d8cd2a19a6fac0ffe438fdc3ea98cb85e"}, 0xa3)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc06340f30c74934bbc0040000109021b0001000000000904000001a7a00f000905", @ANYRESOCT=r1], 0x0)

kernel console output (not intermixed with test programs):

p error: local softirq work is pending, handler #200!!!
[   84.308904][ T5976] veth0_to_bond: entered allmulticast mode
[   85.126657][   T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.226985][ T5998] input: syz1 as /devices/virtual/input/input6
[   85.396498][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.498923][ T5998] netlink: 'syz.2.18': attribute type 1 has an invalid length.
[   85.522492][ T5998] gretap1: entered allmulticast mode
[   85.543182][ T5998] bond0: (slave gretap1): Enslaving as an active interface with an up link
[   85.699441][   T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   85.793275][   T43] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   85.804193][   T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   85.813498][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.933362][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   85.957887][   T43] usb 2-1: invalid MIDI out EP 0
[   86.072337][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.088592][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.116249][ T5833] usb 4-1: Using ep0 maxpacket: 32
[   86.125560][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.177615][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.212740][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   86.245081][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.334370][ T5833] usb 4-1: config 0 descriptor??
[   86.370711][   T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[   86.624227][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   87.019111][  T855] cfg80211: failed to load regulatory.db
[   87.682745][   T43] usb 2-1: USB disconnect, device number 2
[   87.700869][ T5986] delete_channel: no stack
[   87.845341][ T6021] openvswitch: netlink: Flow key attr not present in new flow.
[   88.221316][ T6026] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET)
[   88.408361][ T6028] veth2: entered promiscuous mode
[   88.427843][ T6028] veth2: entered allmulticast mode
[   88.737501][ T6030] openvswitch: netlink: Flow key attr not present in new flow.
[   88.827411][ T5833] usb 4-1: string descriptor 0 read error: -71
[   88.857880][ T5833] usbhid 4-1:0.0: can't add hid device: -71
[   88.863892][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   88.894605][ T5833] usb 4-1: USB disconnect, device number 2
[   89.256938][   T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   89.364406][ T6048] 
: renamed from erspan0 (while UP)
[   89.421160][ T6050] Zero length message leads to an empty skb
[   89.505062][ T5943] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   89.519133][   T43] usb 5-1: config 0 interface 0 has no altsetting 0
[   89.526793][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   89.571960][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.613864][ T6049] 
: renamed from erspan0 (while UP)
[   89.623167][   T43] usb 5-1: config 0 descriptor??
[   89.746269][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.746310][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.752061][ T5943] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   89.752088][ T5943] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   89.752102][ T5943] usb 1-1: Manufacturer: syz
[   89.754364][ T5943] usb 1-1: config 0 descriptor??
[   90.045445][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.547133][   T43] video4linux radio48: keene_cmd_set failed (-110)
[   90.547204][   T43] radio-keene 5-1:0.0: V4L2 device registered as radio48
[   90.629566][ T5833] usb 4-1: Using ep0 maxpacket: 32
[   90.631793][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.631817][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.631852][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   90.631873][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.739311][ T5833] usb 4-1: config 0 descriptor??
[   90.896936][ T6062] libceph: resolve '.
[   90.896936][ T6062] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[   90.896936][ T6062] ' (ret=-3): failed
[   90.982005][ T5943] uclogic 0003:256C:006D.0001: v1 frame probing failed: -71
[   90.982113][ T5943] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[   90.982181][ T5943] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[   90.984775][ T5943] usb 1-1: USB disconnect, device number 2
[   92.490374][ T5826] usb 5-1: USB disconnect, device number 2
[   92.769080][ T5833] usb 4-1: string descriptor 0 read error: -71
[   92.781557][ T5833] usbhid 4-1:0.0: can't add hid device: -71
[   92.791511][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   92.824190][ T5833] usb 4-1: USB disconnect, device number 3
[   93.129155][ T6082] tipc: Started in network mode
[   93.159300][ T6082] tipc: Node identity 2e0c1bae306c, cluster identity 4711
[   93.228812][ T6091] openvswitch: netlink: Flow key attr not present in new flow.
[   93.234703][ T6082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   93.250515][ T6085] syzkaller0: entered promiscuous mode
[   93.256475][ T6085] syzkaller0: entered allmulticast mode
[   93.421113][ T6082] tipc: Resetting bearer <eth:syzkaller0>
[   93.448378][ T6080] tipc: Resetting bearer <eth:syzkaller0>
[   93.485655][ T6080] tipc: Disabling bearer <eth:syzkaller0>
[   93.576420][   T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   93.936175][   T43] usb 5-1: Using ep0 maxpacket: 16
[   93.949489][   T43] usb 5-1: config index 0 descriptor too short (expected 83, got 18)
[   93.964778][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   93.976339][   T43] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   93.989586][   T43] usb 5-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.75
[   94.009009][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.037410][   T43] usb 5-1: Product: syz
[   94.045139][   T43] usb 5-1: Manufacturer: syz
[   94.055017][   T43] usb 5-1: SerialNumber: syz
[   94.099393][ T5833] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   94.165075][   T43] usb 5-1: config 0 descriptor??
[   94.284042][ T5833] usb 3-1: Using ep0 maxpacket: 32
[   94.549941][ T6088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.596569][ T6088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.605395][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.665358][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.683435][ T5833] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   94.715828][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.747627][ T5833] usb 3-1: config 0 descriptor??
[   94.787446][   T43] usb 5-1: USB disconnect, device number 3
[   95.478833][ T6115] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.530926][   T43] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   95.767611][   T43] usb 4-1: Using ep0 maxpacket: 32
[   95.781568][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.811208][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.836013][   T43] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   95.969434][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.111772][   T43] usb 4-1: config 0 descriptor??
[   97.118641][ T5833] usb 3-1: string descriptor 0 read error: -71
[   97.134399][ T5833] usbhid 3-1:0.0: can't add hid device: -71
[   97.140517][ T5833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   97.170416][ T5833] usb 3-1: USB disconnect, device number 2
[   97.551467][ T6139] 
: renamed from erspan0 (while UP)
[   97.652589][ T6145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.55'.
[   97.664796][ T6145] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'.
[   97.688615][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[   97.855449][ T6149] netlink: 48 bytes leftover after parsing attributes in process `syz.2.56'.
[   97.917569][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[   98.914929][   T43] usb 4-1: string descriptor 0 read error: -71
[   99.096729][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   99.143518][   T43] usbhid 4-1:0.0: can't add hid device: -71
[   99.161768][   T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   99.180507][   T43] usb 4-1: USB disconnect, device number 4
[   99.446257][ T5942] usb 3-1: Using ep0 maxpacket: 8
[   99.671941][ T5942] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   99.837143][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.877622][ T5942] usb 3-1: Product: syz
[   99.887434][ T5942] usb 3-1: Manufacturer: syz
[   99.917519][ T5942] usb 3-1: SerialNumber: syz
[   99.938680][ T5942] usb 3-1: config 0 descriptor??
[  100.210548][ T6168] openvswitch: netlink: Flow key attr not present in new flow.
[  100.260374][ T5942] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  100.403873][ T5942] usb 3-1: setting power ON
[  100.436548][ T5942] dvb-usb: bulk message failed: -22 (2/0)
[  100.687325][ T5942] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.719977][ T5942] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  100.755636][ T5942] usb 3-1: media controller created
[  100.799559][ T6172] netlink: 'syz.4.64': attribute type 3 has an invalid length.
[  100.860087][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.910715][ T5942] usb 3-1: selecting invalid altsetting 6
[  100.920081][ T5942] usb 3-1: digital interface selection failed (-22)
[  100.943328][ T6178] netlink: 156 bytes leftover after parsing attributes in process `syz.1.62'.
[  100.979917][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'.
[  100.998046][ T6178] netlink: 72 bytes leftover after parsing attributes in process `syz.1.62'.
[  101.072972][ T5942] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  101.112542][ T5942] usb 3-1: setting power OFF
[  101.143797][ T5942] dvb-usb: bulk message failed: -22 (2/0)
[  101.175839][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  101.231896][ T5942] (NULL device *): no alternate interface
[  101.780380][ T5942] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  101.928228][ T5942] usb 3-1: USB disconnect, device number 3
[  101.957535][ T5826] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  102.136904][ T5826] usb 4-1: Using ep0 maxpacket: 32
[  102.145530][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.157237][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.167498][ T5826] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  102.370823][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.410349][ T5826] usb 4-1: config 0 descriptor??
[  102.677016][  T855] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  103.243178][  T855] usb 1-1: Using ep0 maxpacket: 8
[  103.290185][  T855] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  103.313915][ T6203] netlink: 116 bytes leftover after parsing attributes in process `syz.2.72'.
[  103.492920][  T855] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  103.538013][  T855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.546038][  T855] usb 1-1: Product: syz
[  103.674908][  T855] usb 1-1: Manufacturer: syz
[  103.699259][  T855] usb 1-1: SerialNumber: syz
[  103.732733][  T855] usb 1-1: config 0 descriptor??
[  103.865343][  T855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  103.873484][  T855] usb 1-1: setting power ON
[  103.878652][  T855] dvb-usb: bulk message failed: -22 (2/0)
[  103.921465][  T855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  103.970867][  T855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  104.008290][ T6209] openvswitch: netlink: Flow key attr not present in new flow.
[  104.033200][  T855] usb 1-1: media controller created
[  104.039832][ T6213] netlink: 156 bytes leftover after parsing attributes in process `syz.4.75'.
[  104.114345][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'.
[  104.126397][ T6213] netlink: 72 bytes leftover after parsing attributes in process `syz.4.75'.
[  104.351964][  T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  104.445814][  T855] usb 1-1: selecting invalid altsetting 6
[  104.455057][  T855] usb 1-1: digital interface selection failed (-22)
[  104.504641][  T855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  104.691517][ T5826] usb 4-1: string descriptor 0 read error: -71
[  104.695671][  T855] usb 1-1: setting power OFF
[  104.708930][  T855] dvb-usb: bulk message failed: -22 (2/0)
[  104.718165][ T5826] usbhid 4-1:0.0: can't add hid device: -71
[  104.729300][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  104.795903][  T855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  104.820965][ T5826] usb 4-1: USB disconnect, device number 5
[  104.891108][  T855] (NULL device *): no alternate interface
[  105.149545][ T6226] FAULT_INJECTION: forcing a failure.
[  105.149545][ T6226] name failslab, interval 1, probability 0, space 0, times 1
[  105.171393][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.1.80 Not tainted syzkaller #0 PREEMPT(full) 
[  105.171418][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  105.171434][ T6226] Call Trace:
[  105.171442][ T6226]  <TASK>
[  105.171450][ T6226]  dump_stack_lvl+0x189/0x250
[  105.171485][ T6226]  ? __pfx____ratelimit+0x10/0x10
[  105.171514][ T6226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.171535][ T6226]  ? __pfx__printk+0x10/0x10
[  105.171559][ T6226]  ? __pfx___might_resched+0x10/0x10
[  105.171577][ T6226]  ? fs_reclaim_acquire+0x7d/0x100
[  105.171605][ T6226]  should_fail_ex+0x414/0x560
[  105.171634][ T6226]  should_failslab+0xa8/0x100
[  105.171653][ T6226]  __kvmalloc_node_noprof+0x158/0x910
[  105.171678][ T6226]  ? xt_alloc_table_info+0x40/0xb0
[  105.171705][ T6226]  xt_alloc_table_info+0x40/0xb0
[  105.171725][ T6226]  do_ipt_set_ctl+0x8e1/0xcd0
[  105.171748][ T6226]  ? rcu_is_watching+0x15/0xb0
[  105.171768][ T6226]  ? trace_contention_end+0x39/0x120
[  105.171788][ T6226]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  105.171813][ T6226]  ? nf_setsockopt+0x221/0x290
[  105.171837][ T6226]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  105.171875][ T6226]  ? __pfx_aa_sk_perm+0x10/0x10
[  105.171903][ T6226]  nf_setsockopt+0x26f/0x290
[  105.171924][ T6226]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  105.171949][ T6226]  do_sock_setsockopt+0x17c/0x1b0
[  105.171971][ T6226]  __ia32_sys_setsockopt+0x13f/0x1b0
[  105.171994][ T6226]  __do_fast_syscall_32+0xb6/0x2b0
[  105.172019][ T6226]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.172045][ T6226]  do_fast_syscall_32+0x34/0x80
[  105.172079][ T6226]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  105.172099][ T6226] RIP: 0023:0xf70ad539
[  105.172120][ T6226] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  105.172134][ T6226] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[  105.172152][ T6226] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[  105.172163][ T6226] RDX: 0000000000000040 RSI: 0000000080000580 RDI: 0000000000000324
[  105.172173][ T6226] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  105.172183][ T6226] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  105.172193][ T6226] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  105.172219][ T6226]  </TASK>
[  105.656345][  T855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  105.684370][  T855] usb 1-1: USB disconnect, device number 3
[  106.200899][ T6244] netlink: 156 bytes leftover after parsing attributes in process `syz.0.84'.
[  106.221393][ T6245] openvswitch: netlink: Flow key attr not present in new flow.
[  106.247300][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  106.249774][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'.
[  106.270114][ T6244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.84'.
[  106.542458][ T5921] usb 5-1: Using ep0 maxpacket: 8
[  106.587387][ T5921] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  106.603421][ T5921] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  106.623838][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.632807][ T5921] usb 5-1: Product: syz
[  106.637392][ T5921] usb 5-1: Manufacturer: syz
[  106.642168][ T5921] usb 5-1: SerialNumber: syz
[  106.651840][  T855] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  106.747574][ T5921] usb 5-1: config 0 descriptor??
[  106.775227][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  106.785527][ T5921] usb 5-1: setting power ON
[  106.790488][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  106.893571][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  106.956673][  T855] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  107.037702][  T855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.069609][  T855] usb 3-1: Product: syz
[  107.074866][  T855] usb 3-1: Manufacturer: syz
[  107.192710][  T855] usb 3-1: SerialNumber: syz
[  107.206893][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  107.220107][  T855] usb 3-1: config 0 descriptor??
[  107.239050][  T855] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  107.254554][  T855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  107.379452][  T855] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  107.379457][ T5921] usb 5-1: media controller created
[  107.379513][  T855] usb 3-1: media controller created
[  107.510860][  T855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.600596][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  107.641056][ T6247] dvb-usb: bulk message failed: -22 (3/0)
[  107.647706][ T6247] dvb-usb: bulk message failed: -22 (3/0)
[  107.886180][ T5896] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  107.942632][ T5921] usb 5-1: selecting invalid altsetting 6
[  107.970661][  T855] DVB: Unable to find symbol mt352_attach()
[  107.973588][ T5921] usb 5-1: digital interface selection failed (-22)
[  108.014362][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  108.040747][ T5921] usb 5-1: setting power OFF
[  108.046794][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.051066][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  108.063599][ T5896] usb 1-1: not running at top speed; connect to a high speed hub
[  108.070854][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  108.120280][ T5896] usb 1-1: config 54 has too many interfaces: 70, using maximum allowed: 32
[  108.125264][ T5921] (NULL device *): no alternate interface
[  108.136509][  T855] DVB: Unable to find symbol nxt6000_attach()
[  108.169148][ T5896] usb 1-1: config 54 has an invalid descriptor of length 97, skipping remainder of the config
[  108.186212][  T855] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  108.201429][ T5896] usb 1-1: config 54 has 0 interfaces, different from the descriptor's value: 70
[  108.221756][  T855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  108.246012][ T5896] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[  108.262930][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.355810][ T5896] usb 1-1: Product: syz
[  108.419013][  T855] dvb-usb: schedule remote query interval to 1000 msecs.
[  108.464796][ T5896] usb 1-1: Manufacturer: syz
[  108.482299][ T5896] usb 1-1: SerialNumber: syz
[  108.487393][  T855] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  108.558136][  T855] dvb-usb: bulk message failed: -22 (7/0)
[  108.593436][  T855] dvb-usb: bulk message failed: -22 (7/0)
[  108.760508][  T855] usb 3-1: USB disconnect, device number 4
[  109.102091][  T855] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  109.270250][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  109.410690][ T5921] usb 5-1: USB disconnect, device number 4
[  109.450810][   T30] audit: type=1326 audit(1762811471.007:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.534094][   T30] audit: type=1326 audit(1762811471.007:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.591433][   T30] audit: type=1326 audit(1762811471.007:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.662505][   T30] audit: type=1326 audit(1762811471.007:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.710054][   T30] audit: type=1326 audit(1762811471.007:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.894963][   T30] audit: type=1326 audit(1762811471.007:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  109.956450][ T5943] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  110.026017][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.050015][   T30] audit: type=1326 audit(1762811471.007:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  110.087774][   T30] audit: type=1326 audit(1762811471.007:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  110.112996][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.136533][ T5943] usb 2-1: Using ep0 maxpacket: 8
[  110.157496][ T5943] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  110.174823][ T5943] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  110.185841][ T6284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.201997][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.205696][   T30] audit: type=1326 audit(1762811471.007:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  110.241404][   T30] audit: type=1326 audit(1762811471.007:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6274 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  110.306641][ T5943] usb 2-1: Product: syz
[  110.319220][ T5943] usb 2-1: Manufacturer: syz
[  110.331407][ T5943] usb 2-1: SerialNumber: syz
[  110.361993][ T5943] usb 2-1: config 0 descriptor??
[  110.371701][ T5943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  110.382393][ T5943] usb 2-1: setting power ON
[  110.387145][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  110.404132][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  110.441518][ T5943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  110.451049][ T5943] usb 2-1: media controller created
[  110.480829][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  110.509686][ T5943] usb 2-1: selecting invalid altsetting 6
[  110.521942][ T5943] usb 2-1: digital interface selection failed (-22)
[  110.533830][ T5943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  110.536215][  T855] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  110.572623][ T6293] netlink: 156 bytes leftover after parsing attributes in process `syz.4.99'.
[  110.675023][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'.
[  110.692990][ T6294] netlink: 72 bytes leftover after parsing attributes in process `syz.4.99'.
[  110.703791][ T5943] usb 2-1: setting power OFF
[  110.713382][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  110.719479][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  110.736198][ T5943] (NULL device *): no alternate interface
[  110.868175][  T855] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  110.964323][ T5896] usb 1-1: USB disconnect, device number 4
[  111.084248][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  111.128316][  T855] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[  111.143979][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  111.220685][  T855] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  111.313001][  T855] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff
[  111.330531][  T855] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  111.342683][  T855] usb 4-1: Manufacturer: syz
[  111.367821][  T855] usb 4-1: config 0 descriptor??
[  111.795748][ T5833] usb 4-1: USB disconnect, device number 6
[  111.864259][ T5921] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.961948][ T6307] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  111.976240][ T6307] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.098030][ T6307] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.156176][ T5921] usb 1-1: Using ep0 maxpacket: 8
[  112.221201][ T6307] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.252966][ T5921] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  112.264165][ T6307] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.295518][ T5921] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  112.314836][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.355294][ T6307] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.403644][ T5921] usb 1-1: Product: syz
[  112.407370][ T6307] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.426797][ T6307] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.447623][ T5921] usb 1-1: Manufacturer: syz
[  112.448301][ T6307] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.478144][ T6307] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  112.486176][ T6307] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.512711][ T6307] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.588312][ T6307] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  112.596186][ T6307] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  112.622444][ T6307] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  112.720967][ T5921] usb 1-1: SerialNumber: syz
[  112.771545][ T5921] usb 1-1: config 0 descriptor??
[  112.807154][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  112.815276][ T5921] usb 1-1: setting power ON
[  112.837243][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  112.878286][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.893804][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  112.964610][ T5921] usb 1-1: media controller created
[  113.067657][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.169861][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  113.335520][ T5921] usb 1-1: selecting invalid altsetting 6
[  113.345783][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  113.388103][ T5921] usb 1-1: digital interface selection failed (-22)
[  113.416269][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  113.471358][ T5921] usb 1-1: setting power OFF
[  113.485488][ T5943] usb 2-1: USB disconnect, device number 3
[  113.741253][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  113.765591][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  113.776764][ T5921] (NULL device *): no alternate interface
[  113.816251][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[  113.943537][ T6326] netlink: 116 bytes leftover after parsing attributes in process `syz.1.107'.
[  113.964792][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  114.298987][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  114.359162][ T6329] binder: 6328:6329 ioctl c0189378 80000140 returned -22
[  114.467981][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.488764][ T5943] usb 1-1: USB disconnect, device number 5
[  114.537020][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.616301][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[  114.626205][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  114.714045][ T6338] FAULT_INJECTION: forcing a failure.
[  114.714045][ T6338] name failslab, interval 1, probability 0, space 0, times 0
[  114.731990][ T6338] CPU: 1 UID: 0 PID: 6338 Comm: syz.4.111 Not tainted syzkaller #0 PREEMPT(full) 
[  114.732005][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  114.732011][ T6338] Call Trace:
[  114.732015][ T6338]  <TASK>
[  114.732020][ T6338]  dump_stack_lvl+0x189/0x250
[  114.732037][ T6338]  ? __pfx____ratelimit+0x10/0x10
[  114.732050][ T6338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.732062][ T6338]  ? __pfx__printk+0x10/0x10
[  114.732075][ T6338]  ? __lock_acquire+0xab9/0xd20
[  114.732088][ T6338]  should_fail_ex+0x414/0x560
[  114.732106][ T6338]  should_failslab+0xa8/0x100
[  114.732116][ T6338]  kmem_cache_alloc_noprof+0x74/0x6e0
[  114.732129][ T6338]  ? skb_clone+0x212/0x3a0
[  114.732142][ T6338]  skb_clone+0x212/0x3a0
[  114.732154][ T6338]  __netlink_deliver_tap+0x404/0x850
[  114.732170][ T6338]  ? netlink_deliver_tap+0x2e/0x1b0
[  114.732180][ T6338]  netlink_deliver_tap+0x19c/0x1b0
[  114.732189][ T6338]  netlink_unicast+0x7fa/0x9e0
[  114.732207][ T6338]  ? __pfx_netlink_unicast+0x10/0x10
[  114.732220][ T6338]  ? netlink_sendmsg+0x642/0xb30
[  114.732228][ T6338]  ? skb_put+0x11b/0x210
[  114.732239][ T6338]  netlink_sendmsg+0x805/0xb30
[  114.732256][ T6338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.732266][ T6338]  ? __import_iovec+0x5d4/0x7f0
[  114.732276][ T6338]  ? aa_sock_msg_perm+0xf1/0x1d0
[  114.732291][ T6338]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.732300][ T6338]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.732310][ T6338]  __sock_sendmsg+0x21c/0x270
[  114.732324][ T6338]  ____sys_sendmsg+0x505/0x830
[  114.732338][ T6338]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.732356][ T6338]  ___sys_sendmsg+0x21f/0x2a0
[  114.732367][ T6338]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.732395][ T6338]  ? __fget_files+0x2a/0x420
[  114.732404][ T6338]  ? __fget_files+0x3a0/0x420
[  114.732418][ T6338]  __sys_sendmsg+0x164/0x220
[  114.732429][ T6338]  ? __pfx___sys_sendmsg+0x10/0x10
[  114.732443][ T6338]  ? __pfx_ksys_write+0x10/0x10
[  114.732457][ T6338]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  114.732472][ T6338]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.732485][ T6338]  __do_fast_syscall_32+0xb6/0x2b0
[  114.732506][ T6338]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.732520][ T6338]  do_fast_syscall_32+0x34/0x80
[  114.732532][ T6338]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  114.732544][ T6338] RIP: 0023:0xf70bd539
[  114.732553][ T6338] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  114.732561][ T6338] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  114.732572][ T6338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  114.732578][ T6338] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  114.732584][ T6338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  114.732589][ T6338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  114.732594][ T6338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  114.732608][ T6338]  </TASK>
[  115.056489][  T855] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  115.131856][ T5833] usb 2-1: too many configurations: 33, using maximum allowed: 8
[  115.157836][ T5833] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8
[  115.167020][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.175017][ T5833] usb 2-1: Product: syz
[  115.179362][ T5833] usb 2-1: Manufacturer: syz
[  115.183938][ T5833] usb 2-1: SerialNumber: syz
[  115.190335][ T5833] usb 2-1: config 0 descriptor??
[  115.197772][ T5833] go7007-loader 2-1:0.0: can't handle multiple config
[  115.204982][ T5833] go7007-loader 2-1:0.0: probe failed
[  115.236190][  T855] usb 4-1: Using ep0 maxpacket: 16
[  115.271178][  T855] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  115.278782][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  115.289833][  T855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  115.299745][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024
[  115.310879][  T855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024
[  115.325309][  T855] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  115.334508][  T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.342664][  T855] usb 4-1: Product: syz
[  115.346860][  T855] usb 4-1: Manufacturer: syz
[  115.351469][  T855] usb 4-1: SerialNumber: syz
[  115.381197][  T855] usb 4-1: config 0 descriptor??
[  115.389045][ T6329] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  115.406898][ T6329] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  115.454195][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  115.476232][  T855] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected
[  115.483873][    C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71)
[  115.920690][  T855] usb 4-1: USB disconnect, device number 7
[  115.926672][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[  115.933875][  T855] mcba_usb 4-1:0.0 can0: device disconnected
[  116.381779][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.536277][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout
[  116.627278][ T6357] netlink: 156 bytes leftover after parsing attributes in process `syz.2.116'.
[  116.636474][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.659831][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.116'.
[  116.670572][ T6357] netlink: 72 bytes leftover after parsing attributes in process `syz.2.116'.
[  116.698742][ T5835] Bluetooth: hci4: command 0x0c1a tx timeout
[  117.403676][ T5943] usb 2-1: USB disconnect, device number 4
[  117.980720][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout
[  118.464197][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.709780][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.715863][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.731945][ T6386] FAULT_INJECTION: forcing a failure.
[  118.731945][ T6386] name failslab, interval 1, probability 0, space 0, times 0
[  118.776233][ T5830] Bluetooth: hci4: command 0x0c1a tx timeout
[  118.834460][ T6386] CPU: 1 UID: 0 PID: 6386 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) 
[  118.834482][ T6386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  118.834491][ T6386] Call Trace:
[  118.834498][ T6386]  <TASK>
[  118.834505][ T6386]  dump_stack_lvl+0x189/0x250
[  118.834530][ T6386]  ? __pfx____ratelimit+0x10/0x10
[  118.834552][ T6386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.834573][ T6386]  ? __pfx__printk+0x10/0x10
[  118.834594][ T6386]  ? __pfx___might_resched+0x10/0x10
[  118.834617][ T6386]  should_fail_ex+0x414/0x560
[  118.834644][ T6386]  should_failslab+0xa8/0x100
[  118.834662][ T6386]  __kmalloc_cache_noprof+0x6f/0x6f0
[  118.834684][ T6386]  ? tcf_exts_init_ex+0x110/0x750
[  118.834704][ T6386]  tcf_exts_init_ex+0x110/0x750
[  118.834716][ T6386]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  118.834732][ T6386]  cls_cgroup_change+0x26f/0x540
[  118.834750][ T6386]  ? __pfx_cls_cgroup_change+0x10/0x10
[  118.834771][ T6386]  tc_new_tfilter+0xdca/0x15b0
[  118.834796][ T6386]  ? __pfx_tc_new_tfilter+0x10/0x10
[  118.834805][ T6386]  ? __dev_queue_xmit+0x1d79/0x3b50
[  118.834833][ T6386]  ? __pfx_tc_new_tfilter+0x10/0x10
[  118.834842][ T6386]  rtnetlink_rcv_msg+0x7cf/0xb70
[  118.834858][ T6386]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  118.834870][ T6386]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.834882][ T6386]  ? ref_tracker_free+0x63a/0x7d0
[  118.834891][ T6386]  ? __asan_memcpy+0x40/0x70
[  118.834904][ T6386]  ? __pfx_ref_tracker_free+0x10/0x10
[  118.834911][ T6386]  ? __skb_clone+0x63/0x7a0
[  118.834926][ T6386]  netlink_rcv_skb+0x208/0x470
[  118.834943][ T6386]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  118.834956][ T6386]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  118.834976][ T6386]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.834989][ T6386]  netlink_unicast+0x82f/0x9e0
[  118.835006][ T6386]  ? __pfx_netlink_unicast+0x10/0x10
[  118.835019][ T6386]  ? netlink_sendmsg+0x642/0xb30
[  118.835027][ T6386]  ? skb_put+0x11b/0x210
[  118.835038][ T6386]  netlink_sendmsg+0x805/0xb30
[  118.835051][ T6386]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.835062][ T6386]  ? __import_iovec+0x5d4/0x7f0
[  118.835072][ T6386]  ? aa_sock_msg_perm+0xf1/0x1d0
[  118.835086][ T6386]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.835095][ T6386]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.835105][ T6386]  __sock_sendmsg+0x21c/0x270
[  118.835119][ T6386]  ____sys_sendmsg+0x505/0x830
[  118.835132][ T6386]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.835150][ T6386]  ___sys_sendmsg+0x21f/0x2a0
[  118.835161][ T6386]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.835197][ T6386]  ? __fget_files+0x2a/0x420
[  118.835206][ T6386]  ? __fget_files+0x3a0/0x420
[  118.835220][ T6386]  __sys_sendmsg+0x164/0x220
[  118.835230][ T6386]  ? __pfx___sys_sendmsg+0x10/0x10
[  118.835245][ T6386]  ? __pfx_ksys_write+0x10/0x10
[  118.835259][ T6386]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  118.835274][ T6386]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.835287][ T6386]  __do_fast_syscall_32+0xb6/0x2b0
[  118.835301][ T6386]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.835315][ T6386]  do_fast_syscall_32+0x34/0x80
[  118.835328][ T6386]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  118.835339][ T6386] RIP: 0023:0xf70bd539
[  118.835349][ T6386] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  118.835356][ T6386] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  118.835367][ T6386] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040
[  118.835374][ T6386] RDX: 0000000000040010 RSI: 0000000000000000 RDI: 0000000000000000
[  118.835379][ T6386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  118.835384][ T6386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  118.835389][ T6386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  118.835407][ T6386]  </TASK>
[  119.209068][    C1] vkms_vblank_simulate: vblank timer overrun
[  119.919502][ T6399] netlink: 168 bytes leftover after parsing attributes in process `syz.3.128'.
[  120.974328][ T6423] netlink: 156 bytes leftover after parsing attributes in process `syz.4.136'.
[  120.998144][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'.
[  121.009586][ T6423] netlink: 72 bytes leftover after parsing attributes in process `syz.4.136'.
[  121.442917][ T6426] xt_CT: You must specify a L4 protocol and not use inversions on it
[  121.563364][ T5942] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  121.766336][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  121.775499][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.827976][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.883951][ T5942] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  121.908432][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.972952][ T5942] usb 1-1: config 0 descriptor??
[  122.145633][ T6434] netlink: 168 bytes leftover after parsing attributes in process `syz.1.140'.
[  124.080112][ T6448] netlink: 'syz.1.146': attribute type 1 has an invalid length.
[  124.126640][ T6448] netlink: 'syz.1.146': attribute type 8 has an invalid length.
[  124.411841][ T6432] syz.2.138 (6432): drop_caches: 2
[  124.526325][ T5942] usb 1-1: string descriptor 0 read error: -71
[  124.537618][ T5942] usbhid 1-1:0.0: can't add hid device: -71
[  124.559179][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  124.614163][ T5942] usb 1-1: USB disconnect, device number 6
[  124.706207][ T6464] delete_channel: no stack
[  125.025446][ T6470] netlink: 168 bytes leftover after parsing attributes in process `syz.0.151'.
[  125.076170][ T5833] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  125.267762][ T6477] netlink: 156 bytes leftover after parsing attributes in process `syz.2.154'.
[  125.334054][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'.
[  125.352124][ T6477] netlink: 72 bytes leftover after parsing attributes in process `syz.2.154'.
[  125.380636][ T5833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  125.447426][ T5833] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  125.481097][ T6479] syz_tun: entered allmulticast mode
[  125.569382][ T6479] dvmrp8: entered allmulticast mode
[  125.585058][ T5833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  125.675454][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.701371][ T6478] syz_tun: left allmulticast mode
[  125.860515][ T5833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  125.870242][ T5833] usb 5-1: invalid MIDI out EP 0
[  126.170332][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.374585][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.402477][ T5833] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  126.450537][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  127.016395][ T5833] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  127.180398][ T5833] usb 4-1: Using ep0 maxpacket: 32
[  127.232856][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.234477][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'.
[  127.302165][ T6504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'.
[  127.340901][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  127.344503][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.0.163'.
[  127.378776][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  127.477790][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.529678][ T5833] usb 4-1: config 0 descriptor??
[  127.688775][ T6517] input: syz1 as /devices/virtual/input/input8
[  127.803247][ T5896] usb 5-1: USB disconnect, device number 5
[  127.990896][ T6517] netlink: 'syz.1.168': attribute type 1 has an invalid length.
[  128.150591][ T6525] FAULT_INJECTION: forcing a failure.
[  128.150591][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  128.186517][ T5921] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  128.243465][ T6525] CPU: 0 UID: 0 PID: 6525 Comm: syz.4.171 Not tainted syzkaller #0 PREEMPT(full) 
[  128.243489][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.243498][ T6525] Call Trace:
[  128.243505][ T6525]  <TASK>
[  128.243512][ T6525]  dump_stack_lvl+0x189/0x250
[  128.243541][ T6525]  ? __pfx____ratelimit+0x10/0x10
[  128.243563][ T6525]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.243584][ T6525]  ? __pfx__printk+0x10/0x10
[  128.243602][ T6525]  ? __might_fault+0xb0/0x130
[  128.243634][ T6525]  should_fail_ex+0x414/0x560
[  128.243661][ T6525]  _copy_from_user+0x2d/0xb0
[  128.243682][ T6525]  get_compat_msghdr+0xad/0x4a0
[  128.243703][ T6525]  ? __pfx_get_compat_msghdr+0x10/0x10
[  128.243732][ T6525]  ___sys_sendmsg+0x193/0x2a0
[  128.243753][ T6525]  ? __pfx____sys_sendmsg+0x10/0x10
[  128.243802][ T6525]  ? __fget_files+0x2a/0x420
[  128.243818][ T6525]  ? __fget_files+0x3a0/0x420
[  128.243842][ T6525]  __sys_sendmsg+0x164/0x220
[  128.243861][ T6525]  ? __pfx___sys_sendmsg+0x10/0x10
[  128.243887][ T6525]  ? __pfx_ksys_write+0x10/0x10
[  128.243920][ T6525]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  128.243947][ T6525]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.243972][ T6525]  __do_fast_syscall_32+0xb6/0x2b0
[  128.243996][ T6525]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.244021][ T6525]  do_fast_syscall_32+0x34/0x80
[  128.244042][ T6525]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  128.244061][ T6525] RIP: 0023:0xf70bd539
[  128.244076][ T6525] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  128.244089][ T6525] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  128.244107][ T6525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000700
[  128.244118][ T6525] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000
[  128.244133][ T6525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  128.244141][ T6525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  128.244150][ T6525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  128.244176][ T6525]  </TASK>
[  129.016244][ T5921] usb 3-1: Using ep0 maxpacket: 8
[  129.043635][ T6520] gretap1: entered allmulticast mode
[  129.049571][ T5921] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  129.117225][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  129.126881][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.135502][ T5921] usb 3-1: Product: syz
[  129.140015][ T5921] usb 3-1: Manufacturer: syz
[  129.145382][ T5921] usb 3-1: SerialNumber: syz
[  129.208349][ T5921] usb 3-1: config 0 descriptor??
[  129.214811][ T6520] bond1: (slave gretap1): making interface the new active one
[  129.240272][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  129.252038][ T6520] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  129.277909][ T5921] usb 3-1: setting power ON
[  129.295803][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  129.371823][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.417824][ T6531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.172'.
[  129.464521][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  129.481312][ T5921] usb 3-1: media controller created
[  129.620951][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.712573][ T5921] usb 3-1: selecting invalid altsetting 6
[  129.732724][ T5921] usb 3-1: digital interface selection failed (-22)
[  129.753311][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  129.810252][ T5921] usb 3-1: setting power OFF
[  129.825776][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  129.889787][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  129.912350][ T5921] (NULL device *): no alternate interface
[  130.084783][ T5833] usb 4-1: string descriptor 0 read error: -71
[  130.188853][ T5833] usbhid 4-1:0.0: can't add hid device: -71
[  130.249697][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  130.345150][ T5833] usb 4-1: USB disconnect, device number 8
[  130.866264][ T5833] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  131.032579][ T5921] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  131.142027][ T5921] usb 3-1: USB disconnect, device number 5
[  131.257259][ T6559] FAULT_INJECTION: forcing a failure.
[  131.257259][ T6559] name failslab, interval 1, probability 0, space 0, times 0
[  131.271938][ T5833] usb 4-1: too many configurations: 161, using maximum allowed: 8
[  131.319446][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61
[  131.326300][ T6559] CPU: 0 UID: 0 PID: 6559 Comm: syz.1.179 Not tainted syzkaller #0 PREEMPT(full) 
[  131.326328][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  131.326338][ T6559] Call Trace:
[  131.326346][ T6559]  <TASK>
[  131.326353][ T6559]  dump_stack_lvl+0x189/0x250
[  131.326379][ T6559]  ? __pfx____ratelimit+0x10/0x10
[  131.326404][ T6559]  ? __pfx_dump_stack_lvl+0x10/0x10
[  131.326424][ T6559]  ? __pfx__printk+0x10/0x10
[  131.326446][ T6559]  ? __pfx___might_resched+0x10/0x10
[  131.326463][ T6559]  ? fs_reclaim_acquire+0x7d/0x100
[  131.326490][ T6559]  should_fail_ex+0x414/0x560
[  131.326519][ T6559]  should_failslab+0xa8/0x100
[  131.326537][ T6559]  kmem_cache_alloc_node_noprof+0x77/0x710
[  131.326559][ T6559]  ? __alloc_skb+0x112/0x2d0
[  131.326573][ T6559]  ? netlink_autobind+0xdb/0x300
[  131.326601][ T6559]  __alloc_skb+0x112/0x2d0
[  131.326620][ T6559]  netlink_sendmsg+0x5c6/0xb30
[  131.326644][ T6559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.326663][ T6559]  ? __import_iovec+0x5d4/0x7f0
[  131.326680][ T6559]  ? aa_sock_msg_perm+0xf1/0x1d0
[  131.326704][ T6559]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  131.326719][ T6559]  ? __pfx_netlink_sendmsg+0x10/0x10
[  131.326736][ T6559]  __sock_sendmsg+0x21c/0x270
[  131.326760][ T6559]  ____sys_sendmsg+0x505/0x830
[  131.326782][ T6559]  ? __pfx_____sys_sendmsg+0x10/0x10
[  131.326814][ T6559]  ___sys_sendmsg+0x21f/0x2a0
[  131.326832][ T6559]  ? __pfx____sys_sendmsg+0x10/0x10
[  131.326882][ T6559]  ? __fget_files+0x2a/0x420
[  131.326896][ T6559]  ? __fget_files+0x3a0/0x420
[  131.326921][ T6559]  __sys_sendmsg+0x164/0x220
[  131.326939][ T6559]  ? __pfx___sys_sendmsg+0x10/0x10
[  131.326964][ T6559]  ? __pfx_ksys_write+0x10/0x10
[  131.326987][ T6559]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  131.327011][ T6559]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.327033][ T6559]  __do_fast_syscall_32+0xb6/0x2b0
[  131.327054][ T6559]  ? lockdep_hardirqs_on+0x9c/0x150
[  131.327077][ T6559]  do_fast_syscall_32+0x34/0x80
[  131.327097][ T6559]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  131.327116][ T6559] RIP: 0023:0xf70ad539
[  131.327131][ T6559] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  131.327143][ T6559] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  131.327161][ T6559] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  131.327172][ T6559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  131.327182][ T6559] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  131.327191][ T6559] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  131.327200][ T6559] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  131.327225][ T6559]  </TASK>
[  131.603494][ T5833] usb 4-1: can't read configurations, error -61
[  131.770784][ T5833] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  132.122968][ T6576] netlink: 18 bytes leftover after parsing attributes in process `syz.0.184'.
[  132.138675][ T5833] usb 4-1: too many configurations: 161, using maximum allowed: 8
[  132.148279][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61
[  132.156038][ T5833] usb 4-1: can't read configurations, error -61
[  132.163467][ T5833] usb usb4-port1: attempt power cycle
[  132.506240][ T5833] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  132.537629][ T5833] usb 4-1: too many configurations: 161, using maximum allowed: 8
[  132.553479][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61
[  132.561518][ T5833] usb 4-1: can't read configurations, error -61
[  132.636273][ T5942] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  132.739121][ T5833] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  132.917588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.924087][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.984197][ T5833] usb 4-1: too many configurations: 161, using maximum allowed: 8
[  133.038793][ T5833] usb 4-1: unable to read config index 0 descriptor/start: -61
[  133.050459][ T5833] usb 4-1: can't read configurations, error -61
[  133.059736][ T5833] usb usb4-port1: unable to enumerate USB device
[  133.156396][ T5942] usb 2-1: config 0 has no interfaces?
[  133.161914][ T5942] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  133.210691][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.288492][ T5942] usb 2-1: config 0 descriptor??
[  133.428973][ T6591] input: syz1 as /devices/virtual/input/input9
[  133.542229][ T5921] usb 2-1: USB disconnect, device number 5
[  133.706167][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  133.783374][ T6591] netlink: 'syz.4.187': attribute type 1 has an invalid length.
[  133.925709][ T5942] usb 1-1: Using ep0 maxpacket: 32
[  133.937881][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.960288][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.970417][ T5942] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  133.995498][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.059203][ T6598] gretap1: entered allmulticast mode
[  134.069239][ T6598] bond1: (slave gretap1): making interface the new active one
[  134.078828][ T6598] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  134.091504][ T5942] usb 1-1: config 0 descriptor??
[  135.306978][   T43] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  135.467649][   T43] usb 3-1: Using ep0 maxpacket: 8
[  135.494311][   T43] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  135.521191][   T43] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  135.530667][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.539109][   T43] usb 3-1: Product: syz
[  135.549474][   T43] usb 3-1: Manufacturer: syz
[  135.568223][   T43] usb 3-1: SerialNumber: syz
[  135.595382][   T43] usb 3-1: config 0 descriptor??
[  135.639018][   T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  135.678607][   T43] usb 3-1: setting power ON
[  135.689886][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  135.714329][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  135.757499][   T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  135.824266][   T43] usb 3-1: media controller created
[  135.881755][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.944975][   T43] usb 3-1: selecting invalid altsetting 6
[  135.966728][   T43] usb 3-1: digital interface selection failed (-22)
[  135.991551][   T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  136.016815][   T43] usb 3-1: setting power OFF
[  136.034709][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  136.075925][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  136.107762][   T43] (NULL device *): no alternate interface
[  136.356115][ T5942] usb 1-1: string descriptor 0 read error: -71
[  136.473397][ T5942] usbhid 1-1:0.0: can't add hid device: -71
[  136.479499][ T5942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  136.540193][ T5942] usb 1-1: USB disconnect, device number 7
[  136.890721][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'.
[  137.303732][ T6653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.433146][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.818398][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  137.863702][   T43] usb 3-1: USB disconnect, device number 6
[  137.914838][ T6666] input: syz1 as /devices/virtual/input/input10
[  138.079590][ T6666] netlink: 'syz.1.205': attribute type 1 has an invalid length.
[  139.100318][ T6682] netlink: 168 bytes leftover after parsing attributes in process `syz.3.208'.
[  139.186213][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  139.215571][ T6691] syzkaller0: entered promiscuous mode
[  139.226292][ T6691] syzkaller0: entered allmulticast mode
[  139.357782][ T5921] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  139.372516][ T5921] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  139.416562][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  139.437933][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.475653][ T6694] syz_tun: entered allmulticast mode
[  139.478539][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  139.494848][ T5921] usb 5-1: invalid MIDI out EP 0
[  139.520502][ T6694] dvmrp8: entered allmulticast mode
[  139.550133][ T6693] syz_tun: left allmulticast mode
[  139.898236][ T5921] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  139.906262][ T5833] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  139.986327][  T855] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  140.143973][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  140.160329][  T855] usb 3-1: Using ep0 maxpacket: 16
[  140.165539][ T5833] usb 4-1: Using ep0 maxpacket: 32
[  140.226402][   T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  140.252028][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.266275][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.277060][  T855] usb 3-1: config 0 has no interfaces?
[  140.283232][ T5833] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  140.298428][  T855] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  140.310575][  T855] usb 3-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  140.323346][  T855] usb 3-1: Product: syz
[  140.329313][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.338462][  T855] usb 3-1: Manufacturer: syz
[  140.343246][  T855] usb 3-1: SerialNumber: syz
[  140.351916][ T5833] usb 4-1: config 0 descriptor??
[  140.359918][  T855] usb 3-1: config 0 descriptor??
[  140.396176][   T43] usb 1-1: Using ep0 maxpacket: 8
[  140.407658][   T43] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  140.422551][   T43] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  140.432006][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.440380][   T43] usb 1-1: Product: syz
[  140.445805][   T43] usb 1-1: Manufacturer: syz
[  140.450981][   T43] usb 1-1: SerialNumber: syz
[  140.460159][   T43] usb 1-1: config 0 descriptor??
[  140.516192][   T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  140.597418][   T43] usb 1-1: setting power ON
[  140.602281][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  140.617083][  T855] usb 3-1: USB disconnect, device number 7
[  140.651905][ T6713] fuse: Bad value for 'fd'
[  140.660026][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  140.697712][   T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  140.721272][   T43] usb 1-1: media controller created
[  140.910973][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  140.950037][   T43] usb 1-1: selecting invalid altsetting 6
[  140.956662][   T43] usb 1-1: digital interface selection failed (-22)
[  140.963960][   T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  140.973443][   T43] usb 1-1: setting power OFF
[  140.979087][   T43] dvb-usb: bulk message failed: -22 (2/0)
[  140.986772][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  140.998581][   T43] (NULL device *): no alternate interface
[  141.680738][ T5903] usb 5-1: USB disconnect, device number 6
[  141.765374][ T6719] trusted_key: encrypted_key: insufficient parameters specified
[  142.905083][ T5833] usb 4-1: string descriptor 0 read error: -71
[  142.917106][ T5833] usbhid 4-1:0.0: can't add hid device: -71
[  142.923206][ T5833] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  142.957645][ T5833] usb 4-1: USB disconnect, device number 13
[  143.423605][ T6737] input: syz1 as /devices/virtual/input/input11
[  143.613231][ T6737] netlink: 'syz.4.225': attribute type 1 has an invalid length.
[  143.646389][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  143.725512][  T855] usb 1-1: USB disconnect, device number 8
[  144.076430][ T5943] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  144.257545][ T5943] usb 2-1: Using ep0 maxpacket: 32
[  144.290236][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.358695][ T5943] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  144.388547][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.435266][ T5943] usb 2-1: Product: syz
[  144.453575][ T5943] usb 2-1: Manufacturer: syz
[  144.486254][ T5943] usb 2-1: SerialNumber: syz
[  144.801130][ T5943] usb 2-1: config 0 descriptor??
[  144.831487][ T5943] cdc_ether 2-1:0.0: skipping garbage
[  144.845408][ T5943] usb 2-1: bad CDC descriptors
[  144.858431][ T5943] usb 2-1: unsupported MDLM descriptors
[  144.962562][ T6759] netlink: 116 bytes leftover after parsing attributes in process `syz.3.230'.
[  145.318106][  T855] usb 2-1: USB disconnect, device number 6
[  145.571809][ T6769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.232'.
[  145.616665][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.232'.
[  145.651496][ T6769] netlink: 72 bytes leftover after parsing attributes in process `syz.3.232'.
[  146.017365][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'.
[  146.666386][ T5903] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  147.206533][ T5903] usb 5-1: Using ep0 maxpacket: 32
[  147.228283][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.240588][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.273489][ T5903] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  147.300037][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.518777][ T5903] usb 5-1: config 0 descriptor??
[  148.975584][ T5943] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  149.346875][ T5943] usb 1-1: Using ep0 maxpacket: 8
[  149.363166][ T5943] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  149.381799][ T5943] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  149.415518][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.442746][ T5943] usb 1-1: Product: syz
[  149.494661][ T5943] usb 1-1: Manufacturer: syz
[  149.567950][ T5903] usb 5-1: string descriptor 0 read error: -71
[  149.579041][ T5903] usbhid 5-1:0.0: can't add hid device: -71
[  149.589961][ T5943] usb 1-1: SerialNumber: syz
[  149.642282][ T5943] usb 1-1: config 0 descriptor??
[  149.651930][ T5943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  149.665182][ T5943] usb 1-1: setting power ON
[  149.704334][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  149.749134][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  149.849746][ T5903] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  150.193513][ T5903] usb 5-1: USB disconnect, device number 7
[  150.214866][ T5943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  150.417414][ T5943] usb 1-1: media controller created
[  150.680867][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.833160][ T5943] usb 1-1: selecting invalid altsetting 6
[  150.839314][ T5943] usb 1-1: digital interface selection failed (-22)
[  150.846464][ T5943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  150.855635][ T5943] usb 1-1: setting power OFF
[  150.860820][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  150.866950][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  150.899100][ T5943] (NULL device *): no alternate interface
[  151.094219][ T6822] 
: renamed from erspan0 (while UP)
[  151.146240][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  151.166164][ T5903] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  151.223967][ T5943] usb 1-1: USB disconnect, device number 9
[  151.293321][ T6827] delete_channel: no stack
[  151.477395][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.496185][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[  151.496237][ T5903] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0
[  151.496257][ T5903] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping
[  151.496274][ T5903] usb 2-1: config 0 interface 0 has no altsetting 1
[  151.496305][ T5903] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=56.d6
[  151.496326][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.501561][ T5903] usb 2-1: config 0 descriptor??
[  151.796424][ T5942] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  152.262044][ T5942] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  152.306951][ T6843] IPVS: sync thread started: state = MASTER, mcast_ifn = erspan0, syncid = 4, id = 0
[  152.316969][ T5942] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  152.374902][ T5942] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  152.400871][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.461721][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.250'.
[  152.466533][ T5942] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  152.574087][ T5942] usb 3-1: invalid MIDI out EP 0
[  152.714453][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.773176][ T5942] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  153.103434][ T6849] netlink: 156 bytes leftover after parsing attributes in process `syz.0.251'.
[  153.149098][ T6849] netlink: 72 bytes leftover after parsing attributes in process `syz.0.251'.
[  153.271195][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.333981][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.652164][   T43] usb 2-1: USB disconnect, device number 7
[  154.106747][   T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  154.274455][ T6862] delete_channel: no stack
[  154.501959][   T43] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  154.521173][   T43] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.532662][   T43] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.546432][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.556180][ T5833] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  154.567794][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.597940][   T43] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  154.605746][   T43] usb 5-1: invalid MIDI out EP 0
[  154.662826][ T5921] usb 3-1: USB disconnect, device number 8
[  154.799174][ T5833] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.852080][ T6864] netlink: 'syz.2.256': attribute type 6 has an invalid length.
[  154.863210][ T6864] netlink: 168 bytes leftover after parsing attributes in process `syz.2.256'.
[  154.895639][ T5833] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  154.999976][ T5833] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  155.060163][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.152732][   T43] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  155.186019][ T6868] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  155.203810][ T5833] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  155.213830][ T5833] usb 4-1: invalid MIDI out EP 0
[  155.227415][ T6868] macvtap1: entered allmulticast mode
[  155.239202][ T6868] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  155.327689][ T6710] udevd[6710]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  155.387933][ T6710] udevd[6710]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  155.404469][ T5833] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  155.434958][ T6862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  155.445020][ T6862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.011441][ T6878] FAULT_INJECTION: forcing a failure.
[  156.011441][ T6878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  156.081926][ T6878] CPU: 0 UID: 0 PID: 6878 Comm: syz.2.260 Not tainted syzkaller #0 PREEMPT(full) 
[  156.081949][ T6878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  156.081960][ T6878] Call Trace:
[  156.081967][ T6878]  <TASK>
[  156.081974][ T6878]  dump_stack_lvl+0x189/0x250
[  156.082001][ T6878]  ? __pfx____ratelimit+0x10/0x10
[  156.082024][ T6878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.082044][ T6878]  ? __pfx__printk+0x10/0x10
[  156.082061][ T6878]  ? __might_fault+0xb0/0x130
[  156.082092][ T6878]  should_fail_ex+0x414/0x560
[  156.082128][ T6878]  _copy_from_iter+0x1de/0x1790
[  156.082149][ T6878]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  156.082172][ T6878]  ? policy_nodemask+0x27c/0x720
[  156.082188][ T6878]  ? __pfx__copy_from_iter+0x10/0x10
[  156.082213][ T6878]  ? set_page_refcounted+0xa0/0x1e0
[  156.082229][ T6878]  ? page_copy_sane+0x4e/0x280
[  156.082248][ T6878]  copy_page_from_iter+0xdd/0x170
[  156.082269][ T6878]  tun_get_user+0x1d7b/0x3e90
[  156.082296][ T6878]  ? tun_get_user+0x6f6/0x3e90
[  156.082324][ T6878]  ? aa_file_perm+0x44d/0x1550
[  156.082339][ T6878]  ? __pfx_tun_get_user+0x10/0x10
[  156.082356][ T6878]  ? _parse_integer_limit+0x1ae/0x1f0
[  156.082379][ T6878]  ? __lock_acquire+0xab9/0xd20
[  156.082399][ T6878]  ? ref_tracker_alloc+0x318/0x460
[  156.082413][ T6878]  ? __lock_acquire+0xab9/0xd20
[  156.082430][ T6878]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  156.082449][ T6878]  ? tun_get+0x1c/0x2f0
[  156.082470][ T6878]  ? tun_get+0x1c/0x2f0
[  156.082487][ T6878]  ? tun_get+0x1c/0x2f0
[  156.082508][ T6878]  tun_chr_write_iter+0x113/0x200
[  156.082528][ T6878]  vfs_write+0x5c9/0xb30
[  156.082554][ T6878]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  156.082573][ T6878]  ? __pfx_vfs_write+0x10/0x10
[  156.082603][ T6878]  ? __fget_files+0x2a/0x420
[  156.082627][ T6878]  ksys_write+0x145/0x250
[  156.082647][ T6878]  ? exc_page_fault+0x82/0x100
[  156.082668][ T6878]  ? __pfx_ksys_write+0x10/0x10
[  156.082691][ T6878]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  156.082713][ T6878]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.082736][ T6878]  __do_fast_syscall_32+0xb6/0x2b0
[  156.082758][ T6878]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.082781][ T6878]  do_fast_syscall_32+0x34/0x80
[  156.082802][ T6878]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  156.082821][ T6878] RIP: 0023:0xf701d539
[  156.082835][ T6878] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  156.082847][ T6878] RSP: 002b:00000000f540d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  156.082864][ T6878] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000080
[  156.082875][ T6878] RDX: 0000000000000036 RSI: 00000000f73b6ff4 RDI: 0000000000000000
[  156.082885][ T6878] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  156.082893][ T6878] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  156.082902][ T6878] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  156.082927][ T6878]  </TASK>
[  156.380951][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.626509][ T6883] input: syz1 as /devices/virtual/input/input12
[  156.717559][ T6883] netlink: 'syz.0.262': attribute type 1 has an invalid length.
[  156.830691][ T6884] gretap1: entered allmulticast mode
[  156.865811][ T6884] bond1: (slave gretap1): making interface the new active one
[  156.897402][   T43] usb 5-1: USB disconnect, device number 8
[  156.934189][ T6884] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  157.479189][   T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  157.715910][ T6908] FAULT_INJECTION: forcing a failure.
[  157.715910][ T6908] name failslab, interval 1, probability 0, space 0, times 0
[  157.728899][ T6908] CPU: 1 UID: 0 PID: 6908 Comm: syz.0.270 Not tainted syzkaller #0 PREEMPT(full) 
[  157.728914][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  157.728920][ T6908] Call Trace:
[  157.728924][ T6908]  <TASK>
[  157.728928][ T6908]  dump_stack_lvl+0x189/0x250
[  157.728945][ T6908]  ? __pfx____ratelimit+0x10/0x10
[  157.728958][ T6908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.728979][ T6908]  ? __pfx__printk+0x10/0x10
[  157.728992][ T6908]  ? __pfx___might_resched+0x10/0x10
[  157.729002][ T6908]  ? fs_reclaim_acquire+0x7d/0x100
[  157.729019][ T6908]  should_fail_ex+0x414/0x560
[  157.729036][ T6908]  should_failslab+0xa8/0x100
[  157.729046][ T6908]  __kmalloc_noprof+0xcb/0x7f0
[  157.729059][ T6908]  ? tomoyo_encode+0x28b/0x550
[  157.729076][ T6908]  tomoyo_encode+0x28b/0x550
[  157.729091][ T6908]  tomoyo_realpath_from_path+0x58d/0x5d0
[  157.729110][ T6908]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  157.729121][ T6908]  tomoyo_path_number_perm+0x1e8/0x5a0
[  157.729134][ T6908]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  157.729155][ T6908]  ? __lock_acquire+0xab9/0xd20
[  157.729175][ T6908]  ? __fget_files+0x2a/0x420
[  157.729186][ T6908]  ? __fget_files+0x3a0/0x420
[  157.729194][ T6908]  ? __fget_files+0x2a/0x420
[  157.729205][ T6908]  security_file_ioctl_compat+0xcb/0x2d0
[  157.729218][ T6908]  __ia32_compat_sys_ioctl+0x128/0x840
[  157.729232][ T6908]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  157.729244][ T6908]  ? __fget_files+0x3a0/0x420
[  157.729256][ T6908]  ? fput+0xa0/0xd0
[  157.729266][ T6908]  ? ksys_write+0x22a/0x250
[  157.729278][ T6908]  ? exc_page_fault+0x82/0x100
[  157.729291][ T6908]  ? __pfx_ksys_write+0x10/0x10
[  157.729305][ T6908]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  157.729318][ T6908]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.729332][ T6908]  __do_fast_syscall_32+0xb6/0x2b0
[  157.729345][ T6908]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.729359][ T6908]  do_fast_syscall_32+0x34/0x80
[  157.729372][ T6908]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  157.729384][ T6908] RIP: 0023:0xf7fd3539
[  157.729393][ T6908] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  157.729400][ T6908] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  157.729411][ T6908] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000c0306201
[  157.729418][ T6908] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000
[  157.729423][ T6908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  157.729428][ T6908] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  157.729433][ T6908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  157.729448][ T6908]  </TASK>
[  157.729463][ T6908] ERROR: Out of memory at tomoyo_realpath_from_path.
[  158.007476][   T43] usb 2-1: Using ep0 maxpacket: 8
[  158.254582][   T43] usb 2-1: config 162 has an invalid interface number: 97 but max is 0
[  158.273213][   T43] usb 2-1: config 162 has no interface number 0
[  158.288290][ T5921] usb 4-1: USB disconnect, device number 14
[  158.300154][   T43] usb 2-1: config 162 interface 97 has no altsetting 0
[  158.406685][   T43] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  158.416031][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.424229][   T43] usb 2-1: Product: syz
[  158.501001][   T43] usb 2-1: Manufacturer: syz
[  158.531290][   T43] usb 2-1: SerialNumber: syz
[  158.761813][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'.
[  158.777432][ T6916] netlink: 156 bytes leftover after parsing attributes in process `syz.0.271'.
[  158.788085][ T6893] openvswitch: netlink: Flow actions attr not present in new flow.
[  158.866753][ T5903] IPVS: starting estimator thread 0...
[  158.918600][ T6916] netlink: 72 bytes leftover after parsing attributes in process `syz.0.271'.
[  159.066301][ T6915] IPVS: using max 34 ests per chain, 81600 per kthread
[  159.656019][   T43] metro_usb 2-1:162.97: Metrologic USB to Serial converter detected
[  159.914119][   T43] usb 2-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  159.952292][ T6931] delete_channel: no stack
[  159.961596][   T43] usb 2-1: USB disconnect, device number 8
[  160.168413][   T43] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  160.427522][   T43] metro_usb 2-1:162.97: device disconnected
[  160.926167][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  161.121192][   T43] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  161.154498][   T43] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  161.243584][ T6940] input: syz1 as /devices/virtual/input/input13
[  161.334765][   T43] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  161.379511][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.493116][ T6942] netlink: 'syz.4.275': attribute type 1 has an invalid length.
[  161.612564][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  161.723861][   T43] usb 2-1: invalid MIDI out EP 0
[  161.930883][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.941306][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.050798][   T43] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  162.783457][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'.
[  162.845910][ T6962] FAULT_INJECTION: forcing a failure.
[  162.845910][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.861178][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.2.282 Not tainted syzkaller #0 PREEMPT(full) 
[  162.861200][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  162.861210][ T6962] Call Trace:
[  162.861217][ T6962]  <TASK>
[  162.861224][ T6962]  dump_stack_lvl+0x189/0x250
[  162.861250][ T6962]  ? __pfx____ratelimit+0x10/0x10
[  162.861272][ T6962]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.861292][ T6962]  ? __pfx__printk+0x10/0x10
[  162.861308][ T6962]  ? __might_fault+0xb0/0x130
[  162.861337][ T6962]  should_fail_ex+0x414/0x560
[  162.861363][ T6962]  _copy_from_user+0x2d/0xb0
[  162.861383][ T6962]  get_compat_msghdr+0xad/0x4a0
[  162.861406][ T6962]  ? __pfx_get_compat_msghdr+0x10/0x10
[  162.861436][ T6962]  ___sys_sendmsg+0x193/0x2a0
[  162.861457][ T6962]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.861519][ T6962]  ? __fget_files+0x2a/0x420
[  162.861535][ T6962]  ? __fget_files+0x3a0/0x420
[  162.861561][ T6962]  __sys_sendmsg+0x164/0x220
[  162.861580][ T6962]  ? __pfx___sys_sendmsg+0x10/0x10
[  162.861607][ T6962]  ? __pfx_ksys_write+0x10/0x10
[  162.861632][ T6962]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  162.861657][ T6962]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.861682][ T6962]  __do_fast_syscall_32+0xb6/0x2b0
[  162.861704][ T6962]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.861729][ T6962]  do_fast_syscall_32+0x34/0x80
[  162.861750][ T6962]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  162.861769][ T6962] RIP: 0023:0xf701d539
[  162.861782][ T6962] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  162.861794][ T6962] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  162.861812][ T6962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  162.861823][ T6962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  162.861833][ T6962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  162.861842][ T6962] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  162.861852][ T6962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  162.861878][ T6962]  </TASK>
[  163.079260][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.561013][ T5942] usb 2-1: USB disconnect, device number 9
[  163.636205][  T855] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  164.176852][  T855] usb 4-1: Using ep0 maxpacket: 16
[  164.187937][  T855] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  164.319871][ T6986] 
: renamed from erspan0 (while UP)
[  164.358750][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  164.383115][  T855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  164.404185][  T855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.421694][  T855] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  164.536203][  T855] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  164.556141][  T855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.574314][  T855] usb 4-1: Product: syz
[  164.642813][  T855] usb 4-1: Manufacturer: syz
[  164.658090][  T855] usb 4-1: SerialNumber: syz
[  164.667834][  T855] usb 4-1: config 0 descriptor??
[  164.684436][ T6973] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  164.857166][  T855] mcba_usb 4-1:0.0 can0: couldn't setup read URBs
[  164.876148][  T855] mcba_usb 4-1:0.0 can0: couldn't start device: -90
[  164.900468][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'.
[  165.128090][  T855] mcba_usb 4-1:0.0: probe with driver mcba_usb failed with error -90
[  165.258731][  T855] usb 4-1: USB disconnect, device number 15
[  165.456399][ T5826] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  165.646971][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  165.702798][ T6996] netlink: 168 bytes leftover after parsing attributes in process `syz.3.292'.
[  165.724947][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61
[  165.743375][ T5826] usb 3-1: can't read configurations, error -61
[  165.906743][ T5826] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  165.971050][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  165.988184][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.054448][ T7003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  166.096148][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  166.110402][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61
[  166.119210][ T5826] usb 3-1: can't read configurations, error -61
[  166.141373][ T5826] usb usb3-port1: attempt power cycle
[  166.196171][  T855] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  166.217701][ T7009] FAULT_INJECTION: forcing a failure.
[  166.217701][ T7009] name failslab, interval 1, probability 0, space 0, times 0
[  166.230917][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.4.297 Not tainted syzkaller #0 PREEMPT(full) 
[  166.230938][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  166.230947][ T7009] Call Trace:
[  166.230953][ T7009]  <TASK>
[  166.230960][ T7009]  dump_stack_lvl+0x189/0x250
[  166.230985][ T7009]  ? __pfx____ratelimit+0x10/0x10
[  166.231006][ T7009]  ? __pfx_dump_stack_lvl+0x10/0x10
[  166.231027][ T7009]  ? __pfx__printk+0x10/0x10
[  166.231049][ T7009]  ? __pfx___might_resched+0x10/0x10
[  166.231066][ T7009]  ? fs_reclaim_acquire+0x7d/0x100
[  166.231092][ T7009]  should_fail_ex+0x414/0x560
[  166.231120][ T7009]  should_failslab+0xa8/0x100
[  166.231139][ T7009]  kmem_cache_alloc_node_noprof+0x77/0x710
[  166.231161][ T7009]  ? __alloc_skb+0x112/0x2d0
[  166.231176][ T7009]  ? netlink_autobind+0xdb/0x300
[  166.231197][ T7009]  __alloc_skb+0x112/0x2d0
[  166.231227][ T7009]  netlink_sendmsg+0x5c6/0xb30
[  166.231256][ T7009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.231275][ T7009]  ? __import_iovec+0x5d4/0x7f0
[  166.231291][ T7009]  ? aa_sock_msg_perm+0xf1/0x1d0
[  166.231307][ T7009]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  166.231316][ T7009]  ? __pfx_netlink_sendmsg+0x10/0x10
[  166.231325][ T7009]  __sock_sendmsg+0x21c/0x270
[  166.231345][ T7009]  ____sys_sendmsg+0x505/0x830
[  166.231358][ T7009]  ? __pfx_____sys_sendmsg+0x10/0x10
[  166.231376][ T7009]  ___sys_sendmsg+0x21f/0x2a0
[  166.231387][ T7009]  ? __pfx____sys_sendmsg+0x10/0x10
[  166.231414][ T7009]  ? __fget_files+0x2a/0x420
[  166.231423][ T7009]  ? __fget_files+0x3a0/0x420
[  166.231437][ T7009]  __sys_sendmsg+0x164/0x220
[  166.231448][ T7009]  ? __pfx___sys_sendmsg+0x10/0x10
[  166.231462][ T7009]  ? __pfx_ksys_write+0x10/0x10
[  166.231476][ T7009]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  166.231490][ T7009]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.231504][ T7009]  __do_fast_syscall_32+0xb6/0x2b0
[  166.231518][ T7009]  ? lockdep_hardirqs_on+0x9c/0x150
[  166.231532][ T7009]  do_fast_syscall_32+0x34/0x80
[  166.231544][ T7009]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.231556][ T7009] RIP: 0023:0xf70bd539
[  166.231565][ T7009] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  166.231572][ T7009] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  166.231583][ T7009] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200
[  166.231589][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  166.231595][ T7009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.231600][ T7009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  166.231605][ T7009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.231619][ T7009]  </TASK>
[  166.508602][    C1] vkms_vblank_simulate: vblank timer overrun
[  166.586590][ T5826] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  166.596500][  T855] usb 2-1: Using ep0 maxpacket: 32
[  166.603667][  T855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.614659][  T855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.617163][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  166.624670][  T855] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  166.638906][  T855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.657742][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61
[  166.658329][  T855] usb 2-1: config 0 descriptor??
[  166.685920][ T5826] usb 3-1: can't read configurations, error -61
[  166.700435][ T7013] delete_channel: no stack
[  166.826471][ T5826] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  166.876929][ T5826] usb 3-1: Using ep0 maxpacket: 8
[  166.895561][ T5826] usb 3-1: unable to read config index 0 descriptor/start: -61
[  166.903895][ T5826] usb 3-1: can't read configurations, error -61
[  166.911496][ T5826] usb usb3-port1: unable to enumerate USB device
[  166.966165][ T5942] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  167.220627][  T855] ft260 0003:0403:6030.0002: unknown main item tag 0x7
[  167.359352][ T5942] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  167.371625][ T5942] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  167.383219][ T5942] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  167.422589][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.450935][  T855] ft260 0003:0403:6030.0002: chip code: 6424 8183
[  167.460930][ T5942] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  167.552884][ T5942] usb 5-1: invalid MIDI out EP 0
[  167.656000][  T855] ft260 0003:0403:6030.0002: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0
[  167.824758][ T7013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.833738][ T7013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.869488][  T855] ft260 0003:0403:6030.0002: failed to retrieve status: -71, no wakeup
[  167.928144][  T855] ft260 0003:0403:6030.0002: failed to retrieve status: -71
[  167.948010][  T855] ft260 0003:0403:6030.0002: failed to reset I2C controller: -71
[  168.015597][ T5942] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  168.050135][  T855] usb 2-1: USB disconnect, device number 10
[  169.076392][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'.
[  169.320703][ T7040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'.
[  169.476229][ T5942] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  169.729735][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.762394][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.808046][ T5942] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  169.832179][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.851564][ T5942] usb 1-1: config 0 descriptor??
[  170.319488][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  170.344063][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  170.355266][ T7055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  170.456834][ T5921] usb 5-1: USB disconnect, device number 9
[  170.533842][ T7060] FAULT_INJECTION: forcing a failure.
[  170.533842][ T7060] name failslab, interval 1, probability 0, space 0, times 0
[  170.546941][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.4.311 Not tainted syzkaller #0 PREEMPT(full) 
[  170.546964][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  170.546972][ T7060] Call Trace:
[  170.546979][ T7060]  <TASK>
[  170.546987][ T7060]  dump_stack_lvl+0x189/0x250
[  170.547013][ T7060]  ? __pfx____ratelimit+0x10/0x10
[  170.547037][ T7060]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.547058][ T7060]  ? __pfx__printk+0x10/0x10
[  170.547080][ T7060]  ? __pfx___might_resched+0x10/0x10
[  170.547096][ T7060]  ? fs_reclaim_acquire+0x7d/0x100
[  170.547122][ T7060]  should_fail_ex+0x414/0x560
[  170.547149][ T7060]  should_failslab+0xa8/0x100
[  170.547167][ T7060]  __kmalloc_noprof+0xcb/0x7f0
[  170.547188][ T7060]  ? alloc_pipe_info+0x1fd/0x4d0
[  170.547216][ T7060]  alloc_pipe_info+0x1fd/0x4d0
[  170.547238][ T7060]  splice_direct_to_actor+0xa5d/0xcc0
[  170.547278][ T7060]  ? __pfx_aa_file_perm+0x10/0x10
[  170.547292][ T7060]  ? __lock_acquire+0xab9/0xd20
[  170.547307][ T7060]  ? __pfx_direct_splice_actor+0x10/0x10
[  170.547329][ T7060]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  170.547358][ T7060]  do_splice_direct+0x181/0x270
[  170.547375][ T7060]  ? __pfx_do_splice_direct+0x10/0x10
[  170.547387][ T7060]  ? common_file_perm+0x1b5/0x230
[  170.547400][ T7060]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  170.547410][ T7060]  ? bpf_lsm_file_permission+0x9/0x20
[  170.547420][ T7060]  ? security_file_permission+0x75/0x290
[  170.547432][ T7060]  ? rw_verify_area+0x255/0x4d0
[  170.547446][ T7060]  do_sendfile+0x4da/0x7e0
[  170.547461][ T7060]  ? __pfx_do_sendfile+0x10/0x10
[  170.547473][ T7060]  ? __might_fault+0xb0/0x130
[  170.547488][ T7060]  __ia32_compat_sys_sendfile+0x120/0x1d0
[  170.547500][ T7060]  __do_fast_syscall_32+0xb6/0x2b0
[  170.547514][ T7060]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.547529][ T7060]  do_fast_syscall_32+0x34/0x80
[  170.547542][ T7060]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  170.547553][ T7060] RIP: 0023:0xf70bd539
[  170.547563][ T7060] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  170.547571][ T7060] RSP: 002b:00000000f548c55c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[  170.547582][ T7060] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000007
[  170.547588][ T7060] RDX: 0000000080000180 RSI: 0000000080000504 RDI: 0000000000000000
[  170.547594][ T7060] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  170.547599][ T7060] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  170.547604][ T7060] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  170.547618][ T7060]  </TASK>
[  170.822401][ T5942] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  170.854362][ T5942] hid-led 0003:27B8:01ED.0003: ThingM blink(1) initialized
[  170.948376][ T7064] netlink: 128 bytes leftover after parsing attributes in process `syz.1.312'.
[  170.966985][ T7064] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  171.023705][   T43] usb 1-1: USB disconnect, device number 10
[  171.112782][ T7063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'.
[  171.140426][ T7061] fido_id[7061]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  171.455227][ T7070] netlink: 116 bytes leftover after parsing attributes in process `syz.1.314'.
[  171.646194][ T5943] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  171.808948][ T7091] input: syz1 as /devices/virtual/input/input14
[  171.883585][ T7087] netlink: 72 bytes leftover after parsing attributes in process `syz.2.319'.
[  171.892811][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[  172.020152][ T7091] netlink: 'syz.3.320': attribute type 1 has an invalid length.
[  172.052536][ T7093] input: syz1 as /devices/virtual/input/input15
[  172.077169][ T7091] gretap1: entered allmulticast mode
[  172.143749][ T5943] usb 5-1: Using ep0 maxpacket: 8
[  172.205118][ T5943] usb 5-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  172.215870][ T5943] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  172.225387][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.292311][ T5921] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  172.352765][ T5943] hub 5-1:32.0: bad descriptor, ignoring hub
[  172.359238][ T5943] hub 5-1:32.0: probe with driver hub failed with error -5
[  172.386608][ T7090] netlink: 'syz.0.321': attribute type 1 has an invalid length.
[  172.506245][ T5921] usb 2-1: Using ep0 maxpacket: 32
[  172.797068][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.813958][ T5943] usb 5-1: USB disconnect, device number 10
[  172.822409][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.836173][ T5921] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  172.847885][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.866776][ T5921] usb 2-1: config 0 descriptor??
[  173.216153][ T5943] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  173.628917][ T5943] usb 5-1: device descriptor read/64, error -71
[  173.886216][ T5943] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  174.046895][ T5943] usb 5-1: device descriptor read/64, error -71
[  174.159128][ T5943] usb usb5-port1: attempt power cycle
[  174.886484][ T5943] usb usb5-port1: Cannot enable. Maybe the USB cable is bad?
[  175.009725][ T5921] usb 2-1: string descriptor 0 read error: -71
[  175.041067][ T5921] usbhid 2-1:0.0: can't add hid device: -71
[  175.056690][ T5921] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  175.087656][ T5943] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  175.194275][ T5921] usb 2-1: USB disconnect, device number 11
[  175.208506][ T7126] netlink: 'syz.3.327': attribute type 1 has an invalid length.
[  175.219159][ T5943] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  175.229518][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.237621][ T5943] usb 5-1: Product: syz
[  175.241905][ T5943] usb 5-1: Manufacturer: syz
[  175.246569][ T5943] usb 5-1: SerialNumber: syz
[  175.258294][ T5943] usb 5-1: config 0 descriptor??
[  175.270990][ T5943] gspca_main: sunplus-2.14.0 probing 055f:c230
[  175.477765][ T7133] ALSA: mixer_oss: invalid OSS volume 'PHONEc�AOUT'
[  175.715731][ T7126] bond1: entered promiscuous mode
[  175.720934][ T7126] bond1: entered allmulticast mode
[  175.729935][ T7138] netlink: 'syz.0.331': attribute type 13 has an invalid length.
[  175.739227][ T7126] 8021q: adding VLAN 0 to HW filter on device bond1
[  175.786342][ T5943] gspca_sunplus: reg_r err -110
[  175.791332][ T5943] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  176.171840][ T5943] usb 5-1: USB disconnect, device number 14
[  176.195265][ T7145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.333'.
[  176.204552][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[  176.233703][ T7145] netlink: 72 bytes leftover after parsing attributes in process `syz.1.333'.
[  176.243237][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.333'.
[  176.832368][ T7151] FAULT_INJECTION: forcing a failure.
[  176.832368][ T7151] name failslab, interval 1, probability 0, space 0, times 0
[  176.898730][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) 
[  176.898755][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  176.898765][ T7151] Call Trace:
[  176.898774][ T7151]  <TASK>
[  176.898781][ T7151]  dump_stack_lvl+0x189/0x250
[  176.898807][ T7151]  ? __pfx____ratelimit+0x10/0x10
[  176.898827][ T7151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  176.898847][ T7151]  ? __pfx__printk+0x10/0x10
[  176.898869][ T7151]  ? __pfx___might_resched+0x10/0x10
[  176.898885][ T7151]  ? fs_reclaim_acquire+0x7d/0x100
[  176.898914][ T7151]  should_fail_ex+0x414/0x560
[  176.898940][ T7151]  should_failslab+0xa8/0x100
[  176.898958][ T7151]  kmem_cache_alloc_node_noprof+0x77/0x710
[  176.898981][ T7151]  ? __alloc_skb+0x112/0x2d0
[  176.898995][ T7151]  ? netlink_autobind+0xdb/0x300
[  176.899016][ T7151]  __alloc_skb+0x112/0x2d0
[  176.899040][ T7151]  netlink_sendmsg+0x5c6/0xb30
[  176.899061][ T7151]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.899077][ T7151]  ? __import_iovec+0x5d4/0x7f0
[  176.899094][ T7151]  ? aa_sock_msg_perm+0xf1/0x1d0
[  176.899109][ T7151]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  176.899119][ T7151]  ? __pfx_netlink_sendmsg+0x10/0x10
[  176.899128][ T7151]  __sock_sendmsg+0x21c/0x270
[  176.899144][ T7151]  ____sys_sendmsg+0x505/0x830
[  176.899157][ T7151]  ? __pfx_____sys_sendmsg+0x10/0x10
[  176.899175][ T7151]  ___sys_sendmsg+0x21f/0x2a0
[  176.899187][ T7151]  ? __pfx____sys_sendmsg+0x10/0x10
[  176.899214][ T7151]  ? __fget_files+0x2a/0x420
[  176.899223][ T7151]  ? __fget_files+0x3a0/0x420
[  176.899237][ T7151]  __sys_sendmsg+0x164/0x220
[  176.899248][ T7151]  ? __pfx___sys_sendmsg+0x10/0x10
[  176.899262][ T7151]  ? __pfx_ksys_write+0x10/0x10
[  176.899277][ T7151]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  176.899298][ T7151]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.899312][ T7151]  __do_fast_syscall_32+0xb6/0x2b0
[  176.899326][ T7151]  ? lockdep_hardirqs_on+0x9c/0x150
[  176.899340][ T7151]  do_fast_syscall_32+0x34/0x80
[  176.899353][ T7151]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  176.899364][ T7151] RIP: 0023:0xf7fd3539
[  176.899377][ T7151] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  176.899390][ T7151] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  176.899408][ T7151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  176.899419][ T7151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  176.899428][ T7151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.899436][ T7151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  176.899445][ T7151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.899470][ T7151]  </TASK>
[  178.786773][ T7173] FAULT_INJECTION: forcing a failure.
[  178.786773][ T7173] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.897325][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT(full) 
[  178.897350][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  178.897361][ T7173] Call Trace:
[  178.897368][ T7173]  <TASK>
[  178.897376][ T7173]  dump_stack_lvl+0x189/0x250
[  178.897403][ T7173]  ? __pfx____ratelimit+0x10/0x10
[  178.897423][ T7173]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.897445][ T7173]  ? __pfx__printk+0x10/0x10
[  178.897476][ T7173]  should_fail_ex+0x414/0x560
[  178.897505][ T7173]  strncpy_from_user+0x36/0x290
[  178.897533][ T7173]  getname_flags+0xf3/0x540
[  178.897555][ T7173]  __ia32_compat_sys_execve+0x79/0xb0
[  178.897579][ T7173]  __do_fast_syscall_32+0xb6/0x2b0
[  178.897603][ T7173]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.897630][ T7173]  do_fast_syscall_32+0x34/0x80
[  178.897652][ T7173]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  178.897671][ T7173] RIP: 0023:0xf70bd539
[  178.897686][ T7173] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  178.897700][ T7173] RSP: 002b:00000000f546b55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  178.897718][ T7173] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000
[  178.897730][ T7173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  178.897740][ T7173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  178.897750][ T7173] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  178.897761][ T7173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  178.897788][ T7173]  </TASK>
[  179.414126][   T30] kauditd_printk_skb: 65 callbacks suppressed
[  179.414143][   T30] audit: type=1326 audit(1762811540.967:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  179.442602][    C1] vkms_vblank_simulate: vblank timer overrun
[  179.912438][   T30] audit: type=1326 audit(1762811540.977:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.026520][ T7195] delete_channel: no stack
[  180.081377][   T30] audit: type=1326 audit(1762811540.977:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.159099][   T30] audit: type=1326 audit(1762811540.977:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.402040][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  180.452714][   T30] audit: type=1326 audit(1762811540.977:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.474526][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.569118][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  180.581302][   T30] audit: type=1326 audit(1762811540.977:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.631959][   T30] audit: type=1326 audit(1762811540.977:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.693709][ T7206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.349'.
[  180.724914][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  180.738128][ T7206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.349'.
[  180.747104][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'.
[  180.772747][   T30] audit: type=1326 audit(1762811540.977:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.794464][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.823003][    T9] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  180.902247][   T30] audit: type=1326 audit(1762811540.977:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.924226][    C1] vkms_vblank_simulate: vblank timer overrun
[  180.956902][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  180.969561][   T30] audit: type=1326 audit(1762811540.977:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7183 comm="syz.2.345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf701d539 code=0x7ffc0000
[  180.991445][    C1] vkms_vblank_simulate: vblank timer overrun
[  181.049804][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.122938][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  181.143008][    T9] usb 2-1: invalid MIDI out EP 0
[  181.315249][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.325543][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.587792][    T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  182.770435][   T43] usb 2-1: USB disconnect, device number 12
[  183.602243][ T7228] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode
[  183.618464][ T7228] macvtap1: entered allmulticast mode
[  183.627190][ T7228] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  183.755775][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.841988][ T7236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.903710][ T7238] veth0_to_team: entered promiscuous mode
[  184.300656][ T7256] netlink: 156 bytes leftover after parsing attributes in process `syz.2.357'.
[  184.425746][ T7258] netlink: 156 bytes leftover after parsing attributes in process `syz.0.367'.
[  184.656381][ T7256] netlink: 72 bytes leftover after parsing attributes in process `syz.2.357'.
[  184.716168][   T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  184.943934][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'.
[  184.953006][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'.
[  184.964581][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.370'.
[  185.267019][   T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  185.276263][ T7270] netlink: 20 bytes leftover after parsing attributes in process `syz.4.370'.
[  185.370009][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.379339][   T43] usb 1-1: Product: syz
[  185.383873][   T43] usb 1-1: Manufacturer: syz
[  185.394446][   T43] usb 1-1: SerialNumber: syz
[  185.756145][ T5943] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  185.958916][ T5943] usb 2-1: Using ep0 maxpacket: 8
[  185.982026][ T5943] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  185.991463][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.999539][ T5943] usb 2-1: Product: syz
[  186.006635][ T5943] usb 2-1: Manufacturer: syz
[  186.011238][ T5943] usb 2-1: SerialNumber: syz
[  186.019491][ T5943] usb 2-1: config 0 descriptor??
[  186.041769][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  186.044378][ T5943] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  186.082276][ T5943] usb 2-1: setting power ON
[  186.092377][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  186.115181][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  186.115219][ T5943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  186.174791][ T5943] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  186.183555][ T5943] usb 2-1: media controller created
[  186.201907][   T43] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  186.325322][   T43] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  186.325885][ T5943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  186.475920][ T7281] input: syz1 as /devices/virtual/input/input16
[  186.622364][ T7281] netlink: 'syz.3.372': attribute type 1 has an invalid length.
[  186.674837][ T7281] gretap2: entered allmulticast mode
[  186.765559][ T5943] usb 2-1: selecting invalid altsetting 6
[  186.773677][ T5943] usb 2-1: digital interface selection failed (-22)
[  186.791968][ T5943] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  186.820176][ T5943] usb 2-1: setting power OFF
[  186.828735][ T5943] dvb-usb: bulk message failed: -22 (2/0)
[  186.842428][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  186.861291][ T5943] (NULL device *): no alternate interface
[  186.890768][   T43] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  186.932195][ T5943] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  187.057345][   T43] usb 5-1: too many configurations: 33, using maximum allowed: 8
[  187.335923][   T43] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8
[  187.349232][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.419586][   T43] usb 5-1: Product: syz
[  187.424145][ T7288] macvtap2: entered allmulticast mode
[  187.426524][   T43] usb 5-1: Manufacturer: syz
[  187.499519][   T43] usb 5-1: SerialNumber: syz
[  187.564755][   T43] usb 5-1: config 0 descriptor??
[  187.591004][   T43] hub 5-1:0.0: Invalid hub with more than one config or interface
[  187.618434][   T43] hub 5-1:0.0: probe with driver hub failed with error -22
[  187.642673][   T43] go7007-loader 5-1:0.0: can't handle multiple config
[  187.667390][   T43] go7007-loader 5-1:0.0: probe failed
[  188.002239][ T7299] input: syz1 as /devices/virtual/input/input17
[  188.117364][ T7299] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[  188.302111][ T5943] usb 5-1: USB disconnect, device number 15
[  188.621292][ T5943] usb 1-1: USB disconnect, device number 11
[  189.160343][ T5833] usb 2-1: USB disconnect, device number 13
[  190.310502][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[  190.320608][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'.
[  190.404772][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'.
[  190.413896][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.383'.
[  191.670143][ T7342] netlink: 168 bytes leftover after parsing attributes in process `syz.4.386'.
[  193.068138][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.075551][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.163772][ T7349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.173009][ T7349] batman_adv: batadv0: Removing interface: batadv_slave_1
[  193.946130][ T5833] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  194.357806][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.364224][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.777869][ T5833] usb 3-1: Using ep0 maxpacket: 8
[  194.843210][ T5833] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  194.865248][ T5833] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  194.876295][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.885043][ T5833] usb 3-1: Product: syz
[  194.891577][ T5833] usb 3-1: Manufacturer: syz
[  194.896627][ T5833] usb 3-1: SerialNumber: syz
[  194.904381][ T5833] usb 3-1: config 0 descriptor??
[  194.914037][ T5833] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  194.926422][ T5833] usb 3-1: setting power ON
[  194.931375][ T5833] dvb-usb: bulk message failed: -22 (2/0)
[  194.948707][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  194.987150][ T5833] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  195.015598][ T5833] usb 3-1: media controller created
[  195.121775][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  195.170578][ T7381] netlink: 168 bytes leftover after parsing attributes in process `syz.0.398'.
[  195.238789][ T5833] usb 3-1: selecting invalid altsetting 6
[  195.295824][ T5833] usb 3-1: digital interface selection failed (-22)
[  195.323197][ T5833] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  195.384883][ T5833] usb 3-1: setting power OFF
[  195.397497][ T5833] dvb-usb: bulk message failed: -22 (2/0)
[  195.412093][ T5833] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  195.446945][ T5833] (NULL device *): no alternate interface
[  196.033932][ T7396] sctp: [Deprecated]: syz.3.403 (pid 7396) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.033932][ T7396] Use struct sctp_sack_info instead
[  196.206742][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[  196.215678][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'.
[  196.250468][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.404'.
[  196.272276][ T7401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.404'.
[  196.997077][ T5833] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  197.111504][ T5833] usb 3-1: USB disconnect, device number 13
[  197.227675][ T7406] syz_tun: entered allmulticast mode
[  197.250225][ T7405] syz_tun: left allmulticast mode
[  197.298634][ T7410] delete_channel: no stack
[  197.598169][ T5903] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  197.608293][ T7413] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  197.821911][ T7418] netlink: 168 bytes leftover after parsing attributes in process `syz.4.410'.
[  197.839687][ T5903] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  197.860677][ T5903] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  197.903533][ T5903] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  197.925779][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.978374][ T5903] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  197.993776][ T5903] usb 2-1: invalid MIDI out EP 0
[  198.055705][ T7426] Invalid logical block size (34)
[  198.212025][ T7410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.223335][ T7410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.510415][ T6009] udevd[6009]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.559567][   T60] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  198.589521][ T5903] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  199.146495][ T5921] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  199.388884][ T5903] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  199.468085][ T5921] usb 3-1: Using ep0 maxpacket: 8
[  199.501901][ T5921] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  199.518708][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  199.528532][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.551961][ T5921] usb 3-1: Product: syz
[  199.561519][ T5921] usb 3-1: Manufacturer: syz
[  199.572093][ T5921] usb 3-1: SerialNumber: syz
[  199.594603][ T5921] usb 3-1: config 0 descriptor??
[  199.831018][ T5921] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  199.857829][ T7451] FAULT_INJECTION: forcing a failure.
[  199.857829][ T7451] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.876165][ T5903] usb 5-1: Using ep0 maxpacket: 32
[  199.903265][ T5921] usb 3-1: setting power ON
[  199.908216][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.927922][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.947100][ T5921] dvb-usb: bulk message failed: -22 (2/0)
[  200.013921][ T7451] CPU: 1 UID: 0 PID: 7451 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT(full) 
[  200.013939][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  200.013948][ T7451] Call Trace:
[  200.013953][ T7451]  <TASK>
[  200.013958][ T7451]  dump_stack_lvl+0x189/0x250
[  200.013983][ T7451]  ? __pfx____ratelimit+0x10/0x10
[  200.013996][ T7451]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.014008][ T7451]  ? __pfx__printk+0x10/0x10
[  200.014024][ T7451]  should_fail_ex+0x414/0x560
[  200.014041][ T7451]  _copy_to_user+0x31/0xb0
[  200.014054][ T7451]  drm_ioctl+0x6a4/0xb10
[  200.014066][ T7451]  ? __lock_acquire+0xab9/0xd20
[  200.014078][ T7451]  ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10
[  200.014094][ T7451]  ? __pfx_drm_ioctl+0x10/0x10
[  200.014112][ T7451]  ? __fget_files+0x3a0/0x420
[  200.014121][ T7451]  ? __fget_files+0x2a/0x420
[  200.014129][ T7451]  ? drm_compat_ioctl+0x112/0x330
[  200.014144][ T7451]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  200.014157][ T7451]  __ia32_compat_sys_ioctl+0x543/0x840
[  200.014171][ T7451]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  200.014184][ T7451]  ? __fget_files+0x3a0/0x420
[  200.014195][ T7451]  ? fput+0xa0/0xd0
[  200.014206][ T7451]  ? ksys_write+0x22a/0x250
[  200.014218][ T7451]  ? exc_page_fault+0x82/0x100
[  200.014231][ T7451]  ? __pfx_ksys_write+0x10/0x10
[  200.014245][ T7451]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  200.014258][ T7451]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.014272][ T7451]  __do_fast_syscall_32+0xb6/0x2b0
[  200.014286][ T7451]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.014300][ T7451]  do_fast_syscall_32+0x34/0x80
[  200.014313][ T7451]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  200.014325][ T7451] RIP: 0023:0xf70bd539
[  200.014342][ T7451] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  200.014350][ T7451] RSP: 002b:00000000f548c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  200.014366][ T7451] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c00c642d
[  200.014373][ T7451] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  200.014379][ T7451] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  200.014384][ T7451] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  200.014390][ T7451] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  200.014404][ T7451]  </TASK>
[  200.298884][ T5903] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  200.308088][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.655501][ T5903] usb 5-1: config 0 descriptor??
[  200.667595][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  200.715258][ T5921] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  200.763322][ T5921] usb 3-1: media controller created
[  200.829663][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.906279][ T7456] loop8: detected capacity change from 0 to 8
[  200.990523][ T5921] usb 3-1: selecting invalid altsetting 6
[  201.015728][ T7452] ------------[ cut here ]------------
[  201.021441][ T7452] WARNING: CPU: 1 PID: 7452 at drivers/gpu/drm/drm_prime.c:223 drm_prime_destroy_file_private+0x4b/0x60
[  201.022875][ T5921] usb 3-1: digital interface selection failed (-22)
[  201.032725][ T7452] Modules linked in:
[  201.041406][ T5921] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  201.043318][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) 
[  201.043340][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.043352][ T7452] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60
[  201.043383][ T7452] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 9d 66 f2 fc 48 83 3b 00 75 0c e8 e2 af 8c fc 5b c3 cc cc cc cc cc e8 d6 af 8c fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90
[  201.043397][ T7452] RSP: 0018:ffffc9000595fc40 EFLAGS: 00010293
[  201.043413][ T7452] RAX: ffffffff853363fa RBX: ffff88807acff410 RCX: ffff888024098000
[  201.043426][ T7452] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807acff380
[  201.043457][ T7452] RBP: ffff88807acff2c8 R08: ffffc9000595fbc7 R09: 1ffff92000b2bf78
[  201.043470][ T7452] R10: dffffc0000000000 R11: fffff52000b2bf79 R12: dffffc0000000000
[  201.043482][ T7452] R13: dead000000000100 R14: 0000000000000000 R15: ffff88807acff2d8
[  201.043495][ T7452] FS:  0000000000000000(0000) GS:ffff88812623b000(0063) knlGS:0000000058203440
[  201.093432][ T5992] Dev loop8: unable to read RDB block 8
[  201.098574][ T7452] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  201.098592][ T7452] CR2: 000000008017e018 CR3: 000000003255c000 CR4: 00000000003526f0
[  201.098615][ T7452] Call Trace:
[  201.098623][ T7452]  <TASK>
[  201.098632][ T7452]  drm_file_free+0x7f2/0xa00
[  201.185072][ T7452]  drm_release+0x2de/0x3f0
[  201.189519][ T7452]  ? __pfx_drm_release+0x10/0x10
[  201.194550][ T7452]  __fput+0x44c/0xa70
[  201.198612][ T7452]  task_work_run+0x1d4/0x260
[  201.203214][ T7452]  ? __pfx_task_work_run+0x10/0x10
[  201.208376][ T7452]  ? exit_to_user_mode_loop+0x40/0x130
[  201.213842][ T7452]  exit_to_user_mode_loop+0xe9/0x130
[  201.219164][ T7452]  __do_fast_syscall_32+0x1f4/0x2b0
[  201.224380][ T7452]  do_fast_syscall_32+0x34/0x80
[  201.229347][ T7452]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  201.235675][ T7452] RIP: 0023:0xf70bd539
[  201.239821][ T7452] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  201.259437][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.265688][ T7452] RSP: 002b:00000000f75afaec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
[  201.274147][ T7452] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
[  201.282170][ T7452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  201.290195][ T7452] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  201.298714][ T7452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  201.306710][ T7452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.315012][ T7452]  </TASK>
[  201.318082][ T7452] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  201.325436][ T7452] CPU: 1 UID: 0 PID: 7452 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(full) 
[  201.334610][ T7452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  201.344656][ T7452] Call Trace:
[  201.347918][ T7452]  <TASK>
[  201.350913][ T7452]  dump_stack_lvl+0x99/0x250
[  201.355485][ T7452]  ? __asan_memcpy+0x40/0x70
[  201.360138][ T7452]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.365313][ T7452]  ? __pfx__printk+0x10/0x10
[  201.369886][ T7452]  vpanic+0x237/0x6d0
[  201.373848][ T7452]  ? __pfx_vpanic+0x10/0x10
[  201.378343][ T7452]  panic+0xb9/0xc0
[  201.382043][ T7452]  ? __pfx_panic+0x10/0x10
[  201.386441][ T7452]  __warn+0x31b/0x4b0
[  201.390492][ T7452]  ? drm_prime_destroy_file_private+0x4b/0x60
[  201.396538][ T7452]  ? drm_prime_destroy_file_private+0x4b/0x60
[  201.402680][ T7452]  report_bug+0x2be/0x4f0
[  201.407006][ T7452]  ? drm_prime_destroy_file_private+0x4b/0x60
[  201.413051][ T7452]  ? drm_prime_destroy_file_private+0x4b/0x60
[  201.419117][ T7452]  ? drm_prime_destroy_file_private+0x4d/0x60
[  201.425251][ T7452]  handle_bug+0x84/0x160
[  201.429474][ T7452]  exc_invalid_op+0x1a/0x50
[  201.433958][ T7452]  asm_exc_invalid_op+0x1a/0x20
[  201.438800][ T7452] RIP: 0010:drm_prime_destroy_file_private+0x4b/0x60
[  201.445988][ T7452] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 9d 66 f2 fc 48 83 3b 00 75 0c e8 e2 af 8c fc 5b c3 cc cc cc cc cc e8 d6 af 8c fc 90 <0f> 0b 90 5b c3 cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90
[  201.465596][ T7452] RSP: 0018:ffffc9000595fc40 EFLAGS: 00010293
[  201.471655][ T7452] RAX: ffffffff853363fa RBX: ffff88807acff410 RCX: ffff888024098000
[  201.479611][ T7452] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88807acff380
[  201.487564][ T7452] RBP: ffff88807acff2c8 R08: ffffc9000595fbc7 R09: 1ffff92000b2bf78
[  201.495529][ T7452] R10: dffffc0000000000 R11: fffff52000b2bf79 R12: dffffc0000000000
[  201.503527][ T7452] R13: dead000000000100 R14: 0000000000000000 R15: ffff88807acff2d8
[  201.511601][ T7452]  ? drm_prime_destroy_file_private+0x4a/0x60
[  201.517665][ T7452]  drm_file_free+0x7f2/0xa00
[  201.522247][ T7452]  drm_release+0x2de/0x3f0
[  201.526661][ T7452]  ? __pfx_drm_release+0x10/0x10
[  201.531592][ T7452]  __fput+0x44c/0xa70
[  201.535569][ T7452]  task_work_run+0x1d4/0x260
[  201.540151][ T7452]  ? __pfx_task_work_run+0x10/0x10
[  201.545263][ T7452]  ? exit_to_user_mode_loop+0x40/0x130
[  201.550727][ T7452]  exit_to_user_mode_loop+0xe9/0x130
[  201.556007][ T7452]  __do_fast_syscall_32+0x1f4/0x2b0
[  201.561231][ T7452]  do_fast_syscall_32+0x34/0x80
[  201.566087][ T7452]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  201.572423][ T7452] RIP: 0023:0xf70bd539
[  201.576483][ T7452] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  201.597121][ T7452] RSP: 002b:00000000f75afaec EFLAGS: 00000206 ORIG_RAX: 00000000000001b4
[  201.605717][ T7452] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e
[  201.613991][ T7452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  201.621971][ T7452] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  201.630025][ T7452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  201.637993][ T7452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  201.645966][ T7452]  </TASK>
[  201.649114][ T7452] Kernel Offset: disabled
[  201.653431][ T7452] Rebooting in 86400 seconds..