last executing test programs:

3m40.530209052s ago: executing program 1 (id=4648):
socket(0x1, 0x1, 0x0)
inotify_init()
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000040)=@rnullb, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x1, 0x0, 0x100000000, 0x1400000000000, 0xbf, 0xd6a9210, 0x5})
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')
ptrace(0x10, r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x1, 0x0, 0x0, 0x0, 0x6, 0x22, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x200000000000000, {}, 0x1}})
ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000000))
ptrace$pokeuser(0x6, r1, 0x378, 0x4)
ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffc)
r8 = dup(r0)
write$binfmt_elf32(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300040000003e03000038000000d6000000977000007e03200007", @ANYRES16=r8], 0x38)
r9 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ip6gre0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0x5, 0x8}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xffff2e17, 0xa7f1, 0x1, 0x1, 0x6, 0x0, 0x7, 0x4, 0x1ff, 0x4, 0x5, 0x21, 0x6, 0x0, 0x8, 0xc4c0}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x50}, 0x4c840)
execveat(r8, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r11 = syz_usb_connect(0x6, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x0)
syz_usb_control_io$hid(r11, 0x0, 0x0)
syz_usb_control_io(r11, 0x0, 0x0)
socket(0x1e, 0x1, 0x0)

3m39.850517539s ago: executing program 1 (id=4650):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x5000000, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5ee17688a8006c000100000000000080000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df01800000000001001c0000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8)

3m39.750783703s ago: executing program 1 (id=4651):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f000000a380)=""/4108, 0x100c}, {&(0x7f00000013c0)=""/232, 0xe8}, {&(0x7f0000002300)=""/187, 0xbb}, {&(0x7f0000002440)=""/161, 0xa1}], 0x4}}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000003340)=""/4084, 0xff4}, {&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f00000014c0)=""/249, 0xf9}, {&(0x7f0000002100)=""/70, 0x46}, {&(0x7f00000023c0)=""/90, 0x5a}, {&(0x7f0000001a80)=""/68, 0x44}], 0x9}, 0x81}], 0x4, 0x0, 0x0)

3m39.74882838s ago: executing program 1 (id=4652):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xfffffffffffffff0)

3m39.654309319s ago: executing program 1 (id=4653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x5e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = dup2(r1, r1)
readv(r2, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)=""/21, 0x15}], 0x2)
write$P9_RREADLINK(r2, &(0x7f00000005c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)
sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010100000000000000000000000920000000080a010100000000000000000a0000020900010073797a31"], 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x4000014)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x67, 0x0, @remote, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x801, 0x763, 0x6, 0x1ff, 0x4}}}}}, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0xc4, 0x5, [{{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x20, r9, 0x605, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20020055)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x10)

3m39.235996672s ago: executing program 1 (id=4655):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0x3000, 0x80a0000, 0x9, 0xe, 0x5, 0x4, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x16, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0xb, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x52, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0x4, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x152690, 0xf, 0x4000, 0x2000, [0x1, 0x1004, 0x6, 0x1000]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x0, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x26, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0xa, 0x5, 0x5, '\x00', 0xa9}, {0x6, 0x6, 0x9}, {0x0, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}})

3m38.71547478s ago: executing program 32 (id=4655):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0})
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x50000, 0x1, 0x9, 0x1, 0xcd, 0x9, 0x6, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0x3000, 0x80a0000, 0x9, 0xe, 0x5, 0x4, 0x4, 0x14, 0x4, 0x5, 0x0, 0x1}, {0x8000000, 0x102f8000, 0x1e, 0x5, 0x16, 0x7, 0x81, 0x3, 0x80, 0x1, 0xe, 0x78}, {0xeeef0000, 0x6000, 0xb, 0x3, 0x6, 0x9, 0xc3, 0x0, 0x0, 0x0, 0x80, 0x2e}, {0x2, 0x2000, 0xa, 0xff, 0x8, 0x8, 0x6, 0x7, 0x8, 0x6, 0x4, 0xfc}, {0x10d000, 0x0, 0x9, 0xb9, 0x6, 0x5, 0x52, 0x6, 0x5, 0x1, 0xd, 0x9}, {0xdddd1000, 0x0, 0x0, 0x1, 0xa, 0x8, 0x4, 0x63, 0x1c, 0x4, 0x1, 0xd}, {0xdddd1000, 0x4000, 0xa, 0x23, 0x2, 0x3, 0x9, 0x4a, 0x7, 0x8, 0x43, 0x3}, {0x4, 0x5}, {0xffff1000}, 0x0, 0x0, 0xdddd0000, 0x152690, 0xf, 0x4000, 0x2000, [0x1, 0x1004, 0x6, 0x1000]})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x0, 0xfffffffe, 0x7ffffffd, 0xfffffff5, 0x0, [{0x0, 0x40, 0x3, '\x00', 0x2}, {0x2a, 0xff, 0xad, '\x00', 0x10}, {0x32, 0x23, 0xb, '\x00', 0xfe}, {0x0, 0x1, 0x82, '\x00', 0x72}, {0x26, 0x1, 0x0, '\x00', 0xff}, {0x0, 0x8, 0xfd, '\x00', 0x7}, {0xcf, 0x20, 0xc5, '\x00', 0xe6}, {0x6, 0x9, 0x5, '\x00', 0xe}, {0x5, 0x7f, 0x7, '\x00', 0x4d}, {0xc, 0xd, 0x0, '\x00', 0x3b}, {0x0, 0x8, 0x0, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x3}, {0x2, 0xc0, 0xa, '\x00', 0x4}, {0x6, 0x7, 0x7, '\x00', 0xfe}, {0xa, 0x5, 0x5, '\x00', 0xa9}, {0x6, 0x6, 0x9}, {0x0, 0x5, 0x6, '\x00', 0xda}, {0x5, 0xfd, 0x6, '\x00', 0x8}, {0x45, 0x4, 0xff, '\x00', 0x6}, {0x9, 0x9, 0x7a, '\x00', 0x36}, {0x80, 0xa, 0x4, '\x00', 0x5}, {0x2, 0x9, 0x8, '\x00', 0xc4}, {0x3, 0xff, 0x12, '\x00', 0x6}, {0x4, 0xa9, 0x1c, '\x00', 0xa}]}})

1m24.0747577s ago: executing program 2 (id=5252):
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x18c, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x61, 0x2, {{'cbc(aes)\x00'}, 0xc8, "7e0bf8043bbb4a68e95ad209fd45c9110ebc34057d6c7f90a4"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffa, 0x0, 0x0, 0x70bd28}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd26, 0x70bd28, 0x70bd27, 0x5}}]}, 0x18c}}, 0x800)
syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b", @ANYBLOB="0abb"], 0x0)

1m21.997845544s ago: executing program 2 (id=5258):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0x5, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_PTP_KVM(r1, 0x4068aea3, &(0x7f0000000140))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xcb, 0xd, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x200, 0x7fffffffffffb, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20)
mremap(&(0x7f00001f2000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000c7a000/0x4000)=nil)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f0000ffe000/0x2000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "301971b48944577edae8c7bb32ad7ca1829e0922e71e334cf9101b3de25d35a38d11e1bf4f564e4379ac8b8e76076a335e6307bf7572aa1f72d48d2385170c0f", 0x18}, 0x48, 0xffffffffffffffff)
keyctl$describe(0x6, r3, &(0x7f0000001000)=""/61, 0x3d)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020900102505a1a44000000001010902440001fd00000009040000ff0202ffff05241c310722"], 0x0)
add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="e6910d6207b348c39cafe24e64f239cafdd8b1f45299df177369580c949ba1c162ae7b9a37fae68fce2936b6d5dea42cd8ef97108f9d2095eb901a88467397fab42b5f3ead83ac8051ddb63c1149be97fbf9b5c3d65f6342f576ef553838eb10550da94853ba4347a9008e53cff471e1e7a0f5c51c9b9a01e53a967246d19a1f228209bc261e90cff6861aef6e505e49572e83b25bb223d55752d04f90ffac237c0946f567665d3f6f557c33f3acc335ab2a05a0cf7586daa862ef419d723c117beb185f71ec73ad6f99c9d55efcc287ca27509466948ae6554ae20b", 0xdc, r3)

1m20.2763912s ago: executing program 2 (id=5264):
socket$inet6(0xa, 0x3, 0x5)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c02124085010203010902240001000010"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x15, 0x2, ';B'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m17.218242995s ago: executing program 2 (id=5279):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000407d1eed2c40000102030109022d000101ff500909040002010301020409210500770122b10f09058103"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f0000004580), 0x0}, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003)
r2 = getuid()
quotactl_fd$Q_GETFMT(r1, 0x0, r2, &(0x7f0000000040))
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0)
socket$igmp(0x2, 0x3, 0x2)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x58, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003b818042021048f0067c1010203010902460001034000010904d40b000202ff080524060000050aa2d40a0d240f01ff030000e400e8007f052406000105240009000d240f"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})
mount$fuseblk(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x0, 0x201880, 0x0)
lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0))
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='timerslack_ns\x00')
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/168, 0xa8}], 0x1, 0xc, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r5], 0x0)

1m15.096081538s ago: executing program 2 (id=5287):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
dup(r0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x9032, 0xffffffffffffffff, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, 0x0)

1m14.403996878s ago: executing program 2 (id=5288):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)

1m13.739408049s ago: executing program 33 (id=5288):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x2c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}, 0x0, 0x0})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)

9.965073015s ago: executing program 6 (id=5592):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000099dc320d112f37e6854010203010902240001000010100904590002ff063d000905030200020500ff090582020002", @ANYRESHEX=0x0, @ANYRESHEX], 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x98, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x80, 0x4, 0x2, 0x40, 0xb}, 0xc3, &(0x7f0000000180)={0x5, 0xf, 0xc3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "33d1f9dc9a3a290ff13167fba88b62c4"}, @generic={0x96, 0x10, 0x1, "909c4bfd55d7687b15586b01c52411c592e8df2737926f9cbf2a3bea13a51c8118b3b5574696d79d99edbfd359714213a2a3311f4c754ac3f90ff4bce9df0c5c140f5131287210cf98a77d8087b4f9ca7635e44c804ed0278368ab7a862b1ad818642fc70c8a2abbb9d9cc84acef7f88592519057f2b2aba9ed8e91f088f34bf9aa7ebf4a2365a938e45bf3bf25f01181b3602"}, @ssp_cap={0x14, 0x10, 0xa, 0x32, 0x2, 0x2, 0xff00, 0x0, [0xff000f, 0xf]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0x102, &(0x7f00000002c0)=@string={0x102, 0x3, "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"}}]}) (async)
syz_usb_connect$cdc_ncm(0x6, 0x98, &(0x7f0000000440)=ANY=[@ANYBLOB="12015002020000102505a1a4401222373b478279b5a7010902860002013e00000000000000020d00060001052400070000000094413321fdae0104000000f000e1de0306241a001c4e39241273f9a317a88b045e4f01a607c0ffcb7e392a042402020524150600072414050010000524150b000905810300020406060904010000020d00000904010102020d0200000082020d000000070905030200040703039b15011c0be3729366eace616fd6e883a64ae3ebb2dc3efc8631b6fd1be7f7404c190cdfaea74588bd171ef498502241d7e4f7a80cc6e1975944d7795f0b433d4190005483dc921e2af4c318b1c5997b7c4bf9cd0fb4f9a2f0c8d3ae29"], &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x80, 0x4, 0x2, 0x40, 0xb}, 0xc3, &(0x7f0000000180)={0x5, 0xf, 0xc3, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "33d1f9dc9a3a290ff13167fba88b62c4"}, @generic={0x96, 0x10, 0x1, "909c4bfd55d7687b15586b01c52411c592e8df2737926f9cbf2a3bea13a51c8118b3b5574696d79d99edbfd359714213a2a3311f4c754ac3f90ff4bce9df0c5c140f5131287210cf98a77d8087b4f9ca7635e44c804ed0278368ab7a862b1ad818642fc70c8a2abbb9d9cc84acef7f88592519057f2b2aba9ed8e91f088f34bf9aa7ebf4a2365a938e45bf3bf25f01181b3602"}, @ssp_cap={0x14, 0x10, 0xa, 0x32, 0x2, 0x2, 0xff00, 0x0, [0xff000f, 0xf]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x406}}, {0x102, &(0x7f00000002c0)=@string={0x102, 0x3, "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"}}]})

8.383701855s ago: executing program 6 (id=5594):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000080)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)

7.862133372s ago: executing program 0 (id=5596):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000240)={0x14, &(0x7f0000000100)={0x20, 0x21, 0xcf, {0xcf, 0x24, "5149410754024610d8b59d3712868b488134466fe7a79369cbb7b572a7ceb51c18a5f7f2ec81c5a4339727592a5a5e9f4106590769dcf1fcd7c665d647cedc3538dea4de2d2e2a20ba95ad7e3ee4561eae2c17594e877470b735fb9b8d4518f51c8e01917edd41bfb4b8da3b3c159ad07bf4c71a9bca29f5a1932771a88a3fb546ec10760f9265ce9a3a3ab374a633d4d15591ff17e366b6b3b5ce37d854b579d74b67709306a56f91923e2e2597d7a16c90d2e583587e09bb02348fe0432920574f1f110eb0161aac4bbb0978"}}, &(0x7f0000000680)=ANY=[@ANYBLOB]}, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x20, 0x6, 0x27, "1366d08658acc45dd3ec0a7d9a39d885dfadb812d374f0240c2225576c83e077314fa2c822d3ed"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xad}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x55}, &(0x7f0000000340)={0xc0, 0xa1, 0x4, 0xfffffffd}, &(0x7f0000000380)={0x40, 0xa0, 0x4, 0x9}, &(0x7f00000003c0)={0xc0, 0xa2, 0x2f, "4d4713b995b5aba61b1c0f81cd02b529547ec0600037c536e0a0284c0b097ae60756e9b695ecfb9dddced4597a633d"}})
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r4, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="8879980c666c1879782da85041d1296824f0fa0ec9432c970ad0e59485c15cd3f6c8fe0e9b6bca3589fffc8f2ed694abab2f88e4ecd8976dad", 0x39}], 0x1}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @mcast1, 0x9}, 0x1c)
unshare(0x8040480)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r10=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10})
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r8)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r11, @ANYBLOB="00022bbd7000fddbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000c080000080001007063690011000200303030303a30303a31302e300000000008000b0000000000080001007063690011000200303030303a30303a31302e300000004fe3000b000c0000000eb58a17208dcccf7bb5cc16f6c9e6a80001006e657464657679696d0000000f0002006e657464657673696d30000008000b0008000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x4000004)

7.808753078s ago: executing program 3 (id=5597):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

7.704390083s ago: executing program 3 (id=5598):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010102, @rand_addr=0x64010101, 0xffffff00, 0xff, 'hsr0\x00', 'bond0\x00', {}, {0xff}, 0x89, 0x0, 0x8}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x4, 0x0, 0x0, 0x9]}, {0x0, [0x2, 0x89, 0x40000, 0x6, 0x2], 0x3, 0x4}}}}, {{@ip={@loopback, @multicast1, 0xff000000, 0xffffffff, 'geneve1\x00', 'veth0_macvtap\x00', {0xff}, {0xff}, 0x6c, 0x0, 0x9}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r2 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000540)={{0x1, 0x1, 0x18, <r5=>r2, {0x6}}, './file0\x00'})
openat$cgroup_type(r5, &(0x7f0000000740), 0x2, 0x0)
r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0000, 0x0)
pipe2(&(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
pipe2$9p(&(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x84000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r7, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'})
syz_emit_ethernet(0x1017, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0011aa001f"], 0x0)
tee(r9, r8, 0x6, 0x8)
clock_gettime(0x0, &(0x7f0000000080)={<r10=>0x0, <r11=>0x0})
ppoll(&(0x7f0000000040)=[{r3, 0x6001}, {r6, 0x40}, {r2, 0x10}, {r8, 0x10}], 0x4, &(0x7f0000000140)={r10, r11+10000000}, &(0x7f0000000180)={[0xff]}, 0x8)
syz_usb_connect$cdc_ncm(0x1, 0xb3, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x1, 0xe8, 0x50, 0x3, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "9d0541"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x2, 0x1}, {0x6, 0x24, 0x1a, 0x2}, [@acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x729}, @mbim_extended={0x8, 0x24, 0x1c, 0x800, 0x9, 0xb41}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x7b}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x2, 0x1, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x5, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x7f, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xf9, 0x6, 0x1}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x9, 0x7f, 0x9, 0x8, 0x8}, 0x29, &(0x7f0000000300)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0xb599, 0xf, 0x6, [0xc00f, 0xffc000, 0xff0000, 0xc000, 0x3f00, 0xc00f]}]}, 0x7, [{0x3c, &(0x7f00000003c0)=ANY=[@ANYBLOB="3c03dd5c807f1900a5f7dd5c490c9fac62d91373cb79c4e6ac118330be3848933ba6d67397e2692d8b17d7a5198816b553666cb02efec51df8a2f437"]}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x455}}, {0x83, &(0x7f0000000440)=@string={0x83, 0x3, "4cfd4ada275831170e575b1f8758f2f9f2ee037c89d524f3984963b3fdb03cca7485d5dac2ccf7bc53998a2da9b1c9974d3ceacff35ef11ad6aef1cf4384de4751cf6e38fd20dbe4f99aee893db786d7a683a33f41644bc37d596de4ca3eb0b4b9a79c788a04217bc4d10083b142fadd3f1b45cf324f15ff48f3e6d17158a560de"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x416}}, {0xeb, &(0x7f00000005c0)=@string={0xeb, 0x3, "9e55055fce021404523fb789740c8d221f1b6eb28d00e33b40de78ec08b1fa29dae0f59b4299ea145cb2cfde8a681129031f9e776b230a0d0079c6192d08e3b45120178abcf51d86818aaabceadbc37718b4f1c080a27645311f60b3430a9966f8aa8603fb76ede42cef908d5d40d0e8678416eacd4906eeec39f43650ae8ccadad07b52e29335f5a8c0878b6dc6d4d065f367754508e0625ad0cc494a91da3b4ecc10e4f780240cc3ddec4da0e7db4c04847593d3f5d8bab30e7c5eed5e51f30548f135e05b69bdae12ce8a5de41b451c640135423752550f5368e69732801944034bb634d36fabfa"}}, {0xdc, &(0x7f0000000a80)=@string={0xdc, 0x3, "90adfd06ff330ae3d2b802c968535949ae9127da4f869e81ec198522f8b82f8b986c48cde90624d6e9f46f2553085493d0afc26e1163f89d85efbe4698ac086409167e874d9d99466636b391c1bb23e05280108671d13174c824633bcb0fa0320c21ce367e77c820c1cefe2681a85d1ab65f7f18776bb980d794a4d1a2f88e1eb71ab54db2a52e42cd85c608a80c503e957fb3722605324b35e578915ee5f6d98be84b5ae97bf8da71923fb45f33ed47d9479bdfb84e21578b102193195f85f0684ed331353e700f58c9254cf4a2a006548b7b0249938c76ca0f"}}, {0x64, &(0x7f0000000bc0)=@string={0x64, 0x3, "3f5f4aed97a63d322a369115df29dce2b903a29e0f5df42446b3db2b3446002ffae57dc980cebf3c0aae3178f23a39643d22395fc79e4c70f4b2c617f3e43e024a19f1160621a1560cb9ea3a6106f2521e15d623cea59089c8152b59bbe9d161c277"}}]})

5.829826012s ago: executing program 6 (id=5602):
r0 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0xc95e, 0x0, 0x2})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100))
inotify_init()
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r3=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r3}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a)

5.315792575s ago: executing program 6 (id=5604):
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc498, 0xfffffffffffffff9, 0x0, 0x4, 0x13, 0x9, "571f1664fccc56acf62f6dc1f493f8c04f6e5be04d57c01066ba44237d12661f0df14729895c0723815148c802116f76565bf7bef12b30bb2de50f8bd4c718f0", "83dd2591c505b2949fb720c7b5d5942e3f04d5da2a8e760b5d2f5417ab2b70074d0f4ec9aeb8aa293cef491a10817fc94a5daafd9832eec96af904dbc31d9aa5", "ceb2a3973e37f323e44641520376618f1a46054a73ed71a3c8386e441bb58644", [0x8, 0x4]})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff}}, './file0\x00'})
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000140)={0x1})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r2=>r1, {0xee00, <r3=>0x0}}, './file0\x00'})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f00000001c0)={0x8, 0x1})
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635004000000f30660fe112f30f0fd6a49a6bfd2b00baa100b80500ef0f01cf0f032ca920000f20d86635080000000f22d80f33", 0x3c}], 0x1, 0x7, &(0x7f0000000280)=[@cr4={0x1, 0x1000a1}], 0x1)
read$FUSE(r1, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002340)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000002380)={0x28, 0x5, r8, 0x0, &(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x8})
ptrace$getregset(0x4204, r5, 0x201, &(0x7f0000002400)={&(0x7f00000023c0)=""/49, 0x31})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@base={0x1b, 0x1, 0xc89b, 0x3, 0x400, r0, 0x1000, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000024c0)=[{0x0, 0x1, {0x2, 0x1, 0x2}, {0x0, 0x1}, 0xff}, {0x2, 0x1, {0x1, 0x0, 0x1}, {0x0, 0xff}, 0x1, 0xff}, {0x3, 0x8, {0x0, 0xff}, {0x2, 0xff, 0x4}, 0xfd, 0x1}, {0x1, 0x0, {0x0, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0x1, 0xfe}], 0x80)
pwrite64(r7, &(0x7f0000002540)="abed588da836b40fbd103fc4cac461a2cb6eb4ead3c166d300907cb65f4fe984a40692b8e2dac6bd17c68ea0cffe99b2c9a53fbddaf6cccc3095f409897a9b948f23f949ebed5bc6dc575e29346ecf4b0bb1b7dba0c2a50be1852a2b1bd1d2", 0x5f, 0x5)
ioctl$OCFS2_IOC_MOVE_EXT(r6, 0x40406f06, &(0x7f00000025c0)={0x5, 0x8000, 0x1, 0x0, 0x4})
r10 = msgget$private(0x0, 0xa7)
msgrcv(r10, &(0x7f0000002600)={0x0, ""/241}, 0xf9, 0x2, 0x1000)
sendmsg$nl_netfilter(r0, &(0x7f00000027c0)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x1c, 0x11, 0x4, 0x401, 0x70bd27, 0x25dfdbfb, {0x3, 0x0, 0x1}, [@typed={0x8, 0x10b, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002800)={0x3, 0xfffffff9, 0x1, 0x3, 0x1}, 0x14)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000002880)=@o_path={&(0x7f0000002840)='./file0\x00', 0x0, 0x10, r9}, 0x18)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f00000028c0)=0x2)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002900)={<r11=>0x0, 0x2}, &(0x7f0000002940)=0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000002980)={r11, 0xffffffff}, &(0x7f00000029c0)=0x8)
setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000002a00)=0x4, 0x4)
r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/rcu_normal', 0x40, 0x28)
setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0x7, &(0x7f0000002a80)={0x6, 0x40, 0x3ff, 0x3}, 0x10)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002ac0)={0xc})
lsetxattr$system_posix_acl(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)='system.posix_acl_default\x00', &(0x7f0000002b80)={{}, {0x1, 0x5}, [{0x2, 0x0, 0xffffffffffffffff}], {0x4, 0x5}, [{0x8, 0x6, r4}, {0x8, 0x2, r4}, {0x8, 0x3, r3}, {0x8, 0x1, r3}], {0x10, 0x5}, {0x20, 0x3}}, 0x4c, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000002c00), &(0x7f0000002c40)=0x40)

5.234762469s ago: executing program 5 (id=5606):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)=@can_delroute={0x14, 0x19, 0x1, 0x70bd25, 0x25dfdbfe, {0x1d, 0x1, 0xe}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r0], 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

4.903875305s ago: executing program 4 (id=5607):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000001040)={'security\x00', 0x4, "d46becd3"}, &(0x7f00000010c0)=0x28)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
unshare(0x66000080)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000300)=0x208, 0xc1df0ff0dfb6053)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0)

4.707559088s ago: executing program 4 (id=5608):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

4.658736126s ago: executing program 3 (id=5609):
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0\x00')
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x7fff7ff8}]})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})

4.54617379s ago: executing program 4 (id=5610):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r6 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'syz_tun\x00'})

4.517639433s ago: executing program 5 (id=5611):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0xc3f37cc}, 0x1c)
socket$unix(0x1, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "33f058ec27d46c98", "d40f86fd02541c95afec379bdb3cc0d5646e20975202603a18fe7474dc4c3d7b", "789d9458", "6b5746f76445c4c2"}, 0x38)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x8)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r2, 0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req={0x80000001, 0x8, 0x9, 0x80000001}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x4, 0x100000000, 0x3, 0x9, 0x93, 0xf4}, 0x0, 0x0, 0x0, 0x0)

4.379109994s ago: executing program 6 (id=5612):
r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
dup(r0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x9032, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="201f0300000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.211243464s ago: executing program 0 (id=5613):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f)
pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35)
read$FUSE(r0, &(0x7f00000054c0)={0x2020}, 0x2020)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x5, 0x0, 0x804, 0x0, 0x3, 0x7}, 0x0, &(0x7f0000000240)={0x21, 0x0, 0x0, 0x0, 0x6, 0x3, 0xea9, 0x6}, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000010c0)="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", 0x1000, 0x11, &(0x7f00000020c0)={0xa, 0x4e22, 0x3, @loopback}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r4=>r1, {0x8, 0x9}}, './file0\x00'})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x81}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f010203010902"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001080)=0xfff)
write$UHID_INPUT(r2, &(0x7f0000000040)={0xb, {"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", 0x1000}}, 0x1006)

3.820026888s ago: executing program 0 (id=5614):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
socket$tipc(0x1e, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4881}, 0x0)
recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0xb, {0xe7ff, 0x1, 0x406, 0x870}})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r9, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r9, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r8, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r10, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
socket$nl_route(0x10, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
socket(0xa, 0x3, 0x3a)

3.144905774s ago: executing program 4 (id=5615):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/96, 0x60)
socket(0x10, 0x3, 0x0)
fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0) (async)
fsopen(&(0x7f00000000c0)='ubifs\x00', 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
mlock(&(0x7f0000d84000/0x2000)=nil, 0x2000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102"], 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904000001f238b50009050102"], 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000001c0)=0x304008000)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) (async)
sendmmsg$inet(r3, &(0x7f0000003540)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000740)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x2)

3.015607114s ago: executing program 3 (id=5616):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x8000)
r1 = epoll_create(0x8000203)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100))
preadv(r1, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/157, 0x9d}, {&(0x7f0000000580)=""/197, 0xc5}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/68, 0x44}, {&(0x7f0000001740)=""/220, 0xdc}], 0x5, 0x7fff, 0x1)
r3 = epoll_create1(0x0)
vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="4fc7cc33b41ad3c6881e0ed00c70632f5c7a559254d9e0912c6b374b7e3278868b1f84591ca257e0f8511de5d706415c0758415a99d181762d523d5b19da61320a24565e38bdc9aa17cd4d2c11b460dd2c30597a8a2bce101f522f072adc530a69b2e7cd8b69f177fd21154f9aecc15daaa701ca0fbfbaa70087b70b6c619918938dd50f59e903f4441dbf7cb90f02b9c2666ae2c84347ce733841c061211cc7d3d45f4aa0110c9fd2697c2ebcd4d1c13f59789038af76e886d51858ab8624f30816147950e4b306efe1249f6d4adc809699d0d2810d21ff1ad07e817f78259a", 0xe0}, {&(0x7f0000000380)="eb3bac7a64122790ba314d", 0xb}], 0x2, 0x7)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xa3e})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000022c0)=@svm={0x108, 0x1, 0x1080, {0x10000}, {"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"}})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x44, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}, @TCA_NETEM_CORR={0x10, 0x1, {0xa267, 0xffffffff, 0x4000}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r12=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r12, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x27b}], 0x2}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x3}, 0x4})
write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000680)={0x20000003})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xd0000004})

2.780120597s ago: executing program 0 (id=5617):
r0 = inotify_init()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r2)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="140029bd7000fddbdf25366f1c9d7400028008000100070000000400040024000380080001000500000008000100f52a000008000200040000070000001c000380080001000700000008000200080000000800010003000000080002000600000004000400040004000400040008000100070000000800020009000000"], 0x88}, 0x1, 0x0, 0x0, 0x44}, 0x4000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r8 = socket$inet(0x2, 0x2, 0x73)
setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0)
sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="93", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080), 0x1}}], 0x2, 0x48014)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r9=>r2, {0x80}}, './file1\x00'})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c)
set_mempolicy(0x2, &(0x7f0000000000)=0x9, 0x6)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x4010, r2, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800)
name_to_handle_at(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="10000000020000000000a430b5ead21425c6000002000000"], &(0x7f0000000300), 0x400)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c)
close_range(r0, 0xffffffffffffffff, 0x0)

2.686623226s ago: executing program 5 (id=5618):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe9f}}]}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002439da20cd061201a2d20102030109021b0001000000000904000001717ffe000905a1"], 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @broadcast, 'ip6tnl0\x00'}}, 0x1e)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000380)={0x18, 0x0, {0x1, @local, 'ip6gre0\x00'}}, 0x1e)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0/../file0/../file0/file0\x00', 0x89901)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r5, 0x40084149, &(0x7f0000000140)=0x9)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r6, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = open(0x0, 0x0, 0x0)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
ioctl$RTC_VL_CLR(r9, 0x7014)
fcntl$dupfd(r8, 0x0, r7)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000040)=""/23, &(0x7f0000000100)=0x17)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"'], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x20, 0x1f}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfa}, 0x0, &(0x7f0000000680)={0x20, 0x3, 0x1, 0xfe}})
syz_usb_control_io$printer(r4, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x80, 0x1405, 0x102, 0x70bd2a, 0x25dfdbfc, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0xe1}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004001}, 0x8044)
socket$nl_route(0x10, 0x3, 0x0)

2.56440203s ago: executing program 6 (id=5619):
keyctl$clear(0x3, 0xfffffffffffffffd)
request_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000080)='0\xbe\xcc', 0xffffffffffffffff) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect$midi(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000403e1305084000010a0000002c1200010109100409040000000143000b"], 0x0)
pipe(&(0x7f0000000200))
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80600, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
io_uring_setup(0x2e31, &(0x7f0000000100)={0x0, 0xca87, 0x400, 0x0, 0x8000319}) (async)
inotify_init1(0x800) (async)
close(0x3) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
r7 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r7}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r5}, @flat=@handle={0x73682a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) (async)
socket(0x2, 0x80805, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)

2.447567431s ago: executing program 3 (id=5620):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

2.29714046s ago: executing program 3 (id=5621):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000580)}], 0x2}}], 0x1, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = msgget$private(0x0, 0x0)
msgsnd(r1, 0x0, 0x8, 0x800)
pipe2(&(0x7f00000000c0), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d", 0x13)
recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006b", 0xc, 0xffffffffffffffff)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r7)

1.862512122s ago: executing program 0 (id=5622):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x8800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x20008814)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (fail_nth: 15)

1.455574813s ago: executing program 0 (id=5623):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r4=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476a96e4a4e0b75db47ec5454c327bb5b7233ac3507e16db41d0000008000000000a8ca9d22a565ff96d46e88faa10ff4240c00"/70})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0xfffffffffffffffe, r4, r3})
r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7, 0x201d})
listns(&(0x7f0000000000)={0x20, 0x0, 0x4, 0x20000, 0x0, 0xc}, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0x0, r4, r3})

1.023883275s ago: executing program 4 (id=5624):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000640)=@id={0x1e, 0x3, 0x3, {0x4e21, 0x4}}, 0x10)
r3 = syz_open_dev$sg(&(0x7f0000000680), 0x3, 0x400000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000007060500000000000000000002000009090001000700"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f00000003c0)={0xc6, ""/198})
r5 = socket$tipc(0x1e, 0x5, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x100, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa, 0x0, 0x8}]}}}}}}}}, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfcbff, {}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0xb}]}]}, 0x34}}, 0x60000000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x7117df03569baaaf}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0x48, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x94bf}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8880}, 0x4000)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRESDEC=r8, @ANYBLOB="0c009900000000002e000000080026007f17000008009f0006"], 0x38}, 0x1, 0x0, 0x0, 0x8895}, 0x0)

683.759827ms ago: executing program 5 (id=5625):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040))

371.064235ms ago: executing program 4 (id=5626):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41100000000000000290000003b000000", 0xfe60)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731315806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0x4b}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0xea, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[<r4=>0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r3})
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x1, 0xcd, 0x1}}, 0x44)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r9 = dup3(r8, r7, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7e, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476a96e4a4e0b75db47ec5454c327bb5b7233ac3507e16db41d0000008000000000a8ca9d22a565ff96d46e88faa10ff4240c00"/70})
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0xfffffffffffffffe, r4, r3})
r10 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r10, 0xc0305602, &(0x7f00000005c0)={0x0, 0x7, 0x201d})
listns(&(0x7f0000000000)={0x20, 0x0, 0x4, 0x20000, 0x0, 0xc}, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000080)={0x0, r4, r3})

227.048107ms ago: executing program 5 (id=5627):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', <r1=>0x0})
bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x9, r1, 0xc, r0}, 0x10)

0s ago: executing program 5 (id=5628):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_io_uring_setup(0x5db4, 0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x4)
socket(0x10, 0x803, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xdfe5)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0xa750, &(0x7f0000000b40))
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200))
r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x30080)
ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r2, 0xc0106440, &(0x7f0000000300)={0x0, 0x5, &(0x7f0000000280)})
r3 = epoll_create(0x1002)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}})
connect$can_bcm(r5, &(0x7f0000000340), 0x10)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9)
write$binfmt_script(r0, &(0x7f0000000540)={'#! ', '', [], 0xa, "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"}, 0x104)

kernel console output (not intermixed with test programs):

erface, different from the descriptor's value: 3
[ 1258.395110][ T5732] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1258.423002][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.448358][ T5732] usb 5-1: Product: syz
[ 1258.456738][ T5732] usb 5-1: Manufacturer: syz
[ 1258.461446][ T5732] usb 5-1: SerialNumber: syz
[ 1258.482186][ T5732] usb 5-1: 0:2 : does not exist
[ 1258.489215][ T5732] usb 5-1: unit 9 not found!
[ 1258.494433][ T5732] usb 5-1: unit 10 not found!
[ 1258.519563][T24296] xt_hashlimit: size too large, truncated to 1048576
[ 1258.688801][T19185] usb 5-1: USB disconnect, device number 123
[ 1258.745296][T24302] netlink: 'syz.3.5381': attribute type 10 has an invalid length.
[ 1258.897105][T19201] usb 1-1: USB disconnect, device number 102
[ 1259.134096][T19188] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[ 1259.270222][T24321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1259.295556][T24321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1259.304264][T19188] usb 7-1: Using ep0 maxpacket: 8
[ 1259.312950][T19201] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1259.324058][T24321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1259.340561][T19188] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[ 1259.349382][T24321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1259.363920][T19188] usb 7-1: config 0 has no interface number 0
[ 1259.375844][T19188] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1259.386624][T19188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.403139][T19188] usb 7-1: Product: syz
[ 1259.407364][T19188] usb 7-1: Manufacturer: syz
[ 1259.415081][T19188] usb 7-1: SerialNumber: syz
[ 1259.437206][T19188] usb 7-1: config 0 descriptor??
[ 1259.514297][T19201] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1259.527509][T19201] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1259.547739][T19201] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1259.568193][T19201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1259.580571][T19201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1259.605267][T19201] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1259.615008][T19185] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1259.625102][T19201] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1259.637108][T19201] usb 1-1: Product: syz
[ 1259.644222][T19201] usb 1-1: Manufacturer: syz
[ 1259.666690][T19188] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22
[ 1259.686703][T19201] cdc_wdm 1-1:1.0: skipping garbage
[ 1259.694346][T19201] cdc_wdm 1-1:1.0: skipping garbage
[ 1259.707186][T19188] usb 7-1: USB disconnect, device number 5
[ 1259.730273][T19201] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1259.754243][T19201] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1259.774257][T19185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1259.794066][T19185] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1259.804636][T19185] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1259.819443][T19185] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1259.829487][T19185] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1259.860225][T19185] usb 5-1: config 0 descriptor??
[ 1259.879456][T24310] xt_hashlimit: overflow, try lower: 18446744073709551614/4
[ 1259.943693][ T5732] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[ 1260.112094][ T5732] usb 4-1: Using ep0 maxpacket: 8
[ 1260.126405][ T5732] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1260.147864][ T5732] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1260.169780][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.196092][T24342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1260.215403][T24342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1260.221191][ T5732] usb 4-1: config 0 descriptor??
[ 1260.259813][ T5732] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1260.291221][T19185] usbhid 5-1:0.0: can't add hid device: -71
[ 1260.308271][T19185] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1260.350279][T19185] usb 5-1: USB disconnect, device number 124
[ 1260.602326][T19192] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[ 1260.775102][T19192] usb 7-1: Using ep0 maxpacket: 16
[ 1260.784507][T19192] usb 7-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1260.795686][T19192] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1260.813050][T19192] usb 7-1: config 0 has an invalid interface number: 125 but max is 1
[ 1260.833240][T19192] usb 7-1: config 0 has no interface number 1
[ 1260.847499][T19192] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1260.875074][T19192] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1260.900917][T19192] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1260.936515][T19192] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1260.981741][T19192] usb 7-1: config 0 interface 125 has no altsetting 0
[ 1261.004936][T19192] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1261.027586][T19192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.043753][T19192] usb 7-1: Product: syz
[ 1261.048093][T19192] usb 7-1: Manufacturer: syz
[ 1261.048357][T24374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.062117][T19192] usb 7-1: SerialNumber: syz
[ 1261.094544][T24374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1261.097686][T19192] usb 7-1: config 0 descriptor??
[ 1261.319565][ T5732] gspca_vc032x: reg_r err -71
[ 1261.338917][ T5732] vc032x 4-1:0.0: probe with driver vc032x failed with error -71
[ 1261.381978][ T5732] usb 4-1: USB disconnect, device number 89
[ 1261.466093][T19188] usb 7-1: USB disconnect, device number 6
[ 1261.792713][T24389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1261.817924][T24389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1262.145383][T19188] usb 1-1: USB disconnect, device number 103
[ 1262.168700][T24396] netlink: 'syz.3.5395': attribute type 1 has an invalid length.
[ 1262.189855][T24397] tipc: Started in network mode
[ 1262.208959][T24397] tipc: Node identity ac1414aa, cluster identity 4711
[ 1262.220061][T24394] can: request_module (can-proto-0) failed.
[ 1262.247090][T24397] tipc: Enabling of bearer <udp:sr> rejected, failed to enable media
[ 1262.307659][T24398] netlink: 'syz.5.5394': attribute type 4 has an invalid length.
[ 1262.383437][T24396] netlink: 'syz.3.5395': attribute type 10 has an invalid length.
[ 1262.439008][T24396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5395'.
[ 1262.500853][T24399] bond4: (slave veth3): Enslaving as an active interface with a down link
[ 1262.536998][T24404] batman_adv: batadv0: Interface deactivated: dummy0
[ 1262.569724][T24404] batman_adv: batadv0: Removing interface: dummy0
[ 1262.593678][T24404] bond4: (slave dummy0): making interface the new active one
[ 1262.603654][T24404] bond4: (slave dummy0): Enslaving as an active interface with an up link
[ 1262.619758][T24396] dummy0: entered promiscuous mode
[ 1262.633680][T24396] bond4: (slave dummy0): Releasing active interface
[ 1262.697368][T24408] kvm_intel: kvm [24407]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a
[ 1262.726654][T24408] kvm: kvm [24407]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a
[ 1262.912344][T19192] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1262.972740][T19188] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[ 1263.072076][T19192] usb 1-1: Using ep0 maxpacket: 8
[ 1263.089003][T19192] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[ 1263.113483][T19192] usb 1-1: config 0 has no interface number 0
[ 1263.136755][T19192] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1263.148354][T19188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1263.152181][T19192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.186498][T19188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1263.209961][T19188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1263.231620][T19192] usb 1-1: Product: syz
[ 1263.244763][T19192] usb 1-1: Manufacturer: syz
[ 1263.248284][T19188] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1263.274579][T19188] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1263.288626][T19192] usb 1-1: SerialNumber: syz
[ 1263.298701][T19188] usb 4-1: config 0 descriptor??
[ 1263.325735][T19192] usb 1-1: config 0 descriptor??
[ 1263.557923][T19192] uvcvideo 1-1:0.31: probe with driver uvcvideo failed with error -22
[ 1263.580970][T19192] usb 1-1: USB disconnect, device number 104
[ 1263.662430][T19187] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[ 1263.729723][T19188] usbhid 4-1:0.0: can't add hid device: -71
[ 1263.740835][T24422] syzkaller0: entered promiscuous mode
[ 1263.746772][T24422] syzkaller0: entered allmulticast mode
[ 1263.754623][T19188] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1263.782949][T19188] usb 4-1: USB disconnect, device number 90
[ 1263.833981][T19187] usb 7-1: not running at top speed; connect to a high speed hub
[ 1263.853304][T19187] usb 7-1: config 45 has an invalid interface number: 2 but max is 0
[ 1263.869840][T19187] usb 7-1: config 45 has no interface number 0
[ 1263.882604][T19187] usb 7-1: config 45 interface 2 has no altsetting 0
[ 1263.899661][T19187] usb 7-1: New USB device found, idVendor=2040, idProduct=0001, bcdDevice=30.eb
[ 1263.927638][T19187] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.946427][T19187] usb 7-1: Product: syz
[ 1263.957591][T19187] usb 7-1: Manufacturer: syz
[ 1263.966253][T19187] usb 7-1: SerialNumber: syz
[ 1264.198264][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.212341][T19192] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1264.221722][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.236764][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.248633][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.276923][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.300594][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.343990][T24420] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5403'.
[ 1264.353889][T19192] usb 5-1: device descriptor read/64, error -71
[ 1264.400698][T24433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.420108][T24432] netlink: 840 bytes leftover after parsing attributes in process `syz.3.5408'.
[ 1264.420604][T24433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.456408][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.468401][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1264.534761][T24435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1264.582485][T19188] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1264.602685][T19192] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1264.688792][T19187] usb 7-1: USB disconnect, device number 7
[ 1264.734642][T19188] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1264.745098][T19188] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1264.752216][T19192] usb 5-1: device descriptor read/64, error -71
[ 1264.756921][T19188] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1264.770980][T19188] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1264.785226][T19188] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1264.798646][T19188] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1264.808326][T19188] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1264.812195][ T5732] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[ 1264.816900][T19188] usb 1-1: Product: syz
[ 1264.829207][T19188] usb 1-1: Manufacturer: syz
[ 1264.840725][T19188] cdc_wdm 1-1:1.0: skipping garbage
[ 1264.846722][T19188] cdc_wdm 1-1:1.0: skipping garbage
[ 1264.854095][T19188] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1264.860020][T19188] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1264.872733][T19192] usb usb5-port1: attempt power cycle
[ 1264.984666][ T5732] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[ 1264.993392][ T5732] usb 4-1: config 0 has no interface number 1
[ 1264.999570][ T5732] usb 4-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[ 1265.011647][ T5732] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1265.023082][ T5732] usb 4-1: config 0 interface 199 has no altsetting 0
[ 1265.030762][ T5732] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1265.040103][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1265.049864][ T5732] usb 4-1: SerialNumber: syz
[ 1265.058807][ T5732] usb 4-1: config 0 descriptor??
[ 1265.060979][T24430] xt_hashlimit: overflow, try lower: 18446744073709551614/4
[ 1265.222186][T19192] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1265.243235][T19192] usb 5-1: device descriptor read/8, error -71
[ 1265.290443][T24435] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[ 1265.311207][ T5732] uvcvideo 4-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1265.329799][ T5732] uvcvideo 4-1:0.199: No valid video chain found.
[ 1265.385411][ T5732] usb 4-1: USB disconnect, device number 91
[ 1265.512219][T19192] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1265.536752][T24447] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5413'.
[ 1265.553852][T19192] usb 5-1: device descriptor read/8, error -71
[ 1265.569765][T19190] usb 1-1: USB disconnect, device number 105
[ 1265.672411][T19192] usb usb5-port1: unable to enumerate USB device
[ 1265.696991][T24451] syzkaller0: entered promiscuous mode
[ 1265.702943][T24451] syzkaller0: entered allmulticast mode
[ 1265.937089][T24456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1265.963134][T24456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1265.989256][T24456] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[ 1265.995812][T24456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1266.014661][T24456] vhci_hcd vhci_hcd.0: Device attached
[ 1266.031016][T24459] vhci_hcd: connection closed
[ 1266.031745][T20833] vhci_hcd vhci_hcd.5: stop threads
[ 1266.042773][T20833] vhci_hcd vhci_hcd.5: release socket
[ 1266.049278][T20833] vhci_hcd vhci_hcd.5: disconnect device
[ 1266.142190][T19190] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[ 1266.222487][T19192] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[ 1266.262542][T19188] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1266.302238][T19190] usb 7-1: Using ep0 maxpacket: 8
[ 1266.309467][T19190] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[ 1266.317948][T19190] usb 7-1: config 0 has no interface number 0
[ 1266.326647][T19190] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1266.335997][T19190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.344131][T19190] usb 7-1: Product: syz
[ 1266.348327][T19190] usb 7-1: Manufacturer: syz
[ 1266.353477][T19190] usb 7-1: SerialNumber: syz
[ 1266.360427][T19190] usb 7-1: config 0 descriptor??
[ 1266.383528][T19192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1266.394691][T19192] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1266.404814][T19192] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1266.412326][T19188] usb 1-1: Using ep0 maxpacket: 32
[ 1266.417850][T19192] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1266.427020][T19188] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1266.432253][T19192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.435260][T19192] usb 4-1: config 0 descriptor??
[ 1266.446480][T19188] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1266.467748][T19188] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1266.477603][T19188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.489386][T19188] usb 1-1: config 0 descriptor??
[ 1266.594925][T19190] uvcvideo 7-1:0.31: probe with driver uvcvideo failed with error -22
[ 1266.604258][T24465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1266.621029][T19190] usb 7-1: USB disconnect, device number 8
[ 1266.639727][T24465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1266.861365][T24470] kvm_intel: kvm [24469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a
[ 1266.875904][T19192] usbhid 4-1:0.0: can't add hid device: -71
[ 1266.882632][T24470] kvm: kvm [24469]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a
[ 1266.893053][T19192] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1266.904254][T19192] usb 4-1: USB disconnect, device number 92
[ 1266.918320][T19187] usb 1-1: USB disconnect, device number 106
[ 1267.070111][T24477] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5422'.
[ 1267.329279][T24485] syzkaller0: entered promiscuous mode
[ 1267.340636][T24485] syzkaller0: entered allmulticast mode
[ 1267.564252][T24488] xt_hashlimit: size too large, truncated to 1048576
[ 1267.681686][T24495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5428'.
[ 1267.765143][T24497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5427'.
[ 1267.837572][T24491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1267.858842][T24491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1267.872399][T19190] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1268.034009][T19190] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1268.043637][T19190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.058645][T19190] usb 5-1: config 0 descriptor??
[ 1268.069166][T20868] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.081911][T20868] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.122189][T20868] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.143196][   T30] kauditd_printk_skb: 38 callbacks suppressed
[ 1268.143212][   T30] audit: type=1800 audit(1780475545.529:4677): pid=24486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5425" name="/" dev="fuse" ino=4 res=0 errno=0
[ 1268.177341][T20868] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1268.421359][T24510] input: syz1 as /devices/virtual/input/input206
[ 1268.457040][T24510] netlink: 'syz.5.5434': attribute type 5 has an invalid length.
[ 1268.474969][T19192] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1268.489388][T19190] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f
[ 1268.500281][T19190] hackrf 5-1:0.0: Could not detect board
[ 1268.507454][T19190] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[ 1268.522106][T19187] usb 4-1: new full-speed USB device number 93 using dummy_hcd
[ 1268.522382][T19190] usb 5-1: USB disconnect, device number 3
[ 1268.544102][T24510] pimreg: entered allmulticast mode
[ 1268.642622][T19192] usb 1-1: Using ep0 maxpacket: 8
[ 1268.655732][T19192] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1268.672219][T19192] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1268.693394][T19192] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1268.700065][T19187] usb 4-1: config 100 has an invalid interface number: 124 but max is 0
[ 1268.708666][T19192] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1268.723001][T19192] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1268.736948][T19192] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1268.746430][T19192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1268.749126][T19187] usb 4-1: config 100 has no interface number 0
[ 1268.769992][T19187] usb 4-1: config 100 interface 124 has no altsetting 0
[ 1268.773298][T24517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1268.780494][T19187] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[ 1268.797534][T19187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.806419][T24517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1268.810008][T19187] usb 4-1: Product: syz
[ 1268.820291][T19187] usb 4-1: Manufacturer: syz
[ 1268.825715][T19187] usb 4-1: SerialNumber: syz
[ 1269.003776][T19192] usb 1-1: usb_control_msg returned -32
[ 1269.010513][T19192] usbtmc 1-1:16.0: can't read capabilities
[ 1269.017066][T19190] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[ 1269.024661][T24502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1269.031190][T24502] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1269.045401][T24502] vhci_hcd vhci_hcd.0: Device attached
[ 1269.051921][T19187] idmouse 4-1:100.124: Unable to find bulk-in endpoint.
[ 1269.074900][T24519] vhci_hcd: connection closed
[ 1269.075138][T20875] vhci_hcd vhci_hcd.0: stop threads
[ 1269.088735][T19188] usb 1-1: USB disconnect, device number 107
[ 1269.097350][T19187] usb 4-1: USB disconnect, device number 93
[ 1269.107415][T20875] vhci_hcd vhci_hcd.0: release socket
[ 1269.121514][T20875] vhci_hcd vhci_hcd.0: disconnect device
[ 1269.192275][T19190] usb 7-1: Using ep0 maxpacket: 32
[ 1269.200546][T19190] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 1269.216193][T19190] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 1269.228938][T19190] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1269.242419][T19190] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1269.258788][T19190] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 1269.268442][T19190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1269.276807][T19190] usb 7-1: Product: syz
[ 1269.281038][T19190] usb 7-1: Manufacturer: syz
[ 1269.287624][T19190] usb 7-1: SerialNumber: syz
[ 1269.300863][    C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 1269.314288][T19190] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input207
[ 1269.455686][T24525] syzkaller0: entered promiscuous mode
[ 1269.461510][T24525] syzkaller0: entered allmulticast mode
[ 1269.543617][T19190] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 1269.553174][T19190]  (id 0x00)
[ 1269.674768][T19190] rc_core: IR keymap rc-imon-pad not found
[ 1269.704600][T19190] Registered IR keymap rc-empty
[ 1269.728668][T19190] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 1269.755726][T19190] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1269.813386][T19190] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0
[ 1269.843278][T24531] tipc: Started in network mode
[ 1269.858105][T19190] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input208
[ 1269.889918][T24531] tipc: Node identity 080211000001, cluster identity 4711
[ 1269.911533][T19190] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:9> initialized
[ 1269.942390][T24531] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1269.975345][T24538] tipc: Resetting bearer <eth:syzkaller0>
[ 1270.025485][T24531] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1270.107711][T24544] RDS: rds_bind could not find a transport for ae0c:91e3:ccfb:11d2:0:5efe:150.125.240.108, load rds_tcp or rds_rdma?
[ 1270.152547][T19188] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1270.160311][   T30] audit: type=1326 audit(1780475547.549:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24541 comm="syz.4.5444" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f202d19ce59 code=0x0
[ 1270.240121][T24538] tipc: Resetting bearer <eth:syzkaller0>
[ 1270.342425][T19188] usb 4-1: Using ep0 maxpacket: 16
[ 1270.353568][T19188] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1270.383693][T19188] usb 4-1: config 64 has an invalid interface number: 144 but max is 0
[ 1270.393014][T19188] usb 4-1: config 64 has no interface number 0
[ 1270.404047][T19188] usb 4-1: config 64 interface 144 has no altsetting 0
[ 1270.426494][T19188] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=a2.b8
[ 1270.436056][T19188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1270.461906][T19188] usb 4-1: Product: syz
[ 1270.470624][T19188] usb 4-1: Manufacturer: syz
[ 1270.482876][T19188] usb 4-1: SerialNumber: syz
[ 1270.553431][T20866] tipc: Resetting bearer <eth:syzkaller0>
[ 1270.692200][T19193] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1270.725199][T19188] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:64.144/input/input209
[ 1270.738018][ T4989] bcm5974 4-1:64.144: could not read from device
[ 1270.757606][ T4989] bcm5974 4-1:64.144: could not read from device
[ 1270.777225][ T4989] bcm5974 4-1:64.144: could not read from device
[ 1270.790507][T19188] usb 4-1: USB disconnect, device number 94
[ 1270.797036][ T4989] bcm5974 4-1:64.144: could not read from device
[ 1270.882881][T19193] usb 1-1: Using ep0 maxpacket: 8
[ 1270.896640][T19193] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1270.922054][T19193] usb 1-1: config 0 has no interface number 0
[ 1270.928404][T19193] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1270.943896][T19193] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1270.961336][T19193] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1270.980291][T19193] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1270.996421][T19190] tipc: Node number set to 134418688
[ 1271.008198][T19193] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1271.018218][T19193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.032994][T19193] usb 1-1: config 0 descriptor??
[ 1271.048589][T19193] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1
[ 1271.097869][T24557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.108228][T24557] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.326227][T19190] usb 1-1: USB disconnect, device number 108
[ 1271.347045][T19190] ldusb 1-1:0.55: LD USB Device #1 now disconnected
[ 1271.472665][T24553] imon:send_packet: packet tx failed (-71)
[ 1271.472950][T19193] usb 7-1: USB disconnect, device number 9
[ 1271.492608][T24553] imon:vfd_write: send packet #1 failed
[ 1271.652567][T19188] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1271.747546][T24565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.758394][T24565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.769531][T24565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[ 1271.776045][T24565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1271.787252][T24565] vhci_hcd vhci_hcd.0: Device attached
[ 1271.796825][T24566] vhci_hcd: connection closed
[ 1271.798540][T20868] vhci_hcd vhci_hcd.5: stop threads
[ 1271.810183][T20868] vhci_hcd vhci_hcd.5: release socket
[ 1271.816334][T20868] vhci_hcd vhci_hcd.5: disconnect device
[ 1271.827163][T19188] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1271.837432][T19188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.854694][T19188] usb 5-1: Product: syz
[ 1271.858917][T19188] usb 5-1: Manufacturer: syz
[ 1271.864085][T19188] usb 5-1: SerialNumber: syz
[ 1271.871501][T19188] usb 5-1: config 0 descriptor??
[ 1271.890374][T24569] FAULT_INJECTION: forcing a failure.
[ 1271.890374][T24569] name failslab, interval 1, probability 0, space 0, times 0
[ 1271.907224][T24569] CPU: 0 UID: 0 PID: 24569 Comm: syz.3.5452 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1271.907242][T24569] Tainted: [L]=SOFTLOCKUP
[ 1271.907246][T24569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1271.907252][T24569] Call Trace:
[ 1271.907257][T24569]  <TASK>
[ 1271.907262][T24569]  dump_stack_lvl+0xe8/0x150
[ 1271.907279][T24569]  should_fail_ex+0x412/0x560
[ 1271.907294][T24569]  should_failslab+0xa8/0x100
[ 1271.907305][T24569]  __kmalloc_cache_noprof+0x88/0x660
[ 1271.907321][T24569]  ? tcf_chain_tp_insert_unique+0xbe3/0xff0
[ 1271.907335][T24569]  ? fl_change+0x159/0x3940
[ 1271.907348][T24569]  fl_change+0x159/0x3940
[ 1271.907359][T24569]  ? fl_get+0x9a/0x3b0
[ 1271.907369][T24569]  ? fl_get+0x9a/0x3b0
[ 1271.907381][T24569]  ? fl_get+0x9a/0x3b0
[ 1271.907390][T24569]  ? fl_get+0x9a/0x3b0
[ 1271.907398][T24569]  ? fl_get+0x9a/0x3b0
[ 1271.907408][T24569]  ? fl_get+0x326/0x3b0
[ 1271.907416][T24569]  ? __pfx_fl_change+0x10/0x10
[ 1271.907426][T24569]  ? __pfx_fl_get+0x10/0x10
[ 1271.907439][T24569]  tc_new_tfilter+0xff8/0x1780
[ 1271.907473][T24569]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1271.907501][T24569]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1271.907533][T24569]  ? __pfx_tc_new_tfilter+0x10/0x10
[ 1271.907549][T24569]  rtnetlink_rcv_msg+0x7d5/0xbe0
[ 1271.907568][T24569]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[ 1271.907580][T24569]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1271.907592][T24569]  ? ref_tracker_free+0x693/0x840
[ 1271.907606][T24569]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1271.907616][T24569]  ? __asan_memcpy+0x40/0x70
[ 1271.907628][T24569]  ? __skb_clone+0x63/0x7a0
[ 1271.907641][T24569]  netlink_rcv_skb+0x232/0x4b0
[ 1271.907657][T24569]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1271.907671][T24569]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1271.907691][T24569]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1271.907704][T24569]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1271.907721][T24569]  netlink_unicast+0x75c/0x8e0
[ 1271.907739][T24569]  netlink_sendmsg+0x813/0xb40
[ 1271.907758][T24569]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1271.907774][T24569]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1271.907789][T24569]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1271.907804][T24569]  ____sys_sendmsg+0x972/0x9f0
[ 1271.907814][T24569]  ? __might_fault+0xaf/0x130
[ 1271.907830][T24569]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1271.907844][T24569]  ? import_iovec+0x73/0xa0
[ 1271.907857][T24569]  ___sys_sendmsg+0x2a5/0x360
[ 1271.907866][T24569]  ? __lock_acquire+0x6b5/0x2cf0
[ 1271.907878][T24569]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1271.907905][T24569]  ? __fget_files+0x2a/0x420
[ 1271.907916][T24569]  ? __fget_files+0x3a0/0x420
[ 1271.907940][T24569]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1271.907951][T24569]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1271.907970][T24569]  ? __pfx_ksys_write+0x10/0x10
[ 1271.907988][T24569]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.907998][T24569]  do_syscall_64+0x174/0x580
[ 1271.908009][T24569]  ? trace_irq_disable+0x3b/0x140
[ 1271.908023][T24569]  ? clear_bhb_loop+0x40/0x90
[ 1271.908035][T24569]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1271.908044][T24569] RIP: 0033:0x7f686f99ce59
[ 1271.908056][T24569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1271.908064][T24569] RSP: 002b:00007f6870880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1271.908075][T24569] RAX: ffffffffffffffda RBX: 00007f686fc15fa0 RCX: 00007f686f99ce59
[ 1271.908082][T24569] RDX: 0000000000004080 RSI: 0000200000006040 RDI: 0000000000000004
[ 1271.908088][T24569] RBP: 00007f6870880090 R08: 0000000000000000 R09: 0000000000000000
[ 1271.908094][T24569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1271.908100][T24569] R13: 00007f686fc16038 R14: 00007f686fc15fa0 R15: 00007f686fd3fa48
[ 1271.908115][T24569]  </TASK>
[ 1272.357604][T24571] syzkaller0: entered promiscuous mode
[ 1272.363976][T24571] syzkaller0: entered allmulticast mode
[ 1272.422788][T24563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5450'.
[ 1272.432718][T24573] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5450'.
[ 1272.446685][T19188] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[ 1272.455165][T19188] usb 5-1: Firmware version (0.0) predates our first public release.
[ 1272.464190][T19188] usb 5-1: Please update to version 0.2 or newer
[ 1272.693598][T19188] usb 5-1: Firmware: build â
[ 1272.862232][T19190] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[ 1273.002580][T19201] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1273.024146][T19190] usb 7-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1273.034070][T19190] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.045495][T19190] usb 7-1: config 0 descriptor??
[ 1273.137870][T24593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1273.172475][T19201] usb 4-1: Using ep0 maxpacket: 8
[ 1273.179235][T19201] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1273.190107][T19201] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1273.199933][T19201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1273.210931][T19201] usb 4-1: config 0 descriptor??
[ 1273.227676][T19201] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1273.467486][T19190] hackrf 7-1:0.0: usb_control_msg() failed -71 request 0f
[ 1273.479921][T19190] hackrf 7-1:0.0: Could not detect board
[ 1273.486310][T19190] hackrf 7-1:0.0: probe with driver hackrf failed with error -71
[ 1273.502875][T19190] usb 7-1: USB disconnect, device number 10
[ 1273.637503][T19192] usb 5-1: USB disconnect, device number 4
[ 1273.792418][T19188] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1273.836484][T19201] gspca_vc032x: reg_r err -32
[ 1273.841489][T19201] vc032x 4-1:0.0: probe with driver vc032x failed with error -32
[ 1273.933313][T24605] syzkaller0: entered promiscuous mode
[ 1273.938896][T24605] syzkaller0: entered allmulticast mode
[ 1273.946954][T19188] usb 1-1: Using ep0 maxpacket: 32
[ 1273.955650][T19188] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1273.965592][T19188] usb 1-1: config 0 has no interface number 0
[ 1273.972807][T19188] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1273.984453][T19188] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1273.989820][T24605] FAULT_INJECTION: forcing a failure.
[ 1273.989820][T24605] name failslab, interval 1, probability 0, space 0, times 0
[ 1273.994162][T19188] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1274.004196][T24605] CPU: 1 UID: 0 PID: 24605 Comm: syz.5.5462 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1274.004224][T24605] Tainted: [L]=SOFTLOCKUP
[ 1274.004230][T24605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1274.004257][T24605] Call Trace:
[ 1274.004265][T24605]  <TASK>
[ 1274.004272][T24605]  dump_stack_lvl+0xe8/0x150
[ 1274.004297][T24605]  should_fail_ex+0x412/0x560
[ 1274.004322][T24605]  should_failslab+0xa8/0x100
[ 1274.004338][T24605]  ? skb_clone+0x212/0x3a0
[ 1274.004355][T24605]  kmem_cache_alloc_noprof+0x87/0x650
[ 1274.004375][T24605]  ? dev_queue_xmit_nit+0x2d/0xad0
[ 1274.004404][T24605]  skb_clone+0x212/0x3a0
[ 1274.004419][T24605]  ? dev_queue_xmit_nit+0x268/0xad0
[ 1274.004443][T24605]  dev_queue_xmit_nit+0x29a/0xad0
[ 1274.004464][T24605]  ? dev_queue_xmit_nit+0x2d/0xad0
[ 1274.004496][T24605]  dev_hard_start_xmit+0x1c1/0x830
[ 1274.004529][T24605]  __dev_queue_xmit+0x14d9/0x3950
[ 1274.004545][T24605]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[ 1274.004568][T24605]  ? __dev_queue_xmit+0x2b6/0x3950
[ 1274.004600][T24605]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1274.004627][T24605]  ? __copy_skb_header+0xa3/0x4a0
[ 1274.004644][T24605]  ? __asan_memcpy+0x40/0x70
[ 1274.004662][T24605]  ? __skb_clone+0x63/0x7a0
[ 1274.004683][T24605]  ? __skb_clone+0x483/0x7a0
[ 1274.004706][T24605]  ? skb_clone+0x246/0x3a0
[ 1274.004724][T24605]  __netlink_deliver_tap+0x5ad/0x850
[ 1274.004756][T24605]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1274.004778][T24605]  netlink_deliver_tap+0x19c/0x1b0
[ 1274.004800][T24605]  netlink_unicast+0x730/0x8e0
[ 1274.004826][T24605]  netlink_sendmsg+0x813/0xb40
[ 1274.004856][T24605]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1274.004881][T24605]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1274.004906][T24605]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1274.004929][T24605]  ____sys_sendmsg+0x972/0x9f0
[ 1274.004944][T24605]  ? __might_fault+0xaf/0x130
[ 1274.004970][T24605]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1274.004994][T24605]  ? import_iovec+0x73/0xa0
[ 1274.005017][T24605]  ___sys_sendmsg+0x2a5/0x360
[ 1274.005031][T24605]  ? __lock_acquire+0x6b5/0x2cf0
[ 1274.005052][T24605]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1274.005100][T24605]  ? __fget_files+0x2a/0x420
[ 1274.005118][T24605]  ? __fget_files+0x3a0/0x420
[ 1274.005145][T24605]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1274.005164][T24605]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1274.005189][T24605]  ? __pfx_ksys_write+0x10/0x10
[ 1274.005218][T24605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1274.005235][T24605]  do_syscall_64+0x174/0x580
[ 1274.005262][T24605]  ? clear_bhb_loop+0x40/0x90
[ 1274.005281][T24605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1274.005297][T24605] RIP: 0033:0x7fd238d9ce59
[ 1274.005314][T24605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1274.005326][T24605] RSP: 002b:00007fd239c42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1274.005343][T24605] RAX: ffffffffffffffda RBX: 00007fd239015fa0 RCX: 00007fd238d9ce59
[ 1274.005355][T24605] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 000000000000000b
[ 1274.005366][T24605] RBP: 00007fd239c42090 R08: 0000000000000000 R09: 0000000000000000
[ 1274.005376][T24605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1274.005386][T24605] R13: 00007fd239016038 R14: 00007fd239015fa0 R15: 00007fd23913fa48
[ 1274.005413][T24605]  </TASK>
[ 1274.007753][T24605] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1274.015214][T19188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.102161][T19192] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1274.274049][T19192] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1274.275460][T19188] usb 1-1: Product: syz
[ 1274.320471][T19192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1274.323435][T19192] usb 5-1: config 0 descriptor??
[ 1274.330532][T19188] usb 1-1: Manufacturer: syz
[ 1274.337428][T24604] tipc: Resetting bearer <eth:syzkaller0>
[ 1274.347580][T19188] usb 1-1: SerialNumber: syz
[ 1274.435432][T19188] usb 1-1: config 0 descriptor??
[ 1274.473898][T24604] tipc: Disabling bearer <eth:syzkaller0>
[ 1274.637083][T24609] syzkaller1: entered promiscuous mode
[ 1274.646424][T24609] syzkaller1: entered allmulticast mode
[ 1274.773014][T19192] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f
[ 1274.788133][T19192] hackrf 5-1:0.0: Could not detect board
[ 1274.802567][T19192] hackrf 5-1:0.0: probe with driver hackrf failed with error -71
[ 1274.825920][T19192] usb 5-1: USB disconnect, device number 5
[ 1274.890289][T24615] syzkaller0: entered promiscuous mode
[ 1274.901755][T24615] syzkaller0: entered allmulticast mode
[ 1275.125399][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5470'.
[ 1275.135839][T24622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5470'.
[ 1275.229546][T19188] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1275.250136][T19188] cx231xx 1-1:0.1: Not found matching IAD interface
[ 1275.272815][T19188] usb 1-1: USB disconnect, device number 109
[ 1275.294629][T19192] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[ 1275.452071][T19192] usb 7-1: Using ep0 maxpacket: 8
[ 1275.495461][T19192] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1275.510476][T19192] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1275.531432][T19192] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1275.564769][T19192] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1275.586709][T19192] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1275.605756][T19185] usb 4-1: USB disconnect, device number 95
[ 1275.611791][T19192] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1275.632079][T19192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1275.702595][T19188] usb 1-1: new full-speed USB device number 110 using dummy_hcd
[ 1275.802521][T19187] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1275.851747][T19192] usb 7-1: usb_control_msg returned -32
[ 1275.863968][T19192] usbtmc 7-1:16.0: can't read capabilities
[ 1275.864160][T24618] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[ 1275.877034][T24618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1275.885468][T19188] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1275.902612][T19188] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1275.923894][T24618] vhci_hcd vhci_hcd.0: Device attached
[ 1275.934912][T19188] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1275.947646][T24640] vhci_hcd: connection closed
[ 1275.947878][T19188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1275.947885][T20881] vhci_hcd vhci_hcd.6: stop threads
[ 1275.947910][T20881] vhci_hcd vhci_hcd.6: release socket
[ 1275.962257][T19188] usb 1-1: Product: syz
[ 1275.971413][T19192] usb 7-1: USB disconnect, device number 11
[ 1275.971733][T19187] usb 5-1: Using ep0 maxpacket: 16
[ 1275.993362][T19188] usb 1-1: Manufacturer: syz
[ 1275.998018][T19188] usb 1-1: SerialNumber: syz
[ 1276.001855][T20881] vhci_hcd vhci_hcd.6: disconnect device
[ 1276.010819][T19187] usb 5-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1276.025800][T19188] usb 1-1: 0:2 : does not exist
[ 1276.030732][T19188] usb 1-1: unit 9 not found!
[ 1276.039326][T19187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1276.048049][T19185] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1276.062898][T19187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1276.079856][T19187] usb 5-1: config 0 has an invalid interface number: 125 but max is 1
[ 1276.093841][T19187] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1276.104693][T19187] usb 5-1: config 0 has no interface number 0
[ 1276.110911][T19187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1276.122731][T19187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1276.133170][T19187] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1276.144542][T19187] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1276.158263][T19187] usb 5-1: config 0 interface 125 has no altsetting 0
[ 1276.165612][T19187] usb 5-1: config 0 interface 125 has no altsetting 2
[ 1276.175716][T19187] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1276.185172][T19187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.193765][T19187] usb 5-1: Product: syz
[ 1276.197966][T19187] usb 5-1: Manufacturer: syz
[ 1276.203728][T19187] usb 5-1: SerialNumber: syz
[ 1276.211901][T19187] usb 5-1: config 0 descriptor??
[ 1276.227180][T19185] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1276.242913][T19187] usb 5-1: selecting invalid altsetting 2
[ 1276.250732][T19185] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1276.263142][T19188] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4)
[ 1276.272772][T19185] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1276.283266][T19185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.295666][T19185] usb 4-1: Product: syz
[ 1276.300240][T19185] usb 4-1: Manufacturer: syz
[ 1276.305777][T19185] usb 4-1: SerialNumber: syz
[ 1276.313131][T19188] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4)
[ 1276.335783][T19185] usb 4-1: config 0 descriptor??
[ 1276.346555][T19188] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4)
[ 1276.355086][T19185] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 1276.370458][T19188] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4)
[ 1276.379357][T19185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1276.390641][T19185] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 1276.401250][T19185] usb 4-1: media controller created
[ 1276.416484][T19188] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4)
[ 1276.446367][T19185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1276.462756][T19188] usb 1-1: 4:0: cannot get min/max values for control 7 (id 4)
[ 1276.464465][T24644] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1276.499865][T19188] usb 1-1: 4:0: cannot get min/max values for control 8 (id 4)
[ 1276.548506][T24639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1276.578511][T24639] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1276.634334][T19185] DVB: Unable to find symbol tda10046_attach()
[ 1276.645401][T19188] usb 1-1: USB disconnect, device number 110
[ 1276.656476][T19185] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 1276.690343][T19185] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 1276.927171][T24652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1276.938774][T24653] xt_hashlimit: size too large, truncated to 1048576
[ 1276.940205][T19185] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 1276.983968][T19185] usb 4-1: USB disconnect, device number 96
[ 1277.259340][T24662] syzkaller0: entered promiscuous mode
[ 1277.267830][T24662] syzkaller0: entered allmulticast mode
[ 1277.284744][T19187] get_1284_register timeout
[ 1277.291315][    C0] usb 5-1: async_complete: urb error -104
[ 1277.297154][    C0] usb 5-1: async_complete: urb error -104
[ 1277.424060][T24664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1277.433434][T24664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1277.450411][   T30] audit: type=1326 audit(1780475554.839:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.476803][   T30] audit: type=1326 audit(1780475554.839:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.530532][   T30] audit: type=1326 audit(1780475554.869:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.584503][   T30] audit: type=1326 audit(1780475554.899:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.619426][   T30] audit: type=1326 audit(1780475554.899:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.660924][T24664] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1277.679684][   T30] audit: type=1326 audit(1780475554.969:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.713955][   T30] audit: type=1326 audit(1780475554.969:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.744078][   T30] audit: type=1326 audit(1780475554.969:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.849629][   T30] audit: type=1326 audit(1780475554.969:4687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.874559][T19187] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1277.895258][T24670] syzkaller0: entered promiscuous mode
[ 1277.900981][T24670] syzkaller0: entered allmulticast mode
[ 1277.907387][   T30] audit: type=1326 audit(1780475554.969:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24663 comm="syz.5.5485" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd238d9ce59 code=0x7ffc0000
[ 1277.988941][T24674] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5488'.
[ 1278.045320][T19187] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1278.055370][T19187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1278.068371][T19187] usb 1-1: config 0 descriptor??
[ 1278.488417][T19187] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[ 1278.498848][T19187] hackrf 1-1:0.0: Could not detect board
[ 1278.519040][T19187] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[ 1278.558452][T19187] usb 1-1: USB disconnect, device number 111
[ 1278.634231][T19193] usb 5-1: USB disconnect, device number 6
[ 1278.748711][T24684] FAULT_INJECTION: forcing a failure.
[ 1278.748711][T24684] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1278.764297][T24684] CPU: 1 UID: 0 PID: 24684 Comm: syz.6.5492 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1278.764324][T24684] Tainted: [L]=SOFTLOCKUP
[ 1278.764330][T24684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1278.764340][T24684] Call Trace:
[ 1278.764348][T24684]  <TASK>
[ 1278.764356][T24684]  dump_stack_lvl+0xe8/0x150
[ 1278.764382][T24684]  should_fail_ex+0x412/0x560
[ 1278.764405][T24684]  _copy_from_user+0x2d/0xb0
[ 1278.764427][T24684]  ___sys_sendmsg+0x1c6/0x360
[ 1278.764444][T24684]  ? __lock_acquire+0x6b5/0x2cf0
[ 1278.764467][T24684]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1278.764514][T24684]  ? __fget_files+0x2a/0x420
[ 1278.764533][T24684]  ? __fget_files+0x3a0/0x420
[ 1278.764560][T24684]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1278.764580][T24684]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1278.764603][T24684]  ? __pfx_ksys_write+0x10/0x10
[ 1278.764631][T24684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1278.764648][T24684]  do_syscall_64+0x174/0x580
[ 1278.764664][T24684]  ? trace_irq_disable+0x3b/0x140
[ 1278.764686][T24684]  ? clear_bhb_loop+0x40/0x90
[ 1278.764704][T24684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1278.764720][T24684] RIP: 0033:0x7fcf8bd9ce59
[ 1278.764737][T24684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1278.764751][T24684] RSP: 002b:00007fcf8cbe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1278.764769][T24684] RAX: ffffffffffffffda RBX: 00007fcf8c015fa0 RCX: 00007fcf8bd9ce59
[ 1278.764781][T24684] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003
[ 1278.764792][T24684] RBP: 00007fcf8cbe8090 R08: 0000000000000000 R09: 0000000000000000
[ 1278.764802][T24684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1278.764819][T24684] R13: 00007fcf8c016038 R14: 00007fcf8c015fa0 R15: 00007fcf8c13fa48
[ 1278.764849][T24684]  </TASK>
[ 1279.232158][T19193] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1279.265581][T24690] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1279.392147][T19193] usb 5-1: Using ep0 maxpacket: 8
[ 1279.399900][T19193] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1279.410456][T19193] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1279.421100][T19193] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1279.432441][T19193] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1279.444313][T19193] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1279.459494][T19193] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1279.469846][T19193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1279.696357][T19193] usb 5-1: usb_control_msg returned -32
[ 1279.704369][T24682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[ 1279.711346][T24682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1279.719426][T19193] usbtmc 5-1:16.0: can't read capabilities
[ 1279.737476][T24682] vhci_hcd vhci_hcd.0: Device attached
[ 1279.780960][T24697] vhci_hcd: connection closed
[ 1279.786252][T20833] vhci_hcd vhci_hcd.4: stop threads
[ 1279.801946][ T5732] usb 5-1: USB disconnect, device number 7
[ 1279.824377][T20833] vhci_hcd vhci_hcd.4: release socket
[ 1279.835628][T20833] vhci_hcd vhci_hcd.4: disconnect device
[ 1280.406232][T19193] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[ 1280.445060][T24710] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5500'.
[ 1280.573960][T19193] usb 7-1: Using ep0 maxpacket: 8
[ 1280.585893][T19193] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1280.595415][T19193] usb 7-1: config 0 has no interface number 0
[ 1280.601635][T19193] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1280.612809][T19193] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1280.626724][T19193] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1280.632718][T19187] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1280.638839][T19193] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1280.692993][T19193] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1280.713798][T19193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1280.736816][T19193] usb 7-1: config 0 descriptor??
[ 1280.763212][T24718] netlink: 'syz.0.5504': attribute type 15 has an invalid length.
[ 1280.764765][T19193] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1280.798744][T24718] netlink: 666 bytes leftover after parsing attributes in process `syz.0.5504'.
[ 1280.822606][T19187] usb 5-1: Using ep0 maxpacket: 32
[ 1280.831843][T19187] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1280.854368][T19187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1280.877272][T19187] usb 5-1: config 0 has no interface number 0
[ 1280.898661][T19187] usb 5-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1280.921794][T19187] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1280.941769][T19187] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1280.957362][T19187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.974418][T19187] usb 5-1: Product: syz
[ 1280.981571][T19187] usb 5-1: Manufacturer: syz
[ 1280.997925][T19187] usb 5-1: SerialNumber: syz
[ 1281.019334][T19187] usb 5-1: config 0 descriptor??
[ 1281.046452][T19187] f81534 5-1:0.12: required endpoints missing
[ 1281.089621][T19192] usb 7-1: USB disconnect, device number 12
[ 1281.095796][    C1] ldusb 7-1:0.55: usb_submit_urb failed (-19)
[ 1281.113115][T24703] ldusb 7-1:0.55: Couldn't submit interrupt_out_urb -19
[ 1281.156411][T19192] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1281.278099][T24726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1281.305338][T24726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1281.779146][T24742] netlink: 'syz.6.5511': attribute type 10 has an invalid length.
[ 1281.815921][T24742] 8021q: adding VLAN 0 to HW filter on device team0
[ 1281.830969][T24742] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1281.942211][T19193] usb 4-1: new full-speed USB device number 97 using dummy_hcd
[ 1281.955341][T24744] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5512'.
[ 1281.962596][T19187] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1282.144805][T19187] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1282.162993][T19187] usb 1-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config
[ 1282.176675][T19187] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1282.193193][T19187] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1282.203987][T19187] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.213908][T19187] usb 1-1: Product: syz
[ 1282.218286][T19187] usb 1-1: Manufacturer: syz
[ 1282.224213][T19187] usb 1-1: SerialNumber: syz
[ 1282.238968][T19187] usb 1-1: selecting invalid altsetting 1
[ 1282.262121][T19187] usb 1-1: unit 6 not found!
[ 1282.739089][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1282.763549][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1282.884634][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1282.920121][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1283.090018][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1283.106926][T24756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5510'.
[ 1283.228364][T19187] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1283.258380][T19187] usb 1-1: USB disconnect, device number 112
[ 1283.306429][ T8997] udevd[8997]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1283.439209][   T30] kauditd_printk_skb: 78 callbacks suppressed
[ 1283.439224][   T30] audit: type=1326 audit(1780475560.829:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.455594][ T5732] usb 5-1: USB disconnect, device number 8
[ 1283.479597][   T30] audit: type=1326 audit(1780475560.869:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.540722][   T30] audit: type=1326 audit(1780475560.869:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.607604][   T30] audit: type=1326 audit(1780475560.869:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.656543][T24773] fuse: Bad value for 'user_id'
[ 1283.663349][T24773] fuse: Bad value for 'user_id'
[ 1283.669092][   T30] audit: type=1326 audit(1780475560.899:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.696043][   T30] audit: type=1326 audit(1780475560.899:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.725061][   T30] audit: type=1326 audit(1780475560.899:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.756386][   T30] audit: type=1326 audit(1780475560.899:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.793867][   T30] audit: type=1326 audit(1780475560.899:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1283.821476][   T30] audit: type=1326 audit(1780475560.899:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24768 comm="syz.6.5517" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x7ffc0000
[ 1284.069990][T24779] FAULT_INJECTION: forcing a failure.
[ 1284.069990][T24779] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1284.090559][T24779] CPU: 0 UID: 0 PID: 24779 Comm: syz.4.5522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1284.090585][T24779] Tainted: [L]=SOFTLOCKUP
[ 1284.090592][T24779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1284.090602][T24779] Call Trace:
[ 1284.090609][T24779]  <TASK>
[ 1284.090617][T24779]  dump_stack_lvl+0xe8/0x150
[ 1284.090642][T24779]  should_fail_ex+0x412/0x560
[ 1284.090664][T24779]  _copy_from_user+0x2d/0xb0
[ 1284.090684][T24779]  ___sys_sendmsg+0x1c6/0x360
[ 1284.090701][T24779]  ? __lock_acquire+0x6b5/0x2cf0
[ 1284.090721][T24779]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1284.090734][T24779]  ? __lock_acquire+0x6b5/0x2cf0
[ 1284.090753][T24779]  ? kstrtouint+0x6e/0xe0
[ 1284.090806][T24779]  __sys_sendmmsg+0x27c/0x4e0
[ 1284.090827][T24779]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1284.090841][T24779]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1284.090880][T24779]  ? ksys_write+0x242/0x270
[ 1284.090904][T24779]  ? __pfx_ksys_write+0x10/0x10
[ 1284.090930][T24779]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1284.090947][T24779]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1284.090963][T24779]  do_syscall_64+0x174/0x580
[ 1284.090980][T24779]  ? trace_irq_disable+0x3b/0x140
[ 1284.091001][T24779]  ? clear_bhb_loop+0x40/0x90
[ 1284.091020][T24779]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1284.091036][T24779] RIP: 0033:0x7f202d19ce59
[ 1284.091053][T24779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1284.091066][T24779] RSP: 002b:00007f202e089028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1284.091084][T24779] RAX: ffffffffffffffda RBX: 00007f202d415fa0 RCX: 00007f202d19ce59
[ 1284.091096][T24779] RDX: 04924924924923d5 RSI: 0000200000000b80 RDI: 0000000000000004
[ 1284.091108][T24779] RBP: 00007f202e089090 R08: 0000000000000000 R09: 0000000000000000
[ 1284.091118][T24779] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002
[ 1284.091128][T24779] R13: 00007f202d416038 R14: 00007f202d415fa0 R15: 00007f202d53fa48
[ 1284.091155][T24779]  </TASK>
[ 1284.277313][T24786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1284.284344][T19188] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[ 1284.312448][ T5732] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[ 1284.345486][T24786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1284.484297][ T5732] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1284.484456][T19188] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1284.497184][ T5732] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1284.503282][T19188] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1284.520649][T19188] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[ 1284.530672][T19188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1284.539381][T19188] usb 7-1: Product: syz
[ 1284.544115][T19188] usb 7-1: Manufacturer: syz
[ 1284.545729][ T5732] usb 1-1: config 0 descriptor??
[ 1284.548814][T19188] usb 7-1: SerialNumber: syz
[ 1284.563513][T19188] usb 7-1: config 0 descriptor??
[ 1284.587382][T19188] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[ 1284.599535][T19188] pctv452e: pctv452e_power_ctrl: 1
[ 1284.599535][T19188] 
[ 1284.952285][T19193] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 1284.996634][ T5732] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[ 1285.008575][ T5732] hackrf 1-1:0.0: Could not detect board
[ 1285.014533][ T5732] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[ 1285.025422][ T5732] usb 1-1: USB disconnect, device number 113
[ 1285.102436][T19193] usb 4-1: Using ep0 maxpacket: 32
[ 1285.109409][T19193] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[ 1285.120985][T19193] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1285.142177][T19193] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1285.154736][T19193] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1285.182359][T19193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.190426][T19193] usb 4-1: Product: syz
[ 1285.202249][T19193] usb 4-1: Manufacturer: syz
[ 1285.208348][T19193] usb 4-1: SerialNumber: syz
[ 1285.224885][T19193] usb 4-1: config 0 descriptor??
[ 1285.233616][T24793] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1285.538408][T19189] IPVS: starting estimator thread 0...
[ 1285.645177][T24804] IPVS: using max 31 ests per chain, 74400 per kthread
[ 1285.655564][T19193] gs_usb 4-1:0.0: Configuring for 1 interfaces
[ 1285.702140][T19190] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1285.862471][T19190] usb 5-1: Using ep0 maxpacket: 32
[ 1285.872604][T19190] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1285.884974][T19190] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[ 1285.901610][T19190] usb 5-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40
[ 1285.912646][T19190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.920899][T19190] usb 5-1: Product: syz
[ 1285.927872][T19190] usb 5-1: Manufacturer: syz
[ 1285.933021][T19190] usb 5-1: SerialNumber: syz
[ 1285.999234][T24815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5535'.
[ 1286.058505][T19193] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[ 1286.068535][T19193] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22
[ 1286.263052][T19189] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1286.268002][T24793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1286.291206][T24793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1286.334969][T19193] usb 4-1: USB disconnect, device number 98
[ 1286.442567][T19189] usb 1-1: Using ep0 maxpacket: 8
[ 1286.451177][T19189] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1286.461753][T19189] usb 1-1: config index 0 descriptor too short (expected 8192, got 63)
[ 1286.470730][T19189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1286.481418][T19189] usb 1-1: config 0 has no interfaces?
[ 1286.490080][T19189] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1286.499890][T19189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1286.508494][T19189] usb 1-1: Product: syz
[ 1286.513385][T19189] usb 1-1: Manufacturer: syz
[ 1286.518054][T19189] usb 1-1: SerialNumber: syz
[ 1286.526310][T19189] usb 1-1: config 0 descriptor??
[ 1286.736975][T19190] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1286.761601][T19190] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1286.770519][T19190] usb 5-1: unit 3 not found!
[ 1286.776133][T19190] usb 5-1: unit 8 not found!
[ 1286.815840][T19188] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -71
[ 1286.815840][T19188] 
[ 1286.815865][T19188] dvb-usb: bulk message failed: -22 (5/0)
[ 1286.844839][T19188] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1286.863071][T19188] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[ 1286.881497][T19190] usb 5-1: USB disconnect, device number 9
[ 1286.895052][T19188] usb 7-1: USB disconnect, device number 13
[ 1287.026470][T23922] udevd[23922]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1287.042504][T24826] syzkaller0: entered promiscuous mode
[ 1287.082661][T24826] syzkaller0: entered allmulticast mode
[ 1287.362189][T19188] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 1287.412114][T19190] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1287.492105][T19193] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[ 1287.512567][T19188] usb 4-1: Using ep0 maxpacket: 16
[ 1287.519735][T19188] usb 4-1: config 8 has an invalid interface number: 39 but max is 0
[ 1287.529523][T19188] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.540969][T19188] usb 4-1: config 8 has no interface number 0
[ 1287.548011][T19188] usb 4-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1287.564370][T19188] usb 4-1: config 8 interface 39 has no altsetting 0
[ 1287.577047][T19188] usb 4-1: New USB device found, idVendor=05ac, idProduct=c6e7, bcdDevice=62.77
[ 1287.587389][T19188] usb 4-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3
[ 1287.593908][T19190] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1287.596656][T19188] usb 4-1: Product: syz
[ 1287.614396][T19188] usb 4-1: Manufacturer: syz
[ 1287.619120][T19188] usb 4-1: SerialNumber: syz
[ 1287.626223][T19190] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1287.652575][T19190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.666879][T19190] usb 5-1: config 0 descriptor??
[ 1287.676599][T19193] usb 7-1: Using ep0 maxpacket: 8
[ 1287.687190][T19190] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1287.696281][T19193] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.712710][T19193] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1287.723541][T19193] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1287.738099][T19193] usb 7-1: config 0 descriptor??
[ 1287.755504][T19193] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1287.836633][T24826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1287.851587][T24826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1287.863835][T24826] TC_ACT_REPEAT abuse ?
[ 1287.875328][T19188] ipheth 4-1:8.39: Unable to find endpoints
[ 1287.905930][T19188] usb 4-1: USB disconnect, device number 99
[ 1288.367646][T19193] gspca_vc032x: reg_r err -32
[ 1288.372695][T19193] vc032x 7-1:0.0: probe with driver vc032x failed with error -32
[ 1289.005229][T19189] usb 1-1: USB disconnect, device number 114
[ 1289.432623][T19189] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1289.596157][T19189] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1289.606214][T19189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.621044][T19189] usb 1-1: config 0 descriptor??
[ 1289.902994][T19193] usb 5-1: USB disconnect, device number 10
[ 1290.090875][T19189] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[ 1290.103640][T19189] hackrf 1-1:0.0: Could not detect board
[ 1290.109136][T19193] usb 7-1: USB disconnect, device number 14
[ 1290.129742][T19189] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[ 1290.177480][T19189] usb 1-1: USB disconnect, device number 115
[ 1290.318912][T24848] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1290.607479][ T5692] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1290.767796][ T5692] usb 5-1: config 0 has an invalid interface number: 199 but max is 1
[ 1290.776338][ T5692] usb 5-1: config 0 has no interface number 1
[ 1290.782677][ T5692] usb 5-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0
[ 1290.816942][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1290.818495][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1290.818509][   T30] audit: type=1326 audit(1780475568.209:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24844 comm="syz.6.5545" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf8bd9ce59 code=0x0
[ 1290.828039][ T5692] usb 5-1: config 0 interface 199 has no altsetting 0
[ 1290.829191][ T5692] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1290.893944][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1290.902143][ T5692] usb 5-1: SerialNumber: syz
[ 1290.939837][ T5692] usb 5-1: config 0 descriptor??
[ 1291.075106][T24856] fuse: Unknown parameter '00000000000000000000'
[ 1291.085543][T24856] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5548'.
[ 1291.142698][T19189] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[ 1291.171257][T24848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5546'.
[ 1291.309850][T19189] usb 7-1: config 13 has an invalid descriptor of length 28, skipping remainder of the config
[ 1291.406026][T19189] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[ 1291.415832][T19189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1291.425053][T19189] usb 7-1: Product: syz
[ 1291.448829][T19189] usb 7-1: Manufacturer: syz
[ 1291.453996][T19189] usb 7-1: SerialNumber: syz
[ 1291.777458][T19189] gspca_main: pac207-2.14.0 probing 093a:2476
[ 1291.784444][T19189] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[ 1291.795120][T19189] usb 7-1: USB disconnect, device number 15
[ 1293.953138][ T5692] uvcvideo 5-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1293.961056][ T5692] uvcvideo 5-1:0.199: No valid video chain found.
[ 1294.035382][ T5692] usb 5-1: USB disconnect, device number 11
[ 1294.164299][T24870] FAULT_INJECTION: forcing a failure.
[ 1294.164299][T24870] name failslab, interval 1, probability 0, space 0, times 0
[ 1294.177689][T24870] CPU: 1 UID: 0 PID: 24870 Comm: syz.5.5550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1294.177717][T24870] Tainted: [L]=SOFTLOCKUP
[ 1294.177723][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1294.177733][T24870] Call Trace:
[ 1294.177740][T24870]  <TASK>
[ 1294.177748][T24870]  dump_stack_lvl+0xe8/0x150
[ 1294.177773][T24870]  should_fail_ex+0x412/0x560
[ 1294.177797][T24870]  should_failslab+0xa8/0x100
[ 1294.177815][T24870]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1294.177844][T24870]  ? __alloc_skb+0x1d0/0x7d0
[ 1294.177873][T24870]  ? __local_bh_enable_ip+0xd0/0x130
[ 1294.177896][T24870]  __alloc_skb+0x1d0/0x7d0
[ 1294.177921][T24870]  _sctp_make_chunk+0x59/0x290
[ 1294.177943][T24870]  sctp_make_datafrag_empty+0x12a/0x240
[ 1294.177964][T24870]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[ 1294.177985][T24870]  ? sctp_user_addto_chunk+0xa8/0x240
[ 1294.178010][T24870]  sctp_datamsg_from_user+0x729/0xef0
[ 1294.178052][T24870]  sctp_sendmsg_to_asoc+0x1416/0x1900
[ 1294.178089][T24870]  ? sctp_transport_put+0xd2/0x150
[ 1294.178111][T24870]  ? sctp_epaddr_lookup_transport+0x925/0x9d0
[ 1294.178135][T24870]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[ 1294.178187][T24870]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1294.178206][T24870]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1294.178224][T24870]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[ 1294.178242][T24870]  ? sctp_sendmsg_check_sflags+0x18a/0x330
[ 1294.178266][T24870]  sctp_sendmsg+0x1b85/0x2c50
[ 1294.178301][T24870]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1294.178323][T24870]  ? aa_sk_perm+0x6d5/0x900
[ 1294.178344][T24870]  ? __might_fault+0xaf/0x130
[ 1294.178369][T24870]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1294.178392][T24870]  ? sock_rps_record_flow+0x19/0x350
[ 1294.178411][T24870]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1294.178429][T24870]  ? inet_sendmsg+0x2f4/0x370
[ 1294.178445][T24870]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1294.178466][T24870]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1294.178485][T24870]  __sys_sendto+0x5de/0x710
[ 1294.178511][T24870]  ? __pfx___sys_sendto+0x10/0x10
[ 1294.178529][T24870]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1294.178560][T24870]  ? __fget_files+0x3a0/0x420
[ 1294.178588][T24870]  ? ksys_write+0x242/0x270
[ 1294.178612][T24870]  ? __pfx_ksys_write+0x10/0x10
[ 1294.178637][T24870]  __x64_sys_sendto+0xde/0x100
[ 1294.178658][T24870]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.178673][T24870]  do_syscall_64+0x174/0x580
[ 1294.178687][T24870]  ? trace_irq_disable+0x3b/0x140
[ 1294.178708][T24870]  ? clear_bhb_loop+0x40/0x90
[ 1294.178725][T24870]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1294.178739][T24870] RIP: 0033:0x7fd238d9ce59
[ 1294.178754][T24870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1294.178766][T24870] RSP: 002b:00007fd239c21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1294.178783][T24870] RAX: ffffffffffffffda RBX: 00007fd239016090 RCX: 00007fd238d9ce59
[ 1294.178795][T24870] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003
[ 1294.178806][T24870] RBP: 00007fd239c21090 R08: 0000200000000380 R09: 0000000000000010
[ 1294.178816][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1294.178826][T24870] R13: 00007fd239016128 R14: 00007fd239016090 R15: 00007fd23913fa48
[ 1294.178850][T24870]  </TASK>
[ 1294.569775][T24872] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5552'.
[ 1294.782518][T19189] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[ 1294.934943][T19189] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1294.954857][ T5692] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1294.982487][T19189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1295.027449][T19189] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1295.045699][T19189] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1295.061743][T19189] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1295.073997][T24879] FAULT_INJECTION: forcing a failure.
[ 1295.073997][T24879] name failslab, interval 1, probability 0, space 0, times 0
[ 1295.091566][T19189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.102573][T24879] CPU: 0 UID: 0 PID: 24879 Comm: syz.5.5555 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1295.102599][T24879] Tainted: [L]=SOFTLOCKUP
[ 1295.102689][T24879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1295.102698][T24879] Call Trace:
[ 1295.102705][T24879]  <TASK>
[ 1295.102712][T24879]  dump_stack_lvl+0xe8/0x150
[ 1295.102735][T24879]  should_fail_ex+0x412/0x560
[ 1295.102758][T24879]  should_failslab+0xa8/0x100
[ 1295.102772][T24879]  ? sk_prot_alloc+0x57/0x210
[ 1295.102793][T24879]  kmem_cache_alloc_noprof+0x87/0x650
[ 1295.102821][T24879]  sk_prot_alloc+0x57/0x210
[ 1295.102840][T24879]  ? sk_alloc+0x27/0x390
[ 1295.102863][T24879]  sk_alloc+0x3a/0x390
[ 1295.102889][T24879]  inet_create+0x7a0/0x1000
[ 1295.102909][T24879]  ? inet_create+0x9c/0x1000
[ 1295.102932][T24879]  __sock_create+0x4b2/0x9d0
[ 1295.102958][T24879]  mptcp_pm_nl_add_addr_doit+0x4ea/0x1420
[ 1295.103081][T24879]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1295.103101][T24879]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[ 1295.103131][T24879]  ? rcu_is_watching+0x15/0xb0
[ 1295.103149][T24879]  ? trace_kmalloc+0x2a/0xf0
[ 1295.103182][T24879]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1295.103201][T24879]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1295.103226][T24879]  genl_family_rcv_msg_doit+0x22a/0x330
[ 1295.103245][T24879]  ? __asan_memcpy+0x40/0x70
[ 1295.103268][T24879]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1295.103299][T24879]  ? bpf_lsm_capable+0x9/0x20
[ 1295.103315][T24879]  ? security_capable+0x7e/0x2c0
[ 1295.103341][T24879]  genl_rcv_msg+0x61c/0x7a0
[ 1295.103365][T24879]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1295.103383][T24879]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[ 1295.103406][T24879]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1295.103424][T24879]  ? __asan_memcpy+0x40/0x70
[ 1295.103441][T24879]  ? __skb_clone+0x63/0x7a0
[ 1295.103465][T24879]  netlink_rcv_skb+0x232/0x4b0
[ 1295.103489][T24879]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1295.103509][T24879]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1295.103543][T24879]  ? down_read+0x270/0x2e0
[ 1295.103558][T24879]  ? genl_rcv+0xd/0x40
[ 1295.103576][T24879]  genl_rcv+0x28/0x40
[ 1295.103591][T24879]  netlink_unicast+0x75c/0x8e0
[ 1295.103629][T24879]  netlink_sendmsg+0x813/0xb40
[ 1295.103658][T24879]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1295.103683][T24879]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1295.103706][T24879]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1295.103728][T24879]  ____sys_sendmsg+0x972/0x9f0
[ 1295.103744][T24879]  ? __might_fault+0xaf/0x130
[ 1295.103768][T24879]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1295.103792][T24879]  ? import_iovec+0x73/0xa0
[ 1295.103814][T24879]  ___sys_sendmsg+0x2a5/0x360
[ 1295.103830][T24879]  ? __lock_acquire+0x6b5/0x2cf0
[ 1295.103852][T24879]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1295.103901][T24879]  ? __fget_files+0x2a/0x420
[ 1295.103920][T24879]  ? __fget_files+0x3a0/0x420
[ 1295.103948][T24879]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1295.103968][T24879]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1295.103994][T24879]  ? __pfx_ksys_write+0x10/0x10
[ 1295.104024][T24879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.104043][T24879]  do_syscall_64+0x174/0x580
[ 1295.104059][T24879]  ? trace_irq_disable+0x3b/0x140
[ 1295.104081][T24879]  ? clear_bhb_loop+0x40/0x90
[ 1295.104101][T24879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1295.104117][T24879] RIP: 0033:0x7fd238d9ce59
[ 1295.104134][T24879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1295.104148][T24879] RSP: 002b:00007fd239c42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1295.104167][T24879] RAX: ffffffffffffffda RBX: 00007fd239015fa0 RCX: 00007fd238d9ce59
[ 1295.104179][T24879] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[ 1295.104189][T24879] RBP: 00007fd239c42090 R08: 0000000000000000 R09: 0000000000000000
[ 1295.104199][T24879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1295.104209][T24879] R13: 00007fd239016038 R14: 00007fd239015fa0 R15: 00007fd23913fa48
[ 1295.104238][T24879]  </TASK>
[ 1295.105309][T19189] usb 7-1: config 0 descriptor??
[ 1295.116295][T24878] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5554'.
[ 1295.515981][ T5692] usb 5-1: Using ep0 maxpacket: 8
[ 1295.540247][T19189] usbhid 7-1:0.0: can't add hid device: -71
[ 1295.560264][ T5692] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1295.568983][T19189] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 1295.571379][ T5692] usb 5-1: config index 0 descriptor too short (expected 8192, got 63)
[ 1295.586325][T19189] usb 7-1: USB disconnect, device number 16
[ 1295.611901][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.665620][ T5692] usb 5-1: config 0 has no interfaces?
[ 1295.696157][ T5692] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1295.712869][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1295.722482][ T5692] usb 5-1: Product: syz
[ 1295.731248][ T5692] usb 5-1: Manufacturer: syz
[ 1295.750462][ T5692] usb 5-1: SerialNumber: syz
[ 1295.767864][ T5692] usb 5-1: config 0 descriptor??
[ 1296.042257][T19193] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1296.229285][T19193] usb 1-1: Using ep0 maxpacket: 16
[ 1296.250349][T19193] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1296.286057][T19193] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[ 1296.308489][T19193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.340358][T19193] usb 1-1: config 0 descriptor??
[ 1296.552639][T19187] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 1296.632890][T24901] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5563'.
[ 1296.725479][T19187] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1296.766881][T19187] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1296.827209][T19187] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1296.844825][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.853614][T19187] usb 7-1: config 0 descriptor??
[ 1296.871611][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.881458][T24906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1296.891321][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.901083][T24906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1296.909566][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.917064][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.924803][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.935041][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.942833][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.950117][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.957205][T19193] sony 0003:054C:024B.00FD: unknown main item tag 0x0
[ 1296.978602][T19193] sony 0003:054C:024B.00FD: hiddev0,hidraw0: USB HID v0.08 Device [HID 054c:024b] on usb-dummy_hcd.0-1/input0
[ 1296.991890][T19193] sony 0003:054C:024B.00FD: failed to claim input
[ 1297.039520][T19193] usb 1-1: USB disconnect, device number 116
[ 1297.078585][T24907] fido_id[24907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1297.167848][ T5692] usb 5-1: USB disconnect, device number 12
[ 1297.214932][T24909] syzkaller0: entered promiscuous mode
[ 1297.220440][T24909] syzkaller0: entered allmulticast mode
[ 1297.229690][T24909] FAULT_INJECTION: forcing a failure.
[ 1297.229690][T24909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1297.243318][T24909] CPU: 1 UID: 0 PID: 24909 Comm: syz.4.5566 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1297.243345][T24909] Tainted: [L]=SOFTLOCKUP
[ 1297.243351][T24909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1297.243362][T24909] Call Trace:
[ 1297.243369][T24909]  <TASK>
[ 1297.243377][T24909]  dump_stack_lvl+0xe8/0x150
[ 1297.243401][T24909]  should_fail_ex+0x412/0x560
[ 1297.243422][T24909]  _copy_from_iter+0x3b0/0x1670
[ 1297.243439][T24909]  ? __pfx__copy_from_iter+0x10/0x10
[ 1297.243452][T24909]  ? __pfx__copy_from_iter+0x10/0x10
[ 1297.243474][T24909]  copy_page_from_iter+0x220/0x2d0
[ 1297.243493][T24909]  skb_copy_datagram_from_iter+0x306/0x710
[ 1297.243524][T24909]  packet_sendmsg+0x35b1/0x4fb0
[ 1297.243569][T24909]  ? unwind_next_frame+0xa6/0x2550
[ 1297.243593][T24909]  ? __pfx_packet_sendmsg+0x10/0x10
[ 1297.243604][T24909]  ? aa_sk_perm+0x6d5/0x900
[ 1297.243622][T24909]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1297.243636][T24909]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1297.243666][T24909]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1297.243689][T24909]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1297.243713][T24909]  ____sys_sendmsg+0x972/0x9f0
[ 1297.243730][T24909]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1297.243743][T24909]  ? import_iovec+0x73/0xa0
[ 1297.243757][T24909]  ___sys_sendmsg+0x2a5/0x360
[ 1297.243765][T24909]  ? __lock_acquire+0x6b5/0x2cf0
[ 1297.243777][T24909]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1297.243822][T24909]  ? __fget_files+0x2a/0x420
[ 1297.243841][T24909]  ? __fget_files+0x3a0/0x420
[ 1297.243868][T24909]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1297.243880][T24909]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1297.243893][T24909]  ? __pfx_ksys_write+0x10/0x10
[ 1297.243911][T24909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.243921][T24909]  do_syscall_64+0x174/0x580
[ 1297.243937][T24909]  ? clear_bhb_loop+0x40/0x90
[ 1297.243957][T24909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.243973][T24909] RIP: 0033:0x7f202d19ce59
[ 1297.243990][T24909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.244003][T24909] RSP: 002b:00007f202e089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1297.244020][T24909] RAX: ffffffffffffffda RBX: 00007f202d415fa0 RCX: 00007f202d19ce59
[ 1297.244027][T24909] RDX: 0000000000000005 RSI: 0000200000000000 RDI: 0000000000000007
[ 1297.244033][T24909] RBP: 00007f202e089090 R08: 0000000000000000 R09: 0000000000000000
[ 1297.244039][T24909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1297.244045][T24909] R13: 00007f202d416038 R14: 00007f202d415fa0 R15: 00007f202d53fa48
[ 1297.244059][T24909]  </TASK>
[ 1297.536116][T19187] keytouch 0003:0926:3333.00FE: fixing up Keytouch IEC report descriptor
[ 1297.576636][T19187] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.00FE/input/input210
[ 1297.608124][T24911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5567'.
[ 1297.739788][T24915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.752751][T24915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1297.819275][T24915] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[ 1297.822786][T19187] keytouch 0003:0926:3333.00FE: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0
[ 1297.825816][T24915] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1297.842200][T24915] vhci_hcd vhci_hcd.0: Device attached
[ 1297.927862][T24917] vhci_hcd: connection closed
[ 1297.928162][T20866] vhci_hcd vhci_hcd.5: stop threads
[ 1297.987300][T24923] netlink: 'syz.3.5571': attribute type 1 has an invalid length.
[ 1297.995409][T20866] vhci_hcd vhci_hcd.5: release socket
[ 1298.001935][    C0] Mem-Info:
[ 1298.005943][    C0] active_anon:11229 inactive_anon:0 isolated_anon:0
[ 1298.005943][    C0]  active_file:20534 inactive_file:4356 isolated_file:0
[ 1298.005943][    C0]  unevictable:768 dirty:469 writeback:0
[ 1298.005943][    C0]  slab_reclaimable:12427 slab_unreclaimable:138262
[ 1298.005943][    C0]  mapped:34476 shmem:1304 pagetables:2034
[ 1298.005943][    C0]  sec_pagetables:0 bounce:0
[ 1298.005943][    C0]  kernel_misc_reclaimable:0
[ 1298.005943][    C0]  free:1284509 free_pcp:8874 free_cma:0
[ 1298.052347][    C0] Node 0 active_anon:44516kB inactive_anon:0kB active_file:82056kB inactive_file:17292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137848kB dirty:1864kB writeback:0kB shmem:3680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16368kB pagetables:7892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1298.086762][    C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1298.119781][    C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1298.149955][    C0] lowmem_reserve[]: 0 2492 2493 2493 2493
[ 1298.155711][    C0] Node 0 DMA32 free:1175744kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44516kB inactive_anon:0kB active_file:82056kB inactive_file:17292kB unevictable:1536kB writepending:1864kB zspages:0kB present:3129332kB managed:2552788kB mlocked:0kB bounce:0kB free_pcp:35912kB local_pcp:18396kB free_cma:0kB
[ 1298.189075][    C0] lowmem_reserve[]: 0 0 0 0 0
[ 1298.194054][    C0] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1298.228129][    C0] lowmem_reserve[]: 0 0 0 0 0
[ 1298.233040][    C0] Node 1 Normal free:3946932kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:132kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1298.266532][    C0] lowmem_reserve[]: 0 0 0 0 0
[ 1298.271440][    C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1298.284229][    C0] Node 0 DMA32: 8250*4kB (UME) 6461*8kB (UME) 3233*16kB (UME) 633*32kB (UM) 528*64kB (UM) 716*128kB (UME) 617*256kB (UME) 323*512kB (UME) 197*1024kB (UME) 10*2048kB (UM) 85*4096kB (UM) = 1175808kB
[ 1298.303673][    C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1298.315148][    C0] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 8*16kB (UM) 5*32kB (U) 9*64kB (U) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 3*2048kB (M) 961*4096kB (M) = 3946932kB
[ 1298.331725][    C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1298.341802][    C0] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1298.351079][    C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1298.360612][    C0] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 1298.369977][    C0] 26184 total pagecache pages
[ 1298.374650][    C0] 0 pages in swap cache
[ 1298.378797][    C0] Free swap  = 124996kB
[ 1298.382942][    C0] Total swap = 124996kB
[ 1298.387328][    C0] 2097051 pages RAM
[ 1298.391203][    C0] 0 pages HighMem/MovableOnly
[ 1298.396035][    C0] 427069 pages reserved
[ 1298.400174][    C0] 0 pages cma reserved
[ 1298.425328][T20866] vhci_hcd vhci_hcd.5: disconnect device
[ 1298.431186][T24923] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1298.706971][T24928] loop2: detected capacity change from 0 to 7
[ 1298.719942][T24934] can: request_module (can-proto-0) failed.
[ 1298.729214][T24928] Dev loop2: unable to read RDB block 7
[ 1298.737503][T24928]  loop2: unable to read partition table
[ 1298.745481][T19185] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1298.746956][T24928] loop2: partition table beyond EOD, truncated
[ 1298.777758][T24928] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1298.902540][T19185] usb 4-1: Using ep0 maxpacket: 32
[ 1298.914274][T19185] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1298.934221][T19185] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[ 1298.974089][T19185] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[ 1298.994460][T19185] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.006708][T19185] usb 4-1: Product: syz
[ 1299.011746][T19185] usb 4-1: Manufacturer: syz
[ 1299.020467][T19185] usb 4-1: SerialNumber: syz
[ 1299.052754][T24944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5576'.
[ 1299.063618][T19193] usb usb44-port1: attempt power cycle
[ 1299.105288][T24944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1299.119472][T24944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1299.259481][T24923] binder: 24922:24923 ioctl c0306201 200000000640 returned -22
[ 1299.332907][ T5692] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[ 1299.351737][T19185] usb 4-1: USB disconnect, device number 100
[ 1299.450168][ T8752] udevd[8752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1299.514958][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1299.542922][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1299.542956][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1299.542996][ T5692] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1299.543018][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.548968][ T5692] usb 1-1: config 0 descriptor??
[ 1299.634960][T19193] usb usb44-port1: unable to enumerate USB device
[ 1299.654305][T24946] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1299.918173][T19193] usb 7-1: USB disconnect, device number 17
[ 1299.918277][    C0] keytouch 0003:0926:3333.00FE: usb_submit_urb(ctrl) failed: -19
[ 1300.025851][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.033838][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.068703][T24946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1300.114154][T24946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
Stopping sshd: [ 1300.259150][ T5692] elan 0003:04F3:0755.00FF: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[ 1300.272618][T19189] usb 4-1: new high-speed USB device number 101 using dummy_hcd
stopped /usr/sbin/sshd (pid 5392)
OK
[ 1300.395711][T24964] tipc: Cannot configure node identity twice
[ 1300.440414][T24950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5579'.
[ 1300.472504][T19189] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
Stopping crond: [ 1300.523826][T19189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1300.539449][T19187] usb 1-1: USB disconnect, device number 117
[ 1300.587185][T19189] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1300.621630][T19189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1300.640417][T19189] usb 4-1: SerialNumber: syz
stopped /usr/sbin/crond (pid 5373)
OK
[ 1300.796929][T24971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5583'.
[ 1300.816380][T24971] FAULT_INJECTION: forcing a failure.
[ 1300.816380][T24971] name failslab, interval 1, probability 0, space 0, times 0
[ 1300.830749][T24971] CPU: 0 UID: 0 PID: 24971 Comm: syz.4.5583 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1300.830775][T24971] Tainted: [L]=SOFTLOCKUP
[ 1300.830784][T24971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1300.830794][T24971] Call Trace:
[ 1300.830801][T24971]  <TASK>
[ 1300.830809][T24971]  dump_stack_lvl+0xe8/0x150
[ 1300.830833][T24971]  should_fail_ex+0x412/0x560
[ 1300.830857][T24971]  should_failslab+0xa8/0x100
[ 1300.830875][T24971]  __kmalloc_cache_noprof+0x88/0x660
[ 1300.830898][T24971]  ? nft_netdev_hook_alloc+0x5a/0x570
[ 1300.830919][T24971]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1300.830944][T24971]  nft_netdev_hook_alloc+0x5a/0x570
[ 1300.830971][T24971]  nf_tables_parse_netdev_hooks+0x152/0xa30
[ 1300.831002][T24971]  nft_flowtable_parse_hook+0x46a/0x920
[ 1300.831116][T24971]  ? queue_delayed_work_on+0x12f/0x1e0
[ 1300.831136][T24971]  ? __pfx_nft_flowtable_parse_hook+0x10/0x10
[ 1300.831162][T24971]  ? nf_flow_table_init+0x280/0x2a0
[ 1300.831214][T24971]  nf_tables_newflowtable+0x1613/0x2590
[ 1300.831249][T24971]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[ 1300.831269][T24971]  ? nfnl_pernet+0x23/0x240
[ 1300.831304][T24971]  ? __nla_parse+0x40/0x60
[ 1300.831328][T24971]  nfnetlink_rcv+0x123e/0x27b0
[ 1300.831379][T24971]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1300.831415][T24971]  ? ref_tracker_free+0x693/0x840
[ 1300.831461][T24971]  ? __netlink_deliver_tap+0x807/0x850
[ 1300.831492][T24971]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1300.831512][T24971]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1300.831539][T24971]  netlink_unicast+0x75c/0x8e0
[ 1300.831569][T24971]  netlink_sendmsg+0x813/0xb40
[ 1300.831599][T24971]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1300.831624][T24971]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1300.831648][T24971]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1300.831671][T24971]  ____sys_sendmsg+0x972/0x9f0
[ 1300.831688][T24971]  ? __might_fault+0xaf/0x130
[ 1300.831714][T24971]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1300.831740][T24971]  ? import_iovec+0x73/0xa0
[ 1300.831761][T24971]  ___sys_sendmsg+0x2a5/0x360
[ 1300.831775][T24971]  ? __lock_acquire+0x6b5/0x2cf0
[ 1300.831794][T24971]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1300.831837][T24971]  ? __fget_files+0x2a/0x420
[ 1300.831856][T24971]  ? __fget_files+0x3a0/0x420
[ 1300.831882][T24971]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1300.831901][T24971]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1300.831926][T24971]  ? __pfx_ksys_write+0x10/0x10
[ 1300.831954][T24971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.831970][T24971]  do_syscall_64+0x174/0x580
[ 1300.831985][T24971]  ? trace_irq_disable+0x3b/0x140
[ 1300.832005][T24971]  ? clear_bhb_loop+0x40/0x90
[ 1300.832024][T24971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1300.832038][T24971] RIP: 0033:0x7f202d19ce59
[ 1300.832055][T24971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1300.832068][T24971] RSP: 002b:00007f202e089028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1300.832095][T24971] RAX: ffffffffffffffda RBX: 00007f202d415fa0 RCX: 00007f202d19ce59
[ 1300.832107][T24971] RDX: 00000000000000c0 RSI: 0000200000007040 RDI: 0000000000000003
[ 1300.832117][T24971] RBP: 00007f202e089090 R08: 0000000000000000 R09: 0000000000000000
[ 1300.832127][T24971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1300.832136][T24971] R13: 00007f202d416038 R14: 00007f202d415fa0 R15: 00007f202d53fa48
[ 1300.832160][T24971]  </TASK>
[ 1301.240995][T19189] usb 4-1: 0:2 : does not exist
[ 1301.247181][T19189] usb 4-1: unit 5 not found!
Stopping dhcpcd...
[ 1301.351721][T19189] usb 4-1: USB disconnect, device number 101
[ 1301.413714][ T8997] udevd[8997]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1301.468666][T24979] iommufd_mock iommufd_mock0: Adding to iommu group 0
stopped /sbin/dhcpcd (pid 5298)
[ 1301.572121][T19193] usb 1-1: new high-speed USB device number 118 using dummy_hcd
Stopping network: [ 1301.770799][T19193] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1301.793541][T19193] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1301.807963][T19193] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1301.826489][T19193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1301.862571][T19193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1301.896748][T19193] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1301.908404][T19193] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1301.946736][T19193] usb 1-1: Product: syz
[ 1301.961670][T19193] usb 1-1: Manufacturer: syz
[ 1301.983746][ T5692] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1301.997520][T19193] cdc_wdm 1-1:1.0: skipping garbage
[ 1302.016892][T19193] cdc_wdm 1-1:1.0: skipping garbage
[ 1302.044613][T19193] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 1302.066976][T19193] cdc_wdm 1-1:1.0: Unknown control protocol
[ 1302.125678][T24999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1302.146009][T24999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1302.162786][ T5692] usb 5-1: Using ep0 maxpacket: 32
[ 1302.173020][T19189] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 1302.174089][ T5692] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1302.277263][ T5692] usb 5-1: config 0 has no interface number 0
[ 1302.299231][T24977] xt_hashlimit: overflow, try lower: 18446744073709551614/4
[ 1302.308449][ T5692] usb 5-1: config 0 interface 12 altsetting 2 has a duplicate endpoint with address 0x82, skipping
[ 1302.321086][ T5692] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1302.335910][T19189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1302.340865][ T5692] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1302.380027][T19189] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1302.383966][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.394095][T19189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.420276][T19189] usb 4-1: Product: syz
[ 1302.427035][T19189] usb 4-1: Manufacturer: syz
[ 1302.435536][T19189] usb 4-1: SerialNumber: syz
[ 1302.439625][ T5692] usb 5-1: Product: syz
[ 1302.459531][ T5692] usb 5-1: Manufacturer: syz
[ 1302.471575][ T5692] usb 5-1: SerialNumber: syz
[ 1302.499974][ T5692] usb 5-1: config 0 descriptor??
[ 1302.527081][ T5692] f81534 5-1:0.12: required endpoints missing
[ 1302.572909][T19190] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 1302.752343][T19190] usb 7-1: Using ep0 maxpacket: 32
[ 1302.767613][T19190] usb 7-1: config 0 has an invalid interface number: 89 but max is 0
[ 1302.787789][T19190] usb 7-1: config 0 has no interface number 0
[ 1302.814018][T19190] usb 7-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 1302.838244][ T5692] usb 1-1: USB disconnect, device number 118
[ 1302.847890][T19190] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.893873][T19190] usb 7-1: Product: syz
[ 1302.901155][T19190] usb 7-1: Manufacturer: syz
[ 1302.919338][T19190] usb 7-1: SerialNumber: syz
OK
[ 1302.935907][T19190] usb 7-1: config 0 descriptor??
[ 1302.955817][T19190] hub 7-1:0.89: bad descriptor, ignoring hub
[ 1302.965348][T19190] hub 7-1:0.89: probe with driver hub failed with error -5
[ 1302.974580][T19190] option 7-1:0.89: GSM modem (1-port) converter detected
[ 1302.987883][T19190] usb 7-1: GSM modem (1-port) converter now attached to ttyUSB0
Stopping iptables: [ 1303.263899][T19185] usb 7-1: USB disconnect, device number 18
[ 1303.288129][T19185] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 1303.316607][T19185] option 7-1:0.89: device disconnected
OK
[ 1303.487821][T19189] cdc_ncm 4-1:1.0: failed to get mac address
Stopping system message bus: [ 1303.508335][T19189] cdc_ncm 4-1:1.0: bind() failure
[ 1303.535162][T19189] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[ 1303.551107][T19189] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[ 1303.574882][T19189] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[ 1303.598463][T19189] usb 4-1: USB disconnect, device number 102
[ 1304.396023][T25053] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
done
[ 1304.533547][T19189] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1304.672485][T19188] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 1304.692742][T19189] usb 1-1: Using ep0 maxpacket: 16
[ 1304.699496][T19189] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1304.715109][T19189] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1304.730861][T19189] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1304.739740][T19189] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 1304.748785][T19189] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1304.762525][ T5692] usb 4-1: new low-speed USB device number 103 using dummy_hcd
[ 1304.766959][T19189] usb 1-1: config 0 has no interface number 0
[ 1304.792431][T19189] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1304.820213][T19189] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1304.835308][T19188] usb 7-1: Using ep0 maxpacket: 16
[ 1304.849423][T19189] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1304.870728][T19188] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[ 1304.884130][T19189] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1304.910284][T19188] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1304.927226][T19188] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.936534][T19189] usb 1-1: config 0 interface 125 has no altsetting 0
[ 1304.954454][T19188] usb 7-1: Product: syz
[ 1304.959065][T19189] usb 1-1: config 0 interface 125 has no altsetting 2
[ 1304.971690][T19190] usb 5-1: USB disconnect, device number 13
[ 1304.973185][T19188] usb 7-1: Manufacturer: syz
[ 1304.984931][ T5692] usb 4-1: Invalid ep0 maxpacket: 64
[ 1304.990860][T19189] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1305.005686][T19188] usb 7-1: SerialNumber: syz
[ 1305.010486][T19189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1305.038533][T19188] usb 7-1: config 0 descriptor??
[ 1305.049104][T19189] usb 1-1: Product: syz
[ 1305.062885][T19189] usb 1-1: Manufacturer: syz
[ 1305.068992][T19188] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[ 1305.078720][T19189] usb 1-1: SerialNumber: syz
[ 1305.084653][T19188] usb 7-1: Detected FT232R
[ 1305.101645][T19189] usb 1-1: config 0 descriptor??
[ 1305.118080][T19189] usb 1-1: selecting invalid altsetting 2
[ 1305.134974][ T5692] usb 4-1: new low-speed USB device number 104 using dummy_hcd
[ 1305.269383][T19188] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 1305.293034][T19188] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 1305.303114][T19188] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[ 1305.312081][ T5692] usb 4-1: Invalid ep0 maxpacket: 64
[ 1305.323077][T19188] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1305.334896][ T5692] usb usb4-port1: attempt power cycle
[ 1305.351212][T19188] usb 7-1: USB disconnect, device number 19
[ 1305.383254][T19188] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1305.413317][T19188] ftdi_sio 7-1:0.0: device disconnected
[ 1305.492417][T19190] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1305.692354][ T5692] usb 4-1: new low-speed USB device number 105 using dummy_hcd
[ 1305.753011][ T5692] usb 4-1: Invalid ep0 maxpacket: 64
[ 1305.760528][T19190] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1305.780797][T19190] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.818595][T19190] usb 5-1: config 0 descriptor??
[ 1305.833707][T25068] xt_hashlimit: size too large, truncated to 1048576
[ 1305.892197][ T5692] usb 4-1: new low-speed USB device number 106 using dummy_hcd
[ 1305.966784][ T5692] usb 4-1: Invalid ep0 maxpacket: 64
[ 1305.994068][ T5692] usb usb4-port1: unable to enumerate USB device
Stopping klogd: [ 1306.259852][T25063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5599'.
[ 1306.263868][T19189] get_1284_register timeout
[ 1306.284607][    C0] usb 1-1: async_complete: urb error -104
[ 1306.290701][    C0] usb 1-1: async_complete: urb error -104
[ 1306.314561][T25075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5601'.
[ 1306.328239][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5599'.
[ 1306.408382][T25063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5599'.
[ 1306.444350][T25063] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5599'.
[ 1306.507822][T25063] gretap0: entered promiscuous mode
[ 1306.542856][T25063] gretap0: left promiscuous mode
OK
[ 1306.639280][T19190] usb 5-1: Cannot set MAC address
[ 1306.662608][T19190] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1306.722382][T19190] usb 5-1: USB disconnect, device number 14
Stopping acpid: [ 1306.958437][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1306.976441][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1307.000289][T25093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1307.011131][T25093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1307.778271][T25103] kvm_intel: kvm [25102]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa25a
[ 1307.807545][T25103] kvm: kvm [25102]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa25a
[ 1307.888458][T19189] usb 1-1: USB disconnect, device number 119
OK
[ 1308.127558][T25113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5613'.
Stopping syslogd: stopped /sbin/syslogd (pid 4986)
OK
[ 1308.517500][T25123] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1309.078554][T25130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1309.095833][T25130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1309.228245][T25133] syzkaller0: entered promiscuous mode
[ 1309.242260][T25133] syzkaller0: entered allmulticast mode
[ 1309.302162][T19190] usb 5-1: new high-speed USB device number 15 using dummy_hcd
umount: can't remount debugfs read-only
[ 1309.493580][T19190] usb 5-1: Using ep0 maxpacket: 8
[ 1309.505332][T19190] usb 5-1: config 0 has an invalid interface number: 33 but max is 1
[ 1309.517097][T19190] usb 5-1: config 0 has no interface number 1
[ 1309.536450][T19190] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1309.577763][T19190] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1309.616673][T19190] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1309.665369][T19190] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1
[ 1309.678011][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1309.694298][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1309.714012][T19190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1309.741479][T19190] usb 5-1: Product: syz
[ 1309.755235][T19190] usb 5-1: Manufacturer: syz
[ 1309.770545][T19190] usb 5-1: SerialNumber: syz
[ 1309.790860][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1309.794763][T19190] usb 5-1: config 0 descriptor??
[ 1309.865056][T19190] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1309.868383][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1309.888343][T19189] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 1310.086137][T19189] usb 7-1: no configurations
[ 1310.086166][T19189] usb 7-1: can't read configurations, error -22
[ 1310.201428][T19190] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx
[ 1310.221492][T25145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1310.225452][ T2363] pvrusb2: Failed to submit write-control URB status=-90
[ 1310.235675][T19189] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 1310.250870][T19190] usb 5-1: USB disconnect, device number 15
[ 1310.312995][T25145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1310.318981][T25155] FAULT_INJECTION: forcing a failure.
[ 1310.318981][T25155] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1310.378337][ T2363] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[ 1310.388771][T25155] CPU: 1 UID: 0 PID: 25155 Comm: syz.0.5622 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1310.388804][T25155] Tainted: [L]=SOFTLOCKUP
[ 1310.388810][T25155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1310.388820][T25155] Call Trace:
[ 1310.388827][T25155]  <TASK>
[ 1310.388834][T25155]  dump_stack_lvl+0xe8/0x150
[ 1310.388859][T25155]  should_fail_ex+0x412/0x560
[ 1310.388882][T25155]  _copy_from_user+0x2d/0xb0
[ 1310.388902][T25155]  ___sys_sendmsg+0x1c6/0x360
[ 1310.388919][T25155]  ? __lock_acquire+0x6b5/0x2cf0
[ 1310.388940][T25155]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1310.388954][T25155]  ? __lock_acquire+0x6b5/0x2cf0
[ 1310.388974][T25155]  ? kstrtouint+0x6e/0xe0
[ 1310.389027][T25155]  __sys_sendmmsg+0x27c/0x4e0
[ 1310.389049][T25155]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1310.389063][T25155]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1310.389104][T25155]  ? ksys_write+0x242/0x270
[ 1310.389127][T25155]  ? __pfx_ksys_write+0x10/0x10
[ 1310.389153][T25155]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1310.389169][T25155]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.389186][T25155]  do_syscall_64+0x174/0x580
[ 1310.389201][T25155]  ? trace_irq_disable+0x3b/0x140
[ 1310.389224][T25155]  ? clear_bhb_loop+0x40/0x90
[ 1310.389243][T25155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1310.389257][T25155] RIP: 0033:0x7f4f78b9ce59
[ 1310.389273][T25155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1310.389286][T25155] RSP: 002b:00007f4f79ae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1310.389304][T25155] RAX: ffffffffffffffda RBX: 00007f4f78e15fa0 RCX: 00007f4f78b9ce59
[ 1310.389316][T25155] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003
[ 1310.389327][T25155] RBP: 00007f4f79ae0090 R08: 0000000000000000 R09: 0000000000000000
[ 1310.389337][T25155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1310.389346][T25155] R13: 00007f4f78e16038 R14: 00007f4f78e15fa0 R15: 00007f4f78f3fa48
[ 1310.389372][T25155]  </TASK>
[ 1310.593580][ T2363] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[ 1310.601035][T19189] usb 7-1: no configurations
[ 1310.607214][T19189] usb 7-1: can't read configurations, error -22
[ 1310.614506][T19189] usb usb7-port1: attempt power cycle
[ 1310.677854][T25157] netlink: 'syz.0.5623': attribute type 1 has an invalid length.
[ 1310.922489][T25157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1311.132510][T19189] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 1311.153519][T19189] usb 7-1: no configurations
[ 1311.158308][T19189] usb 7-1: can't read configurations, error -22
[ 1311.229272][T25161] netlink: 'syz.4.5624': attribute type 1 has an invalid length.
[ 1311.237434][T19188] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1311.259584][T25161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5624'.
[ 1311.297029][T25161] netlink: 'syz.4.5624': attribute type 1 has an invalid length.
[ 1311.312363][T19189] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 1311.336901][T25161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1311.365066][T19189] usb 7-1: no configurations
[ 1311.369979][T19189] usb 7-1: can't read configurations, error -22
[ 1311.392634][T19188] usb 1-1: Using ep0 maxpacket: 32
[ 1311.398551][T19189] usb usb7-port1: unable to enumerate USB device
[ 1311.419410][T19188] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1311.433564][T25162] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5624'.
[ 1311.440376][T19188] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[ 1311.484818][T19188] usb 1-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[ 1311.500786][T25162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5624'.
[ 1311.501628][T19188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1311.544961][T19188] usb 1-1: Product: syz
[ 1311.551637][T19188] usb 1-1: Manufacturer: syz
[ 1311.562722][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5624'.
[ 1311.578792][T19188] usb 1-1: SerialNumber: syz
[ 1311.871248][T25157] binder: 25156:25157 ioctl c0306201 200000000640 returned -22
[ 1311.890347][T25166] netlink: 'syz.4.5626': attribute type 1 has an invalid length.
[ 1311.917517][T25166] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1312.097437][T19188] usb 1-1: USB disconnect, device number 120
umount: can't remount sysfs read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
Connection to 10.128.0.108 closed by remote host.
Sent SIGKILL to all processes
[ 1313.687690][T19332] syz_tun (unregistering): left allmulticast mode
Requesting system poweroff
[ 1313.895566][T23170] syz_tun (unregistering): left allmulticast mode
[ 1314.102748][T19189] usb 6-1: USB disconnect, device number 35
[ 1314.111096][T23923] syz_tun (unregistering): left allmulticast mode
[ 1314.268636][T25150] syz_tun (unregistering): left allmulticast mode
[ 1314.710085][T25173] smc: removing smcd device lo
[ 1314.711069][ T2363] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing.
[ 1314.745271][ T2363] pvrusb2: Did you install the pvrusb2 firmware files in their proper location?
[ 1314.754714][ T2363] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-29xxx-01.fw
[ 1314.764961][ T2363] pvrusb2: Failure uploading firmware1
[ 1314.771567][ T2363] pvrusb2: Device initialization was not successful.
[ 1314.778934][ T2363] pvrusb2: Giving up since device microcontroller firmware appears to be missing.
[ 1314.803006][ T2363] pvrusb2: Failed to submit write-control URB status=-19
[ 1314.816798][T19190] pvrusb2: Device being rendered inoperable
[ 1314.829235][ T2363] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[ 1314.844704][ T2363] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[ 1314.855520][ T2363] ------------[ cut here ]------------
[ 1314.861006][ T2363] ret
[ 1314.861031][ T2363] WARNING: drivers/base/firmware_loader/fallback.c:148 at firmware_fallback_sysfs+0x746/0xa30, CPU#1: pvrusb2-context/2363
[ 1314.876832][ T2363] Modules linked in:
[ 1314.883173][ T2363] CPU: 1 UID: 0 PID: 2363 Comm: pvrusb2-context Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1314.894609][ T2363] Tainted: [L]=SOFTLOCKUP
[ 1314.898923][ T2363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1314.909090][ T2363] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30
[ 1314.915404][ T2363] Code: bb fb e9 5d fc ff ff e8 48 b4 bb fb c6 05 df 39 10 0a 01 48 c7 c7 a0 07 54 8c e8 25 aa 1d fb e9 85 fc ff ff e8 2b b4 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 08 54 8c 4c 89 e2 e8 95 4a 22 fb e9
[ 1314.935359][ T2363] RSP: 0018:ffffc90006eef670 EFLAGS: 00010293
[ 1314.941516][ T2363] RAX: ffffffff860a0275 RBX: dffffc0000000000 RCX: ffff88802c8a9f00
[ 1314.949562][ T2363] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[ 1314.957609][ T2363] RBP: 0000000000000001 R08: ffffffff90302af7 R09: 1ffffffff206055e
[ 1314.966085][ T2363] R10: dffffc0000000000 R11: fffffbfff206055f R12: ffffffff8cae43c0
[ 1314.974214][ T2363] R13: 0000000000001770 R14: ffff888077dd40b0 R15: 00000000fffffff5
[ 1314.982220][ T2363] FS:  0000000000000000(0000) GS:ffff88812539c000(0000) knlGS:0000000000000000
[ 1314.991155][ T2363] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1314.997916][ T2363] CR2: 00002000003a1030 CR3: 0000000033e24000 CR4: 00000000003526f0
[ 1315.006365][ T2363] DR0: 0000000000002683 DR1: 0000000000000009 DR2: 0000000000000003
[ 1315.014948][ T2363] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1315.022993][ T2363] Call Trace:
[ 1315.026278][ T2363]  <TASK>
[ 1315.029199][ T2363]  ? kfree+0x1c5/0x640
[ 1315.033332][ T2363]  ? _request_firmware+0xf11/0x1780
[ 1315.038540][ T2363]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1315.044119][ T2363]  _request_firmware+0x1052/0x1780
[ 1315.049250][ T2363]  ? __pfx__request_firmware+0x10/0x10
[ 1315.054849][ T2363]  request_firmware+0x36/0x50
[ 1315.060856][ T2363]  pvr2_locate_firmware+0xb3/0x500
[ 1315.066220][ T2363]  pvr2_upload_firmware1+0x1ba/0x910
[ 1315.071503][ T2363]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1315.077504][ T2363]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[ 1315.083351][ T2363]  ? pvr2_hdw_initialize+0x3d7/0x3c50
[ 1315.088717][ T2363]  pvr2_hdw_initialize+0x428/0x3c50
[ 1315.094027][ T2363]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1315.099339][ T2363]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1315.105287][ T2363]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 1315.112561][ T2363]  ? rcu_is_watching+0x15/0xb0
[ 1315.117352][ T2363]  ? trace_contention_end+0x3d/0x140
[ 1315.122922][ T2363]  ? pvr2_context_thread_func+0x26a/0xb40
[ 1315.128798][ T2363]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1315.134506][ T2363]  ? pvr2_context_thread_func+0x102/0xb40
[ 1315.140255][ T2363]  ? __pfx___schedule+0x10/0x10
[ 1315.145173][ T2363]  ? __pfx___mutex_lock+0x10/0x10
[ 1315.150188][ T2363]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1315.156301][ T2363]  ? schedule+0x90/0x360
[ 1315.160550][ T2363]  ? schedule+0x16e/0x360
[ 1315.165040][ T2363]  pvr2_context_thread_func+0x490/0xb40
[ 1315.170597][ T2363]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 1315.176804][ T2363]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1315.182900][ T2363]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1315.188808][ T2363]  ? __kthread_parkme+0x7a/0x1f0
[ 1315.193799][ T2363]  kthread+0x389/0x470
[ 1315.197978][ T2363]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 1315.204219][ T2363]  ? __pfx_kthread+0x10/0x10
[ 1315.208920][ T2363]  ret_from_fork+0x514/0xb70
[ 1315.213571][ T2363]  ? __pfx_ret_from_fork+0x10/0x10
[ 1315.218772][ T2363]  ? __switch_to+0xc79/0x1410
[ 1315.223463][ T2363]  ? __pfx_kthread+0x10/0x10
[ 1315.228056][ T2363]  ret_from_fork_asm+0x1a/0x30
[ 1315.232990][ T2363]  </TASK>
[ 1315.236061][ T2363] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1315.243339][ T2363] CPU: 1 UID: 0 PID: 2363 Comm: pvrusb2-context Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1315.254798][ T2363] Tainted: [L]=SOFTLOCKUP
[ 1315.259153][ T2363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 1315.269204][ T2363] Call Trace:
[ 1315.272494][ T2363]  <TASK>
[ 1315.275433][ T2363]  vpanic+0x56c/0xa60
[ 1315.279416][ T2363]  ? __pfx__printk+0x10/0x10
[ 1315.284003][ T2363]  ? __pfx_vpanic+0x10/0x10
[ 1315.288496][ T2363]  ? is_bpf_text_address+0x292/0x2b0
[ 1315.293853][ T2363]  ? is_bpf_text_address+0x26/0x2b0
[ 1315.299050][ T2363]  panic+0xc5/0xd0
[ 1315.302769][ T2363]  ? __pfx_panic+0x10/0x10
[ 1315.307188][ T2363]  ? ret_from_fork_asm+0x1a/0x30
[ 1315.312134][ T2363]  __warn+0x315/0x4c0
[ 1315.316420][ T2363]  ? firmware_fallback_sysfs+0x746/0xa30
[ 1315.323017][ T2363]  ? firmware_fallback_sysfs+0x746/0xa30
[ 1315.328650][ T2363]  __report_bug+0x29a/0x540
[ 1315.333236][ T2363]  ? firmware_fallback_sysfs+0x746/0xa30
[ 1315.339054][ T2363]  ? __pfx___report_bug+0x10/0x10
[ 1315.344072][ T2363]  ? __up_read+0x291/0x6b0
[ 1315.348630][ T2363]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1315.354436][ T2363]  ? firmware_fallback_sysfs+0x746/0xa30
[ 1315.360061][ T2363]  report_bug+0x16a/0x220
[ 1315.364389][ T2363]  ? firmware_fallback_sysfs+0x746/0xa30
[ 1315.370106][ T2363]  ? firmware_fallback_sysfs+0x748/0xa30
[ 1315.375749][ T2363]  handle_bug+0x9c/0x200
[ 1315.379991][ T2363]  exc_invalid_op+0x1a/0x50
[ 1315.384482][ T2363]  asm_exc_invalid_op+0x1a/0x20
[ 1315.389319][ T2363] RIP: 0010:firmware_fallback_sysfs+0x746/0xa30
[ 1315.395551][ T2363] Code: bb fb e9 5d fc ff ff e8 48 b4 bb fb c6 05 df 39 10 0a 01 48 c7 c7 a0 07 54 8c e8 25 aa 1d fb e9 85 fc ff ff e8 2b b4 bb fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 08 54 8c 4c 89 e2 e8 95 4a 22 fb e9
[ 1315.415738][ T2363] RSP: 0018:ffffc90006eef670 EFLAGS: 00010293
[ 1315.421883][ T2363] RAX: ffffffff860a0275 RBX: dffffc0000000000 RCX: ffff88802c8a9f00
[ 1315.430114][ T2363] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000
[ 1315.438085][ T2363] RBP: 0000000000000001 R08: ffffffff90302af7 R09: 1ffffffff206055e
[ 1315.446079][ T2363] R10: dffffc0000000000 R11: fffffbfff206055f R12: ffffffff8cae43c0
[ 1315.454048][ T2363] R13: 0000000000001770 R14: ffff888077dd40b0 R15: 00000000fffffff5
[ 1315.462128][ T2363]  ? firmware_fallback_sysfs+0x745/0xa30
[ 1315.467790][ T2363]  ? kfree+0x1c5/0x640
[ 1315.471855][ T2363]  ? _request_firmware+0xf11/0x1780
[ 1315.477074][ T2363]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1315.482629][ T2363]  _request_firmware+0x1052/0x1780
[ 1315.487760][ T2363]  ? __pfx__request_firmware+0x10/0x10
[ 1315.493310][ T2363]  request_firmware+0x36/0x50
[ 1315.497980][ T2363]  pvr2_locate_firmware+0xb3/0x500
[ 1315.503090][ T2363]  pvr2_upload_firmware1+0x1ba/0x910
[ 1315.508364][ T2363]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1315.514417][ T2363]  ? __pfx_pvr2_upload_firmware1+0x10/0x10
[ 1315.520256][ T2363]  ? pvr2_hdw_initialize+0x3d7/0x3c50
[ 1315.525619][ T2363]  pvr2_hdw_initialize+0x428/0x3c50
[ 1315.531092][ T2363]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1315.536292][ T2363]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1315.542183][ T2363]  ? __pfx_pvr2_hdw_initialize+0x10/0x10
[ 1315.547907][ T2363]  ? rcu_is_watching+0x15/0xb0
[ 1315.552678][ T2363]  ? trace_contention_end+0x3d/0x140
[ 1315.558108][ T2363]  ? pvr2_context_thread_func+0x26a/0xb40
[ 1315.563831][ T2363]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1315.569470][ T2363]  ? pvr2_context_thread_func+0x102/0xb40
[ 1315.575187][ T2363]  ? __pfx___schedule+0x10/0x10
[ 1315.580031][ T2363]  ? __pfx___mutex_lock+0x10/0x10
[ 1315.585046][ T2363]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1315.591049][ T2363]  ? schedule+0x90/0x360
[ 1315.595300][ T2363]  ? schedule+0x16e/0x360
[ 1315.599715][ T2363]  pvr2_context_thread_func+0x490/0xb40
[ 1315.605252][ T2363]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 1315.611309][ T2363]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1315.617382][ T2363]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1315.623197][ T2363]  ? __kthread_parkme+0x7a/0x1f0
[ 1315.628441][ T2363]  kthread+0x389/0x470
[ 1315.632573][ T2363]  ? __pfx_pvr2_context_thread_func+0x10/0x10
[ 1315.638659][ T2363]  ? __pfx_kthread+0x10/0x10
[ 1315.643280][ T2363]  ret_from_fork+0x514/0xb70
[ 1315.647863][ T2363]  ? __pfx_ret_from_fork+0x10/0x10
[ 1315.653424][ T2363]  ? __switch_to+0xc79/0x1410
[ 1315.658185][ T2363]  ? __pfx_kthread+0x10/0x10
[ 1315.662774][ T2363]  ret_from_fork_asm+0x1a/0x30
[ 1315.667623][ T2363]  </TASK>
[ 1315.670791][ T2363] Kernel Offset: disabled
[ 1315.675102][ T2363] Rebooting in 86400 seconds..