last executing test programs:

11.65940134s ago: executing program 2 (id=583):
socket$inet_tcp(0x2, 0x1, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2008, 0x5, 0x11)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x89, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x2}, 0x10)
bind$tipc(r4, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x24, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10010, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020)
getgid()
getpgid(0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

11.351412627s ago: executing program 2 (id=584):
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f00000002c0))

10.915767241s ago: executing program 2 (id=585):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
close(0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_getres(0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002d00090027bd700000000000040000008814d2cac88a4d33c05eda9ddeab6bd70d05d6a68355f71b43a6284fb9fd8eef1c5c2a0660e8b01ec2a0df"], 0x14}}, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400120a0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x104000, 0x800, 0x9, 0x5}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}})
read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff020000000000000100000000000000000a00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

10.138352503s ago: executing program 4 (id=590):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000027c0)=[{{&(0x7f0000000380)=@file={0x1, './cgroup/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000400)="104a2c7a7c5ab578f9618421b36a438acd5025b4e8a60f744885ffeff7e2cba969e62ef97a426925e2eae13767b39d6b403de42abafcb9f5b087c2356332c7010a5d0395197014fed0d6fe44fc6b15f9392d392303e12cd3ecf34452284d6572865f44", 0x63}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000005c0)="d6760cbf9fb9497785aeb2acf0f9746a5ec9c70717baf5a3187886ebd999bbf63ab1cd6caf0e94c1ca3e5d14149aa6e2f2a68a4291359d11bff8eeaac44e9a84a953fead32291d923675f3c2799f95f7068683c3087603b4ec79c8909f9755c27b130191ffe9a4202f8e26e1599f4eed04420a47cded00159f713c70b58a9d6e1bbd697ec044a284a69576a5c10b4fb7b9802589905975fc65463111fe5572592febd700eb4c56fce740642e824467f5186df0299e1cb3d2e3de610f4bc6a32416", 0xc1}, {&(0x7f00000007c0)="ec9527c2a3e3d03767372d9a97aa996d61bcb7403036efc11565e46a907361eed493a7d0625e2fe159a6e36b344c4ce93b462dd5d2a14cb1b05318cd87f7bf7c7c258b992198132f56cb65ef8831e23bd38756de5a9a2bac6d9c52a6206c8efba1aa128fc2f6d5a0151834d02ad639deedbdc614021bf925c9bb17966aabeca369bdd3c2fac33aed999e88a0ee62927ed140606f1648946607d4fcb4e94c3d44a8e088a19971749037735d15f165834d262b7720b9fd1ae49447c5d975ca5368175c621f2c7aa1608268afd4", 0xcc}, {&(0x7f00000019c0)="7a9c267f4b007413a8483ba8e7d9c8420c1a29f9445d57b5586262eabbb08e9af4c194f9b31608c2c2536f7654e5c6cbd511b191aaf21115bc915a100257067c86453af8359231879ca74d51e95f355d0917707490ec6ed7b800e45db23613aa134c23f8750b8c63221f7a79d699b0327fd9a76d953452a1660ff057adbc4bbf6a8058cb9c440f5f4b64f0e94c2ed04cfddaedb4740cee222865320c682192931e0369bece7b50d872d799072ccd8d31783b0adb4042970947a17d508db77c76a5457029b0cf45bd2c9acc605e17fa2131371ab7e61dc9f5845f7c3e5a7eb05355ff9e84", 0xe4}, {&(0x7f00000004c0)="5d4d2af26a98c6bed2335cbaed415f17122f7e3b29b87f000de59db46d21181b", 0x20}, {&(0x7f0000001ac0)="1dec582884b917a4b9b9b6c0f4368c47de33ae6d5d8b4b821ddde5bd25e854efb72465cfb12099de66b428413de91b61a25c7a97ef0e99c211c7311c2e81ca462fc92cbfc1843dcae8be9ecb08d648a7f6040a6a84beed628c6dd9d71d80d60e723d8d9e0e13955fa220dfb56fbbe5668670914489d9d19b8d7951739562ed2db3156ee58c17acffa71a6f801447c682918a81f6c73dadb9922de4abfcaf388d499d9cdc838167b1aa39212cab3131", 0xaf}, {&(0x7f0000000500)="3c791a776d", 0x5}], 0x8, &(0x7f0000001c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, r3]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [r0, r2]}}, @rights={{0x30, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff, r2, 0xffffffffffffffff, r0, r1, r1]}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r2, r1]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8, 0x800}}, {{&(0x7f0000001d00)=@file={0x0, './control\x00'}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000002840)="4ce66e077ab39e1a3f06f96710661a340faf22a3a46ea6ab8b753d5db03ef4567ca12fd96a12ad9a5ebd66b797eb0faded23f02e4f16d5ec715e9784f1996c39a74149d21fae81440be97938ec9fc18ebec4d78bd1c7a2106fd7e3a0331bd6ef14fcb99294759bc5134b5848742e2ee29667c0f88763a2dec3ed02f76141e7d77275c656c34184f6610d1f6c2cc00ca063fad857c9386ecdcba65cd447779d8120ffe5736bdfbad1003446043e99c360ec2ef0709db6c6983d7b69315fa8070a6096d7e1033355555ae8d12f3ca536096027e1a425791642e3888f89dcc05cf8bdad634e1ff811f78fed3dea89a7b8cd0d99f8a13f2296e414", 0xf9}, {&(0x7f0000001e80)="65c7b5cb2f634557d870ac052b6dfdc2437f9ba30d83e4a480921dbc6658274b013b6df8cc9e288bec0f6ca5a347ab5ccfe723ebcdb0577059748d6651d1c023ff9aad4d29a26e758a705502315d17a1480cdee36c25fc91ee3313f74f1a07fa692582b4e7f3bf3098b3ee52f543efbd299cb9ca59842b7219da2cf732fb5745858d", 0x82}, {&(0x7f0000001f40)="77c99f0768748d123750196e66cb23d668d138389107ffad4faf93c4e0240e8e510b84320a641029374bb7d41e6a81df93e7b254c361e2edb2dc7d5d8558c28345bf6c28244e37eced4dd54d475af598aef5504a7a395d215aa3bbf6ae9624d74a0d9f1a0db850580a63f08a9bfe6459", 0x70}, {&(0x7f0000002100)="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", 0xfe}], 0x4, &(0x7f0000000100)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0x3c, 0x80}}, {{&(0x7f0000002200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002280)="b3f48c574674eeceb981439aebab731a1620db3046086a433af79c00e9cdde79ea4a551213aeae7fad096249b5ab24938453cd7c26308c9582720be402c1738e70871e09c0e6c4fab60a132dc65c74bcb289dee264a640d531890bdf8644044b034e91be0b9961b12924fab1252ef020f1c0b53a56d6929675913a271017d7ca011b8c766603a90c3f5654e7bb6f868c81ddc23bd766f3e345af4458164975085314e258f5363d973c499acf1eeb1ad48bb19f11dd4a2a35d4e13b9903bb426cb3c8d2a9fdb14af289ac3e1d374ece41f3f34e13e7d6ff10178e8842fc161afe1a9ea1ca47ca5f5d6c", 0xe9}, {&(0x7f0000002040)="4e6e60abf62a606f025e445ba28f13bc20f12922732a5d591e58dd9a3ac4d2ca18533fd076b6989e0ac4407113316c", 0x2f}, {&(0x7f0000002380)="a311e7badcaf65854cfcbf12b1711fba0d028d0cfe64edf60a8fd5330d9fea145dc42b502c7fb5925ccb9225a42f1b01ebc062fac0f9ffec6023a76ce102925e0ccde217a083085008c8c52c466cc03debcf067254bc89e6c6d8f6b6724eae6db00881741a489e616cf635b4f0b5ef42b877c61e0ec3e2f060409106cae09c532275bd1518c6", 0x86}, {&(0x7f0000002440)="0c9a22052b44c004b7bb2eb455", 0xd}], 0x4, 0x0, 0x0, 0x44000}}, {{&(0x7f0000002580)=@file={0x1, './cgroup\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="1092c13f5ed6512796d7c61a7935b34c7e491fed7e5b3d3d2b1547e0e2919b68ebfbc9144ebe6e35a6cf17f03c329a9b90353126f979598eb3001c332b6996b4d5d0d38a9b477bbc5d8cc677750f6dbddce9adc6c71a29deaeb2aaab1e4196638253fa57bc69f91a72a794c1913fc52e10ba8accd837129ba97e8cea42fcf5641c", 0x81}], 0x1, &(0x7f0000001d80)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b774c206ba82050221487648fdbf8c4bd10282f41371e84e26a3ceb12299ffe85cd4d00ca1a9edd16c4a9e179fbc1a0df70983b6c64d05a86b12f2ee9defb79d83f405042e5138d5a04e957e4e867902460df7965ab1591fbec0d159e117ff3eb3015fdba4581d5e4a8506f0f7d35ab5", @ANYBLOB="280000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="180000000100000002000012", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x58, 0x20040080}}], 0x4, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x0, 0x10000015, 0x0, 0xaae, 0xb49, 0xfffffffffffffffe, 0x7fffffff, 0x0, 0x2}, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
chdir(&(0x7f0000000480)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
setns(r7, 0x6000000)
bind$alg(r5, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)=""/96, 0x60}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=""/110, 0x6e}], 0x1}, 0x9}], 0x2, 0x10000, 0x0)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)

10.134605878s ago: executing program 3 (id=591):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
connect$can_j1939(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in=@local, 0xfffd, 0x1, 0x4e21, 0x0, 0xa}, {0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x4, 0x0, 0x100000001}, {0x40000000020, 0x40000000, 0x54, 0x3}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@local, 0xffffffde, 0x0, 0x3, 0x0, 0x4d, 0x3}}, 0xe8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

9.623716894s ago: executing program 3 (id=594):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x1, 0x80, 0x2}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x10000})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r4 = socket$inet6(0xa, 0x3, 0x3c)
unlink(&(0x7f0000000040)='./file0\x00')
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0)

9.158601345s ago: executing program 4 (id=595):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
socket$unix(0x1, 0x2, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000006180)='./mnt\x00', 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x10162, 0x0)
semctl$GETNCNT(0x0, 0x1, 0xe, 0x0)
memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc\xbe\xb6\xa7w\x9d\xf1\xe5V\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff05000700"], 0x6c}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
fcntl$lock(r6, 0x7, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x100})
preadv(r6, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

8.480002252s ago: executing program 2 (id=596):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
syz_usb_disconnect(0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)

7.487487783s ago: executing program 1 (id=600):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x80000045})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000300)=[{0x3, 0x3, 0x10, 0x66, @time={0xe, 0xe}, {0x4, 0x9}, {0x9d, 0x81}, @control={0x0, 0x5ef, 0x34}}, {0x1, 0xfb, 0x40, 0x4, @time={0x200}, {0x9, 0xfa}, {0x7, 0x1}, @ext={0x5e, &(0x7f0000000140)="e2fb1dcbcd7dd8e1e6e683c0a2ae98adde4c853c0381673169b7c491dd618a762e2af30a8794c3ce1dfac98f68d0ba1aecdda35d964dda753c95abf70fcf648a6c71acb57553f3db653a17fd28fccaf07d7d37f244329ec6bb5245b013c7"}}, {0xa, 0x56, 0xf, 0x4, @tick=0x4, {0x70, 0x40}, {0x1}, @raw32={[0x53b2, 0x6, 0x6]}}], 0x54)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

6.3222035s ago: executing program 1 (id=602):
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x1)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xa)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, 0x0)
r8 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
ftruncate(r8, 0x200004)
r9 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r9, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
sendfile(r5, r8, 0x0, 0x80001d00c0d1)
bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x40000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978042a8bfe1406584a128d7469166f4f07b84819e7df4af14e1df82d", [0x6, 0x7]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
memfd_create(0x0, 0x1)

6.100000953s ago: executing program 0 (id=603):
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40))
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x60880, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0])
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
setsockopt$inet_mreqn(r0, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc)

6.038149674s ago: executing program 2 (id=604):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400005bf911000000140079814800000000006900"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="7601000015"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r1 = openat$fb0(0xffffff9c, &(0x7f0000000200), 0x109282, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
unshare(0x22020600)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd771882612c450d694c9dd7d7f28d237e84e2780ca6428d132e03f188fff6bd9f85ead7e68f90830db9295022700491841f4a15a000aa4e29ac23601041ec521aa0ea8044f23feb74151693f228ba89f0a43385617bc7930f30a52ca91d02c64bd39d3d581abe9089b2284f876f9c58c124aba7a28700efcb0588ff4ab54a62c0c64fd577d85f5f753ec15281c", 0x90}], 0x1, 0x0)
fcntl$setpipe(r3, 0x407, 0x6)
fdatasync(r2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x4f308f1c8a50ecd2)
sendmmsg$sock(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080050)
io_setup(0xff, &(0x7f00000001c0)=<r6=>0x0)
io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}])
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000040)={0x2, 0x1, &(0x7f00000047c0)=[0x0], 0x0, 0x0, 0x0})
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[])
r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000280)={0x0, 0x3231564e, 0x0, @stepwise={0x0, 0x0, 0x3, 0xc, 0x8}})
ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, &(0x7f00000002c0))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2a4}}, 0x4048010)

6.018672171s ago: executing program 4 (id=605):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x44001)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x6, 0xa5, 0x4, 0xaf62, 0x393, 0x1, 0x5}]})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r7, 0xc0f85403, &(0x7f0000000180)={{0x3, 0x2, 0x1, 0x1, 0xffc00000}, 0x3, 0x19c, 0x40})
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x5000, 0xe, 0xfe}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x4}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]})
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)

5.95688236s ago: executing program 3 (id=606):
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000200))
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@empty, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x3, 0x181a}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44)
sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008800fc5f4e6a846e6f6ec0f662d65ac84f39514a463ec851377d393fcfdc118fc8acabb2ca567a0fda6652aa1c03a66c414ccdaeda53db74f82a7b0a6c497f0b2"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})

5.001081849s ago: executing program 0 (id=607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
r2 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r2, &(0x7f0000003100)=@id={0x1e, 0x3, 0x2}, 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={<r3=>0x0, 0x4, 0x0, 0x2, 0x8}, &(0x7f0000000080)=0x18)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x80000001, @mcast1, 0x1e00000}}, 0x66, 0x8001, 0x8, 0x4, 0x0, 0xfffffffc, 0x80}, 0x9c)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

4.923603078s ago: executing program 2 (id=608):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x819, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x557}, @window={0x3, 0x5, 0x7}, @mss={0x2, 0x7}, @mss={0x2, 0x1}, @mss={0x2, 0xffffffff}, @sack_perm, @window={0x3, 0xfffe, 0x101}, @mss={0x2, 0x48}], 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000e00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x400000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200))
r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0)
preadv(r1, &(0x7f0000000dc0), 0x0, 0xfffffffb, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000ed1348a4d66bf8ff150000000000000000677d240c5ec4554ae90efe05629137d0e88cb1d23d320a3c547f5e5098331c5c784b57315bc635081dd55736d3278a32791b25dc0c8f350ca2cc7a9660eb10175bbe94f29e5257cc3a", @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r3], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r4 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x1000, 0x0, 0x33a}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x4000010, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000c40)=@IORING_OP_WRITE={0x17, 0x73, 0x4007, @fd_index=0x1, 0x80000004, 0x0, 0x0, 0x5})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020)
ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000100)={0x1, 0x1})
socket$inet6_udp(0xa, 0x2, 0x0)

4.86557653s ago: executing program 1 (id=609):
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x6}, 0x10)
bind$tipc(r2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
setsockopt$inet_int(r5, 0x0, 0x1, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getroute={0x14, 0x1a, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}}, 0x0)
accept4(r6, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80, 0x80000)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, 0x0)
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.58192577s ago: executing program 0 (id=610):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000004300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f74ffffff303030301b304b34303030302c757365725f69643d00"/42, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES32=0x0, @ANYBLOB=',hash,fsmagic=0x0000000000000009,\x00'], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff4, 0x238d117e276b34db, 0x4, 0x6, 0x86, 0x1, 0xc00, 0x0, 0x20, 0xfff}}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003000000040004"], 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c4", 0x66}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg$qrtr(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000700)=""/192, 0xc0}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000021c0)=ANY=[@ANYBLOB="260000001200010a0000000000000000070000005164024394323c604f3dd162392fdb5e2d8d579ee1c68f41545c451746d85b2d5111bab69ed1fbaef60fa170c3f95bc42e6855c610f7c09576aa0411b2cf18511a87b4b790fc587d000dbaea975f806150dd2a90ba9f2ab4d8e6058a1ed00bdc3ab777deccf106dbd5b468d4d089a174b31e99a18217"], 0x26}}, 0x0)
r7 = openat$autofs(0xffffff9c, &(0x7f0000002280), 0x25c1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000022c0)={{0x1, 0x1, 0x18, r6}, './file0\x00'})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x8090)
syz_fuse_handle_req(r0, &(0x7f0000002300)="81a3f21bfdc20ecdfcf22d2436a7e6ad2f1330a652cdd1c36a00af21f2783e7660e214e78068fe112128ffbc2194b272202e19fb7a0a51006aec6f1eff6c32468c3317db95b18f065e560197093cafa9e98c74bfd69ec0f790236115abfa3a5cb951680e63bb6b8de1bcdaf18089a559601918f7d6d2f57d6e4bce3928ca975bc489581297fd3dbb71e53036e5e550881f122fd94732ed4101363cdf37b6e8900ff7857c59d68dd6e8700ff7589f6c91f190c33d6cfc4a5e9a7e61b744ca2481f3d6c2004e5ad61d89e405518559d37e5e09e833c2bbddea5d0210f2b035f708de6e2b5ddd41a898e314ac5355a6e9a1a1cda25f649707f992b13822d1607a6d9fd408445e8aedc8deafb487e6c59564c06f4ced3ca1f321d5816610991ab3af25ca7b0917d6670ec6bc364c12f21f14870cb86354a10916939d9f43723bfd4fceafa37e409ce41e665f6d1feccb92331272ebd5e47eb268a0b2ece632a1aaafe5908c488695a6306d4baf103ee35233d29270954b68a1f901413b2ac5a2ce013e10a5b98bee9fb3c403c75e11ed6550a83c71f73ff3e71bb549403c5c5a182f34cd0bc8dc7bfb1df98fcf6f4d6257fbdf3cc1f78675591c63854c98182d6701be46258bf93f2610eff39912e8e1c1a419085b7ff1479ce45d1c731299dcdd6bedb0980523e6ce6c4255362f8210d6acdba393734900fd8add6036cb1a959880f053da57760048cd87932fbe8cee98541abf2b7250ddab9b72fe101219f6d7aae0d29f024e7f5cdfd16195366920c531b0477de5bcf0eacab56e7ee637b19d7d01963b1a4800969b2388a8c6940a7b51a13b2ed5fc1d7e6ccdccecf702626a13d7058ee897f34cae5bced6228d194ed9c21536de16575810301d6da2897d59b315e779f0fd4a79c22200fe5cbe7714ee30580b1fc4ddee099f3321c6ca4433f283bf1707a9cef94671b6e149790c0301bba88de2679c728c405ba57b6a88bf104c474b24b3f1033ad83e77cd21be87c81bd73efc5defbd945cbe2dc2dc7f3d862e711bf27c2f030ec98e5258f7e965fc7d1c8adf381028d0a37e356ee66ba0e5a46120ed4ad6d6e6fbec588f6b86268910b4904654c15fe24be94a7488b06f8b2bddbf79cd26fb357f784f966ced7536b4c80562be2b69b9e1e153466b6028a3a0dba45b266488cdde61c1d48c21533e4ba3f69fb24ff9294d5cab79270e781b26a9808d60eae55c1c8153d3bc98c62a8323f2ca8a8b142230c1de703d41c873a43e1e4eb47d661fcd67698094a891e1c0ce4ace9107600d60c1447198bbc7e29ed3d64cbca9fb54690d520d925d7746656e95fc865b369af85e9c14ea23bbe89248f113770dcde0d7f06be45ebcbb91a3bcdc978d54ea047c14683c6ff0bfc5d8c091caeafca28198231d3eaf42d0e5c2a0695ae5634bb85709cbafb210189aca89e4665b332d216073ed82d03d667f226658a663a3f23a6c488471bcd288e5d0363f8a867ad14ed6e5fb33554a558994865cb1c16a0b5952f28be872495862e74cce28498d98ac0f1811d657420c0347344fee5b24ef662e152ddb6924a1439225fb6c9ffb1d80bc7d1a3768bf6392da511cd06b0b85585b2c946dca9442a6fc2225414ae66be683c6f84790037379bb2223db3e9f471b8d4c4da13132269277fbe993ce28a284950988d87c140c681ecda8d26a3a16c82056045470fd704e4bf3572cefd30a9168ce812a2d39fd7efec926076bd01efdfd4592f461b76fd1781caddae107170c057a7026b484dff01ee3e055a7d80642b4b9eae882e33453a5daa81328dfa9bc6f395344bcb512d443576b4c02cdc06e7c05ee570b904db3c66d8b0c9866decb78e316a62f439aa3bc0f339d79430f2e0d03a7d7b393d083fbaf79d8e1c478d4e7a54a82d2d846d57e712c0639715d3c2a4487f741f727b065672199c5320aeb5387a498628faeb2f8226c4f2dfede696907f1a3e8d84b8f709acbeaf7664105d1aac3005a3fcbf66f0284e46db49f4dc7d70d63a7b8a61354607d4a3fc76c267c4e20dac3847171356d9a9be3c751f0e04082b0e7f42f32129f5a08bd4f97324a742ac1ec3627f4723ebde2b803f53a53463ebf6cf5ada1bd1d17db84d1efeb6467c5269cf398309fc3eb3ee2411577ce4aeb09e17c677ec3f4309cfea22d704f06c77d45fa2a99c23ad62e6e5f79a11b0c4d3e67779ea41d346be259cfae975ee8e94d14c721f070a3051860836b5adfe0208597ef0973644ed91d9a1bc4a7522b41571983789324650a5f3b2c7cd0deb254fd92eb72115e63d7873a6793bdb017c75834a7764a16be0e843db86c7634d7f8616bea757fe937adf3caff4db44e653b47ed3e61df16cc4b8c5402bf93f85c93364ab2a2b3433d2bce710560ae65d9ad64a6b4bced47a34ed96e2f2d9b3baa2a8afe65c8039730da399700480d6dfa78ea6f4b8609842f70c61442a8f25fdfe1f5562fdd2416987f08c823e979014b8ecfc2df6f68c4e1f8567acced7d38b209f758c286102b8856ba6785c6ab815722671deee5854c6cc79ad6146b4ec7545b377ab549768d1a67c60278f0e16f9d377a7865f69c6d433bd6b377cdabddf1dc4b058498990d1d7ee620779070d45007d50a77df285744a380f6a15e79613c13c43b4ed71e6ecc78323ee5e9ec0932f710b2a4c0b669caafda54fad510c39f6fd2e8825a3db7a1caa6eb1b83e55a4a7e27a5068e328e1cd52637da2e5bb8f63deedabec25d8f8fa52c51cdd7a73843de660e918820246f44653fce428af3edd0ef5bcd652155693d130b791a8022e0428c1aad17c026038008377569b2155e9d61c2bbdaf7a35019672c56487a9d23df3b3521264d279b7cedbc6770b1500eaf368769f3c3c8422b381de7f369cc588ccc7cc934bb7ec5243a82b875a6ec03070a5b4c21f725a67584ea6e47b5c2f115476ea1aabbb44bfc1fc9f7b34428ae5ca3702507b3ba851fc0a8a2633213a317793e9eb4375cf95c602835ef5fbac059e95171f5a31c87e0a2232311ad8028b958be65e89a5845fae791b78604f857715f885049ddead4ac09aa029234f8adec83990972cbe1bdba2a2a567663c67acf1616af79f280673a6f42fc818086fa4e57715351e6c299efe159cd9db6598d40715181a2e784fcf67eccd38cf3a2ba450597d2177cdf63ee7acb78f04e581a42ae778f2c01f8d3f74a08852ab81750a68ba0249bf0c3efdd6d6aece940d630592aedd7d4698a5369edf31d16d68afe7255ea44573b67171b99674b832f14f6e28b3145cdcbec58ffbc3bcac6e2a065ee7655e256a626956d8ac79360a794a3e76b774cc6c1533453c443b370b490b67d1f83df8dcb95b3db9a8d95209be51c9a703cc4aedfc0b3b3c3e5eee170b6dd2876d836f7410fe421b7b78e71d802db60330e07dc75b4c00bfd608299f6a22fd1e9c47fedb72126ab5f8177ae6f25d5f8f20732a380e85fa3daa1bac74ab4cd4fd98df5d7d03723e83011a075e3bc99be8aa54971bfb23bcc2dc642baa7e8509df21611370bb133d74b78a2e34f92128d2e87f210cf1da909d9964f5d4a98d742e8b405c1ba1dcef92e2436e0e3af553e814962822a80691c2e3a41932183b59667bc76f8f9d8ceb8a9bc35a809c35bedce235066aca5a42a261282cca5105783fd384905f3cf6d613732a47ddb413ec6b1322fd9f9f640fc99e00f0dfdca74de1c8d9d99ee5ccf21102cb365c1c23fed058877a3560dc0ebf88180ffecf471e8173a70802ca5e5ee367b5b94cd74bde883c3f92e1ce885680c26fe4434ca1823cfd5b8c290c0b1dfd5f413c6c2a5fed3420ecb33a73c40e75402e4aac1133d4f3790bb6aff7a44c0cc109119820b0db7a04b8298f45818c50c53224ef50c76f27df08ee3c905ad225ee54c47b2fe59af26435fef22e05e3d814d0bd6dcfd7f952737fabdf18cd8d433300cb323c468ee58972ef84122573d3c2aa6b666defdacb0d49b4845c46f4a75fbd8f7edaec326e8e95e5d7cf6ce4d847d49284ac4096085a03bcc460f931ff69f02d125c05205fa8c654afec6c7b769bc5d5d952be8c966d6cd209de9d3ad6685c94fe32e239fccf462062441c6bd142d438aefbf3595d84adfb30b6d295a534405b013e3d7fd1a5c073c6d85a4a12900413e353262343d66199f54b1550f309f86a6d9d7b1839a1b9c7916c51476228865c85779221e57229c97c85a17da74e923808fdeadad8bfc3f9b2ab32d07a6bbf101d06033848fd742c4a8d879d07d9bc5fb50d16daa0084cc03978910aa82e07f43e9e2d04274a5311610488bbdbef8fc7bfcb2f6719d59da7aa55130b276eef75767f114427b4e6fff30650a884edda08a73ff9d8751f9455bfb80919c10b8b67fe03e4cb63dfa206a0eb0cd19c5266199bb5c5237e777b10be9f0196db646fc4d6afc023aba004d2068ccc0f5dca09c400cea6a6913c858f8a0070501e8a819ebd398c58b5b43ec5bdef2f9707a4ad54d4d4bad03b928b08c58b0984f6dd610aac06b66d4366362fa0cdae7dcd3ce7e1d8074f814666d40139694aeeff03fac84704eb6ce1137b58ad6e6e624a2d6ed268b966628a6cec6f2a48846105cf5e9107400c6c5e7fc7d6c400fa16483014fbe758d48b74789055ead2d4186f67cdff9c668f43c7fb8475cc44969e59f96a741e8e8b613513fd9d9535030dfc0a3a3be8e39012e0158c3daf5ea11fcc307087a6374a8b58dfee76357482b16dc712b9596e9f11a77e0dd0f60a8a3ef825d00687e39ee73fa9de9424b6cee4e67d1fd3d963af2796fe235a298c2c44d9dc3f92011d3ea5bd2e8f88f42c00afc208356031f0a961b3dae119ebc0f517bfdc1a0069a96bfad74baa06951ad3f7dedc373201257ab32a4f4f4f69beccf8fee70a7356b137061609bae60c0d3925099302b1349683d5feb338edefc69421575b98f8fb394ee83c2733dd9cb9da3fb52e660dde5c12c3e728681d15fcde29a5561a5fdf34cfee121ef39ebf1e5b0cb65c44085f0d8c2851e60285a10023d72257d22b9d178ec8e581b325d22d9bf8c6e055ffeba0b060d35edd6a1346a2ba4c9e323329c3ce78d2b41f4ee8e23f1b8b7b408d8da96f9388cd0c28f3cd118a8b2a16d7c660394f29f43e47599705326cf01a0ea4b4e7c62192bb4fa8bd72aac47644cfaf08cac8fd34a5ddbf4c8753a3b951b6011261666aa41e728f44d4859d9c00dca03bc92e81583090c1f4eac6233b3408044e74dfda79425af191ec705a44f5c2e7d648e93aa5500dee7b45986d5ebbd12326e4d2a61aebb172d81c86ff0367138fdb3d15028442b2ee5016a2bbd8ea56228781f49c6aecf1bccc40d1e452733ae2893c4e5662312da81f81d5070650c66685a20344583e945c6d9c18499e3e2c0f9e9ed29f35e73bfefbef12db1d10292088746fec50da5084309fd61635b2beb952033addcfbdf7b2a7a7b879ab2f398336301cf8aa8ad34fe308774b907737e66224e40c1912e70bd7e570f24919b34e55a4013abe6a0a8be0356f2bd774288d20161cea2f204074abbb6eb4fea22da34f2bbaee8972452c505c53842440f7ed5badba46591a53f711f6424cb0555a3b4f5d70ac8f29369b5c23d2fbf341cbeba325b479a91d7701c076d2ed7a28cf3696fdefe75dff898a0ab02f749ce0bcfe51dca2013593efed7377de9f24739904393ce0fff3ae2e83e377c68ec5d9440f9e8269304661721c90b42fbe1b9484506d4c568da5b1aaec651870cc0189b7779d8bb81d0f3e4aa1858295bb4c4f62b283749d85d813d702831d366e74161b527f60b087202e770a5e7045048c33911acc15fa6345ecc3f490c14d0e940afe7e4314422bec3949e19affbec39f98d645629a86ca1eaec3e72fbf07c8c464b6dacd2e9982fdd44c2827d8fc4f81c75fc93d90f97bb79943872766080ce731cbe171b7fe6efdc86b375b7bd7ded4a1cea14cef367742821e11089c716c63981bca748e7764eac672cda08e90d305f1e670d369475724e8b624746b4b493239c7d8015ffb248d2bbec6016e63d8d642f1df5fc837461fb82324b209157a9ff123d4dd57be49308460136eb99b01b2cddd82847e5cd28291631409011e64a3ee7c5aa956770beda39016320d75cf87d2acde6c7031c308b0b112be1c81a9126fdf4dffa88711c89b02371935d91f58ca4892e4640d1b7421eb334b3054a787b7261a470a7c6ca47394e37675d8536f5a61841056589a5a8085a77db3394cf1bba874e43529bca15a9dbfd6428a24e8ed954f5f3d0aea6d5e688cc80dff21f23070b1dc786ec929bf4beb3edfefa33c20b4f2118eb098f9c1084e3fc2b778461c9820c620eb4f9a398df5f6798eca8626d6617e85c935cef55253030fba68473e8f0696e0436677755d61efe32049fb5fed06f3bc4e7496d2480f2254e28819de204d8d0a0e805073af352af455c5cffa3c63224e044d62672fcc4741a58e438eb970b838e7f5f009a3239adbfe889d73251348893dd50b772daad6518212b044c10eab0e717766f8ae249a8cbba62cab64088ae0a87abff72ef5aeefb49ef89cd9e7154da4438cf63e8bf76afe703c0c178356ad98121e5f5ff9fbe731d9dd16d1ff0fc87357d8a5221b3a136e859c647e3be971cb01d0885d20dd1cb0fe3af44004a00fc42b18d458b70d0d027b65835b3cc7c6eba4b5fda3ecbc8bee73be3a9f080663aaacd233b2a33dfe9657112c51facb4ceb09fe5e20ada4fe32532f3cf1a3900808b70a1b2d7a2bff4f3c2fa707cca7906c0affbb0c74c7e7f0077bb7415ecef22b3c4d0209a37b0a23c739e87f7d2cb38151026e84a7d1ac50b95debb4b0e1a9a2ef03d534d05ad814bb802a0f8ce9ff801cdea62e179ed62520c2555b266333adbb00ba3d3f094a3a5865a21420d6e244913f9a2d503da0074ba7407041603929e90f201a9daf39f1776cd62f5e55622036d4e01a378d05dfa26eb856b0d9dda985c5be75920771b6c9ac89e53e6f419b7c1889b7d037bbcc70e57ba26de46093939cd2bf6656a63c09c883973478bd1b484d0407a3f761b48a329bada247442390284ae12a5284df4dde1fbeaf5e6f0e052d57eb3066673b8812c991463fe5099c548c1df6f02f232b30c48c40d09af276056297e5781b21417ca058d445065995ba4b963b54a79b2c2830b962ed8f9b14fd55404976328279d3d21935ae18031b8a90548b216066d6e0245d3336aadf71d4563837d005406bea1f30967d3d6607823c081e0abf102070af6c4ee2b1b8448d58c96f93fbd2543695efa12ad572a504decf48448365c735d3b3a28f64868c402eec51df54c835062656d7874d6810307813a5137b9e6d2583cbaf4a07a2b4fcf3695bf38984670e7d98904ce0c8f264b6be526ce351f92c59742d5e8ceb538abbd85e561b4524a6a27abc721cf0a83e8b8fff1ef5d1f0965a1f045fef6641ef7834dd01945ebc54a01ece77c1c6e6aa4f731553d4ecd7fc90f57ac80ae6da14a1aceb13a12d5e1f80c93c5094c60b4a6e2994f27a9696d4d7ed20ab30bb0f836e2852c7332b4956c748cfc6882c6d48bff87e380c9993a635dcd4829911f179ab3e098963b39613d1d7ed4b4f61d98cf1d064372f416002f1dbd836d93865c28ea0dff5fac69be7c20e3b410dedf54696fc3469b7b31c4ca6031c64ac2685139986a0f4a53cc3a2fa94954c22438a6184ff3739f400586f05a330c7175a46b66e9fb27b48ac50c270aa3ee2e7c2b36f2a2262962dd1ea0922ae6f729171f88c8216ebf2643f0949ac9ae4667865ea83954977984792a1fac5f0c02ea243d59848c30d04fe9830b8fd0af8d209652bf0551a3c4ec85e0b4649ee8e10134def70621fbad11055d2439efed9eb5b9e83bcd41803914fbaf5e1a6b531e97bed130f420220f6a704c932828a2464dec0d34a64887ad79670f9591576973ed49d49c533e06ee56384ac5d377c0cc98c25668d97a23e28ac8ef45a9022a8783db5674c24e7488f6870ce105bd620ee906ef2a158ca05878126fecc9124ebbadc12eb4a86d06276ec3196ee55ebb12467c7b1157814b8015b7c2cf8002dcb402ba427e0a9ccdf4c7a5ffa679fac207e3d1edc72ce7caa719b692d003ecf8ce0ab3c500c2899b66e7882088ff8c3c944f53686d75bda5b6f682b64dcfd5f2a48ed04b6196ff728dc508c98c8419d880d86b2745dabedd688936bcdb4749c550084be521f59a10dc5d32f5c78deda2b6ed905b2a62eb47cae3319823bb7cc5d66c6bf194f85227e1ed67451985c63375eda141b9e8f412116d8a79b135186da03cb10a05b8f419a1f2652d59977e3ee68f5bb479938493433d24b813d52b23417a0564a183a82c5ef560a9e8513cc834d4e38ffc565c9d9c3160f55a5fd8c7151a99ff250d9bb8138a2ca8db60560eb73d7496b9b4305186f008fd7ccbb2a6e4a3669416c53719e1bc4f19ffecfed790aa1f52129b10df40e9dea62ec4377d2f9b692d16b239e6295383740ef1e6a009ade9072e6f86cf37e1184cebe930538757b7a4a106e0ccef0ac2bde6f61829b4c9c77763b18a7211ceca8eb9e7b82649f57cd78d2ed6e692f24f42e3e6eb38f4cc3381d8c41cc472b97cd388f174e5ccce0c19244bd1ab6e0dd3c532ec69c32c5dcb132be990cbab5b1886f17992c81d992afac64519c461fbf0950882e4a58e368f7110565cb80526d21991f87f5f401b6e52bb9b8f32a5499a48f203c2c9d9fa634132e303e14159a4bec453a55a5ff2a514841d796c080d7ef31d82021e140128cea66d9548327b99c23932cac9fb001210e9f8bb1ea8bf3bced1f48c7e3ea7face6d91e819a3a9ac94c30216865a6c019415601098d6c8f6bfaceb264566368a9443a252925f3bc26f3d203fa24ecbdb9eb09c76ae3efafa873249a4439a04d2c9fb225161e2a7cc923de9d3cd2b6f0b4681007f7f3ab7ce7008b4a9bf091ae3430375f87d0048842046d0dfba42a7923344615f82abfbda04d2152e08351f36798fe1f188a1f0c4219408de0e52fda82daa2a5b1e91b324a50b0b5113a089c16fd58423824e97b7ccdd524835aed91cb167ab663816381c9aa77f9b364cd07698b5a6e35915d7e1be046ec8993644ebf739840ae5cfa89fbe448a871a4800345ffd78308ad99286302835f0a25bc60c2d879a87363a97a9f35ab771b15957b58ca46e8bfe5bcc774fa3fc17cdf9430c9c5215bd460f045394e600ca4b5a3efcfeeb71fdadca37bd501f84b33c5f0035afa2de5a661c8ce49ed0942ff7dfc2619452e0eefd9e46f87752e4ef88e70098e98e323c321d31c1cc7e3cc064784bc11ee192dfbf69195dfd353f31d95a7348f9f63d5b22d083bc92112d71e8672cafc1a3ca319664c447c6ed0368b65fedc4d7806faee19364aeaa17ad3193d719740cde359d6cec5b42de8dc4319a091d604f9eab6bb5749eda9bb2c88a3c01e15bf475836fd9f2920ba48c1c64670558ea9be486525166e89c14aa6e32f5f6025817e0ca50b540e82f9037d653a4b473fbfaa5173d9286ca278fb30ddb7ed9ea381d84e4538c5d0db13aecd917b1cdc7a9702733a03148f614695266c6f1c75c843e7f55f7fea0b3c217e88b5b293eff52801c64dd05ba482adad321a2c83e88cfdc1d37268de1b64f1dd19b5d2bf8f2d34b8d0dff96bcda15c96bdf632d2fe1cf067a774ce0dcc9c584ce95c21ad079dfd67ef22ab6875fd909e95c849810e5088b9c48d0bb5e93f3fab351cfc0b343ca5f5d1a796f915f4b790f914602bb32b6c0fad1d090895ff6ec93eb7a5d02e35ff60c5db4d723bacc4a9237843ab5ec6064c497286cfef9be216b9283cde494159f56d5061bd4cd96deb9bb2499873bd27a7cd50ff4422a09311c897c84f39e2f02413be8e269648d3a9b88e9f32d76e2d07fc8998c2a3d9704e1fb428958f59c9fc9eb1d69c579a859ba8710638244605f170a8cb60829b418d81bfffc35b354bec2893bc6a63f7107a26fa6a32a725e50f94ceeb69841795310c4c4fe8f4bb55776a56d61248baaa9d5424db682ad7e77ba180c5b633429b9c683ac5d713c7e211b37be5be42f5eac8599e01c59cc77ca487ca0f5ed45b0f88d9c98e4994695aa6af7aeed474232c48ee249af8215d71c404c1718b68ad69d5eff1a2d02531b45f23604eec24a2c7528534ff2a9c4014188ec1d1ef180b70289c410deaefee657a220b9f9efba8cd04edc7aeaf99355b96a876b6adf1c9384e1227184864b1352e92bb6a258f0d421de4e1d549e68ab0d37dfa8d43dab431affcd23f3118dc5817ceb7e0e2a05d849cd6c37446bb3ea112338c410fcd01e34751fee15bc6ddf44e6695cf39fa53e5f860a11f6fe8eca3488133f7baed5d0a8def6135b16266c046737de7581bfd02c60eb439de9c7683a3bca31cb6fd6c69683ecf41b7d2c1ea6ab5a4a5451779d7c1f8c7474baf67afd7712365f0fa7474637e0c21e1bab4d932f25825b3e171f84193065d66c6822b2e1918490a396600360ec0d41a15660652a40e2d3f2cc54427dc22d4a0fd25996bd3f17e0b888cffb0aea6e206c899b8034b3a2a57eca8aa05e0e5d21c4b68a839f72db188ce3b53f211d9c2e2dc3f3b3d3e3f7fdca2a96a31528242cb73d0b0e24babb3f024fdc680d59ab2037fe5eb86becb6cc8f0af5d5518308d9df72f28a18a4577c07e92644db50391bd8815241e62a5499dd93afd8f099b975518fe75c19f55d9e1ea9d65ae9038f05942e900c7071f5a8e03c106c31c8ea41d1f9f7eccc00c308b218c3b227a3759b93856732255834f744182f801d9350775fdd8b35b13811537e069076971f89aa280eb53c87b2d9dd9e81aeeab5de83ed917afc47e01edc1a9cb76b3049dd2ef42122bf99574ff2a91b4e403646aea290ef20ce1a7d379b45081b851ac5291f9e868df375cd7b9bfb0f16345494eb06c7ede453e3fcd5a890ea2ec2173df6f3f6675960f47a4e5f235abea744216acc1f4305e034ffebfbae88a0c8f5a230562780d282fe4528a87e8a2ec405bc5d4c55e43940e6a4890ba74d470c7e9a6262b6d7c6c994aad29e473793b97421563a32af2d3bbdc9529533b6711791fa621e40c165e2d187d097b68ff3cbb5a806572e6d403bc8eb194633532457103954bbfbcf977a73d74b0fee0d8b62911e5fe7e14e7e978b6ae96830c7634ca49f0ca80ce43f22719f0d2cb0f8bc661781a9158838f3433e50c62e88b36f298ce0c9399a13fd7e637ebf935dd96de4cc1c8c7b17bc8a5cfb64891a627fe1e4c3233bc920bc0dc67975c88cedbda597a5a63a9ed995008b6a8804daaaa2575d6c35570922733b7883097e30e6a80ab3dc47a2cd605f890b4185ffde03babbc208302fac6e76a36a0a74e2bfee7adce345b7cf7a65f9da693f3d5c0960065a2acfef2a7eb9de80b97599472e8972d7e86b8df784266c6149680786eb2b2aedd3da92be8468f5a2e10fa1c1505f5d4c142db91f8ed57dcc73068c431099066c5bd80e54278e2dcbf8a7b5a2e6d53e49f9a993412e9a6dc12293182ec716d7", 0x2000, &(0x7f0000005000)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004500)={0x20, 0x0, 0x9, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.46470003s ago: executing program 4 (id=611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000940)={0x38, 0x5, 0x0, 0x4, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x9}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2501000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x30040004)
sendto$inet6(r3, 0x0, 0x0, 0x20008840, 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0)
add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000180)})
keyctl$dh_compute(0x17, &(0x7f0000000140), &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
open(&(0x7f0000000380)='./file0\x00', 0x6ec58fa5834dfb19, 0xdb)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r7 = accept4(r6, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550d, &(0x7f0000000500))

3.906276915s ago: executing program 0 (id=612):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000010, 0x0, 0x400000a5d6}]})
fcntl$setsig(r4, 0xa, 0x26)
recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10000002}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000a80)=""/250, 0xfa}, {&(0x7f0000003e00)=""/4098, 0x1002}], 0x3}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000540)=""/121, 0x79}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4141, 0x102d}, {&(0x7f0000006080)=""/4082, 0xff2}, {&(0x7f0000000040)=""/113, 0x71}], 0x5}, 0x4d8}, {{0x0, 0x0, 0x0}, 0x4}], 0x8, 0x40010020, 0x0)
r5 = dup(r0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={<r9=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0x7d, &(0x7f0000000100)=@assoc_value={r9, 0x81}, &(0x7f0000000140)=0x8)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x6094, &(0x7f0000000740)={0x0, 0x5884, 0x10100, 0x0, 0x330, 0x0, r5}, &(0x7f0000000600), &(0x7f00000001c0))
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, r12, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r10, 0x200, 0x70bd26, 0x4, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040001)

3.596631079s ago: executing program 1 (id=613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000240)={0x0, 0xec0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000a0a0102"], 0x14}}, 0x0)

3.501393664s ago: executing program 1 (id=614):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000001000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x12}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
eventfd(0xe)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
process_madvise(r7, 0x0, 0x0, 0xe, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x110802, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0xb5315258, 0x2, @discrete={0xbf, 0x1}})
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000480)}], 0x1)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r8, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}})
socket$inet6(0xa, 0x805, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118)

2.145611443s ago: executing program 4 (id=615):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d)
getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000040))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="d2fee153037d3ebc328350a6b03bbc24494617358be406a19c8b096eaf2cf4e2a31d25139cd444e6c9ba4900b3afa55e371bd9b96b2fe6a69d4c692f86126261866dd1b97f810d307154503746c5157f6f0760547010d22ce9f4131196d74232b550f7652a0862e2cbd5ecd25c335f078e550e7279b81aef2d761b0af0415689c63b685dcd7addb1625cae1b5fa34abaa3a91dc466e691e66dde754fbefc157d8dce23926633bb092253e73c53dd60d372263b10a7dd13d46a5bc09f62085ef8a21bba8b37123cb4ca234b61f13bc86279a9a7", 0xd3}], 0x1, 0x400, 0x0, 0x8)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x50323234, 0x0, 0xb, [{0x80000004, 0x7}, {0x7ff, 0xb325}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
syz_usb_disconnect(0xffffffffffffffff)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0)

2.113255215s ago: executing program 0 (id=616):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000304000000000000000000001000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f00000000c0)={0x12}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
eventfd(0xe)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = getpgrp(0x0)
r7 = syz_pidfd_open(r6, 0x0)
process_madvise(r7, 0x0, 0x0, 0xe, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x110802, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000002c0)={0x0, 0xb5315258, 0x2, @discrete={0xbf, 0x1}})
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000480)}], 0x1)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r8, 0x89a2, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x43, 0x0, @sync=0x0}})
r9 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r9, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000001080)=0xfec)
r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r11, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118)

1.946103186s ago: executing program 1 (id=617):
syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x541002)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20008000)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000300)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x81})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0xb1}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c8d44e40cf1b400b4956010203010902120001420000000904c305000e010007"], 0x0)
sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2000a804}, 0x20000080)

1.914477784s ago: executing program 3 (id=618):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b400005bf911000000140079814800000000006900"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x14)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="7601000015"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r1 = openat$fb0(0xffffff9c, &(0x7f0000000200), 0x109282, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0)
unshare(0x22020600)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4800)
vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd771882612c450d694c9dd7d7f28d237e84e2780ca6428d132e03f188fff6bd9f85ead7e68f90830db9295022700491841f4a15a000aa4e29ac23601041ec521aa0ea8044f23feb74151693f228ba89f0a43385617bc7930f30a52ca91d02c64bd39d3d581abe9089b2284f876f9c58c124aba7a28700efcb0588ff4ab54a62c0c64fd577d85f5f753ec15281c", 0x90}], 0x1, 0x0)
fcntl$setpipe(r3, 0x407, 0x6)
fdatasync(r2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r5 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x4f308f1c8a50ecd2)
sendmmsg$sock(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4080050)
io_setup(0xff, &(0x7f00000001c0)=<r6=>0x0)
io_submit(r6, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r5, &(0x7f0000000340), 0x41}])
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000040)={0x2, 0x1, &(0x7f00000047c0)=[0x0], 0x0, 0x0, 0x0})
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r7, 0x802c550a, &(0x7f0000000000)=ANY=[])
r8 = syz_open_dev$vim2m(&(0x7f0000000300), 0x0, 0x2)
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000280)={0x0, 0x3231564e, 0x0, @stepwise={0x0, 0x0, 0x3, 0xc, 0x8}})
ioctl$USBDEVFS_REAPURB(r7, 0x4004550c, &(0x7f00000002c0))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2a4}}, 0x4048010)

879.92824ms ago: executing program 3 (id=619):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000002c0))

878.353237ms ago: executing program 0 (id=620):
syz_open_dev$sndctrl(&(0x7f00000001c0), 0x2, 0x541002)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20008000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x0, 0x0, 0x81})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff038}, {0xb1}, {0x6, 0x0, 0x0, 0x2}]}, 0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000c8d44e40cf1b400b4956010203010902120001420000000904c305000e010007"], 0x0)
sendmmsg(r5, &(0x7f0000001c00), 0x400000000000159, 0x40840)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2000a804}, 0x20000080)

363.709166ms ago: executing program 4 (id=621):
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
close(0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
clock_getres(0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002d00090027bd700000000000040000008814d2cac88a4d33c05eda9ddeab6bd70d05d6a68355f71b43a6284fb9fd8eef1c5c2a0660e8b01ec2a0df"], 0x14}}, 0x84)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400120a0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x104000, 0x800, 0x9, 0x5}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000, {0x2a00, 0x80010000, 0x0, 0xe01, 0x0, 0x0, 0x0, 0x0, 0x1c, "001ea89d9bb7fb0000e60080b8785d96000100000000000000000000000000000000000000000000000000000000de000000000a00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x10000]}})
read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020)
r5 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="38010000160033060000000000000080e0000002000000000000000000000000ff020000000000000100000000000000000a00"/64, @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d2320000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000050000000000000003000000000000000000000000000000050000000000000004000000000000000000000002000000020000000a000418000000000000000048000200656362286369706865725f6e756c6c2900"/229], 0x138}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

0s ago: executing program 3 (id=622):
socket$inet_tcp(0x2, 0x1, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x2008, 0x5, 0x11)
r0 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x89, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x2, 0x2}, 0x10)
bind$tipc(r4, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', 0x0, 0x24, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10010, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020)
getgid()
getpgid(0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, 0x0)

kernel console output (not intermixed with test programs):

nconfined pid=6608 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  135.953892][   T30] audit: type=1326 audit(1756602685.050:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  136.003180][   T30] audit: type=1326 audit(1756602685.050:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6608 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  136.223842][ T6628] netlink: 128 bytes leftover after parsing attributes in process `syz.1.168'.
[  136.234926][ T6628] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'.
[  136.527560][ T5960] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  136.664268][ T5960] usb 2-1: device descriptor read/64, error -71
[  136.944372][ T5960] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  137.496946][ T5960] usb 2-1: device descriptor read/64, error -71
[  137.645914][ T5960] usb usb2-port1: attempt power cycle
[  137.958705][   T44] IPVS: starting estimator thread 0...
[  138.004356][ T5960] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  138.023525][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'.
[  138.037856][ T5960] usb 2-1: device descriptor read/8, error -71
[  138.054485][ T6653] IPVS: using max 35 ests per chain, 84000 per kthread
[  138.069671][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  138.075414][ T1605] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  138.076229][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  138.091649][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  138.099497][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  138.107382][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  138.115219][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  138.184442][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  138.274366][ T5960] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  138.286495][ T1605] usb 1-1: config 66 has an invalid interface number: 195 but max is 0
[  138.296335][ T5960] usb 2-1: device descriptor read/8, error -71
[  138.305913][ T1605] usb 1-1: config 66 has no interface number 0
[  138.312639][ T1605] usb 1-1: config 66 interface 195 has no altsetting 0
[  138.323547][ T1605] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  138.338609][ T1605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.351048][ T1605] usb 1-1: Product: syz
[  138.359427][ T1605] usb 1-1: Manufacturer: syz
[  138.364143][ T1605] usb 1-1: SerialNumber: syz
[  138.364272][   T10] usb 4-1: Using ep0 maxpacket: 16
[  138.387211][   T10] usb 4-1: config 20 has an invalid interface number: 41 but max is 0
[  138.396091][   T10] usb 4-1: config 20 has no interface number 0
[  138.402332][   T10] usb 4-1: config 20 interface 41 has no altsetting 0
[  138.413138][   T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  138.416223][ T5960] usb usb2-port1: unable to enumerate USB device
[  138.422922][   T10] usb 4-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  138.438612][   T10] usb 4-1: Product: syz
[  138.442799][   T10] usb 4-1: Manufacturer: syz
[  138.447527][   T10] usb 4-1: SerialNumber: syz
[  138.604729][ T1605] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40)
[  138.611115][ T1605] usb 1-1: Forcing UVC version to 1.0a
[  138.650390][ T1605] usb 1-1: No valid video chain found.
[  138.664342][ T1605] usb 1-1: USB disconnect, device number 5
[  138.759411][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.176'.
[  138.826780][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'.
[  140.045428][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.214741][    T9] usb 5-1: Using ep0 maxpacket: 16
[  140.263534][    T9] usb 5-1: config 20 has an invalid interface number: 41 but max is 0
[  140.309563][    T9] usb 5-1: config 20 has no interface number 0
[  140.333486][    T9] usb 5-1: config 20 interface 41 has no altsetting 0
[  140.391503][    T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  140.464344][    T9] usb 5-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  140.545719][    T9] usb 5-1: Product: syz
[  140.586940][    T9] usb 5-1: Manufacturer: syz
[  140.635211][    T9] usb 5-1: SerialNumber: syz
[  142.369049][   T10] CoreChips 4-1:20.41: probe with driver CoreChips failed with error -22
[  142.517915][ T6692] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  142.582676][   T10] usb 4-1: USB disconnect, device number 8
[  142.601672][ T6692] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  142.748484][ T6692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  143.286228][    T9] CoreChips 5-1:20.41: probe with driver CoreChips failed with error -22
[  143.609129][    T9] usb 5-1: USB disconnect, device number 5
[  143.661029][ T6710] FAULT_INJECTION: forcing a failure.
[  143.661029][ T6710] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  143.711178][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.4.188 Not tainted syzkaller #0 PREEMPT(full) 
[  143.711204][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  143.711213][ T6710] Call Trace:
[  143.711220][ T6710]  <TASK>
[  143.711227][ T6710]  dump_stack_lvl+0x189/0x250
[  143.711251][ T6710]  ? __pfx____ratelimit+0x10/0x10
[  143.711274][ T6710]  ? __pfx_dump_stack_lvl+0x10/0x10
[  143.711290][ T6710]  ? __pfx__printk+0x10/0x10
[  143.711310][ T6710]  ? __might_fault+0xb0/0x130
[  143.711338][ T6710]  should_fail_ex+0x414/0x560
[  143.711362][ T6710]  _copy_from_user+0x2d/0xb0
[  143.711381][ T6710]  get_compat_msghdr+0xad/0x4a0
[  143.711404][ T6710]  ? __pfx_get_compat_msghdr+0x10/0x10
[  143.711432][ T6710]  ___sys_sendmsg+0x193/0x2a0
[  143.711454][ T6710]  ? __pfx____sys_sendmsg+0x10/0x10
[  143.711503][ T6710]  ? __fget_files+0x2a/0x420
[  143.711524][ T6710]  ? __fget_files+0x3a0/0x420
[  143.711553][ T6710]  __sys_sendmsg+0x164/0x220
[  143.711573][ T6710]  ? __pfx___sys_sendmsg+0x10/0x10
[  143.711600][ T6710]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.711623][ T6710]  __do_fast_syscall_32+0xb6/0x2b0
[  143.711639][ T6710]  ? lockdep_hardirqs_on+0x9c/0x150
[  143.711664][ T6710]  do_fast_syscall_32+0x34/0x80
[  143.711680][ T6710]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  143.711699][ T6710] RIP: 0023:0xf7f94539
[  143.711713][ T6710] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  143.711726][ T6710] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  143.711744][ T6710] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  143.711755][ T6710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  143.711764][ T6710] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  143.711773][ T6710] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  143.711782][ T6710] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  143.711806][ T6710]  </TASK>
[  144.497538][ T6716] netlink: 68 bytes leftover after parsing attributes in process `syz.4.190'.
[  144.556408][ T6716] netlink: 666 bytes leftover after parsing attributes in process `syz.4.190'.
[  146.209244][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'.
[  146.238707][ T6729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'.
[  146.267234][ T6729] erspan0: entered promiscuous mode
[  146.273793][ T6729] batadv_slave_1: entered promiscuous mode
[  146.284380][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  146.454466][   T10] usb 2-1: Using ep0 maxpacket: 16
[  146.464463][   T44] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  146.479521][   T10] usb 2-1: config 20 has an invalid interface number: 41 but max is 0
[  146.535033][   T10] usb 2-1: config 20 has no interface number 0
[  146.563743][   T10] usb 2-1: config 20 interface 41 has no altsetting 0
[  146.578523][   T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  146.588125][   T10] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  146.596553][   T10] usb 2-1: Product: syz
[  146.600871][   T10] usb 2-1: Manufacturer: syz
[  146.605911][   T10] usb 2-1: SerialNumber: syz
[  146.660481][   T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.720049][   T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  146.791291][ T6738] kernel profiling enabled (shift: 8)
[  146.821241][   T44] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  146.853134][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.895289][   T44] usb 5-1: config 0 descriptor??
[  146.964726][   T44] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  147.382555][ T6731] netlink: 112 bytes leftover after parsing attributes in process `syz.4.196'.
[  147.392212][ T1605] usb 5-1: USB disconnect, device number 6
[  147.398473][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.196'.
[  148.049920][ T6750] @: renamed from vlan0 (while UP)
[  149.300888][   T10] CoreChips 2-1:20.41: probe with driver CoreChips failed with error -22
[  149.313839][   T10] usb 2-1: USB disconnect, device number 12
[  149.435858][ T6760] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  149.698369][ T6766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.201'.
[  149.707511][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'.
[  150.704345][ T1605] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  150.758301][ T6783] CIFS: VFS: Malformed UNC in devname
[  150.993036][ T6786] FAULT_INJECTION: forcing a failure.
[  150.993036][ T6786] name failslab, interval 1, probability 0, space 0, times 0
[  151.007832][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.3.212 Not tainted syzkaller #0 PREEMPT(full) 
[  151.007856][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  151.007866][ T6786] Call Trace:
[  151.007873][ T6786]  <TASK>
[  151.007880][ T6786]  dump_stack_lvl+0x189/0x250
[  151.007904][ T6786]  ? __pfx____ratelimit+0x10/0x10
[  151.007927][ T6786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.007946][ T6786]  ? __pfx__printk+0x10/0x10
[  151.007973][ T6786]  ? __pfx___might_resched+0x10/0x10
[  151.007994][ T6786]  should_fail_ex+0x414/0x560
[  151.008020][ T6786]  should_failslab+0xa8/0x100
[  151.008044][ T6786]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  151.008067][ T6786]  ? __alloc_skb+0x112/0x2d0
[  151.008087][ T6786]  __alloc_skb+0x112/0x2d0
[  151.008107][ T6786]  netlink_sendmsg+0x5c6/0xb30
[  151.008133][ T6786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.008149][ T6786]  ? __import_iovec+0x5d4/0x7f0
[  151.008169][ T6786]  ? aa_sock_msg_perm+0xf1/0x1d0
[  151.008185][ T6786]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  151.008201][ T6786]  ? __pfx_netlink_sendmsg+0x10/0x10
[  151.008215][ T6786]  __sock_sendmsg+0x219/0x270
[  151.008237][ T6786]  ____sys_sendmsg+0x505/0x830
[  151.008261][ T6786]  ? __pfx_____sys_sendmsg+0x10/0x10
[  151.008296][ T6786]  ___sys_sendmsg+0x21f/0x2a0
[  151.008316][ T6786]  ? __pfx____sys_sendmsg+0x10/0x10
[  151.008376][ T6786]  ? __fget_files+0x2a/0x420
[  151.008397][ T6786]  ? __fget_files+0x3a0/0x420
[  151.008428][ T6786]  __sys_sendmsg+0x164/0x220
[  151.008449][ T6786]  ? __pfx___sys_sendmsg+0x10/0x10
[  151.008483][ T6786]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.008508][ T6786]  __do_fast_syscall_32+0xb6/0x2b0
[  151.008525][ T6786]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.008551][ T6786]  do_fast_syscall_32+0x34/0x80
[  151.008567][ T6786]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  151.008587][ T6786] RIP: 0023:0xf7f96539
[  151.008602][ T6786] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  151.008614][ T6786] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  151.008632][ T6786] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240
[  151.008643][ T6786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  151.008653][ T6786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  151.008662][ T6786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  151.008672][ T6786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.008699][ T6786]  </TASK>
[  151.016140][ T1605] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  151.585292][   T44] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  151.644518][ T1605] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  151.653747][ T1605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.703518][ T1605] usb 2-1: config 0 descriptor??
[  151.806446][   T44] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  151.815712][   T44] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  151.823735][   T44] usb 5-1: Product: syz
[  151.854374][   T44] usb 5-1: SerialNumber: syz
[  151.873435][   T44] usb 5-1: config 0 descriptor??
[  152.467140][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.478333][ T1605] kye 0003:0458:5011.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  152.490282][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  152.636654][ T1605] kye 0003:0458:5011.0002: hidraw0: USB HID v0.02 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[  153.008553][ T1605] kye 0003:0458:5011.0002: tablet-enabling feature report not found
[  153.071652][ T1605] kye 0003:0458:5011.0002: tablet enabling failed
[  153.121278][ T6806] FAULT_INJECTION: forcing a failure.
[  153.121278][ T6806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  153.167743][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.2.215 Not tainted syzkaller #0 PREEMPT(full) 
[  153.167767][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  153.167777][ T6806] Call Trace:
[  153.167784][ T6806]  <TASK>
[  153.167792][ T6806]  dump_stack_lvl+0x189/0x250
[  153.167817][ T6806]  ? __pfx____ratelimit+0x10/0x10
[  153.167839][ T6806]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.167858][ T6806]  ? __pfx__printk+0x10/0x10
[  153.167880][ T6806]  ? __might_fault+0xb0/0x130
[  153.167912][ T6806]  should_fail_ex+0x414/0x560
[  153.167938][ T6806]  _copy_from_user+0x2d/0xb0
[  153.167958][ T6806]  snd_seq_ioctl+0x1d8/0x420
[  153.167978][ T6806]  ? __lock_acquire+0xab9/0xd20
[  153.168005][ T6806]  ? __pfx_snd_seq_ioctl+0x10/0x10
[  153.168044][ T6806]  ? __fget_files+0x3a0/0x420
[  153.168067][ T6806]  ? __fget_files+0x2a/0x420
[  153.168096][ T6806]  __ia32_compat_sys_ioctl+0x540/0x840
[  153.168118][ T6806]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  153.168137][ T6806]  ? __fget_files+0x3a0/0x420
[  153.168166][ T6806]  ? fput+0xa0/0xd0
[  153.168189][ T6806]  ? ksys_write+0x22a/0x250
[  153.168219][ T6806]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.168244][ T6806]  __do_fast_syscall_32+0xb6/0x2b0
[  153.168261][ T6806]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.168287][ T6806]  do_fast_syscall_32+0x34/0x80
[  153.168303][ T6806]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  153.168322][ T6806] RIP: 0023:0xf70ee539
[  153.168337][ T6806] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  153.168350][ T6806] RSP: 002b:00000000f54de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  153.168369][ T6806] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040605346
[  153.168380][ T6806] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000
[  153.168390][ T6806] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  153.168400][ T6806] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  153.168410][ T6806] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  153.168435][ T6806]  </TASK>
[  153.401513][ T1605] usb 2-1: USB disconnect, device number 13
[  153.781483][ T6816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'.
[  154.517769][   T44] usb 5-1: USB disconnect, device number 7
[  155.385507][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'.
[  155.396416][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'.
[  156.528472][ T6857] FAULT_INJECTION: forcing a failure.
[  156.528472][ T6857] name failslab, interval 1, probability 0, space 0, times 0
[  156.568448][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.219'.
[  156.579326][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'.
[  156.664449][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[  156.706468][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'.
[  156.791160][ T6857] CPU: 1 UID: 0 PID: 6857 Comm: syz.1.229 Not tainted syzkaller #0 PREEMPT(full) 
[  156.791176][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  156.791182][ T6857] Call Trace:
[  156.791188][ T6857]  <TASK>
[  156.791193][ T6857]  dump_stack_lvl+0x189/0x250
[  156.791214][ T6857]  ? __pfx____ratelimit+0x10/0x10
[  156.791229][ T6857]  ? __pfx_dump_stack_lvl+0x10/0x10
[  156.791240][ T6857]  ? __pfx__printk+0x10/0x10
[  156.791255][ T6857]  ? __pfx___might_resched+0x10/0x10
[  156.791264][ T6857]  ? fs_reclaim_acquire+0x7d/0x100
[  156.791281][ T6857]  should_fail_ex+0x414/0x560
[  156.791297][ T6857]  should_failslab+0xa8/0x100
[  156.791312][ T6857]  __kmalloc_noprof+0xcb/0x4f0
[  156.791325][ T6857]  ? tomoyo_encode+0x28b/0x550
[  156.791337][ T6857]  tomoyo_encode+0x28b/0x550
[  156.791349][ T6857]  tomoyo_realpath_from_path+0x58d/0x5d0
[  156.791364][ T6857]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  156.791377][ T6857]  tomoyo_path_number_perm+0x1e8/0x5a0
[  156.791392][ T6857]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  156.791414][ T6857]  ? __lock_acquire+0xab9/0xd20
[  156.791438][ T6857]  ? __fget_files+0x2a/0x420
[  156.791458][ T6857]  ? __fget_files+0x3a0/0x420
[  156.791476][ T6857]  ? __fget_files+0x2a/0x420
[  156.791501][ T6857]  security_file_ioctl_compat+0xcb/0x2d0
[  156.791518][ T6857]  __ia32_compat_sys_ioctl+0x128/0x840
[  156.791532][ T6857]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  156.791544][ T6857]  ? __fget_files+0x3a0/0x420
[  156.791561][ T6857]  ? fput+0xa0/0xd0
[  156.791571][ T6857]  ? ksys_write+0x22a/0x250
[  156.791588][ T6857]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.791603][ T6857]  __do_fast_syscall_32+0xb6/0x2b0
[  156.791613][ T6857]  ? lockdep_hardirqs_on+0x9c/0x150
[  156.791628][ T6857]  do_fast_syscall_32+0x34/0x80
[  156.791637][ T6857]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  156.791649][ T6857] RIP: 0023:0xf7fa7539
[  156.791670][ T6857] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  156.791678][ T6857] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  156.791688][ T6857] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c008561c
[  156.791695][ T6857] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  156.791700][ T6857] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  156.791705][ T6857] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  156.791711][ T6857] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  156.791724][ T6857]  </TASK>
[  156.791740][ T6857] ERROR: Out of memory at tomoyo_realpath_from_path.
[  158.047044][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'.
[  158.604477][ T5960] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  158.678899][ T6885] FAULT_INJECTION: forcing a failure.
[  158.678899][ T6885] name failslab, interval 1, probability 0, space 0, times 0
[  158.741345][ T6885] CPU: 0 UID: 0 PID: 6885 Comm: syz.3.236 Not tainted syzkaller #0 PREEMPT(full) 
[  158.741368][ T6885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  158.741377][ T6885] Call Trace:
[  158.741384][ T6885]  <TASK>
[  158.741391][ T6885]  dump_stack_lvl+0x189/0x250
[  158.741414][ T6885]  ? __pfx____ratelimit+0x10/0x10
[  158.741437][ T6885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.741456][ T6885]  ? __pfx__printk+0x10/0x10
[  158.741479][ T6885]  ? __pfx___might_resched+0x10/0x10
[  158.741495][ T6885]  ? fs_reclaim_acquire+0x7d/0x100
[  158.741521][ T6885]  should_fail_ex+0x414/0x560
[  158.741547][ T6885]  should_failslab+0xa8/0x100
[  158.741570][ T6885]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  158.741592][ T6885]  ? __alloc_skb+0x112/0x2d0
[  158.741611][ T6885]  __alloc_skb+0x112/0x2d0
[  158.741631][ T6885]  alloc_skb_with_frags+0xca/0x890
[  158.741662][ T6885]  sock_alloc_send_pskb+0x857/0x990
[  158.741701][ T6885]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  158.741724][ T6885]  ? dev_get_by_index+0x22/0x2e0
[  158.741743][ T6885]  ? dev_get_by_index+0x22/0x2e0
[  158.741768][ T6885]  packet_sendmsg+0x33a0/0x5080
[  158.741807][ T6885]  ? build_pivotroot+0x2b0/0xa80
[  158.741847][ T6885]  ? __pfx___might_resched+0x10/0x10
[  158.741879][ T6885]  ? __pfx_packet_sendmsg+0x10/0x10
[  158.741895][ T6885]  ? aa_sk_perm+0x81e/0x950
[  158.741923][ T6885]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  158.741943][ T6885]  ? __asan_memset+0x22/0x50
[  158.741961][ T6885]  ? __import_iovec+0x5d4/0x7f0
[  158.741977][ T6885]  ? aa_sock_msg_perm+0xf1/0x1d0
[  158.741995][ T6885]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  158.742012][ T6885]  ? __pfx_packet_sendmsg+0x10/0x10
[  158.742031][ T6885]  __sock_sendmsg+0x219/0x270
[  158.742055][ T6885]  ____sys_sendmsg+0x505/0x830
[  158.742079][ T6885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  158.742112][ T6885]  ___sys_sendmsg+0x21f/0x2a0
[  158.742132][ T6885]  ? __pfx____sys_sendmsg+0x10/0x10
[  158.742183][ T6885]  ? __fget_files+0x2a/0x420
[  158.742204][ T6885]  ? __fget_files+0x3a0/0x420
[  158.742234][ T6885]  __sys_sendmsg+0x164/0x220
[  158.742254][ T6885]  ? __pfx___sys_sendmsg+0x10/0x10
[  158.742287][ T6885]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.742312][ T6885]  __do_fast_syscall_32+0xb6/0x2b0
[  158.742328][ T6885]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.742353][ T6885]  do_fast_syscall_32+0x34/0x80
[  158.742369][ T6885]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  158.742388][ T6885] RIP: 0023:0xf7f96539
[  158.742401][ T6885] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  158.742414][ T6885] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  158.742431][ T6885] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000640
[  158.742442][ T6885] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000
[  158.742451][ T6885] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  158.742460][ T6885] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  158.742469][ T6885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  158.742494][ T6885]  </TASK>
[  158.844963][ T5960] usb 5-1: Using ep0 maxpacket: 32
[  159.058202][   T44] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  159.075714][ T5960] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  159.086033][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.095876][ T5960] usb 5-1: config 0 has no interface number 0
[  159.191162][ T6880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  159.224444][ T5960] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  159.241856][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.251904][ T6880] netlink: 212372 bytes leftover after parsing attributes in process `syz.1.235'.
[  159.254288][   T44] usb 1-1: Using ep0 maxpacket: 16
[  159.270636][ T5960] usb 5-1: Product: syz
[  159.287156][ T5960] usb 5-1: Manufacturer: syz
[  159.292882][ T5960] usb 5-1: SerialNumber: syz
[  159.299407][   T44] usb 1-1: config 20 has an invalid interface number: 41 but max is 0
[  159.312115][   T44] usb 1-1: config 20 has no interface number 0
[  159.328639][   T44] usb 1-1: config 20 interface 41 has no altsetting 0
[  159.336648][ T5960] usb 5-1: config 0 descriptor??
[  159.402347][   T44] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  159.434320][   T44] usb 1-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  159.460215][   T44] usb 1-1: Product: syz
[  159.468185][   T44] usb 1-1: Manufacturer: syz
[  159.473108][   T44] usb 1-1: SerialNumber: syz
[  159.613770][ T5960] radio-si470x 5-1:0.35: this is not a si470x device.
[  160.259890][ T5960] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  160.454966][ T5929] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  160.456101][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'.
[  160.480737][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'.
[  160.501524][ T6904] syz_tun: entered promiscuous mode
[  160.515299][ T6904] batadv_slave_1: entered promiscuous mode
[  160.530620][ T6904] debugfs: 'hsr1' already exists in 'hsr'
[  160.536923][ T6904] Cannot create hsr debugfs directory
[  160.648037][ T5929] usb 4-1: Using ep0 maxpacket: 16
[  160.661139][ T6906] syz.1.243 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  160.673626][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.674758][ T6906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.243'.
[  160.715274][ T5929] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  160.735318][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.753429][ T5929] usb 4-1: config 0 descriptor??
[  160.790896][ T5862] Bluetooth: hci0: unexpected event 0x03 length: 17 > 11
[  161.208615][ T1605] usb 5-1: USB disconnect, device number 8
[  161.252502][ T5929] usbhid 4-1:0.0: can't add hid device: -71
[  161.309694][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  161.375707][ T5929] usb 4-1: USB disconnect, device number 9
[  161.567751][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[  161.613591][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.245'.
[  162.057480][ T5930] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  162.074320][ T5929] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  162.534545][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  162.557517][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  162.602814][ T5930] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  162.613914][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  162.621943][ T5929] usb 2-1: can't read configurations, error -61
[  162.628857][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  162.641423][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.766730][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  162.812430][ T6920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  162.846830][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  162.985099][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  162.996401][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  163.023592][ T5929] usb 2-1: can't read configurations, error -61
[  163.042153][ T5929] usb usb2-port1: attempt power cycle
[  163.273894][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.296418][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.307932][   T44] CoreChips 1-1:20.41: probe with driver CoreChips failed with error -22
[  163.487200][ T6937] netlink: zone id is out of range
[  163.504842][ T6937] netlink: zone id is out of range
[  163.510466][ T6937] netlink: zone id is out of range
[  163.526192][ T6937] netlink: zone id is out of range
[  163.534352][ T5929] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  163.534753][   T44] usb 1-1: USB disconnect, device number 6
[  163.561550][ T6938] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  163.564570][ T6937] netlink: zone id is out of range
[  163.643269][ T6938] netlink: zone id is out of range
[  163.650984][ T6937] netlink: zone id is out of range
[  163.677689][ T6937] netlink: zone id is out of range
[  163.693421][ T6938] netlink: zone id is out of range
[  163.702797][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  163.710595][ T6937] netlink: zone id is out of range
[  164.595631][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -61
[  164.603345][ T5929] usb 2-1: can't read configurations, error -61
[  164.756631][ T5929] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  164.797478][ T5929] usb 2-1: unable to get BOS descriptor or descriptor too short
[  165.045392][ T5929] usb 2-1: unable to read config index 0 descriptor/start: -71
[  165.057521][   T44] usb 4-1: USB disconnect, device number 10
[  165.090608][ T5929] usb 2-1: can't read configurations, error -71
[  165.090820][ T5929] usb usb2-port1: unable to enumerate USB device
[  165.294799][ T6950] xt_limit: Overflow, try lower: 604147548/4200216962
[  165.355239][ T6952] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.502630][ T6955] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.255'.
[  166.107625][ T5929] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  166.266781][ T5929] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  166.288582][ T5929] usb 1-1: config 0 has no interface number 0
[  166.367706][ T5929] usb 1-1: too many endpoints for config 0 interface 20 altsetting 20: 187, using maximum allowed: 30
[  166.399883][ T5929] usb 1-1: config 0 interface 20 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 187
[  166.425445][ T5929] usb 1-1: config 0 interface 20 has no altsetting 0
[  166.432700][ T5929] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  166.508781][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'.
[  166.583986][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.610776][ T5929] usb 1-1: config 0 descriptor??
[  166.628965][ T5929] gspca_main: cpia1-2.14.0 probing 0813:0001
[  166.997267][ T6982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.257'.
[  167.007007][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'.
[  167.943961][ T5929] gspca_cpia1: usb_control_msg 03, error -110
[  167.960295][ T5929] gspca_cpia1: usb_control_msg 01, error -32
[  167.989398][ T5929] gspca_cpia1: usb_control_msg 01, error -32
[  167.996383][ T5929] gspca_cpia1: usb_control_msg 01, error -32
[  168.002967][ T5929] gspca_cpia1: usb_control_msg 01, error -32
[  168.017737][ T5929] cpia1 1-1:0.20: only firmware version 1 is supported (got: 0)
[  168.224265][ T6986] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'.
[  168.235582][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'.
[  169.192417][   T10] usb 1-1: USB disconnect, device number 7
[  169.623740][ T7002] binder: 6999:7002 ioctl c25c4111 80000500 returned -22
[  170.394362][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  170.607835][   T10] usb 1-1: Using ep0 maxpacket: 32
[  170.895125][   T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  170.965570][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.995853][   T10] usb 1-1: config 0 descriptor??
[  171.219972][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  171.246891][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  171.272860][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  171.292980][   T10] usb 1-1: media controller created
[  171.421077][ T7004] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  171.435665][ T7004] netlink: 'syz.0.264': attribute type 3 has an invalid length.
[  171.588651][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  171.627810][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'.
[  171.696093][ T7023] netlink: 294 bytes leftover after parsing attributes in process `syz.3.269'.
[  171.724542][   T10] az6027: usb out operation failed. (-71)
[  171.733820][ T7023] netlink: 294 bytes leftover after parsing attributes in process `syz.3.269'.
[  171.745345][   T10] az6027: usb out operation failed. (-71)
[  171.752247][   T10] stb0899_attach: Driver disabled by Kconfig
[  171.768921][   T10] az6027: no front-end attached
[  171.768921][   T10] 
[  171.779061][   T10] az6027: usb out operation failed. (-71)
[  171.829801][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.269'.
[  171.846193][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  171.885728][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  172.040866][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  172.078250][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  172.127084][   T10] usb 1-1: USB disconnect, device number 8
[  172.318551][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  172.554372][ T5929] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  172.714558][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  172.741468][ T5929] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  172.766950][ T5929] usb 2-1: config 0 has no interface number 0
[  172.790480][ T5929] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  172.807159][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.827866][ T5929] usb 2-1: Product: syz
[  172.832209][ T5929] usb 2-1: Manufacturer: syz
[  172.851811][ T5929] usb 2-1: SerialNumber: syz
[  172.905831][ T5929] usb 2-1: config 0 descriptor??
[  172.930999][ T5929] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  173.088897][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.277'.
[  173.153087][ T5929] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  173.182716][ T5929] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  173.213140][ T7051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.273'.
[  173.222998][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'.
[  173.561966][ T7032] netlink: 'syz.1.272': attribute type 2 has an invalid length.
[  174.245107][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  174.299849][ T7032] : entered promiscuous mode
[  174.381897][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[  174.447170][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.464477][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  174.483376][ T7061] bridge0: port 3(netdevsim0) entered blocking state
[  174.490307][ T7061] bridge0: port 3(netdevsim0) entered disabled state
[  174.505301][ T7061] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  174.539097][ T7061] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  174.549055][    T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  174.570872][ T7061] bridge0: port 3(netdevsim0) entered blocking state
[  174.578365][ T7061] bridge0: port 3(netdevsim0) entered forwarding state
[  174.592696][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.626558][    T9] usb 4-1: config 0 descriptor??
[  174.948898][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  174.949909][   T44] usb 2-1: USB disconnect, device number 18
[  174.967742][   T44] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  175.036865][   T44] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  175.057580][    T9] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  175.073977][   T44] quatech2 2-1:0.51: device disconnected
[  175.081510][    T9] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  175.103834][    T9] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  175.128013][    T9] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  175.144142][    T9] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  175.159277][    T9] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  175.187908][ T7073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.281'.
[  175.615724][    T9] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[  175.647357][    T9] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[  175.726752][    T9] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -71
[  175.758898][    T9] usb 4-1: USB disconnect, device number 11
[  175.975561][   T30] audit: type=1326 audit(1756602725.640:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  175.997296][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.127034][ T7087] netlink: 'syz.4.284': attribute type 1 has an invalid length.
[  176.155195][   T30] audit: type=1326 audit(1756602725.670:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.181946][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'.
[  176.237405][   T30] audit: type=1326 audit(1756602725.670:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.309962][   T30] audit: type=1326 audit(1756602725.670:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.331694][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.429870][ T5960] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  176.454075][   T30] audit: type=1326 audit(1756602725.670:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.541511][   T30] audit: type=1326 audit(1756602725.740:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.563320][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.692052][   T30] audit: type=1326 audit(1756602725.860:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.713893][    C1] vkms_vblank_simulate: vblank timer overrun
[  176.734030][ T5960] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  176.742466][ T5960] usb 5-1: config 0 has no interface number 0
[  176.752675][ T5960] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  176.767681][ T5960] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  176.780034][   T30] audit: type=1326 audit(1756602725.860:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7084 comm="syz.4.284" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f94539 code=0x7ffc0000
[  176.805873][ T5960] usb 5-1: config 0 interface 113 has no altsetting 0
[  176.846896][ T5960] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  176.861589][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.870391][ T5960] usb 5-1: Product: syz
[  176.878225][ T5960] usb 5-1: Manufacturer: syz
[  176.882885][ T5960] usb 5-1: SerialNumber: syz
[  176.910399][ T5960] usb 5-1: config 0 descriptor??
[  176.926673][ T5960] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  176.983872][   T30] audit: type=1326 audit(1756602726.640:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.288" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0
[  177.009005][   T30] audit: type=1326 audit(1756602726.650:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7101 comm="syz.0.288" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0
[  177.030224][    C1] vkms_vblank_simulate: vblank timer overrun
[  177.253026][   T44] usb 5-1: USB disconnect, device number 9
[  177.898933][ T7121] __nla_validate_parse: 3 callbacks suppressed
[  177.898952][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'.
[  177.898979][ T7121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'.
[  178.018715][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.3.291'.
[  178.434295][ T5960] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  178.524603][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  178.606492][ T5960] usb 5-1: Using ep0 maxpacket: 8
[  178.613904][ T5960] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17
[  178.630087][ T5960] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  178.649561][ T5960] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  178.694712][   T10] usb 2-1: Using ep0 maxpacket: 16
[  178.726770][   T10] usb 2-1: config 20 has an invalid interface number: 41 but max is 0
[  178.754802][   T10] usb 2-1: config 20 has no interface number 0
[  178.761015][   T10] usb 2-1: config 20 interface 41 has no altsetting 0
[  178.785891][ T5960] usb 5-1: Product: syz
[  178.816761][ T5960] usb 5-1: Manufacturer: syz
[  178.830985][   T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  179.100541][   T10] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  179.124477][   T10] usb 2-1: Product: syz
[  179.128668][   T10] usb 2-1: Manufacturer: syz
[  179.137648][   T10] usb 2-1: SerialNumber: syz
[  179.192424][ T5960] usb 5-1: SerialNumber: syz
[  179.280191][ T7148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.343896][ T5960] usb 5-1: config 0 descriptor??
[  179.378517][ T7148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.730275][ T7148] netlink: 212372 bytes leftover after parsing attributes in process `syz.0.298'.
[  179.994063][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'.
[  180.026466][ T7155] netlink: 294 bytes leftover after parsing attributes in process `syz.2.299'.
[  180.049481][ T7155] netlink: 294 bytes leftover after parsing attributes in process `syz.2.299'.
[  180.212755][ T7157] netlink: 44 bytes leftover after parsing attributes in process `syz.2.299'.
[  181.022468][ T5960] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  181.064893][ T5960] gspca_sunplus: reg_w_riv err -71
[  181.080017][ T5960] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  181.149473][ T5960] usb 5-1: USB disconnect, device number 10
[  181.824449][ T5929] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  182.104484][ T5929] usb 4-1: config 66 has an invalid interface number: 195 but max is 0
[  182.112914][ T5929] usb 4-1: config 66 has no interface number 0
[  182.131902][ T5929] usb 4-1: config 66 interface 195 has no altsetting 0
[  182.197044][ T5929] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  182.209023][   T10] CoreChips 2-1:20.41: probe with driver CoreChips failed with error -22
[  182.218676][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.235189][   T10] usb 2-1: USB disconnect, device number 19
[  182.243559][ T5929] usb 4-1: Product: syz
[  182.250706][ T5929] usb 4-1: Manufacturer: syz
[  182.255777][ T5929] usb 4-1: SerialNumber: syz
[  182.567616][ T5929] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40)
[  182.573981][ T5929] usb 4-1: Forcing UVC version to 1.0a
[  182.583472][ T5929] usb 4-1: No valid video chain found.
[  182.607832][ T5929] usb 4-1: USB disconnect, device number 12
[  183.117757][ T7185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'.
[  183.316132][ T7186] bridge0: port 3(netdevsim0) entered blocking state
[  183.322871][ T7186] bridge0: port 3(netdevsim0) entered disabled state
[  183.461762][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'.
[  183.724572][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  183.874618][   T10] usb 2-1: Using ep0 maxpacket: 16
[  183.886498][   T10] usb 2-1: config 20 has an invalid interface number: 41 but max is 0
[  183.899446][   T10] usb 2-1: config 20 has no interface number 0
[  183.908843][   T10] usb 2-1: config 20 interface 41 has no altsetting 0
[  183.935600][   T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  183.947878][   T10] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  183.959016][   T10] usb 2-1: Product: syz
[  183.963205][   T10] usb 2-1: Manufacturer: syz
[  183.969162][   T10] usb 2-1: SerialNumber: syz
[  184.681096][ T7217] netlink: 68 bytes leftover after parsing attributes in process `syz.2.308'.
[  185.469658][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.516213][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.748452][ T7208] netlink: 212372 bytes leftover after parsing attributes in process `syz.0.312'.
[  187.044315][ T5943] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  187.529580][ T7239] netlink: 68 bytes leftover after parsing attributes in process `syz.3.313'.
[  187.596653][ T5943] usb 1-1: not running at top speed; connect to a high speed hub
[  187.839262][ T5943] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  187.912169][ T5943] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.922349][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.933226][ T5943] usb 1-1: Product: syz
[  187.953195][ T5943] usb 1-1: Manufacturer: syz
[  187.994480][ T5943] usb 1-1: SerialNumber: syz
[  188.000939][   T10] CoreChips 2-1:20.41: probe with driver CoreChips failed with error -22
[  188.232929][   T10] usb 2-1: USB disconnect, device number 20
[  188.249244][ T5943] usb 1-1: bad CDC descriptors
[  188.443102][ T7231] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  188.531329][ T5943] usb 1-1: USB disconnect, device number 9
[  188.704543][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  188.864295][   T10] usb 2-1: Using ep0 maxpacket: 32
[  188.872261][   T10] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  188.883358][   T10] usb 2-1: config 0 has no interface number 0
[  188.889875][   T10] usb 2-1: config 0 interface 184 has no altsetting 0
[  188.898794][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  188.907953][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.917341][   T10] usb 2-1: Product: syz
[  188.921583][   T10] usb 2-1: Manufacturer: syz
[  188.928760][   T10] usb 2-1: SerialNumber: syz
[  188.936480][   T10] usb 2-1: config 0 descriptor??
[  188.943901][   T10] smsc75xx v1.0.0
[  188.964559][ T5943] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  189.084348][   T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  189.134391][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  189.141548][ T5943] usb 4-1: config 20 has an invalid interface number: 41 but max is 0
[  189.152761][ T5943] usb 4-1: config 20 has no interface number 0
[  189.160906][ T5943] usb 4-1: config 20 interface 41 has no altsetting 0
[  189.162623][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  189.171192][ T5943] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  189.181277][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  189.196278][ T5943] usb 4-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  189.201043][   T10] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  189.205901][ T5943] usb 4-1: Product: syz
[  189.220228][ T5943] usb 4-1: Manufacturer: syz
[  189.225793][ T5943] usb 4-1: SerialNumber: syz
[  189.236193][   T10] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61
[  189.274346][   T44] usb 3-1: Using ep0 maxpacket: 32
[  189.281368][   T44] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  189.291065][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.303072][   T44] usb 3-1: config 0 descriptor??
[  189.509006][ T7263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.532805][ T7263] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.575551][   T44] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  189.584303][   T10] usb 2-1: USB disconnect, device number 21
[  189.606966][   T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  189.641236][   T44] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  189.657838][   T44] usb 3-1: media controller created
[  189.741540][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  189.784721][ T7253] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  190.146370][   T44] az6027: usb out operation failed. (-71)
[  190.157554][   T44] az6027: usb out operation failed. (-71)
[  190.173139][   T44] stb0899_attach: Driver disabled by Kconfig
[  190.197882][   T44] az6027: no front-end attached
[  190.197882][   T44] 
[  190.231277][   T44] az6027: usb out operation failed. (-71)
[  190.248366][   T44] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  190.274387][   T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  190.320005][   T44] dvb-usb: schedule remote query interval to 400 msecs.
[  190.361516][   T44] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  190.453661][   T44] usb 3-1: USB disconnect, device number 5
[  190.664633][   T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  191.879554][ T7284] netlink: 68 bytes leftover after parsing attributes in process `syz.1.325'.
[  191.903889][ T5943] CoreChips 4-1:20.41: probe with driver CoreChips failed with error -22
[  191.965757][ T5943] usb 4-1: USB disconnect, device number 13
[  192.514027][ T7279] netlink: 68 bytes leftover after parsing attributes in process `syz.4.324'.
[  194.223118][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  194.229530][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  194.981340][ T7317] fuse: Bad value for 'fd'
[  195.411152][ T7326] FAULT_INJECTION: forcing a failure.
[  195.411152][ T7326] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  195.485161][ T7326] CPU: 1 UID: 0 PID: 7326 Comm: syz.2.339 Not tainted syzkaller #0 PREEMPT(full) 
[  195.485183][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  195.485192][ T7326] Call Trace:
[  195.485199][ T7326]  <TASK>
[  195.485206][ T7326]  dump_stack_lvl+0x189/0x250
[  195.485231][ T7326]  ? __pfx____ratelimit+0x10/0x10
[  195.485252][ T7326]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.485270][ T7326]  ? __pfx__printk+0x10/0x10
[  195.485300][ T7326]  should_fail_ex+0x414/0x560
[  195.485323][ T7326]  _copy_to_user+0x31/0xb0
[  195.485350][ T7326]  simple_read_from_buffer+0xe1/0x170
[  195.485377][ T7326]  proc_fail_nth_read+0x1b3/0x220
[  195.485397][ T7326]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  195.485417][ T7326]  ? rw_verify_area+0x2a6/0x4d0
[  195.485433][ T7326]  ? __lock_acquire+0xab9/0xd20
[  195.485453][ T7326]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  195.485471][ T7326]  vfs_read+0x1fd/0xa30
[  195.485490][ T7326]  ? fdget_pos+0x247/0x320
[  195.485508][ T7326]  ? __pfx___mutex_lock+0x10/0x10
[  195.485524][ T7326]  ? __pfx_vfs_read+0x10/0x10
[  195.485545][ T7326]  ? __fget_files+0x2a/0x420
[  195.485568][ T7326]  ? __fget_files+0x3a0/0x420
[  195.485585][ T7326]  ? __fget_files+0x2a/0x420
[  195.485613][ T7326]  ksys_read+0x145/0x250
[  195.485635][ T7326]  ? __pfx_ksys_read+0x10/0x10
[  195.485657][ T7326]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.485680][ T7326]  __do_fast_syscall_32+0xb6/0x2b0
[  195.485693][ T7326]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.485726][ T7326]  do_fast_syscall_32+0x34/0x80
[  195.485741][ T7326]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  195.485760][ T7326] RIP: 0023:0xf70ee539
[  195.485775][ T7326] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  195.485788][ T7326] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  195.485805][ T7326] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54de620
[  195.485814][ T7326] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000
[  195.485821][ T7326] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  195.485829][ T7326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  195.485838][ T7326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  195.485861][ T7326]  </TASK>
[  195.722526][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.084447][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  196.104382][    T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  196.784084][ T5867] usb 3-1: Using ep0 maxpacket: 16
[  196.793428][    T9] usb 4-1: config 66 has an invalid interface number: 195 but max is 0
[  196.795386][ T5867] usb 3-1: config 20 has an invalid interface number: 41 but max is 0
[  196.813428][ T5867] usb 3-1: config 20 has no interface number 0
[  196.820151][ T5867] usb 3-1: config 20 interface 41 has no altsetting 0
[  196.820157][    T9] usb 4-1: config 66 has no interface number 0
[  196.823370][ T5867] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  196.844943][ T5867] usb 3-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  196.844956][    T9] usb 4-1: config 66 interface 195 has no altsetting 0
[  196.847124][    T9] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  196.869747][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.877969][    T9] usb 4-1: Product: syz
[  196.882276][    T9] usb 4-1: Manufacturer: syz
[  197.153265][    T9] usb 4-1: SerialNumber: syz
[  197.217696][ T5867] usb 3-1: Product: syz
[  197.221956][ T5867] usb 3-1: Manufacturer: syz
[  197.264443][ T5867] usb 3-1: SerialNumber: syz
[  197.264577][    T9] usb 4-1: can't set config #66, error -71
[  197.321935][    T9] usb 4-1: USB disconnect, device number 14
[  200.675220][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.353'.
[  200.707911][ T5867] CoreChips 3-1:20.41: probe with driver CoreChips failed with error -22
[  200.798039][ T5867] usb 3-1: USB disconnect, device number 6
[  201.036170][ T7394] team_slave_0: entered promiscuous mode
[  201.041959][ T7394] team_slave_1: entered promiscuous mode
[  201.081368][ T7394] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  201.198598][ T7397] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  201.333078][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.359'.
[  201.515613][ T7408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.359'.
[  201.656019][ T1605] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  201.855485][ T7416] binder: BINDER_SET_CONTEXT_MGR already set
[  201.862393][ T7416] binder: 7389:7416 ioctl 4018620d 800002c0 returned -16
[  201.952492][ T7418] netlink: 'syz.0.363': attribute type 2 has an invalid length.
[  201.960545][ T1605] usb 5-1: Using ep0 maxpacket: 8
[  202.089165][ T1605] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  202.109970][ T1605] usb 5-1: config 0 has no interface number 0
[  202.253669][ T7418] ţ: entered promiscuous mode
[  202.358112][ T1605] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76
[  202.380332][ T1605] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.441963][ T1605] usb 5-1: Product: syz
[  202.508916][ T1605] usb 5-1: Manufacturer: syz
[  202.528362][ T1605] usb 5-1: SerialNumber: syz
[  202.627703][ T1605] usb 5-1: config 0 descriptor??
[  202.923951][ T1605] peak_usb 5-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels)
[  202.954316][ T5867] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  203.026538][ T5943] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  203.114404][ T5867] usb 1-1: Using ep0 maxpacket: 32
[  203.123362][ T5867] usb 1-1: config 0 has an invalid interface number: 16 but max is 0
[  203.131759][ T5867] usb 1-1: config 0 has no interface number 0
[  203.141398][ T1605] peak_usb 5-1:0.56 can0: sending command failure: -22
[  203.150078][ T1605] peak_usb 5-1:0.56 can0: sending command failure: -22
[  203.174403][ T1605] peak_usb 5-1:0.56 can0: sending command failure: -22
[  203.183842][ T5867] usb 1-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=a3.a3
[  203.193514][ T5943] usb 4-1: Using ep0 maxpacket: 16
[  203.198743][ T5867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.220656][ T5943] usb 4-1: config 20 has an invalid interface number: 41 but max is 0
[  203.230092][ T5867] usb 1-1: Product: syz
[  203.244294][ T5943] usb 4-1: config 20 has no interface number 0
[  203.251372][ T5867] usb 1-1: Manufacturer: syz
[  203.257149][ T5867] usb 1-1: SerialNumber: syz
[  203.261915][ T5943] usb 4-1: config 20 interface 41 has no altsetting 0
[  203.273133][ T5943] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  203.283563][ T5867] usb 1-1: config 0 descriptor??
[  203.292980][ T5943] usb 4-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  203.304747][ T1605] peak_usb 5-1:0.56: probe with driver peak_usb failed with error -22
[  203.326913][ T5943] usb 4-1: Product: syz
[  203.333261][ T5867] snd-usb-caiaq 1-1:0.16: can't set alt interface.
[  203.361372][ T5867] usb 1-1: unable to init card! (ret=-5)
[  203.369233][ T5943] usb 4-1: Manufacturer: syz
[  203.500133][ T5943] usb 4-1: SerialNumber: syz
[  203.510951][ T5867] snd-usb-caiaq 1-1:0.16: probe with driver snd-usb-caiaq failed with error -5
[  203.726897][ T5867] usb 1-1: USB disconnect, device number 10
[  203.937943][ T7431] net_ratelimit: 334 callbacks suppressed
[  203.937962][ T7431] sctp: failed to load transform for md5: -2
[  203.951486][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.968507][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.244831][ T1605] usb 5-1: USB disconnect, device number 11
[  207.255155][ T7472] tipc: Started in network mode
[  207.260189][ T7472] tipc: Node identity ea2cfee0c75e, cluster identity 4711
[  207.268568][ T7472] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.314423][ T7472] syzkaller0: entered promiscuous mode
[  207.396708][ T7472] syzkaller0: entered allmulticast mode
[  207.475624][ T7471] tipc: Resetting bearer <eth:syzkaller0>
[  207.484711][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'.
[  207.584220][ T5943] CoreChips 4-1:20.41: probe with driver CoreChips failed with error -22
[  207.609393][ T7471] tipc: Disabling bearer <eth:syzkaller0>
[  207.636221][ T5943] usb 4-1: USB disconnect, device number 15
[  207.742898][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz.3.377'.
[  208.727009][ T7493] netlink: 96 bytes leftover after parsing attributes in process `syz.4.380'.
[  208.736613][ T7493] 8021q: VLANs not supported on ip6gre0
[  208.845000][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.4.380'.
[  210.258893][ T7521] fuse: Unknown parameter ''
[  210.515925][ T5930] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  210.794303][ T5930] usb 2-1: Using ep0 maxpacket: 32
[  210.806120][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.877928][ T5930] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  210.904330][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.932235][ T5930] usb 2-1: Product: syz
[  210.980330][ T5930] usb 2-1: Manufacturer: syz
[  211.017686][ T5930] usb 2-1: SerialNumber: syz
[  211.076810][ T5930] usb 2-1: config 0 descriptor??
[  211.088419][ T5930] cdc_ether 2-1:0.0: probe with driver cdc_ether failed with error -22
[  211.107931][ T5930] usb 2-1: unsupported MDLM descriptors
[  211.164348][ T5867] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  211.204472][   T30] kauditd_printk_skb: 5 callbacks suppressed
[  211.204489][   T30] audit: type=1326 audit(1756602760.860:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  211.248318][   T30] audit: type=1326 audit(1756602760.900:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  211.307991][   T30] audit: type=1326 audit(1756602760.930:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.333852][   T30] audit: type=1326 audit(1756602760.930:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.378976][ T5943] usb 2-1: USB disconnect, device number 22
[  211.387471][ T5867] usb 5-1: Using ep0 maxpacket: 16
[  211.413316][ T5867] usb 5-1: config 20 has an invalid interface number: 41 but max is 0
[  211.439667][ T5867] usb 5-1: config 20 has no interface number 0
[  211.456917][ T5867] usb 5-1: config 20 interface 41 has no altsetting 0
[  211.463816][   T30] audit: type=1326 audit(1756602760.930:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.497328][ T5867] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  211.511179][ T5867] usb 5-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  211.521202][   T30] audit: type=1326 audit(1756602760.930:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.554404][ T5867] usb 5-1: Product: syz
[  211.574770][ T5867] usb 5-1: Manufacturer: syz
[  211.579389][ T5867] usb 5-1: SerialNumber: syz
[  211.610867][   T30] audit: type=1326 audit(1756602760.930:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.663527][   T30] audit: type=1326 audit(1756602760.930:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.689971][   T30] audit: type=1326 audit(1756602760.930:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.715361][   T30] audit: type=1326 audit(1756602760.930:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7527 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  211.824293][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  211.994333][   T10] usb 1-1: Using ep0 maxpacket: 16
[  212.013294][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.046598][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.060030][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  212.076827][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  212.346538][ T7550] netlink: 36 bytes leftover after parsing attributes in process `syz.2.392'.
[  212.376241][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.537494][   T10] usb 1-1: config 0 descriptor??
[  213.240408][ T7534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.249402][ T7534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.310105][ T7555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'.
[  213.324246][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.394'.
[  213.663595][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  213.691031][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  213.704030][   T10] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0
[  213.742965][   T10] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  213.779055][   T10] microsoft 0003:045E:07DA.0004: no inputs found
[  213.786115][   T10] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway
[  213.877573][   T10] usb 1-1: USB disconnect, device number 11
[  214.315529][ T5867] CoreChips 5-1:20.41: probe with driver CoreChips failed with error -22
[  214.373923][ T5867] usb 5-1: USB disconnect, device number 12
[  214.611859][ T7564] fido_id[7564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  216.125857][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'.
[  216.188925][ T7591] netlink: 294 bytes leftover after parsing attributes in process `syz.4.404'.
[  216.238087][ T7591] netlink: 294 bytes leftover after parsing attributes in process `syz.4.404'.
[  216.375179][ T7591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.404'.
[  217.228939][ T7610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.407'.
[  217.238872][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[  218.449001][ T7625] netlink: 68 bytes leftover after parsing attributes in process `syz.3.406'.
[  219.081897][   T30] kauditd_printk_skb: 142 callbacks suppressed
[  219.081909][   T30] audit: type=1326 audit(1756602768.740:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000
[  219.143497][   T30] audit: type=1326 audit(1756602768.780:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f53539 code=0x7ffc0000
[  219.165346][    C1] vkms_vblank_simulate: vblank timer overrun
[  219.232918][   T30] audit: type=1326 audit(1756602768.780:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000
[  219.368748][   T30] audit: type=1326 audit(1756602768.780:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000
[  219.753405][   T30] audit: type=1326 audit(1756602768.780:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53558 code=0x7ffc0000
[  219.837778][   T30] audit: type=1326 audit(1756602768.780:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7ffc0000
[  220.019653][   T30] audit: type=1326 audit(1756602768.780:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53558 code=0x7ffc0000
[  220.059532][ T7636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  220.192445][   T30] audit: type=1326 audit(1756602768.870:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53558 code=0x7ffc0000
[  220.384005][   T30] audit: type=1326 audit(1756602768.870:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53558 code=0x7ffc0000
[  220.499151][   T30] audit: type=1326 audit(1756602768.870:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.414" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f53558 code=0x7ffc0000
[  221.234288][ T5867] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  221.416332][ T5867] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.430052][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.822207][ T5867] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  221.839992][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  222.124819][ T5867] usb 3-1: SerialNumber: syz
[  222.587663][ T5867] usb 3-1: cannot find UAC_HEADER
[  222.611984][ T5867] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  222.623593][ T5867] usb 3-1: USB disconnect, device number 7
[  222.900711][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.378624][ T7686] FAULT_INJECTION: forcing a failure.
[  223.378624][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  223.399593][ T7686] CPU: 0 UID: 0 PID: 7686 Comm: syz.2.430 Not tainted syzkaller #0 PREEMPT(full) 
[  223.399619][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  223.399630][ T7686] Call Trace:
[  223.399638][ T7686]  <TASK>
[  223.399645][ T7686]  dump_stack_lvl+0x189/0x250
[  223.399670][ T7686]  ? __pfx____ratelimit+0x10/0x10
[  223.399692][ T7686]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.399712][ T7686]  ? __pfx__printk+0x10/0x10
[  223.399745][ T7686]  should_fail_ex+0x414/0x560
[  223.399770][ T7686]  _copy_to_user+0x31/0xb0
[  223.399791][ T7686]  simple_read_from_buffer+0xe1/0x170
[  223.399818][ T7686]  proc_fail_nth_read+0x1b3/0x220
[  223.399840][ T7686]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.399863][ T7686]  ? rw_verify_area+0x2a6/0x4d0
[  223.399882][ T7686]  ? __lock_acquire+0xab9/0xd20
[  223.399901][ T7686]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  223.399921][ T7686]  vfs_read+0x1fd/0xa30
[  223.399941][ T7686]  ? fdget_pos+0x247/0x320
[  223.399960][ T7686]  ? __pfx___mutex_lock+0x10/0x10
[  223.399977][ T7686]  ? __pfx_vfs_read+0x10/0x10
[  223.399999][ T7686]  ? __fget_files+0x2a/0x420
[  223.400025][ T7686]  ? __fget_files+0x3a0/0x420
[  223.400046][ T7686]  ? __fget_files+0x2a/0x420
[  223.400076][ T7686]  ksys_read+0x145/0x250
[  223.400099][ T7686]  ? __pfx_ksys_read+0x10/0x10
[  223.400123][ T7686]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.400157][ T7686]  __do_fast_syscall_32+0xb6/0x2b0
[  223.400175][ T7686]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.400200][ T7686]  do_fast_syscall_32+0x34/0x80
[  223.400217][ T7686]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  223.400237][ T7686] RIP: 0023:0xf70ee539
[  223.400252][ T7686] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  223.400266][ T7686] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  223.400284][ T7686] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54de620
[  223.400301][ T7686] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000
[  223.400311][ T7686] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  223.400321][ T7686] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  223.400331][ T7686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  223.400358][ T7686]  </TASK>
[  223.994588][   T44] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  224.024528][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  224.164424][   T44] usb 1-1: Using ep0 maxpacket: 32
[  224.181992][   T44] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  224.194429][   T10] usb 4-1: Using ep0 maxpacket: 16
[  224.215912][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.221609][   T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  224.238721][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.253616][   T44] usb 1-1: config 0 descriptor??
[  224.262813][   T10] usb 4-1: Product: syz
[  224.267771][   T10] usb 4-1: Manufacturer: syz
[  224.279803][   T10] usb 4-1: SerialNumber: syz
[  224.287782][   T10] usb 4-1: config 0 descriptor??
[  224.296982][   T10] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  224.476199][   T44] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[  224.492440][   T44] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[  224.501517][   T44] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[  224.509960][ T5867] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  224.664360][ T5867] usb 5-1: Using ep0 maxpacket: 32
[  224.671751][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.682912][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.692715][ T5867] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  224.702096][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.713214][ T5867] usb 5-1: config 0 descriptor??
[  224.816920][   T10] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110
[  224.949989][ T5867] usbhid 5-1:0.0: can't add hid device: -71
[  224.963239][ T5867] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  225.086856][ T5867] usb 5-1: USB disconnect, device number 13
[  226.047494][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.440'.
[  226.058598][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'.
[  227.006036][ T5930] usb 4-1: USB disconnect, device number 16
[  227.214281][ T5867] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  227.362116][ T7744] tipc: Started in network mode
[  227.374308][ T7744] tipc: Node identity d6f033fa07b3, cluster identity 4711
[  227.379988][ T5867] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  227.390020][ T7744] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  227.397403][ T5867] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  227.414747][ T5867] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  227.427262][ T7744] tipc: Resetting bearer <eth:syzkaller0>
[  227.438443][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.671265][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.680483][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.712008][ T5867] aiptek 3-1:17.0: Aiptek using 400 ms programming speed
[  227.742142][ T5867] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input17
[  227.792719][ T5867] input: failed to attach handler kbd to device input17, error: -5
[  227.876195][ T5867] usb 3-1: USB disconnect, device number 8
[  228.014355][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  228.047079][ T7740] tipc: Disabling bearer <eth:syzkaller0>
[  228.166154][   T10] usb 5-1: config 66 has an invalid interface number: 195 but max is 0
[  228.177748][   T10] usb 5-1: config 66 has no interface number 0
[  228.184052][   T10] usb 5-1: config 66 interface 195 has no altsetting 0
[  228.207008][   T10] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  228.218625][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.246540][   T10] usb 5-1: Product: syz
[  228.260490][   T10] usb 5-1: Manufacturer: syz
[  228.268423][   T10] usb 5-1: SerialNumber: syz
[  228.580455][   T10] usb 5-1: Found UVC 0.00 device syz (1bcf:0b40)
[  228.589378][   T10] usb 5-1: Forcing UVC version to 1.0a
[  228.595935][   T10] usb 5-1: No valid video chain found.
[  228.608059][   T10] usb 5-1: USB disconnect, device number 14
[  229.242367][ T7764] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  229.282232][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'.
[  229.945773][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.455'.
[  229.987603][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'.
[  230.714462][ T5867] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  230.874485][ T5867] usb 2-1: Using ep0 maxpacket: 16
[  230.891257][ T5867] usb 2-1: config 20 has an invalid interface number: 41 but max is 0
[  230.906034][ T5867] usb 2-1: config 20 has no interface number 0
[  230.912334][ T5867] usb 2-1: config 20 interface 41 has no altsetting 0
[  230.932241][ T5867] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  230.966963][ T5867] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  230.986667][ T5867] usb 2-1: Product: syz
[  230.990850][ T5867] usb 2-1: Manufacturer: syz
[  230.995813][ T5867] usb 2-1: SerialNumber: syz
[  231.259033][ T7796] netlink: del zone limit has 4 unknown bytes
[  231.266950][ T7796] netlink: 32 bytes leftover after parsing attributes in process `syz.4.464'.
[  232.378474][ T5929] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  233.116702][ T5929] usb 3-1: Using ep0 maxpacket: 16
[  233.213111][ T5929] usb 3-1: config 20 has an invalid interface number: 41 but max is 0
[  233.261124][ T5929] usb 3-1: config 20 has no interface number 0
[  233.302000][ T5929] usb 3-1: config 20 interface 41 has no altsetting 0
[  233.331751][ T5929] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  233.360906][ T5929] usb 3-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  233.427445][ T5929] usb 3-1: Product: syz
[  233.431712][ T5929] usb 3-1: Manufacturer: syz
[  233.438377][ T5929] usb 3-1: SerialNumber: syz
[  233.497081][ T5930] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  233.693566][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  233.707803][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  233.718254][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  233.739335][ T5930] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  234.103707][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  234.153169][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.215598][ T7824] netlink: 212372 bytes leftover after parsing attributes in process `syz.0.470'.
[  234.240990][ T5930] usb 4-1: config 0 descriptor??
[  234.284442][ T7815] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  234.507639][ T7815] binder: 7809:7815 ioctl 4018620d 0 returned -22
[  234.614886][ T5867] CoreChips 2-1:20.41: probe with driver CoreChips failed with error -22
[  234.650185][ T5867] usb 2-1: USB disconnect, device number 23
[  235.680725][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.473'.
[  235.689836][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'.
[  235.847723][ T5960] usb 4-1: USB disconnect, device number 17
[  235.928204][ T5930] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  236.107423][ T5929] CoreChips 3-1:20.41: probe with driver CoreChips failed with error -22
[  236.154332][ T5930] usb 2-1: Using ep0 maxpacket: 16
[  236.216892][ T5929] usb 3-1: USB disconnect, device number 9
[  236.234590][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.263000][ T7851] FAULT_INJECTION: forcing a failure.
[  236.263000][ T7851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  236.276369][ T5930] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  236.285596][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.294007][ T7851] CPU: 0 UID: 0 PID: 7851 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) 
[  236.294030][ T7851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  236.294041][ T7851] Call Trace:
[  236.294049][ T7851]  <TASK>
[  236.294056][ T7851]  dump_stack_lvl+0x189/0x250
[  236.294081][ T7851]  ? __pfx____ratelimit+0x10/0x10
[  236.294104][ T7851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.294123][ T7851]  ? __pfx__printk+0x10/0x10
[  236.294157][ T7851]  should_fail_ex+0x414/0x560
[  236.294187][ T7851]  _copy_to_user+0x31/0xb0
[  236.294207][ T7851]  simple_read_from_buffer+0xe1/0x170
[  236.294232][ T7851]  proc_fail_nth_read+0x1b3/0x220
[  236.294304][ T7851]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  236.294326][ T7851]  ? rw_verify_area+0x2a6/0x4d0
[  236.294344][ T7851]  ? __lock_acquire+0xab9/0xd20
[  236.294363][ T7851]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  236.294383][ T7851]  vfs_read+0x1fd/0xa30
[  236.294401][ T7851]  ? fdget_pos+0x247/0x320
[  236.294420][ T7851]  ? __pfx___mutex_lock+0x10/0x10
[  236.294436][ T7851]  ? __pfx_vfs_read+0x10/0x10
[  236.294456][ T7851]  ? __fget_files+0x2a/0x420
[  236.294481][ T7851]  ? __fget_files+0x3a0/0x420
[  236.294499][ T7851]  ? __fget_files+0x2a/0x420
[  236.294525][ T7851]  ksys_read+0x145/0x250
[  236.294546][ T7851]  ? __pfx_ksys_read+0x10/0x10
[  236.294569][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.294594][ T7851]  __do_fast_syscall_32+0xb6/0x2b0
[  236.294611][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.294634][ T7851]  do_fast_syscall_32+0x34/0x80
[  236.294647][ T7851]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  236.294673][ T7851] RIP: 0023:0xf70ee539
[  236.294686][ T7851] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  236.294700][ T7851] RSP: 002b:00000000f54de590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  236.294718][ T7851] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54de620
[  236.294730][ T7851] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000
[  236.294739][ T7851] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  236.294748][ T7851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  236.294757][ T7851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  236.294784][ T7851]  </TASK>
[  236.521961][    C0] vkms_vblank_simulate: vblank timer overrun
[  236.582631][ T5930] usb 2-1: config 0 descriptor??
[  237.049759][ T5930] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  237.650313][ T5930] usb 2-1: USB disconnect, device number 24
[  238.155744][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  238.534405][ T5930] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  238.634371][ T5929] usb 3-1: Using ep0 maxpacket: 8
[  238.719290][ T5929] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  238.740596][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.766446][ T5929] usb 3-1: Product: syz
[  238.812006][ T7876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.835216][ T7876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.845070][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  238.851292][ T7876] netlink: 212372 bytes leftover after parsing attributes in process `syz.0.483'.
[  238.864405][ T5930] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  238.877637][ T5929] usb 3-1: Manufacturer: syz
[  238.884406][ T5929] usb 3-1: SerialNumber: syz
[  238.903531][ T5930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  238.922158][ T5929] usb 3-1: config 0 descriptor??
[  238.929146][ T5930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  238.947903][ T5929] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  239.004258][ T5930] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  239.027123][ T5930] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  239.075804][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.534344][ T5929] gspca_sonixj: reg_w1 err -110
[  239.540983][ T5930] usb 2-1: GET_CAPABILITIES returned 0
[  239.551436][ T5929] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[  239.559347][ T5930] usbtmc 2-1:16.0: can't read capabilities
[  239.741029][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  239.795914][ T5929] usb 2-1: USB disconnect, device number 25
[  239.917766][ T7886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.484'.
[  239.926952][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'.
[  240.594252][ T5930] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  240.776465][ T5930] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  240.799323][ T5930] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[  240.848175][ T5930] usb 4-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  240.857547][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.915425][   T10] usb 3-1: USB disconnect, device number 10
[  240.939369][ T5930] usb 4-1: Product: syz
[  240.947729][ T5930] usb 4-1: Manufacturer: syz
[  240.962463][ T5930] usb 4-1: SerialNumber: syz
[  241.145515][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'.
[  241.168335][ T7903] netlink: 294 bytes leftover after parsing attributes in process `syz.0.490'.
[  241.181237][ T7903] netlink: 294 bytes leftover after parsing attributes in process `syz.0.490'.
[  241.278445][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.0.490'.
[  241.464337][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  241.720992][   T10] usb 3-1: Using ep0 maxpacket: 16
[  241.727964][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.771781][ T7922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.493'.
[  241.785808][ T7922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.493'.
[  241.804292][   T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  241.844626][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'.
[  241.856980][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.915321][   T10] usb 3-1: config 0 descriptor??
[  242.432256][   T10] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  242.733839][ T5960] usb 3-1: USB disconnect, device number 11
[  243.461793][   T10] usb 4-1: USB disconnect, device number 18
[  244.771243][ T7961] __nla_validate_parse: 1 callbacks suppressed
[  244.771257][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'.
[  244.796953][ T7961] netlink: 294 bytes leftover after parsing attributes in process `syz.1.504'.
[  244.806438][ T7961] netlink: 294 bytes leftover after parsing attributes in process `syz.1.504'.
[  244.896572][ T7966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.504'.
[  245.258738][ T7972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.506'.
[  245.267894][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  246.524417][ T5929] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  246.674420][ T5929] usb 2-1: Using ep0 maxpacket: 16
[  246.720045][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.782661][ T5929] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  246.811002][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.831727][ T5929] usb 2-1: config 0 descriptor??
[  246.954305][ T5943] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  247.621659][ T5929] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  247.642022][ T5943] usb 4-1: Using ep0 maxpacket: 8
[  247.842864][ T5943] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  247.856233][ T5943] usb 4-1: config 179 has no interface number 0
[  247.868894][ T5943] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  247.880309][ T5929] usb 2-1: USB disconnect, device number 26
[  247.903143][ T5943] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  248.009260][ T5943] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  248.023972][ T5943] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  248.054679][ T5943] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  248.134273][ T5943] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  248.147973][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.174856][ T7994] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  248.425829][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.434990][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.448915][ T5943] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input20
[  248.638946][ T5960] usb 4-1: USB disconnect, device number 19
[  248.639004][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  248.639049][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  249.276215][ T8013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  249.417819][ T8023] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7)
[  249.424563][ T8023] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  249.449015][ T8023] vhci_hcd vhci_hcd.0: Device attached
[  249.834285][   T10] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  249.898067][ T8023] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2
[  249.925010][ T8023] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits
[  250.309949][ T8025] vhci_hcd: connection reset by peer
[  250.434546][   T37] vhci_hcd: stop threads
[  250.447571][   T37] vhci_hcd: release socket
[  250.486736][   T37] vhci_hcd: disconnect device
[  251.539951][ T8047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.522'.
[  251.552335][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.522'.
[  252.291073][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.526'.
[  253.945876][ T5929] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  254.126775][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  254.156197][ T5929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  254.166677][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.195348][ T5929] usb 2-1: config 0 descriptor??
[  254.512491][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  254.597148][ T5960] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  254.626773][ T5960] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  254.644381][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  254.663809][ T5960] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0
[  254.689232][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  254.709003][ T8083] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  254.741240][ T5960] hid-generic 0000:0004:0000.0008: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[  254.751441][ T5929] usb 2-1: media controller created
[  254.993580][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  255.024288][   T10] vhci_hcd: vhci_device speed not set
[  255.128374][ T8094] fido_id[8094]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  255.201665][ T5929] az6027: usb out operation failed. (-71)
[  255.219173][ T5929] az6027: usb out operation failed. (-71)
[  255.243765][ T5929] stb0899_attach: Driver disabled by Kconfig
[  255.252254][ T5929] az6027: no front-end attached
[  255.252254][ T5929] 
[  255.284249][ T5929] az6027: usb out operation failed. (-71)
[  255.290002][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  255.354115][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21
[  255.444599][ T5929] dvb-usb: schedule remote query interval to 400 msecs.
[  255.451546][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  255.514740][ T5929] usb 2-1: USB disconnect, device number 27
[  255.657296][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  255.666843][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  255.673259][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  256.238697][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.269417][ T8111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.298476][ T8111] netlink: 212372 bytes leftover after parsing attributes in process `syz.2.542'.
[  256.374398][ T1605] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  256.456792][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'.
[  256.536953][ T1605] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.549423][ T1605] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  256.569681][ T1605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.595083][ T1605] usb 5-1: config 0 descriptor??
[  256.614824][ T1605] pwc: Askey VC010 type 2 USB webcam detected.
[  256.764338][ T5943] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  256.784410][ T5929] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  256.928848][ T5943] usb 4-1: config 66 has an invalid interface number: 195 but max is 0
[  256.937792][ T5943] usb 4-1: config 66 has no interface number 0
[  256.950845][ T5943] usb 4-1: config 66 interface 195 has no altsetting 0
[  256.954874][ T8129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.544'.
[  256.967120][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  256.976082][ T5929] usb 2-1: Using ep0 maxpacket: 16
[  256.977339][ T5943] usb 4-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  256.991413][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.003394][ T5929] usb 2-1: config 20 has an invalid interface number: 41 but max is 0
[  257.013669][ T5929] usb 2-1: config 20 has no interface number 0
[  257.022830][ T5943] usb 4-1: Product: syz
[  257.027694][ T5929] usb 2-1: config 20 interface 41 has no altsetting 0
[  257.051169][ T5943] usb 4-1: Manufacturer: syz
[  257.060147][ T5929] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  257.060503][ T5943] usb 4-1: SerialNumber: syz
[  257.071707][ T5929] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3
[  257.090771][ T5929] usb 2-1: Product: syz
[  257.101092][ T5929] usb 2-1: Manufacturer: syz
[  257.110211][ T5929] usb 2-1: SerialNumber: syz
[  257.668631][ T5943] usb 4-1: Found UVC 0.00 device syz (1bcf:0b40)
[  258.049755][ T5943] usb 4-1: Forcing UVC version to 1.0a
[  258.076349][ T5943] usb 4-1: No valid video chain found.
[  258.125909][ T5943] usb 4-1: USB disconnect, device number 20
[  259.127141][ T1605] pwc: send_video_command error -71
[  259.144843][ T1605] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  259.173099][ T1605] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  259.396026][ T1605] usb 5-1: USB disconnect, device number 15
[  259.938289][ T8151] netlink: 68 bytes leftover after parsing attributes in process `syz.2.547'.
[  260.197055][ T5929] CoreChips 2-1:20.41: probe with driver CoreChips failed with error -22
[  260.265333][ T5929] usb 2-1: USB disconnect, device number 28
[  260.793010][ T8159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.552'.
[  260.884363][ T5929] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  261.104789][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.3.554'.
[  261.196592][ T5929] usb 2-1: Using ep0 maxpacket: 32
[  261.207288][ T5929] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  261.218724][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.249818][ T5929] usb 2-1: config 0 descriptor??
[  261.412590][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'.
[  261.508909][ T5929] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  261.535578][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  261.607271][ T5929] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  261.613592][ T8175] FAULT_INJECTION: forcing a failure.
[  261.613592][ T8175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  261.615738][ T5929] usb 2-1: media controller created
[  261.635630][ T8175] CPU: 0 UID: 0 PID: 8175 Comm: syz.0.558 Not tainted syzkaller #0 PREEMPT(full) 
[  261.635672][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  261.635689][ T8175] Call Trace:
[  261.635696][ T8175]  <TASK>
[  261.635703][ T8175]  dump_stack_lvl+0x189/0x250
[  261.635727][ T8175]  ? __pfx____ratelimit+0x10/0x10
[  261.635750][ T8175]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.635767][ T8175]  ? __pfx__printk+0x10/0x10
[  261.635789][ T8175]  ? __might_fault+0xb0/0x130
[  261.635818][ T8175]  should_fail_ex+0x414/0x560
[  261.635844][ T8175]  _copy_from_iter+0x1de/0x1790
[  261.635868][ T8175]  ? rcu_is_watching+0x15/0xb0
[  261.635887][ T8175]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  261.635908][ T8175]  ? __pfx__copy_from_iter+0x10/0x10
[  261.635925][ T8175]  ? __build_skb_around+0x257/0x3e0
[  261.635944][ T8175]  ? netlink_sendmsg+0x642/0xb30
[  261.635958][ T8175]  ? skb_put+0x11b/0x210
[  261.635977][ T8175]  netlink_sendmsg+0x6b2/0xb30
[  261.635999][ T8175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.636016][ T8175]  ? __import_iovec+0x5d4/0x7f0
[  261.636032][ T8175]  ? aa_sock_msg_perm+0xf1/0x1d0
[  261.636050][ T8175]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.636067][ T8175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.636084][ T8175]  __sock_sendmsg+0x219/0x270
[  261.636107][ T8175]  ____sys_sendmsg+0x505/0x830
[  261.636129][ T8175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.636163][ T8175]  ___sys_sendmsg+0x21f/0x2a0
[  261.636183][ T8175]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.636242][ T8175]  ? __fget_files+0x2a/0x420
[  261.636262][ T8175]  ? __fget_files+0x3a0/0x420
[  261.636309][ T8175]  __sys_sendmsg+0x164/0x220
[  261.636329][ T8175]  ? __pfx___sys_sendmsg+0x10/0x10
[  261.636361][ T8175]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.636386][ T8175]  __do_fast_syscall_32+0xb6/0x2b0
[  261.636403][ T8175]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.636427][ T8175]  do_fast_syscall_32+0x34/0x80
[  261.636450][ T8175]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  261.636469][ T8175] RIP: 0023:0xf7f53539
[  261.636483][ T8175] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  261.636497][ T8175] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  261.636516][ T8175] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001640
[  261.636528][ T8175] RDX: 0000000000040040 RSI: 0000000000000000 RDI: 0000000000000000
[  261.636538][ T8175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  261.636548][ T8175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  261.636558][ T8175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  261.636584][ T8175]  </TASK>
[  261.940690][ T8155] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  262.004694][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  262.066320][ T5929] az6027: usb out operation failed. (-71)
[  262.072436][ T5929] az6027: usb out operation failed. (-71)
[  262.078243][ T5929] stb0899_attach: Driver disabled by Kconfig
[  262.084291][ T5929] az6027: no front-end attached
[  262.084291][ T5929] 
[  262.091701][ T5929] az6027: usb out operation failed. (-71)
[  262.097509][ T5929] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  262.147122][ T5929] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22
[  262.161461][ T5929] dvb-usb: schedule remote query interval to 400 msecs.
[  262.168507][ T5929] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  262.179001][ T5929] usb 2-1: USB disconnect, device number 29
[  262.426541][ T5929] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  264.438126][ T5867] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  265.390692][ T5867] usb 5-1: device descriptor read/all, error -71
[  265.617717][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.627116][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.134140][ T8225] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  267.140143][ T8233] team_slave_0: entered promiscuous mode
[  267.145979][ T8233] team_slave_1: entered promiscuous mode
[  267.175696][ T8233] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  267.189916][ T8234] netlink: 68 bytes leftover after parsing attributes in process `syz.3.568'.
[  267.299668][ T8238] FAULT_INJECTION: forcing a failure.
[  267.299668][ T8238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  267.452458][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.4.574 Not tainted syzkaller #0 PREEMPT(full) 
[  267.452483][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  267.452493][ T8238] Call Trace:
[  267.452501][ T8238]  <TASK>
[  267.452508][ T8238]  dump_stack_lvl+0x189/0x250
[  267.452533][ T8238]  ? __pfx____ratelimit+0x10/0x10
[  267.452556][ T8238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.452574][ T8238]  ? __pfx__printk+0x10/0x10
[  267.452596][ T8238]  ? __might_fault+0xb0/0x130
[  267.452628][ T8238]  should_fail_ex+0x414/0x560
[  267.452654][ T8238]  _copy_from_iter+0x1de/0x1790
[  267.452680][ T8238]  ? rcu_is_watching+0x15/0xb0
[  267.452698][ T8238]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  267.452721][ T8238]  ? __pfx__copy_from_iter+0x10/0x10
[  267.452740][ T8238]  ? __build_skb_around+0x257/0x3e0
[  267.452761][ T8238]  ? netlink_sendmsg+0x642/0xb30
[  267.452775][ T8238]  ? skb_put+0x11b/0x210
[  267.452795][ T8238]  netlink_sendmsg+0x6b2/0xb30
[  267.452820][ T8238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.452838][ T8238]  ? __import_iovec+0x5d4/0x7f0
[  267.452854][ T8238]  ? aa_sock_msg_perm+0xf1/0x1d0
[  267.452873][ T8238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  267.452891][ T8238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  267.452908][ T8238]  __sock_sendmsg+0x219/0x270
[  267.452932][ T8238]  ____sys_sendmsg+0x505/0x830
[  267.452956][ T8238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  267.452990][ T8238]  ___sys_sendmsg+0x21f/0x2a0
[  267.453010][ T8238]  ? __pfx____sys_sendmsg+0x10/0x10
[  267.453062][ T8238]  ? __fget_files+0x2a/0x420
[  267.453084][ T8238]  ? __fget_files+0x3a0/0x420
[  267.453115][ T8238]  __sys_sendmsg+0x164/0x220
[  267.453135][ T8238]  ? __pfx___sys_sendmsg+0x10/0x10
[  267.453168][ T8238]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.453195][ T8238]  __do_fast_syscall_32+0xb6/0x2b0
[  267.453210][ T8238]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.453236][ T8238]  do_fast_syscall_32+0x34/0x80
[  267.453259][ T8238]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  267.453279][ T8238] RIP: 0023:0xf7f94539
[  267.453294][ T8238] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  267.453308][ T8238] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  267.453327][ T8238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  267.453338][ T8238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  267.453348][ T8238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  267.453358][ T8238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  267.453368][ T8238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  267.453394][ T8238]  </TASK>
[  268.261399][   T30] kauditd_printk_skb: 127 callbacks suppressed
[  268.261416][   T30] audit: type=1326 audit(1756602817.920:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  268.271654][ T5867] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  268.508482][   T30] audit: type=1326 audit(1756602817.920:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f96539 code=0x7ffc0000
[  268.583603][   T30] audit: type=1326 audit(1756602818.200:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.666718][   T30] audit: type=1326 audit(1756602818.200:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.724066][   T30] audit: type=1326 audit(1756602818.200:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.772911][   T30] audit: type=1326 audit(1756602818.200:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.804421][ T5867] usb 3-1: Using ep0 maxpacket: 32
[  268.810397][   T30] audit: type=1326 audit(1756602818.200:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.838592][   T30] audit: type=1326 audit(1756602818.200:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  268.863742][   T30] audit: type=1326 audit(1756602818.200:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  269.370892][ T8262] netlink: 68 bytes leftover after parsing attributes in process `syz.0.573'.
[  269.394048][ T5867] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  269.415516][ T5867] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  269.425170][ T5867] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  269.434741][ T5867] usb 3-1: config 1 has no interface number 0
[  269.454371][ T5867] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  269.465782][ T5867] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  269.484695][ T5867] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  269.494685][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.513289][ T5867] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  269.554337][   T30] audit: type=1326 audit(1756602818.200:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.3.579" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f96558 code=0x7ffc0000
[  269.724106][ T5867] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  269.986063][ T5867] usb 3-1: USB disconnect, device number 12
[  270.017027][ T5867] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  270.587486][ T8268] syz_tun: entered allmulticast mode
[  270.641952][ T8267] syz_tun: left allmulticast mode
[  271.953243][ T8287] FAULT_INJECTION: forcing a failure.
[  271.953243][ T8287] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.967741][ T8287] CPU: 0 UID: 0 PID: 8287 Comm: syz.1.589 Not tainted syzkaller #0 PREEMPT(full) 
[  271.967765][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  271.967775][ T8287] Call Trace:
[  271.967783][ T8287]  <TASK>
[  271.967790][ T8287]  dump_stack_lvl+0x189/0x250
[  271.967813][ T8287]  ? __pfx____ratelimit+0x10/0x10
[  271.967837][ T8287]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.967856][ T8287]  ? __pfx__printk+0x10/0x10
[  271.967877][ T8287]  ? __might_fault+0xb0/0x130
[  271.967909][ T8287]  should_fail_ex+0x414/0x560
[  271.967935][ T8287]  _copy_from_iter+0x1de/0x1790
[  271.967959][ T8287]  ? rcu_is_watching+0x15/0xb0
[  271.967978][ T8287]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  271.968001][ T8287]  ? __pfx__copy_from_iter+0x10/0x10
[  271.968020][ T8287]  ? __build_skb_around+0x257/0x3e0
[  271.968040][ T8287]  ? netlink_sendmsg+0x642/0xb30
[  271.968054][ T8287]  ? skb_put+0x11b/0x210
[  271.968075][ T8287]  netlink_sendmsg+0x6b2/0xb30
[  271.968100][ T8287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.968118][ T8287]  ? __import_iovec+0x5d4/0x7f0
[  271.968134][ T8287]  ? aa_sock_msg_perm+0xf1/0x1d0
[  271.968153][ T8287]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.968175][ T8287]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.968192][ T8287]  __sock_sendmsg+0x219/0x270
[  271.968217][ T8287]  ____sys_sendmsg+0x505/0x830
[  271.968241][ T8287]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.968275][ T8287]  ___sys_sendmsg+0x21f/0x2a0
[  271.968296][ T8287]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.968349][ T8287]  ? __fget_files+0x2a/0x420
[  271.968371][ T8287]  ? __fget_files+0x3a0/0x420
[  271.968403][ T8287]  __sys_sendmsg+0x164/0x220
[  271.968423][ T8287]  ? __pfx___sys_sendmsg+0x10/0x10
[  271.968457][ T8287]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.968483][ T8287]  __do_fast_syscall_32+0xb6/0x2b0
[  271.968499][ T8287]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.968525][ T8287]  do_fast_syscall_32+0x34/0x80
[  271.968541][ T8287]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  271.968560][ T8287] RIP: 0023:0xf7fa7539
[  271.968575][ T8287] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  271.968589][ T8287] RSP: 002b:00000000f54b655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  271.968608][ T8287] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  271.968620][ T8287] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[  271.968630][ T8287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  271.968640][ T8287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  271.968650][ T8287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  271.968677][ T8287]  </TASK>
[  272.302450][ T8289] openvswitch: netlink: EtherType 257 is less than min 600
[  272.665142][ T8295] netlink: 68 bytes leftover after parsing attributes in process `syz.2.585'.
[  273.824372][ T5930] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  273.984630][ T5930] usb 4-1: device descriptor read/64, error -71
[  274.451872][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.595'.
[  274.460845][ T8321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'.
[  274.564305][ T5930] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  274.864294][ T5930] usb 4-1: device descriptor read/64, error -71
[  274.879753][ T8327] FAULT_INJECTION: forcing a failure.
[  274.879753][ T8327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.928554][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.0.598 Not tainted syzkaller #0 PREEMPT(full) 
[  274.928577][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  274.928587][ T8327] Call Trace:
[  274.928594][ T8327]  <TASK>
[  274.928601][ T8327]  dump_stack_lvl+0x189/0x250
[  274.928623][ T8327]  ? __pfx____ratelimit+0x10/0x10
[  274.928644][ T8327]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.928662][ T8327]  ? __pfx__printk+0x10/0x10
[  274.928693][ T8327]  should_fail_ex+0x414/0x560
[  274.928719][ T8327]  _copy_to_user+0x31/0xb0
[  274.928739][ T8327]  copy_to_sockptr+0x5e/0xa0
[  274.928757][ T8327]  do_tcp_getsockopt+0x1f13/0x2660
[  274.928791][ T8327]  ? __pfx_do_tcp_getsockopt+0x10/0x10
[  274.928806][ T8327]  ? sock_recv_errqueue+0x4c0/0x510
[  274.928830][ T8327]  ? __might_fault+0xb0/0x130
[  274.928851][ T8327]  ? _parse_integer_limit+0x1ae/0x1f0
[  274.928871][ T8327]  ? aa_label_sk_perm+0x4cd/0x630
[  274.928901][ T8327]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  274.928939][ T8327]  ? __pfx___might_resched+0x10/0x10
[  274.928959][ T8327]  ? rcu_read_lock_any_held+0xb3/0x120
[  274.928977][ T8327]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  274.929002][ T8327]  ? aa_sk_perm+0x81e/0x950
[  274.929026][ T8327]  ? __pfx_aa_sk_perm+0x10/0x10
[  274.929043][ T8327]  ? __lock_acquire+0xab9/0xd20
[  274.929067][ T8327]  tcp_getsockopt+0x83/0x130
[  274.929082][ T8327]  ? sock_recv_errqueue+0x4c0/0x510
[  274.929101][ T8327]  ? sock_recv_errqueue+0x4c0/0x510
[  274.929119][ T8327]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  274.929142][ T8327]  do_sock_getsockopt+0x372/0x450
[  274.929163][ T8327]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  274.929178][ T8327]  ? lockdep_hardirqs_on+0x90/0x150
[  274.929202][ T8327]  ? __fget_files+0x2a/0x420
[  274.929223][ T8327]  ? __fget_files+0x3a0/0x420
[  274.929243][ T8327]  ? __fget_files+0x2a/0x420
[  274.929270][ T8327]  __ia32_sys_getsockopt+0x1a5/0x250
[  274.929287][ T8327]  ? lockdep_hardirqs_on+0x90/0x150
[  274.929308][ T8327]  ? lockdep_hardirqs_on+0x90/0x150
[  274.929332][ T8327]  __do_fast_syscall_32+0xb6/0x2b0
[  274.929348][ T8327]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.929373][ T8327]  do_fast_syscall_32+0x34/0x80
[  274.929389][ T8327]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  274.929409][ T8327] RIP: 0023:0xf7f53539
[  274.929423][ T8327] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  274.929437][ T8327] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[  274.929455][ T8327] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000006
[  274.929467][ T8327] RDX: 0000000000000023 RSI: 00000000800000c0 RDI: 00000000800001c0
[  274.929479][ T8327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  274.929489][ T8327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  274.929499][ T8327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  274.929523][ T8327]  </TASK>
[  275.335162][ T8335] FAULT_INJECTION: forcing a failure.
[  275.335162][ T8335] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.416956][ T8333] program syz.1.600 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  275.436695][ T8335] CPU: 1 UID: 0 PID: 8335 Comm: syz.0.601 Not tainted syzkaller #0 PREEMPT(full) 
[  275.436728][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  275.436739][ T8335] Call Trace:
[  275.436747][ T8335]  <TASK>
[  275.436754][ T8335]  dump_stack_lvl+0x189/0x250
[  275.436779][ T8335]  ? __pfx____ratelimit+0x10/0x10
[  275.436802][ T8335]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.436821][ T8335]  ? __pfx__printk+0x10/0x10
[  275.436843][ T8335]  ? __might_fault+0xb0/0x130
[  275.436877][ T8335]  should_fail_ex+0x414/0x560
[  275.436903][ T8335]  _copy_from_iter+0x1de/0x1790
[  275.436931][ T8335]  ? rcu_is_watching+0x15/0xb0
[  275.436951][ T8335]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  275.436973][ T8335]  ? __pfx__copy_from_iter+0x10/0x10
[  275.436993][ T8335]  ? __build_skb_around+0x257/0x3e0
[  275.437014][ T8335]  ? netlink_sendmsg+0x642/0xb30
[  275.437029][ T8335]  ? skb_put+0x11b/0x210
[  275.437049][ T8335]  netlink_sendmsg+0x6b2/0xb30
[  275.437075][ T8335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.437094][ T8335]  ? __import_iovec+0x5d4/0x7f0
[  275.437110][ T8335]  ? aa_sock_msg_perm+0xf1/0x1d0
[  275.437129][ T8335]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  275.437147][ T8335]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.437163][ T8335]  __sock_sendmsg+0x219/0x270
[  275.437189][ T8335]  ____sys_sendmsg+0x505/0x830
[  275.437214][ T8335]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.437248][ T8335]  ___sys_sendmsg+0x21f/0x2a0
[  275.437269][ T8335]  ? __pfx____sys_sendmsg+0x10/0x10
[  275.437324][ T8335]  ? __fget_files+0x2a/0x420
[  275.437345][ T8335]  ? __fget_files+0x3a0/0x420
[  275.437378][ T8335]  __sys_sendmsg+0x164/0x220
[  275.437399][ T8335]  ? __pfx___sys_sendmsg+0x10/0x10
[  275.437433][ T8335]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.437459][ T8335]  __do_fast_syscall_32+0xb6/0x2b0
[  275.437475][ T8335]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.437500][ T8335]  do_fast_syscall_32+0x34/0x80
[  275.437517][ T8335]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  275.437537][ T8335] RIP: 0023:0xf7f53539
[  275.437553][ T8335] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  275.437567][ T8335] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  275.437586][ T8335] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0
[  275.437598][ T8335] RDX: 0000000000000850 RSI: 0000000000000000 RDI: 0000000000000000
[  275.437609][ T8335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  275.437618][ T8335] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  275.437629][ T8335] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  275.437656][ T8335]  </TASK>
[  275.708517][    C1] vkms_vblank_simulate: vblank timer overrun
[  275.715440][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059181400: rx timeout, send abort
[  275.723816][ T5930] usb usb4-port1: attempt power cycle
[  276.084788][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059182c00: rx timeout, send abort
[  276.446070][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'.
[  276.481403][ T8344] loop8: detected capacity change from 0 to 16384
[  276.501552][ T8343] netlink: 294 bytes leftover after parsing attributes in process `syz.2.604'.
[  276.519295][ T8343] netlink: 294 bytes leftover after parsing attributes in process `syz.2.604'.
[  276.593056][    C1] vcan0: j1939_tp_rxtimer: 0xffff888059182c00: abort rx timeout. Force session deactivation
[  277.007975][ T8354] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'.
[  277.311648][    C0] I/O error, dev loop8, sector 6144 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  277.359716][ T8351] loop8: detected capacity change from 16384 to 0
[  277.572989][ T8359] netlink: 'syz.0.607': attribute type 2 has an invalid length.
[  277.625303][ T8359] : entered promiscuous mode
[  277.873904][ T8369] IPv6: Can't replace route, no match found
[  277.899273][ T5867] IPVS: starting estimator thread 0...
[  277.908526][ T8368] fuse: Unknown parameter 'root˙˙˙00000K40000'
[  277.941230][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[  277.954557][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'.
[  277.995704][ T8370] IPVS: using max 29 ests per chain, 69600 per kthread
[  278.172355][ T1605] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  278.409384][ T1605] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55
[  278.420436][ T1605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.428607][ T1605] usb 4-1: Product: syz
[  278.437731][ T1605] usb 4-1: Manufacturer: syz
[  278.443383][ T1605] usb 4-1: SerialNumber: syz
[  278.461732][ T1605] usb 4-1: config 0 descriptor??
[  278.483521][ T1605] gspca_main: sonixb-2.14.0 probing 0c45:608f
[  279.001656][ T8388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.614'.
[  279.184690][ T1605] sonixb 4-1:0.0: Error writing register 01: -110
[  279.193419][ T1605] sonixb 4-1:0.0: probe with driver sonixb failed with error -110
[  280.346941][ T1605] usb 4-1: USB disconnect, device number 24
[  280.416034][ T8394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.616'.
[  280.558822][ T8402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'.
[  280.585053][ T8402] netlink: 294 bytes leftover after parsing attributes in process `syz.3.618'.
[  280.654319][ T8402] netlink: 294 bytes leftover after parsing attributes in process `syz.3.618'.
[  280.810483][ T8406] netlink: 44 bytes leftover after parsing attributes in process `syz.3.618'.
[  281.894582][ T5930] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  282.063752][ T5930] usb 2-1: config 66 has an invalid interface number: 195 but max is 0
[  282.079920][ T5930] usb 2-1: config 66 has no interface number 0
[  282.091760][ T5930] usb 2-1: config 66 interface 195 has no altsetting 0
[  282.110141][ T5930] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=56.49
[  282.124258][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.142523][ T5930] usb 2-1: Product: syz
[  282.149008][ T5930] usb 2-1: Manufacturer: syz
[  282.159194][ T5930] usb 2-1: SerialNumber: syz
[  282.470140][ T5930] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40)
[  282.479282][ T5930] usb 2-1: Forcing UVC version to 1.0a
[  282.487170][ T5930] usb 2-1: No valid video chain found.
[  282.514906][ T5930] usb 2-1: USB disconnect, device number 30
[  282.549407][ T8421] ==================================================================
[  282.557525][ T8421] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x44cd/0x5400
[  282.565494][ T8421] Read of size 1 at addr ffff8880561bedb0 by task syz.4.621/8421
[  282.573203][ T8421] 
[  282.575517][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) 
[  282.575531][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  282.575538][ T8421] Call Trace:
[  282.575544][ T8421]  <TASK>
[  282.575548][ T8421]  dump_stack_lvl+0x189/0x250
[  282.575563][ T8421]  ? __kasan_check_byte+0x12/0x40
[  282.575578][ T8421]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.575589][ T8421]  ? lock_release+0x4b/0x3e0
[  282.575605][ T8421]  ? __virt_addr_valid+0x4a5/0x5c0
[  282.575618][ T8421]  print_report+0xca/0x240
[  282.575627][ T8421]  ? xfrm_state_find+0x44cd/0x5400
[  282.575636][ T8421]  kasan_report+0x118/0x150
[  282.575649][ T8421]  ? xfrm_state_find+0x44cd/0x5400
[  282.575660][ T8421]  xfrm_state_find+0x44cd/0x5400
[  282.575671][ T8421]  ? __pfx___find_rr_leaf+0x10/0x10
[  282.575686][ T8421]  ? __pfx_fib6_node_lookup+0x10/0x10
[  282.575699][ T8421]  ? xfrm_state_find+0x1da/0x5400
[  282.575709][ T8421]  ? __pfx_xfrm_state_find+0x10/0x10
[  282.575717][ T8421]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  282.575732][ T8421]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  282.575747][ T8421]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  282.575761][ T8421]  ? ip6_pol_route+0x162/0x1180
[  282.575772][ T8421]  ? __pfx_ip6_pol_route+0x10/0x10
[  282.575782][ T8421]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  282.575794][ T8421]  ? __lock_acquire+0xab9/0xd20
[  282.575810][ T8421]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  282.575823][ T8421]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  282.575835][ T8421]  ? xfrm_expand_policies+0x41f/0x6a0
[  282.575846][ T8421]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  282.575858][ T8421]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  282.575871][ T8421]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  282.575882][ T8421]  ? txopt_get+0x335/0x3f0
[  282.575889][ T8421]  ? aa_label_sk_perm+0x4cd/0x630
[  282.575902][ T8421]  ? __pfx_txopt_get+0x10/0x10
[  282.575911][ T8421]  xfrm_lookup_route+0x3c/0x1c0
[  282.575928][ T8421]  rawv6_sendmsg+0xdab/0x1820
[  282.575945][ T8421]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  282.575963][ T8421]  ? __pfx_aa_sk_perm+0x10/0x10
[  282.575977][ T8421]  ? sock_rps_record_flow+0x19/0x410
[  282.575989][ T8421]  ? inet_sendmsg+0x2f4/0x370
[  282.576000][ T8421]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  282.576012][ T8421]  __sock_sendmsg+0x19c/0x270
[  282.576025][ T8421]  ____sys_sendmsg+0x52d/0x830
[  282.576036][ T8421]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.576046][ T8421]  ? futex_unqueue+0x22/0x240
[  282.576056][ T8421]  ? futex_unqueue+0x22/0x240
[  282.576067][ T8421]  ___sys_sendmsg+0x21f/0x2a0
[  282.576077][ T8421]  ? __pfx____sys_sendmsg+0x10/0x10
[  282.576093][ T8421]  ? __fget_files+0x2a/0x420
[  282.576106][ T8421]  ? __fget_files+0x3a0/0x420
[  282.576120][ T8421]  __sys_sendmmsg+0x28e/0x430
[  282.576131][ T8421]  ? __pfx___sys_sendmmsg+0x10/0x10
[  282.576142][ T8421]  ? __pfx_do_futex+0x10/0x10
[  282.576158][ T8421]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  282.576169][ T8421]  __do_fast_syscall_32+0xb6/0x2b0
[  282.576179][ T8421]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.576193][ T8421]  do_fast_syscall_32+0x34/0x80
[  282.576201][ T8421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  282.576214][ T8421] RIP: 0023:0xf7f94539
[  282.576224][ T8421] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  282.576233][ T8421] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  282.576244][ T8421] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480
[  282.576251][ T8421] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000
[  282.576257][ T8421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  282.576263][ T8421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  282.576269][ T8421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  282.576278][ T8421]  </TASK>
[  282.576282][ T8421] 
[  282.952755][ T8421] Allocated by task 8261:
[  282.957059][ T8421]  kasan_save_track+0x3e/0x80
[  282.961724][ T8421]  __kasan_slab_alloc+0x6c/0x80
[  282.966560][ T8421]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  282.972433][ T8421]  kmalloc_reserve+0xbd/0x290
[  282.977094][ T8421]  __alloc_skb+0x142/0x2d0
[  282.981494][ T8421]  pfkey_send_acquire+0x606/0x2cb0
[  282.986594][ T8421]  km_query+0x11c/0x210
[  282.990736][ T8421]  xfrm_state_find+0x3bca/0x5400
[  282.995652][ T8421]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  283.001793][ T8421]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  283.007149][ T8421]  xfrm_lookup_route+0x3c/0x1c0
[  283.011985][ T8421]  rawv6_sendmsg+0xdab/0x1820
[  283.016652][ T8421]  __sock_sendmsg+0x19c/0x270
[  283.021316][ T8421]  ____sys_sendmsg+0x52d/0x830
[  283.026073][ T8421]  ___sys_sendmsg+0x21f/0x2a0
[  283.030730][ T8421]  __sys_sendmmsg+0x28e/0x430
[  283.035386][ T8421]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  283.040918][ T8421]  __do_fast_syscall_32+0xb6/0x2b0
[  283.046014][ T8421]  do_fast_syscall_32+0x34/0x80
[  283.050843][ T8421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.057155][ T8421] 
[  283.059457][ T8421] Freed by task 8261:
[  283.063411][ T8421]  kasan_save_track+0x3e/0x80
[  283.068076][ T8421]  kasan_save_free_info+0x46/0x50
[  283.073084][ T8421]  __kasan_slab_free+0x5b/0x80
[  283.077832][ T8421]  kmem_cache_free+0x18f/0x400
[  283.082581][ T8421]  skb_release_data+0x62d/0x7c0
[  283.087438][ T8421]  sk_skb_reason_drop+0x127/0x170
[  283.092443][ T8421]  pfkey_broadcast+0x3c2/0x3e0
[  283.097198][ T8421]  km_query+0x11c/0x210
[  283.101355][ T8421]  xfrm_state_find+0x3bca/0x5400
[  283.106293][ T8421]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  283.112450][ T8421]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  283.117826][ T8421]  xfrm_lookup_route+0x3c/0x1c0
[  283.122678][ T8421]  rawv6_sendmsg+0xdab/0x1820
[  283.127359][ T8421]  __sock_sendmsg+0x19c/0x270
[  283.132043][ T8421]  ____sys_sendmsg+0x52d/0x830
[  283.136809][ T8421]  ___sys_sendmsg+0x21f/0x2a0
[  283.141486][ T8421]  __sys_sendmmsg+0x28e/0x430
[  283.146171][ T8421]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  283.151713][ T8421]  __do_fast_syscall_32+0xb6/0x2b0
[  283.156824][ T8421]  do_fast_syscall_32+0x34/0x80
[  283.161682][ T8421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.168021][ T8421] 
[  283.170338][ T8421] The buggy address belongs to the object at ffff8880561bed80
[  283.170338][ T8421]  which belongs to the cache skbuff_small_head of size 704
[  283.184913][ T8421] The buggy address is located 48 bytes inside of
[  283.184913][ T8421]  freed 704-byte region [ffff8880561bed80, ffff8880561bf040)
[  283.198626][ T8421] 
[  283.200948][ T8421] The buggy address belongs to the physical page:
[  283.207357][ T8421] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x561bc
[  283.216103][ T8421] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  283.224582][ T8421] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  283.232140][ T8421] page_type: f5(slab)
[  283.236119][ T8421] raw: 00fff00000000040 ffff88801e6a3c80 dead000000000122 0000000000000000
[  283.244682][ T8421] raw: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000
[  283.253248][ T8421] head: 00fff00000000040 ffff88801e6a3c80 dead000000000122 0000000000000000
[  283.261906][ T8421] head: 0000000000000000 0000000000130013 00000000f5000000 0000000000000000
[  283.270589][ T8421] head: 00fff00000000002 ffffea0001586f01 00000000ffffffff 00000000ffffffff
[  283.275148][ T8422] netlink: 68 bytes leftover after parsing attributes in process `syz.4.621'.
[  283.279249][ T8421] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  283.279261][ T8421] page dumped because: kasan: bad access detected
[  283.279283][ T8421] page_owner tracks the page as allocated
[  283.279290][ T8421] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8261, tgid 8236 (syz.0.573), ts 269212204038, free_ts 245150765560
[  283.329505][ T8421]  post_alloc_hook+0x240/0x2a0
[  283.334260][ T8421]  get_page_from_freelist+0x21e4/0x22c0
[  283.339788][ T8421]  __alloc_frozen_pages_noprof+0x181/0x370
[  283.345566][ T8421]  alloc_pages_mpol+0x232/0x4a0
[  283.350392][ T8421]  allocate_slab+0x8a/0x370
[  283.354886][ T8421]  ___slab_alloc+0xbeb/0x1410
[  283.359564][ T8421]  kmem_cache_alloc_node_noprof+0x280/0x3c0
[  283.365445][ T8421]  kmalloc_reserve+0xbd/0x290
[  283.370102][ T8421]  __alloc_skb+0x142/0x2d0
[  283.374496][ T8421]  pfkey_send_acquire+0x606/0x2cb0
[  283.379594][ T8421]  km_query+0x11c/0x210
[  283.383727][ T8421]  xfrm_state_find+0x3bca/0x5400
[  283.388642][ T8421]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  283.394794][ T8421]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  283.400152][ T8421]  xfrm_lookup_route+0x3c/0x1c0
[  283.404984][ T8421]  rawv6_sendmsg+0xdab/0x1820
[  283.409702][ T8421] page last free pid 7953 tgid 7953 stack trace:
[  283.416010][ T8421]  free_unref_folios+0xdbd/0x1520
[  283.421020][ T8421]  folios_put_refs+0x559/0x640
[  283.425781][ T8421]  truncate_inode_pages_range+0x346/0xda0
[  283.431484][ T8421]  blkdev_flush_mapping+0x108/0x270
[  283.436681][ T8421]  bdev_release+0x417/0x650
[  283.441199][ T8421]  blkdev_release+0x15/0x20
[  283.445690][ T8421]  __fput+0x44c/0xa70
[  283.449653][ T8421]  task_work_run+0x1d4/0x260
[  283.454254][ T8421]  exit_to_user_mode_loop+0xec/0x110
[  283.459539][ T8421]  __do_fast_syscall_32+0x1f4/0x2b0
[  283.464721][ T8421]  do_fast_syscall_32+0x34/0x80
[  283.469559][ T8421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.475872][ T8421] 
[  283.478181][ T8421] Memory state around the buggy address:
[  283.483807][ T8421]  ffff8880561bec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.491867][ T8421]  ffff8880561bed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  283.499907][ T8421] >ffff8880561bed80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.507942][ T8421]                                      ^
[  283.513546][ T8421]  ffff8880561bee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.521579][ T8421]  ffff8880561bee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  283.529616][ T8421] ==================================================================
[  283.537772][ T8421] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  283.544949][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.4.621 Not tainted syzkaller #0 PREEMPT(full) 
[  283.554159][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  283.564233][ T8421] Call Trace:
[  283.567539][ T8421]  <TASK>
[  283.570453][ T8421]  dump_stack_lvl+0x99/0x250
[  283.575045][ T8421]  ? __asan_memcpy+0x40/0x70
[  283.579613][ T8421]  ? __pfx_dump_stack_lvl+0x10/0x10
[  283.584791][ T8421]  ? __pfx__printk+0x10/0x10
[  283.589371][ T8421]  vpanic+0x281/0x750
[  283.593332][ T8421]  ? __pfx_vpanic+0x10/0x10
[  283.597811][ T8421]  ? irqentry_exit+0x74/0x90
[  283.602384][ T8421]  panic+0xb9/0xc0
[  283.606081][ T8421]  ? __pfx_panic+0x10/0x10
[  283.610475][ T8421]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  283.616353][ T8421]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  283.622223][ T8421]  ? xfrm_state_find+0x44cd/0x5400
[  283.627310][ T8421]  check_panic_on_warn+0x89/0xb0
[  283.632232][ T8421]  ? xfrm_state_find+0x44cd/0x5400
[  283.637322][ T8421]  end_report+0x78/0x160
[  283.641547][ T8421]  kasan_report+0x129/0x150
[  283.646030][ T8421]  ? xfrm_state_find+0x44cd/0x5400
[  283.651118][ T8421]  xfrm_state_find+0x44cd/0x5400
[  283.656030][ T8421]  ? __pfx___find_rr_leaf+0x10/0x10
[  283.661209][ T8421]  ? __pfx_fib6_node_lookup+0x10/0x10
[  283.666561][ T8421]  ? xfrm_state_find+0x1da/0x5400
[  283.671563][ T8421]  ? __pfx_xfrm_state_find+0x10/0x10
[  283.676819][ T8421]  ? __rt6_find_exception_rcu+0x127/0x4c0
[  283.682531][ T8421]  ? __pfx___rt6_find_exception_rcu+0x10/0x10
[  283.688598][ T8421]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  283.694769][ T8421]  ? ip6_pol_route+0x162/0x1180
[  283.699606][ T8421]  ? __pfx_ip6_pol_route+0x10/0x10
[  283.704697][ T8421]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  283.711269][ T8421]  ? __lock_acquire+0xab9/0xd20
[  283.716102][ T8421]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  283.721460][ T8421]  ? xfrm_sk_policy_lookup+0x9d/0x750
[  283.726822][ T8421]  ? xfrm_expand_policies+0x41f/0x6a0
[  283.732188][ T8421]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  283.737545][ T8421]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  283.743161][ T8421]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  283.748950][ T8421]  ? txopt_get+0x335/0x3f0
[  283.753342][ T8421]  ? aa_label_sk_perm+0x4cd/0x630
[  283.758348][ T8421]  ? __pfx_txopt_get+0x10/0x10
[  283.763092][ T8421]  xfrm_lookup_route+0x3c/0x1c0
[  283.767945][ T8421]  rawv6_sendmsg+0xdab/0x1820
[  283.772630][ T8421]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  283.777727][ T8421]  ? __pfx_aa_sk_perm+0x10/0x10
[  283.782554][ T8421]  ? sock_rps_record_flow+0x19/0x410
[  283.787817][ T8421]  ? inet_sendmsg+0x2f4/0x370
[  283.792469][ T8421]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  283.797727][ T8421]  __sock_sendmsg+0x19c/0x270
[  283.802385][ T8421]  ____sys_sendmsg+0x52d/0x830
[  283.807124][ T8421]  ? __pfx_____sys_sendmsg+0x10/0x10
[  283.812381][ T8421]  ? futex_unqueue+0x22/0x240
[  283.817032][ T8421]  ? futex_unqueue+0x22/0x240
[  283.821682][ T8421]  ___sys_sendmsg+0x21f/0x2a0
[  283.826334][ T8421]  ? __pfx____sys_sendmsg+0x10/0x10
[  283.831512][ T8421]  ? __fget_files+0x2a/0x420
[  283.836081][ T8421]  ? __fget_files+0x3a0/0x420
[  283.840737][ T8421]  __sys_sendmmsg+0x28e/0x430
[  283.845391][ T8421]  ? __pfx___sys_sendmmsg+0x10/0x10
[  283.850563][ T8421]  ? __pfx_do_futex+0x10/0x10
[  283.855221][ T8421]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  283.860742][ T8421]  __do_fast_syscall_32+0xb6/0x2b0
[  283.865829][ T8421]  ? lockdep_hardirqs_on+0x9c/0x150
[  283.871011][ T8421]  do_fast_syscall_32+0x34/0x80
[  283.875833][ T8421]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  283.882162][ T8421] RIP: 0023:0xf7f94539
[  283.886205][ T8421] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  283.905789][ T8421] RSP: 002b:00000000f546455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  283.914197][ T8421] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000480
[  283.922155][ T8421] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000
[  283.930114][ T8421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  283.938078][ T8421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  283.946025][ T8421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  283.953974][ T8421]  </TASK>
[  283.957251][ T8421] Kernel Offset: disabled
[  283.961554][ T8421] Rebooting in 86400 seconds..