last executing test programs:

27m49.022179298s ago: executing program 4 (id=1778):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r6, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f00000001c0)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5a90a000f01c40f019c09000f01c2", 0x65}], 0x1, 0x7d, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000002c0)='\\ ', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50)
r8 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x735a, 0x100, 0x805, 0x350}, &(0x7f0000000100)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}})
io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008800)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04090300c9"], 0x6)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0xf0, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xd4, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @generic="fc39ec29f9c0a0c7d051559811fac8c90b70fed9211e1b066e4386ad005d5ff02f36fd3694072dfe59eb2e3b23bc2133cd438137323278828070e6d838ee0aedcd38a907cfa00dee5e389abb96a597179c3e1e0d0fb2dae5620b9effeeb92f198abf3f770cc3c1e89d0ab385adcefa9b538149df80b3d611a569398cde84d5247bcd6ddb53130685edadc30bbb49a1d025aef96c8407cb301d2f4e0043c0b6bf95d8ca9484322aad53749e018584ef76af2a80bf3d6ff428db20385128d5a31617f5c189273dd0e7"]}, @nested={0x4, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

27m48.488325027s ago: executing program 4 (id=1780):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
socket(0xa, 0x3, 0xff)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x2, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7fffffffffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x2})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r1, 0x1000, 0x0, 0x3ffe})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = io_uring_setup(0x56ae, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x30c})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

27m48.114682513s ago: executing program 4 (id=1781):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240))
r2 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r3}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x6, 0x1, 0x0, 0x1, [@generic="13c1"]}]}, 0x2c}], 0x1}, 0xcc000)
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, r3, &(0x7f0000000000)={0x2, 0x7, 0x0, 0x5})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000080)=@x86={0x82, 0x5, 0x6, 0x0, 0x0, 0x7, 0x0, 0x4b, 0xf7, 0x4, 0x6, 0x0, 0x0, 0x1, 0xb, 0x0, 0xf, 0x8, 0xfd, '\x00', 0x2, 0xb4})

27m47.863309506s ago: executing program 4 (id=1783):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c400000019000100600271f8bad22338ff0100000000000000000000000000016401010200000000000000000000000000000000000200000a00773b28737a383e88887ce428f072008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000030000000000000000000000b86b6e0000010001000000000c0015005d07350000100000"], 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0)

27m47.726124661s ago: executing program 4 (id=1785):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb46, 0x9, 0x8, 0x2, 0x3}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x440c1)
setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4)
sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000680)='nicvf0\x00'})
writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r4, &(0x7f00000000c0)="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", 0x4fe, 0x6000000000000000, 0x0, 0x0)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
unshare(0x40000400)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000006c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xfffffffe, 0x0, 0x0, 0x0})
migrate_pages(0x0, 0x5, 0x0, 0x0)

27m44.520787139s ago: executing program 4 (id=1790):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x2, "7d0ce3745c8a725cd466b11846a03fb41af4f9db56402f9cbab9e583a8db9019", 0x7563141e})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x5)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7})
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda010203010902120100"], 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021})

27m29.417037404s ago: executing program 32 (id=1790):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x2, 0x0, 0x2, "7d0ce3745c8a725cd466b11846a03fb41af4f9db56402f9cbab9e583a8db9019", 0x7563141e})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$pokeuser(0x6, r1, 0x388, 0x5)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a4, &(0x7f0000000000)={{@any, 0xffffffff}, @hyper, 0x0, 0x0, 0x4000000f8, 0x9, 0x0, 0x4000000, 0x7})
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000306b240c50f27128eda010203010902120100"], 0x0)
readv(r0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r3)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021})

16.96752529s ago: executing program 3 (id=7553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff00", @ANYRES32, @ANYBLOB="003c883846b0a0553d4d8175a38a995e47053865696f2f0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfe3f)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}], 0x1)

15.265501617s ago: executing program 3 (id=7560):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)}, 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000000)={0xa, 0x100, 0x1, {0x6, 0x1000, 0x2, 0x86b}})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000000206030000000000000000000000fffd14000780080011400000000005001500ee0000000900020073797a320000000005000400030000001c0007800800094000000009050003000800000008001340fffffeff0900020073797a30000000001300030032e7840d3a6e65742c69666163650000"], 0x78}}, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x2, 0x0, [{0x8, 0x5, 0x0, 0x0, @irqchip={0x81c, 0x4}}, {0xfffffffb, 0x3, 0x1, 0x0, @irqchip={0x6, 0x7f}}]})
mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
sendmsg$tipc(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='A', 0x1}], 0x1}, 0x400c0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4, 0x1000000}, 0x4c)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000200), 0x208800, 0x0)
syz_clone(0x4029000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0)
write$sysctl(r5, &(0x7f00000000c0)='2\x00', 0x2)

14.708361229s ago: executing program 5 (id=7563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (fail_nth: 4)

14.257570983s ago: executing program 5 (id=7565):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x2, &(0x7f0000000480)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffae, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
r2 = creat(&(0x7f0000000040)='./file2\x00', 0x118)
fallocate(r2, 0x0, 0x1, 0x2000402)
write$binfmt_elf32(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x78)
pipe2$watch_queue(0x0, 0x80)
setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7})
r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0xa41, 0x22)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(r3, &(0x7f00000001c0)='./file0\x00', 0x7d5a80, 0x1)
lseek(r6, 0x40000000f4, 0x4)
syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000010c0)={0x0, &(0x7f0000000400)={0x18, 0xffffffffffffffda, 0x2725, {0x8000000000000001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
r8 = syz_open_dev$I2C(0x0, 0x1, 0x2603)
ioctl$I2C_RDWR(r8, 0x707, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socket(0x2d, 0x2, 0x0)

12.358546508s ago: executing program 0 (id=7566):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f00000003c0), 0x6, 0x30000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000480)={0x3, 0x1, 0x0, 0x0, &(0x7f0000001c00)=[{}]})
timer_create(0x7, &(0x7f0000000280)={0x0, 0x7, 0x1, @thr={0x0, 0x0}}, &(0x7f00000002c0)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, &(0x7f0000000380))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000047000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001fc000/0x1000)=nil, &(0x7f000016a000/0x4000)=nil, &(0x7f00000ad000/0x3000)=nil, &(0x7f000017b000/0x3000)=nil, &(0x7f00000fb000/0x1000)=nil, &(0x7f000006e000/0x1000)=nil, &(0x7f00001b1000/0x2000)=nil, &(0x7f00000cd000/0x2000)=nil, &(0x7f0000000180)="bfa18ebaf99d3985f9eea19cb057cea0ef48a048c66f09869af20cd1f3dc08fdf52671a0e4a5c06ff0879507865f2c7167ee7689a6ff38414ef34739ef595214c7ab1edf11396d6c749dccf4e43a6b9a93ee7b409e", 0x55, r0}, 0x68)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xa6003, 0x0)
pipe(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r3)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)="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", 0x161}], 0x1}, 0x4000)
r7 = socket$kcm(0x2, 0x5, 0x84)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x78, &(0x7f0000000040)=r8, 0x4)
ioctl$XFS_IOC_FSGEOMETRY(0xffffffffffffffff, 0x8100587e, &(0x7f0000000500))
ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, &(0x7f0000000340)={r8})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x10000)
sendmsg$nl_route(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="40de9b98ba931dd99f7100685e75d543c3325b76af840ab5c71b261f75f513eb694393833b6ed0a1259b990ada7ff2e89c5faf50220b0bbd5377b1ee4c290f6086ae95f26764980e6618f7e6f78fb1e62b6cc61af4147596ded3bab50e25976af001f93994b0c261ca16809f3ae152521dafd973", 0x74}], 0x1}}], 0x1, 0x8000)
ftruncate(r2, 0x1ffffff)
ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1})

11.340912744s ago: executing program 0 (id=7568):
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143a02)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
userfaultfd(0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0}], 0x2})
io_uring_enter(r0, 0x4d10, 0x2, 0x4, 0x0, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000006409040000010300030009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x634, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0x56, 0xe1, 0x55, 0x20, 0x1740, 0x615, 0x73a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x622, 0x2, 0x8, 0xc, 0x0, 0x9, "", [{{0x9, 0x4, 0x4c, 0xf9, 0xc, 0x3a, 0x56, 0x16, 0x2, [@uac_as={[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf7, 0x4, 0x1, 0x8, '&'}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x1, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xd, 0x3, 0x9, 0x58, "2f20a31b"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfff, 0x5, 0xd, "de8980"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x4, 0x97, 0x0, "c4b3"}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "02b20c9b8221"}, {0x5, 0x24, 0x0, 0xe3f}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x0, 0x3567, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x22}, [@country_functional={0x8, 0x24, 0x7, 0xfd, 0x200, [0x9]}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x57f}]}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x10, 0xc, 0xf9, [@generic={0x28, 0x24, "a52bc66058371d81e4212323a1fedfeb4226b7e16923d0268e04424d31e30111e353c8f26362"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x84, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0xfd, 0xaf, 0x9, [@generic={0xf8, 0x11, "c2e770325df31447bb827a3a7204cd689ce45f67eb94396201b6afc04b7923377cbd518ba234a82282c55b79c626059640c6cec95b48547fdea7b5c80b739df55e496f5771adf88c9c36f93a446dd1156f00b822d53411084db88cf0014c3eb53beaa35952fa0a46aad203e34d923718c76c5fc0ef6b07b0f7cff40cfd956cee8eb41f7e423f43baa62a6479f0a2c6c1e24f174e07e577ba8590f46cab3aca884ea3b75101067b6f77f0ad8fc139ac658a31509bb1e77a986f9a086ec2531b30a4f37cf329eadada2fd778302a588783b6272b0a854fc9a4a53a5392155a60655278c8a14723aaa6fc91a2b6049969095d30a323e325"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x2a7}]}}, {{0x9, 0x5, 0xf, 0x10, 0x20, 0xf, 0x7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x522}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x8, 0x0, 0x3, [@generic={0x60, 0xb, "85cd0fb9474399e341659ee678a2b4fc4d8b7ba1e826a013af6c56dc4d8542f68db0f39430aa2b7e65cce62bc94d542836cdc8a37d4ffa25b123629d0dec8d9bcadd80809fbc4d52f5b765b4ac6906e557edc0900b8f00533544416e4cb6"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xb, 0x100}]}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x3, 0x9, 0x4, [@generic={0x9b, 0xf, "edcdb4720cd9d4bff80ea07ed407e53706d80df6e4ff3b80cf4263ab2115104d43e259e809283edf535729d07d517deac2828aa8781d2810c98595d68514d462e971409b44794c8223ca3e2161c33d6ec894833a784dbb1c9dc5aea35d2f85e139d0fc20c253f23e28a6fd664ae2d97d1ca306aa4b00bab9a63896f2453ce2e8cfc669088e120779e25b380345e8a5700d40fc62ecc61946ad"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x7, 0x0, [@generic={0x7f, 0x21, "d32a390c90be9a91abf24f5806bc00ef9e989294eedd928a4d0caecd0da5878724fd92fae945da02b7a3533a0123a61ed6711715c4306e2ec9851ff81d330f6724faffc4d745e694bc2ae73fc69d701b9686de7b433445863a4a295e3c2fbc817da6a1e07cb9371b6c25c3be56d40cefea7d1b5b8a1261b0c2967a8334"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x10, 0x7, 0x0, 0x48, [@generic={0x86, 0x3f, "20b15c7406faa809ac6e3b7f38a79750c59a5c664270c178472df355bc21eba74709f9662532cc003befeceecc72753e0bd230364476cd9e74e9fed24d8ce6770bbb78636f000cdd33b47e96ed89b004dae85f1d8ae5f562434fd9d799a5e4704bfd1dbcfdd8478fbd8d727ca573ff002f926af10c03098b6a3f81b834028dffe0295a33"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x6, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7}]}}, {{0x9, 0x5, 0xb, 0xc, 0x10, 0x4, 0x2, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0xe9, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x800}]}}]}}, {{0x9, 0x4, 0xa2, 0xd6, 0x5, 0xff, 0xff, 0xff, 0x9, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "45bef861d5"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x40000000, 0xffff, 0xe06, 0x4}, {0x6, 0x24, 0x1a, 0x72, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x1e, 0xfe, 0x2, 0xffff, 0x9}, @dmm={0x7, 0x24, 0x14, 0x1, 0x8b88}, @mbim={0xc, 0x24, 0x1b, 0x401, 0xb, 0x80, 0x9, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x503, 0xfa, 0xfff7}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x9, 0x9, 0x3, 0x1f, 0x6}, @mdlm_detail={0x7a, 0x24, 0x13, 0xf, "9a82d9bd8be43c89b6d3dc687baedaa9559e7a28f1da3e8ac456226657aee705c3bd02ffe967658e7c3d7c313b9c5bad216bdba20cf57368ea5235e911a70c1ea0f883b1af0f3b369fd45aa056d85fb21ad5ed94f8828e64c22528112915d8b54372561fee75ef331e8d2d00b568b37045701669a832"}]}], [{{0x9, 0x5, 0x80, 0x0, 0x440, 0x7a, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x3}]}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x80, 0x0, 0xf3, [@generic={0x22, 0x1, "fb3ad6e217d206d37826ee83d80e02e1f0a986a8b839be80ef14a3d4dba7fe1d"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0xb6, 0x4, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x7, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x81}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x8a, 0xff, 0x0, [@generic={0x8f, 0xd, "37a0cbc878db8c215ff5c224760b4a2b66355e4db7ccbc23d61fd1581009eaf00bb27345dfd6f34afe23a44ed3a508ab78585c5c6459169740fa26d0d0c824b88d86f8f94121e3f70f9085a5e504312b92f6e0d6f79d7532c87375c13cdf48ad7dffb13952b2f5564534a75505a80f18f38e74436970cb8b916bb10f5ccbe99facbcffb662be21f6f900d38317"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x5}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x2f, 0x7, 0x80, 0x10, 0x1e}, 0xda, &(0x7f0000000280)={0x5, 0xf, 0xda, 0x1, [@generic={0xd5, 0x10, 0xa, "1914ed93c4dd43c74fa867347831e4f49e0ba7272fc2b709a98937fb29c244d60afa9e0c8b2f90f775494d4a960a3d178a85c4a8446a8eed7248e9fa924dec33537d9816d35eac76acf55bd37353fe453b7e6b321156712d6ba941c96a648d1bcd6beccc8c886674fbb631c1510ea0cebb79040d2f2d445efec9da2141f73d69578a8c2a6be2098e2bf4c36c1c80c8ff2dc75a3969e6b1d3e3ee8a55240f9bf295812f4c657f1918f228069f3ea135524d7460a8f4032f99cd565bc63be15ffbd3df9b78ee467e73c7aa31b6d3ab4ca45e64"}]}, 0x1, [{0x8e, &(0x7f0000000380)=@string={0x8e, 0x3, "052f352383bd8e56c57b8f3dc6074b31909e3a20a37691f8be7220b4edd7f762a9d41b5e1125783f54cb23787aee721a0c2a84496256ceb037813b5524d3fd38053dbdcf1a8095dd043075b51ab005087f07c18fac1bdbbde0217a826b0c5c27d1e402396da215ef7a913047f3942de3303c71c7df1d969f34d020f781a80f21bebcfce3ec1ce5174c617e71"}}]})
syz_usb_control_io$printer(r4, &(0x7f0000000500)={0x14, &(0x7f0000000480)={0x20, 0x22, 0x5b, {0x5b, 0xf, "2ddb496a9764363bab9727a9fb57e01edf245b0c5c017aec096f19f678ea81ec8f5914d9575bf8ca6a3795bc509d7a0ac2f7bbbed3fa3cc869ef72e6df8053f0b353be209ea15ffb9a068e68e4b55bcfc4d3f8be86e4e1be34"}}, &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000e40)={0x34, &(0x7f0000000540)={0x40, 0xe, 0x1, "90"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000600)={0x0, 0x8, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0xdb, {0xd9, "d5726d5d51da9fb62daf18bafa698afeb11f9ee6542e9373c81a10dcdafd76c21c794d718921748267c279f2b9bf19a07a744029df8e4094d41cc08a75576bd31e76aee905c8f4c0bf256a046bc7c2077e00a7c7ad6a21f346c1026f3859b94d9ecbf9fd838bd2a0ab37e10443b949beb3bb5febd7716624315c1d00dab55708a6a167ea52cd1c21b3221cfd78ff5a650b44c029255192b7e2fb4078c222ac6da49c4aadcd97a4f55693c8d93cc3968f8ebedf9906050a342acf4bc9b072142783afd07bf06264ff9d65a15684bcded2ac0cdc57274f74515f"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x1}})
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x6, 0x7, {0x7, 0x23, "3d91419da5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

10.906845635s ago: executing program 3 (id=7569):
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x6, 0xffffffff}, 0x0)
r3 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x34524742, 0x400ffff}})
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
socket(0x10, 0x3, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r6=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = syz_open_dev$dri(0x0, 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0})
r8 = openat$drirender128(0xffffff9c, &(0x7f0000000300), 0xe0000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000540)={&(0x7f0000000500)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x0, [], [0x10, 0x0, 0xfffffffc, 0x3]})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, &(0x7f0000000040)={r6, 0x0, 0x9, 0x7, 0x1})
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x8923, &(0x7f0000000000)={'bridge_slave_0\x00', 0x1})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87})

9.504358179s ago: executing program 5 (id=7572):
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x144)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'erspan0\x00', @ifru_mtu=0x81}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0)
r4 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044004)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ftruncate(r5, 0x2007ffd)
sendfile(r3, r4, 0x0, 0x1000a3)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e24, @private=0xa010100}, 0x2a1, 0x0, 0x0, 0x0, 0xcb, &(0x7f0000000240)='hsr0\x00', 0x8, 0x7fffffffffffffff, 0x101})
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000100)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x2c}}, 0x800c000)

9.389547586s ago: executing program 3 (id=7573):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="c19ef8d7917a707225f7e7dc1f29ea4546d1edc0f4c0832456b666c5cc17c6ea3b11ab2027bed2a37e3654b4523bb078a82160d357644c90dc5b065defbe9acafb23f179ecc434d78e9d80b4073fb996bd3557000682a6e6e757ac3c1b697f309522cdb995016f97b0447151ac4bf1543a6df53a7bfb883b3de2c388f4ae32eeb509878e030d6ef3807e8d5edbf97a95088fd56ccc7298a406b2d3b5fb4effed5a7839665464dd", @ANYRESDEC=r3], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0)
r14 = syz_open_dev$hidraw(&(0x7f0000000140), 0x5, 0xc000)
ioctl$HIDIOCGFEATURE(r14, 0xc0404807, &(0x7f0000000300)={0x6, "91219988bf5934c1e0081c0b597c35239fc0ed5b84d8a6656b60a06a52f86f07c0591545c95101f6ae96ea8bd82cc2bec481e83afdd3efbd530c1bc706b3c9e4"})

7.896666348s ago: executing program 0 (id=7577):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180))
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f00000002c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback={0xfc}, 0x629a}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000180)="19c4", 0x4d0}], 0x1}}], 0x1, 0x3404c8d4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f00000002c0)=@ethtool_flash={0x33, 0x400, './file0\x00'}})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002840), 0x41)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
writev(r5, &(0x7f0000003c80)=[{&(0x7f0000002900)="d2", 0x1}, {0x0}], 0x100000000000005f)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r7, 0x4611, 0x3)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x7bd6fdd9d90249fd)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x240088c0)
r9 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r9, 0x6, 0x11, &(0x7f0000000200)=0x79, 0x4)
bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8)

7.361495874s ago: executing program 2 (id=7579):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030113030303030303030303030303430393300bc8ae2c787d725d668ed2339ace784b8b4e01534a055fe2870f1761b45303115f5a87ea0d63ac71b82100a296e08bb4b99f5cf9198ef4543b68f08fe5f0bfa60801cd54edf811fe3ff4196915fbd27"], 0x2a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r5, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x4048001)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="20df090000000000026c0000", @ANYRES32=r9, @ANYBLOB="08000200ac141400"], 0x20}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000260001000064b0000011100000014000200fe8000000000000000000000000000aa00"/48], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)

7.273215113s ago: executing program 1 (id=7580):
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff"], 0x0, 0x6, 0x2b, &(0x7f00000000c0)=""/43, 0xe8b7a8a4c8ddac32, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

6.229490848s ago: executing program 1 (id=7581):
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0xfffffffc}, &(0x7f0000000200)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03"], 0x2000, 0x0) (fail_nth: 3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000fdffffff000000000200020118050000646c6c2500000000002020207b1af8ff"], 0x0, 0x6, 0x2b, &(0x7f00000000c0)=""/43, 0xe8b7a8a4c8ddac32, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

5.830652949s ago: executing program 5 (id=7582):
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffd)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
poll(0x0, 0x0, 0x72)
pipe(&(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x0)
readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/6, 0x6}], 0x1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180))
socket$packet(0x11, 0x3, 0x300)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706006e652043617074557265272030303030303034303030303030303030303030300a20"], 0xb8)
r5 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup3(r5, r4, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x80000)
sendmmsg$unix(r7, 0x0, 0x0, 0x0)

5.759752401s ago: executing program 3 (id=7583):
fsopen(&(0x7f0000000000)='cgroup\x00', 0x0)
syz_usb_connect(0x2, 0xa24, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0})

5.303677154s ago: executing program 0 (id=7584):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x150, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xa}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x42c5}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7e}, {0x6}, {0x5}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xca23}, {0x6, 0x16, 0x100}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xb52}, {0x8, 0xb, 0xfd7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0xf}, {0x5}, {0x6, 0x11, 0xa}, {0x8, 0xb, 0x8000}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000340)={{0x8, 0xf, 0x3, 0xffa}, 'syz0\x00', 0x3e})
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r3, 0x5501)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffee0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)
r6 = socket$kcm(0x29, 0x2, 0x0)
r7 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r6, r7, 0x0, 0x8000fb00)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa728780444a6165, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000540)=0x7b1)
syz_open_dev$sg(0x0, 0x0, 0x8002)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)

5.227172775s ago: executing program 1 (id=7585):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x4100, &(0x7f0000000040)="a1"})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

5.152301769s ago: executing program 2 (id=7586):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000000180001002cbd7000000000000a100000fc02ff00", @ANYRES32, @ANYBLOB="003c883846b0a0553d4d8175a38a995e47053865696f2f0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="cc3a4ac0d0", 0x5}], 0x1)

4.352601577s ago: executing program 1 (id=7587):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in=@empty, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0xff91, @remote}, 0x10)

4.186564466s ago: executing program 1 (id=7588):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0xa, 0x8000, 0x0, 0xd, 0x8, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040001}, 0x4811)
getdents(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = socket(0xa, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000002d00)={0x0, {{0xa, 0x4e22, 0x4001000, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x5, @loopback, 0xae43}}}, 0x108)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}, 0x0, 0x1, [{{0xa, 0x8001, 0x2, @loopback, 0x30000}}]}, 0x110)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000000140))
sendfile(r2, r5, 0x0, 0x20000023896)
r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))

3.060439391s ago: executing program 2 (id=7589):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x1, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}})
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}})
r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x10100, 0x0, 0xbe}, &(0x7f0000002000)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r3, 0x48eb, 0x1158, 0x2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
r6 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]})
msgget$private(0x0, 0x4a0)

2.916747692s ago: executing program 5 (id=7590):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x2, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x4, 0xfffffffffffffffd, 0x63, 0x8, 0x100000001, 0xfffffffffffffffa, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0xfff, 0x6, 0xff, 0x1, 0x4f51, 0x100000001, 0x37c7, 0xb, 0xbb33, 0xfffffffffffffffe, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x103, 0xc1be, 0xffffffff, 0x8000000000000000, 0x89, 0x7ffd, 0xffff, 0x72, 0x9, 0xffffffffffffffff, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0x7, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e69303, 0x8, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x1, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0x2, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x3, 0x0, 0xb, 0x1, 0xffff, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x1, 0x6, 0xf, 0x7, 0x0, 0x9, 0xfff, 0x3c, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[])
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x6, 0x2, 0x4}}, 0x28)

2.764136366s ago: executing program 0 (id=7591):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff000000000000000000000000840005000a010100000000000000000000000000000000002b0000000a000000ac1414aa0000000000000000000000000000000002000000040000007f00000000000000fc020000000000000000000000000000000000002b0000000200000000000000000000000000ffffac1414bb0000000001f4ff"], 0x13c}}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040)
sendmmsg(r5, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)='=', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)='5', 0x1}], 0x1, &(0x7f0000002c00)=[{0x10, 0x1, 0x7ff}], 0x10}}], 0x2, 0x404c044)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv2(r7, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"29f021c7fcab9fb166ddf35ef709b5d2600bde5856b41a5366efec6999fffad8", r7})
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
writev(r8, &(0x7f0000006280)=[{&(0x7f0000000b80)="a201ae09f1bc04", 0x7}], 0x1)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYRES16=r6], 0x2c}}, 0x20008000)

2.4226846s ago: executing program 3 (id=7592):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000001e40), 0x0, 0x100, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$video(0x0, 0x1d24, 0x0)
r4 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000000001000"], 0x14}, 0x1, 0xffff000000000000}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c)
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]})
sendfile(r8, r8, 0x0, 0x2000fb)
preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
readv(r5, &(0x7f0000000340)=[{0x0}], 0x1)
ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000000))
syz_usb_connect(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1}}]}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1.770846208s ago: executing program 1 (id=7593):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x10000, 0x8822d55593a2179}, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="c19ef8d7917a707225f7e7dc1f29ea4546d1edc0f4c0832456b666c5cc17c6ea3b11ab2027bed2a37e3654b4523bb078a82160d357644c90dc5b065defbe9acafb23f179ecc434d78e9d80b4073fb996bd3557000682a6e6e757ac3c1b697f309522cdb995016f97b0447151ac4bf1543a6df53a7bfb883b3de2c388f4ae32eeb509878e030d6ef3807e8d5edbf97a95088fd56ccc7298a406b2d3b5fb4effed5a7839665464dd", @ANYRESDEC=r3], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}}, 0x0)
r14 = syz_open_dev$hidraw(&(0x7f0000000140), 0x5, 0xc000)
ioctl$HIDIOCGFEATURE(r14, 0xc0404807, &(0x7f0000000300)={0x6, "91219988bf5934c1e0081c0b597c35239fc0ed5b84d8a6656b60a06a52f86f07c0591545c95101f6ae96ea8bd82cc2bec481e83afdd3efbd530c1bc706b3c9e4"})

1.753802316s ago: executing program 2 (id=7594):
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r3, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r4, 0x0, r3})
r5 = creat(&(0x7f0000000280)='./file0\x00', 0x96ab9c7d55edd554)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4601079704080000000000000002000600010000004300000038000000c0010000030000000100200002"], 0x78)
close(r5)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r6 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000674000/0x3000)=nil)
shmat(r6, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$IPC_RMID(r6, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
clock_gettime(0x0, &(0x7f0000001300)={<r8=>0x0, <r9=>0x0})
recvmmsg$unix(r7, &(0x7f00000012c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000001280)=[{&(0x7f0000001380)=""/211, 0xd3}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, &(0x7f0000001340)={r8, r9+10000000})
futex(&(0x7f000000cffc)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000240)=0x2, 0x5000000)
r10 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

840.021186ms ago: executing program 5 (id=7595):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, &(0x7f0000000340)=[{0x10, 0x6, 0xffffffffffffffff}, {0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffff}], 0x2, 0xbff, 0x1e, 0x0, 0x2c, 0x5f})
getsockopt$bt_hci(r0, 0x84, 0x7f, 0x0, &(0x7f0000001180)=0x59)

723.169216ms ago: executing program 2 (id=7596):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x202, 0x2)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x400, 0x16a)
dup(r1)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x10001, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (fail_nth: 4)

391.066633ms ago: executing program 0 (id=7597):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x1800, 0x0)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/228, 0xe4}], 0x1, 0x7, 0x9)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_open_dev$video(0x0, 0x3, 0x2000)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff)
write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000207144e230005020000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f0000000000000000000000000000000000000000000000000000000000000000000000001c2508000000000002000000000000000b000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fbffffff0000000029bd700004350000020001002000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1bba49af4839f324f02611c38a40f1219eaa3cfe581b30221cbb65066c2493fae53d81c298601f733a076df5d689973fc7a65ea192e12adddb7eefb0093f137d5261c359d2bc5b93819680b69ef7a7f5a3b15a0dc943642641805bd80d0998b272d816d2f21ab80b991a7878a52e0144d55f4b03f22a5a8db29d80206e411203a5eddb1ab07bef5779d5555f5676c3c1e8d7ce0891151d0c3edcedd57a722eeacfcdb0501910f3a598c86b3c6010f57888c835223aee59449ead4e73d8f1c780091b0309cbc85c78a01e6b936e671552540526c2f962c93ec631065137826695c244bc77920022fd5c0bf9932b5dc50f02decdbf8722c07071f625e7c99533f2be57da847cc75f46972763c0f1d41644dd40000000000000000b3e1e4ce526b0a1d32591ce07d576e2c8362d1d826a651df25a1a1469e3d366a88966ee9302be8"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
syz_emit_ethernet(0x27f, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe72)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'U+', 0x7fffffff}, 0x16, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x21, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}})
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f00000001c0)={0x0, 'vlan1\x00', {0xfffffffe}, 0x7f})
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000003c0)=0xffffffff, 0x4)
sendto$inet6(r1, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

0s ago: executing program 2 (id=7598):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6, 0x635b, 0x0, 0x7, 0xbba1, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x8000, 0xe58, 0xe4a, 0xfffd, 0xe7}}, &(0x7f0000000300)=0xb0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x2, 0x1}, {0x53, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x150, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_VF_PORTS={0x128, 0x18, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '\'!!*-*\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "68553e8228f08e46f9821f7d55c8b1d4"}, @IFLA_PORT_PROFILE={0x15, 0x2, 'cbc-serpent-sse2\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "de55e0fb557839e0309102b01d4dff83"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5561eccf1d6183ed95602fbf29fa20ce"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "39a487be5789189b46a3f2604a59fe49"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ca7e9e1ad32676d504373e65e3baf0b3"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x26, 0x2, '/proc/sys/fs/binfmt_misc/register\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x6}, @IFLA_PORT_PROFILE={0x6, 0x2, '}\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x30}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "85edc24389d240ef024eab126443e1a6"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}]}]}, @IFLA_NET_NS_FD={0x8}]}, 0x150}}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x31)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r4, &(0x7f0000000180)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7fffffffffffffff, 0x3a, 'skcipher\x00', 0x3a, '/dev/input/event#\x00', 0x3a, './file0', 0x3a, [0x46, 0x46, 0x46, 0x50, 0x50, 0x46, 0x4f, 0x4f, 0x4f]}, 0x4b)
r5 = accept4(r3, 0x0, 0x0, 0x0)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
fcntl$lock(0xffffffffffffffff, 0x410, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x800, &(0x7f000031e000/0x4000)=nil, 0x3)
ioctl$FBIOBLANK(r6, 0x4611, 0x2)
sendmmsg$alg(r5, &(0x7f0000000400), 0x0, 0x0)
recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000340)=""/71, 0x47}], 0x2}, 0x40000000)

kernel console output (not intermixed with test programs):

sb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 2231.748617][T11691] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 2231.840319][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2231.857334][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2231.867452][T15995] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2231.884460][T15995] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[ 2231.893701][T15995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2231.903379][T11687] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[ 2231.913486][T11691] usb 4-1: Using ep0 maxpacket: 32
[ 2231.924679][T15995] usb 2-1: config 0 descriptor??
[ 2231.929862][T11687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2231.937972][T11687] usb 3-1: Product: syz
[ 2231.949139][T11687] usb 3-1: Manufacturer: syz
[ 2231.958432][T11691] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 2231.966732][T11691] usb 4-1: config 0 has no interface number 0
[ 2231.975008][T11687] usb 3-1: SerialNumber: syz
[ 2231.988968][T11687] usb 3-1: config 0 descriptor??
[ 2231.999840][T11691] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2232.010272][T11687] hub 3-1:0.0: bad descriptor, ignoring hub
[ 2232.016593][T11687] hub 3-1:0.0: probe with driver hub failed with error -5
[ 2232.024182][T11691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2232.037398][T11687] usbsevseg 3-1:0.0: USB 7 Segment device now attached
[ 2232.044706][T11691] usb 4-1: Product: syz
[ 2232.051268][T11691] usb 4-1: Manufacturer: syz
[ 2232.056029][T11691] usb 4-1: SerialNumber: syz
[ 2232.090638][T11691] usb 4-1: config 0 descriptor??
[ 2232.108353][T11691] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2232.312103][T11691] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2232.324621][T11691] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2232.360368][T15995] steelseries 0003:1038:1410.00A3: unknown main item tag 0x1
[ 2232.367852][T15995] steelseries 0003:1038:1410.00A3: item 0 2 0 9 parsing failed
[ 2232.379580][T15995] steelseries 0003:1038:1410.00A3: parse failed
[ 2232.386070][T15995] steelseries 0003:1038:1410.00A3: probe with driver steelseries failed with error -22
[ 2232.521410][  T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2232.559343][  T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2232.570157][  T389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2232.603455][  T389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2232.623130][T15995] usb 2-1: USB disconnect, device number 110
[ 2232.697377][  T396] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 2232.854855][  T400] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7294'.
[ 2233.686730][  T409] syz_tun: entered allmulticast mode
[ 2233.698396][  T409] syz_tun: left allmulticast mode
[ 2233.720273][  T409] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7299'.
[ 2233.978612][T21857] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 2234.141531][T21857] usb 2-1: Using ep0 maxpacket: 16
[ 2234.151675][T21857] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 2234.163975][T21857] usb 2-1: config 0 has no interface number 0
[ 2234.173154][T21857] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2234.193214][T21857] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2234.215309][T21857] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2234.224975][T21857] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2234.233508][T21857] usb 2-1: Product: syz
[ 2234.238002][T21857] usb 2-1: SerialNumber: syz
[ 2234.250432][T21857] usb 2-1: config 0 descriptor??
[ 2234.265648][T21857] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 2234.275760][T21857] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input240
[ 2234.543522][T11687] usb 3-1: USB disconnect, device number 9
[ 2234.551381][T11687] usbsevseg 3-1:0.0: USB 7 Segment now disconnected
[ 2235.032516][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2235.041864][T11687] usb 4-1: USB disconnect, device number 2
[ 2235.053134][T11687] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2235.115665][T11687] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2235.157090][T11687] quatech2 4-1:0.51: device disconnected
[ 2235.176300][  T427] FAULT_INJECTION: forcing a failure.
[ 2235.176300][  T427] name failslab, interval 1, probability 0, space 0, times 0
[ 2235.206655][  T427] CPU: 0 UID: 0 PID: 427 Comm: syz.3.7305 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2235.206689][  T427] Tainted: [L]=SOFTLOCKUP
[ 2235.206705][  T427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2235.206719][  T427] Call Trace:
[ 2235.206728][  T427]  <TASK>
[ 2235.206738][  T427]  dump_stack_lvl+0xe8/0x150
[ 2235.206776][  T427]  should_fail_ex+0x412/0x560
[ 2235.206814][  T427]  should_failslab+0xa8/0x100
[ 2235.206846][  T427]  __kmalloc_noprof+0xe8/0x760
[ 2235.206872][  T427]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2235.206909][  T427]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2235.206946][  T427]  genl_family_rcv_msg_doit+0xd9/0x330
[ 2235.206974][  T427]  ? __asan_memcpy+0x40/0x70
[ 2235.206999][  T427]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2235.207036][  T427]  ? apparmor_capable+0x126/0x170
[ 2235.207064][  T427]  ? bpf_lsm_capable+0x9/0x20
[ 2235.207094][  T427]  ? security_capable+0x7e/0x2c0
[ 2235.207131][  T427]  genl_rcv_msg+0x61c/0x7a0
[ 2235.207164][  T427]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2235.207190][  T427]  ? __pfx_ethnl_act_cable_test+0x10/0x10
[ 2235.207297][  T427]  ? __lock_acquire+0x6b5/0x2cf0
[ 2235.207337][  T427]  netlink_rcv_skb+0x232/0x4b0
[ 2235.207373][  T427]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2235.207415][  T427]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2235.207468][  T427]  ? down_read+0x272/0x2e0
[ 2235.207497][  T427]  ? genl_rcv+0xd/0x40
[ 2235.207524][  T427]  genl_rcv+0x28/0x40
[ 2235.207548][  T427]  netlink_unicast+0x80f/0x9b0
[ 2235.207588][  T427]  ? __pfx_netlink_unicast+0x10/0x10
[ 2235.207621][  T427]  ? netlink_sendmsg+0x650/0xb40
[ 2235.207645][  T427]  ? skb_put+0x11b/0x210
[ 2235.207673][  T427]  netlink_sendmsg+0x813/0xb40
[ 2235.207711][  T427]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2235.207736][  T427]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2235.207771][  T427]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2235.207799][  T427]  ____sys_sendmsg+0x972/0x9f0
[ 2235.207835][  T427]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2235.207871][  T427]  ? import_iovec+0x73/0xa0
[ 2235.207900][  T427]  ___sys_sendmsg+0x2a5/0x360
[ 2235.207933][  T427]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2235.207996][  T427]  ? __fget_files+0x2a/0x420
[ 2235.208028][  T427]  ? __fget_files+0x3a0/0x420
[ 2235.208073][  T427]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2235.208102][  T427]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2235.208139][  T427]  ? __pfx_ksys_write+0x10/0x10
[ 2235.208175][  T427]  do_syscall_64+0x14d/0xf80
[ 2235.208201][  T427]  ? trace_irq_disable+0x3b/0x150
[ 2235.208232][  T427]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2235.208256][  T427]  ? clear_bhb_loop+0x40/0x90
[ 2235.208283][  T427]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2235.208306][  T427] RIP: 0033:0x7efd5599c799
[ 2235.208328][  T427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2235.208347][  T427] RSP: 002b:00007efd56797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2235.208372][  T427] RAX: ffffffffffffffda RBX: 00007efd55c15fa0 RCX: 00007efd5599c799
[ 2235.208388][  T427] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[ 2235.208402][  T427] RBP: 00007efd56797090 R08: 0000000000000000 R09: 0000000000000000
[ 2235.208416][  T427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2235.208429][  T427] R13: 00007efd55c16038 R14: 00007efd55c15fa0 R15: 00007efd55d3fa48
[ 2235.208463][  T427]  </TASK>
[ 2235.888085][  T431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2235.914632][  T431] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2236.110920][T11687] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2236.188616][T21857] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 2236.348675][T21857] usb 3-1: Using ep0 maxpacket: 32
[ 2236.363531][T21857] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2236.388691][T21857] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 2236.408995][T21857] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2236.440702][T21857] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2236.453163][T21857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2236.478609][T21857] usb 3-1: Product: syz
[ 2236.482931][T21857] usb 3-1: Manufacturer: syz
[ 2236.502206][T21857] usb 3-1: SerialNumber: syz
[ 2236.521046][T21857] usb 3-1: config 0 descriptor??
[ 2236.567485][    C1] cm109_urb_ctl_callback: 46 callbacks suppressed
[ 2236.567513][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.582021][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.589366][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.596594][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.603979][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.611652][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.619215][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.626590][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.634109][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.641608][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2236.662490][  T336] usb 2-1: USB disconnect, device number 111
[ 2236.662551][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2236.686446][  T444] erspan0: left allmulticast mode
[ 2236.697438][  T336] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2236.828003][  T444] bridge0: port 3(syz_tun) entered blocking state
[ 2236.834693][  T444] bridge0: port 3(syz_tun) entered forwarding state
[ 2236.863745][  T448] ALSA: seq fatal error: cannot create timer (-22)
[ 2236.882802][  T444] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2236.893776][  T444] 8021q: adding VLAN 0 to HW filter on device team0
[ 2236.917115][  T448] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[ 2236.924200][  T448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2236.936950][T21857] gs_usb 3-1:0.0: Configuring for 154 interfaces
[ 2236.953921][  T444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2237.034740][  T448] vhci_hcd vhci_hcd.0: Device attached
[ 2237.273968][T11687] usb 35-1: new low-speed USB device number 4 using vhci_hcd
[ 2237.342665][  T435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2237.357834][  T435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2237.577769][T21857] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 2237.749557][T21857] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[ 2237.780775][T21857] usb 3-1: USB disconnect, device number 10
[ 2238.329840][  T449] vhci_hcd: connection reset by peer
[ 2238.351033][T26250] vhci_hcd vhci_hcd.1: stop threads
[ 2238.356294][T26250] vhci_hcd vhci_hcd.1: release socket
[ 2238.388743][T26250] vhci_hcd vhci_hcd.1: disconnect device
[ 2240.198785][T16001] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 2240.249777][  T498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2240.324382][  T498] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7323'.
[ 2240.396284][  T499] pim6reg: left allmulticast mode
[ 2240.401888][T16001] usb 4-1: Using ep0 maxpacket: 32
[ 2240.409344][T16001] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 2240.417603][T16001] usb 4-1: config 0 has no interface number 0
[ 2240.424301][T16001] usb 4-1: config 0 interface 12 has no altsetting 0
[ 2240.439208][T16001] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2240.449793][T16001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2240.457839][T16001] usb 4-1: Product: syz
[ 2240.476161][T16001] usb 4-1: Manufacturer: syz
[ 2240.484040][T16001] usb 4-1: SerialNumber: syz
[ 2240.496294][  T501] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7322'.
[ 2240.578436][T16001] usb 4-1: config 0 descriptor??
[ 2240.768658][  T336] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2240.918564][  T336] usb 6-1: Using ep0 maxpacket: 16
[ 2240.938275][  T336] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 2240.948104][  T336] usb 6-1: config 0 has no interface number 0
[ 2240.954961][  T336] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2240.970713][  T336] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2240.985067][  T336] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2241.010515][  T336] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2241.034210][  T336] usb 6-1: Product: syz
[ 2241.039932][  T336] usb 6-1: SerialNumber: syz
[ 2241.086058][  T336] usb 6-1: config 0 descriptor??
[ 2241.103662][  T336] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 2241.118798][  T336] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input241
[ 2242.048733][  T336] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 2242.135337][  T513] netlink: 92 bytes leftover after parsing attributes in process `syz.1.7328'.
[ 2242.213949][  T336] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[ 2242.223208][  T336] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129
[ 2242.236176][  T336] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[ 2242.255610][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2242.265628][  T336] usb 3-1: Product: syz
[ 2242.270663][  T336] usb 3-1: Manufacturer: syz
[ 2242.275459][  T336] usb 3-1: SerialNumber: syz
[ 2242.284359][  T336] usb 3-1: config 0 descriptor??
[ 2242.408953][T11687] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 2242.426703][T16001] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 2242.434439][T16001] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 2242.453337][T16001] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2242.590774][T16001] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 2243.039109][T16001] usb 4-1: USB disconnect, device number 3
[ 2243.194596][    C1] cm109_urb_ctl_callback: 49 callbacks suppressed
[ 2243.194628][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.208621][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.216087][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.224784][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.235558][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.245144][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.252380][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.260563][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.267818][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.275006][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2243.290577][  T336] mos7840 3-1:0.0: required endpoints missing
[ 2243.307669][  T336] usb 3-1: USB disconnect, device number 11
[ 2243.314239][T31708] usb 6-1: USB disconnect, device number 20
[ 2243.320262][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2243.348003][T31708] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2243.388599][  T523] syzkaller0: entered promiscuous mode
[ 2243.397223][  T523] syzkaller0: entered allmulticast mode
[ 2243.412469][  T523] tipc: Started in network mode
[ 2243.417649][  T523] tipc: Node identity ea1a6477cd9b, cluster identity 4711
[ 2243.427941][  T523] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2243.551193][  T522] tipc: Resetting bearer <eth:syzkaller0>
[ 2243.606258][  T522] tipc: Disabling bearer <eth:syzkaller0>
[ 2243.895567][  T531] syzkaller0: entered promiscuous mode
[ 2243.933703][  T531] syzkaller0: entered allmulticast mode
[ 2244.035871][  T542] syzkaller1: entered promiscuous mode
[ 2244.045722][  T542] syzkaller1: entered allmulticast mode
[ 2244.172352][  T548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2244.186297][  T550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7337'.
[ 2244.203798][  T548] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7336'.
[ 2244.442004][  T560] FAULT_INJECTION: forcing a failure.
[ 2244.442004][  T560] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2244.469362][  T560] CPU: 1 UID: 0 PID: 560 Comm: syz.0.7340 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2244.469399][  T560] Tainted: [L]=SOFTLOCKUP
[ 2244.469408][  T560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2244.469421][  T560] Call Trace:
[ 2244.469430][  T560]  <TASK>
[ 2244.469440][  T560]  dump_stack_lvl+0xe8/0x150
[ 2244.469476][  T560]  should_fail_ex+0x412/0x560
[ 2244.469512][  T560]  _copy_from_user+0x2d/0xb0
[ 2244.469538][  T560]  ___sys_sendmsg+0x1c6/0x360
[ 2244.469570][  T560]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2244.469628][  T560]  ? __fget_files+0x2a/0x420
[ 2244.469660][  T560]  ? __fget_files+0x3a0/0x420
[ 2244.469702][  T560]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2244.469730][  T560]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2244.469765][  T560]  ? __pfx_ksys_write+0x10/0x10
[ 2244.469795][  T560]  ? __secure_computing+0xe1/0x2a0
[ 2244.469824][  T560]  do_syscall_64+0x14d/0xf80
[ 2244.469849][  T560]  ? trace_irq_disable+0x3b/0x150
[ 2244.469881][  T560]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2244.469904][  T560]  ? clear_bhb_loop+0x40/0x90
[ 2244.469931][  T560]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2244.469953][  T560] RIP: 0033:0x7f75f759c799
[ 2244.469975][  T560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2244.469999][  T560] RSP: 002b:00007f75f853a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2244.470023][  T560] RAX: ffffffffffffffda RBX: 00007f75f7815fa0 RCX: 00007f75f759c799
[ 2244.470040][  T560] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011
[ 2244.470054][  T560] RBP: 00007f75f853a090 R08: 0000000000000000 R09: 0000000000000000
[ 2244.470068][  T560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2244.470082][  T560] R13: 00007f75f7816038 R14: 00007f75f7815fa0 R15: 00007f75f793fa48
[ 2244.470116][  T560]  </TASK>
[ 2244.831274][  T566] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7341'.
[ 2245.009246][  T336] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 2245.138595][T31708] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2245.178893][  T336] usb 2-1: Using ep0 maxpacket: 32
[ 2245.187000][  T336] usb 2-1: config 139 has an invalid interface number: 49 but max is 0
[ 2245.205929][  T336] usb 2-1: config 139 has no interface number 0
[ 2245.217673][  T336] usb 2-1: config 139 interface 49 has no altsetting 0
[ 2245.254680][  T336] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[ 2245.270526][  T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2245.282491][  T336] usb 2-1: Product: syz
[ 2245.286698][  T336] usb 2-1: Manufacturer: syz
[ 2245.297709][  T336] usb 2-1: SerialNumber: syz
[ 2245.318617][T31708] usb 6-1: Using ep0 maxpacket: 16
[ 2245.328998][T31708] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 2245.337061][T31708] usb 6-1: config 0 has no interface number 0
[ 2245.359930][T31708] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2245.385553][T31708] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2245.408118][T31708] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2245.418599][T31708] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2245.426919][T31708] usb 6-1: Product: syz
[ 2245.435041][T31708] usb 6-1: SerialNumber: syz
[ 2245.453117][T31708] usb 6-1: config 0 descriptor??
[ 2245.472068][T31708] cm109 6-1:0.8: invalid payload size 0, expected 4
[ 2245.491449][T31708] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input242
[ 2245.559757][  T336] radio-usb-si4713 2-1:139.49: Si4713 development board discovered: (10C4:8244)
[ 2245.598200][  T336] radio-usb-si4713 2-1:139.49: probe with driver radio-usb-si4713 failed with error -71
[ 2245.635420][  T336] usbhid 2-1:139.49: couldn't find an input interrupt endpoint
[ 2245.661283][  T336] usb 2-1: USB disconnect, device number 112
[ 2245.994117][  T576] Failed to get privilege flags for destination (handle=0x2:0x400)
[ 2246.468835][  T336] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 2246.618628][  T336] usb 2-1: device descriptor read/64, error -71
[ 2246.858603][  T336] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 2246.885092][  T582] kAFS: unable to lookup cell 'ÿ'
[ 2246.893399][  T582] netlink: 'syz.3.7347': attribute type 12 has an invalid length.
[ 2246.902712][  T582] netlink: 'syz.3.7347': attribute type 12 has an invalid length.
[ 2246.998629][  T336] usb 2-1: device descriptor read/64, error -71
[ 2247.108985][  T336] usb usb2-port1: attempt power cycle
[ 2247.448615][  T336] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 2247.469507][  T336] usb 2-1: device descriptor read/8, error -71
[ 2247.708618][  T336] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 2247.730458][T11687] usb 6-1: USB disconnect, device number 21
[ 2247.731757][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2247.750695][  T336] usb 2-1: device descriptor read/8, error -71
[ 2247.764048][T11687] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2247.859522][  T336] usb usb2-port1: unable to enumerate USB device
[ 2248.109785][  T595] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7352'.
[ 2248.138768][T11687] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2248.308620][T11687] usb 6-1: Using ep0 maxpacket: 8
[ 2248.319313][T11687] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 2248.342888][T11687] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 2248.357882][T11687] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 2248.366466][T11687] usb 6-1: Product: syz
[ 2248.371220][T11687] usb 6-1: Manufacturer: syz
[ 2248.375872][T11687] usb 6-1: SerialNumber: syz
[ 2248.699863][T11687] usb 6-1: palm_os_3_probe - error -110 getting connection information
[ 2248.712109][T11687] visor 6-1:1.0: probe with driver visor failed with error -110
[ 2248.898992][T11687] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2248.919922][  T609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7357'.
[ 2249.069055][T11687] usb 4-1: Using ep0 maxpacket: 32
[ 2249.077487][T11687] usb 4-1: config 139 has an invalid interface number: 49 but max is 0
[ 2249.086370][T11687] usb 4-1: config 139 has no interface number 0
[ 2249.092918][T11687] usb 4-1: config 139 interface 49 has no altsetting 0
[ 2249.102385][T11687] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75
[ 2249.111832][T11687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2249.119861][T11687] usb 4-1: Product: syz
[ 2249.124044][T11687] usb 4-1: Manufacturer: syz
[ 2249.128731][T11687] usb 4-1: SerialNumber: syz
[ 2249.269495][  T336] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 2249.356430][T11687] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244)
[ 2249.375760][T11687] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71
[ 2249.387272][T11687] usbhid 4-1:139.49: couldn't find an input interrupt endpoint
[ 2249.398208][  T616] syz_tun: entered allmulticast mode
[ 2249.405358][T11687] usb 4-1: USB disconnect, device number 4
[ 2249.412348][  T336] usb 3-1: device descriptor read/64, error -71
[ 2249.427931][  T616] syz_tun: left allmulticast mode
[ 2249.435930][  T616] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7359'.
[ 2249.658769][  T336] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 2249.678614][T31708] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2249.788638][  T336] usb 3-1: device descriptor read/64, error -71
[ 2249.828600][T31708] usb 2-1: Using ep0 maxpacket: 16
[ 2249.835622][T31708] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 2249.845633][T31708] usb 2-1: config 0 has no interface number 0
[ 2249.851895][T31708] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2249.863206][T31708] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2249.874823][T31708] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 2249.885327][T31708] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 2249.893598][T31708] usb 2-1: Product: syz
[ 2249.898024][T31708] usb 2-1: SerialNumber: syz
[ 2249.903248][  T336] usb usb3-port1: attempt power cycle
[ 2249.912103][T31708] usb 2-1: config 0 descriptor??
[ 2249.926502][T31708] cm109 2-1:0.8: invalid payload size 0, expected 4
[ 2249.943924][T31708] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input243
[ 2250.248733][  T336] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 2250.277751][  T336] usb 3-1: device descriptor read/8, error -71
[ 2250.519854][  T336] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2250.540465][  T336] usb 3-1: device descriptor read/8, error -71
[ 2250.650403][  T336] usb usb3-port1: unable to enumerate USB device
[ 2250.836914][  T336] usb 6-1: USB disconnect, device number 22
[ 2252.359205][    C1] cm109_urb_ctl_callback: 124 callbacks suppressed
[ 2252.359231][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2252.373001][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2252.380248][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2252.387450][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 2252.389190][T15995] usb 2-1: USB disconnect, device number 117
[ 2252.394428][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 2252.445867][T15995] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 2252.971692][T15995] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 2253.208671][T15995] usb 2-1: Using ep0 maxpacket: 32
[ 2253.648887][T15995] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2253.660687][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 2253.699049][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 2253.738855][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 2253.790886][T15995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 2253.850817][T15995] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 2253.883464][T15995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2253.949261][T15995] usb 2-1: Product: syz
[ 2253.968047][T15995] usb 2-1: Manufacturer: syz
[ 2254.099086][T15995] usb 2-1: SerialNumber: syz
[ 2254.126848][T15995] usb 2-1: config 0 descriptor??
[ 2254.594730][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2254.620235][T15995] input input244: Device does not respond to id packet M
[ 2254.638217][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2254.655396][T15995] input input244: Device does not respond to id packet P
[ 2254.686190][T15995] input input244: Device does not respond to id packet B
[ 2254.841143][  T677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2254.852065][  T680] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7376'.
[ 2255.348719][  T656] fuse: Bad value for 'fd'
[ 2255.397447][   T30] audit: type=1326 audit(1774507417.172:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.450435][   T30] audit: type=1326 audit(1774507417.172:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.678221][   T30] audit: type=1326 audit(1774507417.172:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.864956][T15995] iforce 2-1:0.0: usb_submit_urb failed: -110
[ 2255.874096][T15995] input input244: Device does not respond to id packet N
[ 2255.881565][   T30] audit: type=1326 audit(1774507417.172:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.904164][   T30] audit: type=1326 audit(1774507417.172:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.926808][   T30] audit: type=1326 audit(1774507417.172:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2255.987024][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2255.997061][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2256.009010][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2256.025132][T15995] iforce 2-1:0.0: usb_submit_urb failed: -32
[ 2256.041469][T15995] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input244
[ 2256.060459][   T30] audit: type=1326 audit(1774507417.172:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2256.215881][   T30] audit: type=1326 audit(1774507417.172:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2256.297091][   T30] audit: type=1326 audit(1774507417.172:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2256.373668][  T700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7382'.
[ 2256.388630][   T30] audit: type=1326 audit(1774507417.172:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=655 comm="syz.1.7372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f413d39c799 code=0x7ff00000
[ 2256.726332][T15995] usb 2-1: USB disconnect, device number 118
[ 2258.102962][  T714] ip6gre2: entered promiscuous mode
[ 2258.108233][  T714] ip6gre2: entered allmulticast mode
[ 2258.441030][  T709] cifs: Unknown parameter 'òÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿ
[ 2258.666648][T31708] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[ 2258.857883][  T725] FAULT_INJECTION: forcing a failure.
[ 2258.857883][  T725] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2258.973958][  T725] CPU: 0 UID: 0 PID: 725 Comm: syz.1.7389 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2258.973994][  T725] Tainted: [L]=SOFTLOCKUP
[ 2258.974003][  T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2258.974017][  T725] Call Trace:
[ 2258.974035][  T725]  <TASK>
[ 2258.974046][  T725]  dump_stack_lvl+0xe8/0x150
[ 2258.974084][  T725]  should_fail_ex+0x412/0x560
[ 2258.974122][  T725]  prepare_alloc_pages+0x22a/0x650
[ 2258.974159][  T725]  __alloc_frozen_pages_noprof+0x12f/0x380
[ 2258.974190][  T725]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2258.974224][  T725]  ? __pfx_policy_nodemask+0x10/0x10
[ 2258.974262][  T725]  alloc_pages_mpol+0x232/0x4a0
[ 2258.974297][  T725]  alloc_pages_noprof+0xa8/0x190
[ 2258.974328][  T725]  folio_alloc_noprof+0x1e/0x30
[ 2258.974356][  T725]  filemap_alloc_folio_noprof+0x111/0x470
[ 2258.974387][  T725]  ? __pfx_filemap_alloc_folio_noprof+0x10/0x10
[ 2258.974422][  T725]  __filemap_get_folio_mpol+0x3fc/0xb00
[ 2258.974457][  T725]  aio_setup_ring+0x3be/0xe40
[ 2258.974481][  T725]  ? pcpu_memcg_post_alloc_hook+0xc4/0x580
[ 2258.974520][  T725]  ? __pfx_aio_setup_ring+0x10/0x10
[ 2258.974556][  T725]  ioctx_alloc+0x31f/0x840
[ 2258.974588][  T725]  __se_sys_io_setup+0x7b/0x1d0
[ 2258.974612][  T725]  do_syscall_64+0x14d/0xf80
[ 2258.974635][  T725]  ? trace_irq_disable+0x3b/0x150
[ 2258.974667][  T725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2258.974690][  T725]  ? clear_bhb_loop+0x40/0x90
[ 2258.974718][  T725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2258.974740][  T725] RIP: 0033:0x7f413d39c799
[ 2258.974761][  T725] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2258.974780][  T725] RSP: 002b:00007f413e278028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce
[ 2258.974805][  T725] RAX: ffffffffffffffda RBX: 00007f413d615fa0 RCX: 00007f413d39c799
[ 2258.974822][  T725] RDX: 0000000000000000 RSI: 0000200000002400 RDI: 00000000000008f0
[ 2258.974836][  T725] RBP: 00007f413e278090 R08: 0000000000000000 R09: 0000000000000000
[ 2258.974850][  T725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2258.974864][  T725] R13: 00007f413d616038 R14: 00007f413d615fa0 R15: 00007f413d73fa48
[ 2258.974898][  T725]  </TASK>
[ 2259.420969][T31708] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2259.438553][T31708] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 2259.488582][T31708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[ 2259.522968][T31708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64
[ 2259.566426][T31708] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2259.606852][  T730] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7392'.
[ 2259.653500][T31708] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 2259.662801][T31708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2259.671590][T31708] usb 4-1: Product: syz
[ 2259.676550][T31708] usb 4-1: Manufacturer: syz
[ 2259.681790][T31708] usb 4-1: SerialNumber: syz
[ 2259.697371][T31708] usb 4-1: config 0 descriptor??
[ 2259.709709][  T723] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2259.732066][T31708] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input245
[ 2259.814828][  T738] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7395'.
[ 2260.509903][  T749] FAULT_INJECTION: forcing a failure.
[ 2260.509903][  T749] name failslab, interval 1, probability 0, space 0, times 0
[ 2260.523188][  T749] CPU: 1 UID: 0 PID: 749 Comm: syz.5.7396 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2260.523221][  T749] Tainted: [L]=SOFTLOCKUP
[ 2260.523230][  T749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2260.523245][  T749] Call Trace:
[ 2260.523254][  T749]  <TASK>
[ 2260.523264][  T749]  dump_stack_lvl+0xe8/0x150
[ 2260.523301][  T749]  should_fail_ex+0x412/0x560
[ 2260.523339][  T749]  should_failslab+0xa8/0x100
[ 2260.523367][  T749]  ? posix_lock_inode+0x23f/0x3db0
[ 2260.523401][  T749]  kmem_cache_alloc_noprof+0x87/0x650
[ 2260.523425][  T749]  ? locks_get_lock_context+0x319/0x5c0
[ 2260.523455][  T749]  posix_lock_inode+0x23f/0x3db0
[ 2260.523488][  T749]  ? __pfx_aa_file_perm+0x10/0x10
[ 2260.523529][  T749]  ? __pfx_posix_lock_inode+0x10/0x10
[ 2260.523562][  T749]  ? apparmor_file_lock+0x252/0x360
[ 2260.523596][  T749]  fcntl_setlk+0x9d8/0x10c0
[ 2260.523617][  T749]  ? get_pid_task+0x20/0x1f0
[ 2260.523656][  T749]  ? __pfx_fcntl_setlk+0x10/0x10
[ 2260.523695][  T749]  do_fcntl+0x956/0x1a20
[ 2260.523722][  T749]  ? kmem_cache_free+0x187/0x630
[ 2260.523747][  T749]  ? __pfx_do_fcntl+0x10/0x10
[ 2260.523782][  T749]  ? ksys_write+0x1fc/0x270
[ 2260.523821][  T749]  ? bpf_lsm_file_fcntl+0x9/0x20
[ 2260.523853][  T749]  __se_sys_fcntl+0xc8/0x150
[ 2260.523879][  T749]  do_syscall_64+0x14d/0xf80
[ 2260.523904][  T749]  ? trace_irq_disable+0x3b/0x150
[ 2260.523934][  T749]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2260.523957][  T749]  ? clear_bhb_loop+0x40/0x90
[ 2260.523983][  T749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2260.524006][  T749] RIP: 0033:0x7fa876d9c799
[ 2260.524026][  T749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2260.524045][  T749] RSP: 002b:00007fa877c1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 2260.524070][  T749] RAX: ffffffffffffffda RBX: 00007fa877016090 RCX: 00007fa876d9c799
[ 2260.524087][  T749] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000003
[ 2260.524101][  T749] RBP: 00007fa877c1a090 R08: 0000000000000000 R09: 0000000000000000
[ 2260.524115][  T749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2260.524128][  T749] R13: 00007fa877016128 R14: 00007fa877016090 R15: 00007fa87713fa48
[ 2260.524162][  T749]  </TASK>
[ 2261.108712][T16001] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2261.278545][T16001] usb 6-1: Using ep0 maxpacket: 8
[ 2261.285833][T16001] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2261.296050][T16001] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 2261.320490][T16001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2261.330638][T16001] usb 6-1: Product: syz
[ 2261.334864][T16001] usb 6-1: Manufacturer: syz
[ 2261.359726][T16001] usb 6-1: SerialNumber: syz
[ 2261.367394][T16001] usb 6-1: config 0 descriptor??
[ 2261.466256][T16001] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[ 2261.514104][T31708] usb 4-1: USB disconnect, device number 5
[ 2261.594928][  T758] could not allocate digest TFM handle nl80211
[ 2261.689422][T16001] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[ 2261.712152][T16001] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 2261.845461][  T769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7402'.
[ 2261.854863][  T769] bridge_slave_1: left allmulticast mode
[ 2261.862989][  T769] bridge_slave_1: left promiscuous mode
[ 2261.869433][  T769] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2261.880007][  T769] 
: left allmulticast mode
[ 2261.887995][  T769] 
: left promiscuous mode
[ 2261.894161][  T769] bridge0: port 1(
) entered disabled state
[ 2261.928775][T15995] usb 6-1: USB disconnect, device number 23
[ 2262.059286][T31708] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2262.216133][T31708] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 2262.228722][T31708] usb 4-1: config 0 has no interface number 0
[ 2262.240009][T31708] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2262.260090][T31708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2262.271550][T31708] usb 4-1: config 0 descriptor??
[ 2262.294590][T31708] cp210x 4-1:0.1: cp210x converter detected
[ 2262.676305][  T784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7406'.
[ 2262.760378][T31708] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -32
[ 2262.937865][  T791] FAULT_INJECTION: forcing a failure.
[ 2262.937865][  T791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2262.955580][  T791] CPU: 0 UID: 0 PID: 791 Comm: syz.2.7407 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2262.955617][  T791] Tainted: [L]=SOFTLOCKUP
[ 2262.955626][  T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2262.955640][  T791] Call Trace:
[ 2262.955649][  T791]  <TASK>
[ 2262.955659][  T791]  dump_stack_lvl+0xe8/0x150
[ 2262.955696][  T791]  should_fail_ex+0x412/0x560
[ 2262.955744][  T791]  _copy_to_user+0x31/0xb0
[ 2262.955774][  T791]  copy_siginfo_to_user+0x22/0xc0
[ 2262.955805][  T791]  x64_setup_rt_frame+0x77b/0xcb0
[ 2262.955851][  T791]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 2262.955877][  T791]  arch_do_signal_or_restart+0x424/0x830
[ 2262.955920][  T791]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2262.955953][  T791]  ? ksys_write+0x242/0x270
[ 2262.955984][  T791]  exit_to_user_mode_loop+0x86/0x480
[ 2262.956010][  T791]  ? rcu_is_watching+0x15/0xb0
[ 2262.956035][  T791]  do_syscall_64+0x32d/0xf80
[ 2262.956071][  T791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2262.956095][  T791]  ? clear_bhb_loop+0x40/0x90
[ 2262.956120][  T791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2262.956141][  T791] RIP: 0033:0x7fc946f5cfce
[ 2262.956165][  T791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2262.956179][  T791] RSP: 002b:00007fc947e3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2262.956197][  T791] RAX: 0000000000000001 RBX: 00007fc947e3e6c0 RCX: 00007fc946f5cfce
[ 2262.956224][  T791] RDX: 0000000000000001 RSI: 00007fc947e3e090 RDI: 0000000000000007
[ 2262.956239][  T791] RBP: 00007fc947e3e090 R08: 0000000000000000 R09: 0000000000000000
[ 2262.956260][  T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2262.956272][  T791] R13: 00007fc947216038 R14: 00007fc947215fa0 R15: 00007fc94733fa48
[ 2262.956309][  T791]  </TASK>
[ 2263.181643][T31708] cp210x 4-1:0.1: failed to get vendor val 0x370c size 15: -121
[ 2263.189617][T31708] cp210x 4-1:0.1: GPIO initialisation failed: -121
[ 2263.211052][T31708] usb 4-1: cp210x converter now attached to ttyUSB0
[ 2263.338611][T16001] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2263.529244][T16001] usb 6-1: Using ep0 maxpacket: 32
[ 2263.540093][T16001] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2263.553844][T16001] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 2263.564138][T16001] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2263.573568][T16001] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2263.583144][T16001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2263.607479][T16001] usb 6-1: Product: syz
[ 2263.618983][T16001] usb 6-1: Manufacturer: syz
[ 2263.629255][T16001] usb 6-1: SerialNumber: syz
[ 2263.641844][T16001] usb 6-1: config 0 descriptor??
[ 2263.898782][  T790] netlink: 76 bytes leftover after parsing attributes in process `syz.5.7408'.
[ 2263.924734][  T790] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7408'.
[ 2263.962849][  T790] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7408'.
[ 2264.658900][T16001] gs_usb 6-1:0.0: Couldn't send data format (err=-110)
[ 2264.666292][T16001] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110
[ 2264.752901][T16001] usb 4-1: USB disconnect, device number 6
[ 2264.772682][T16001] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2264.785744][T16001] cp210x 4-1:0.1: device disconnected
[ 2265.478561][  T336] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2265.628560][  T336] usb 3-1: Using ep0 maxpacket: 8
[ 2265.635822][  T336] usb 3-1: config 127 has an invalid interface number: 171 but max is 1
[ 2265.645082][  T336] usb 3-1: config 127 has no interface number 1
[ 2265.651814][  T336] usb 3-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0
[ 2265.662526][  T336] usb 3-1: config 127 interface 171 has no altsetting 0
[ 2265.670102][  T336] usb 3-1: config 127 interface 0 has no altsetting 0
[ 2265.680079][  T336] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 2265.689665][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2265.697899][  T336] usb 3-1: Product: syz
[ 2265.703266][  T336] usb 3-1: Manufacturer: syz
[ 2265.708070][  T336] usb 3-1: SerialNumber: syz
[ 2265.953290][  T828] ip6gretap0: entered promiscuous mode
[ 2265.975195][  T336] xr_serial 3-1:127.171: xr_serial converter detected
[ 2265.986687][  T336] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[ 2266.003993][T16001] usb 6-1: USB disconnect, device number 24
[ 2266.011507][  T336] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 2266.053524][  T336] usb 3-1: USB disconnect, device number 16
[ 2266.064158][  T336] xr_serial 3-1:127.171: device disconnected
[ 2266.338607][T16001] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2266.508612][T16001] usb 4-1: Using ep0 maxpacket: 32
[ 2266.523134][T16001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 2266.662866][T16001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[ 2266.677107][  T840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2266.757395][T16001] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2266.802274][T16001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2266.941835][T16001] usb 4-1: config 0 descriptor??
[ 2266.968097][T16001] hub 4-1:0.0: USB hub found
[ 2267.198668][  T336] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 2267.328843][T11687] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2267.360894][  T336] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[ 2267.369562][  T336] usb 3-1: config 0 has no interface number 0
[ 2267.375976][  T336] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[ 2267.388936][  T336] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 2668, setting to 64
[ 2267.400367][  T336] usb 3-1: config 0 interface 113 has no altsetting 0
[ 2267.410110][  T336] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[ 2267.419700][  T336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2267.427789][  T336] usb 3-1: Product: syz
[ 2267.433192][  T336] usb 3-1: Manufacturer: syz
[ 2267.433345][T16001] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2267.446072][  T336] usb 3-1: SerialNumber: syz
[ 2267.454501][  T336] usb 3-1: config 0 descriptor??
[ 2267.462697][  T842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 2267.473799][  T336] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[ 2267.488261][T11687] usb 6-1: config 160 has an invalid interface number: 200 but max is 0
[ 2267.513249][T11687] usb 6-1: config 160 has no interface number 0
[ 2267.526018][T11687] usb 6-1: config 160 interface 200 has no altsetting 0
[ 2267.536106][T11687] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 2267.548433][T16001] usbhid 4-1:0.0: can't add hid device: -71
[ 2267.554986][T11687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2267.567041][T11687] usb 6-1: Product: syz
[ 2267.569474][T16001] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2267.572143][T11687] usb 6-1: Manufacturer: syz
[ 2267.585362][T11687] usb 6-1: SerialNumber: syz
[ 2267.631158][T16001] usb 4-1: USB disconnect, device number 7
[ 2267.692425][  T336] usb 3-1: USB disconnect, device number 17
[ 2267.784998][  T850] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2267.812053][T11687] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2267.819456][T11687] usb 6-1: MIDIStreaming interface descriptor not found
[ 2268.099010][T11687] usb 6-1: USB disconnect, device number 25
[ 2268.163225][T14354] udevd[14354]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2268.248621][T16001] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2268.405042][T16001] usb 4-1: config index 0 descriptor too short (expected 24929, got 36)
[ 2268.414212][T16001] usb 4-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[ 2268.431281][T16001] usb 4-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[ 2268.608616][T16001] usb 4-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[ 2268.628126][T16001] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2268.648353][T16001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2268.848798][T31708] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2268.871330][  T833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7421'.
[ 2269.021796][T31708] usb 2-1: device descriptor read/64, error -71
[ 2269.278628][T31708] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2269.419220][T31708] usb 2-1: device descriptor read/64, error -71
[ 2269.534969][T31708] usb usb2-port1: attempt power cycle
[ 2269.898652][T31708] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2269.988853][T31708] usb 2-1: device descriptor read/8, error -71
[ 2270.062297][T16001] usb 4-1: string descriptor 0 read error: -71
[ 2270.101414][T16001] usb 4-1: USB disconnect, device number 8
[ 2270.248810][T31708] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 2270.289833][T31708] usb 2-1: device descriptor read/8, error -71
[ 2270.399103][T31708] usb usb2-port1: unable to enumerate USB device
[ 2270.968056][  T881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7436'.
[ 2271.319197][T31708] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2271.340837][T16001] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2271.408617][T11687] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2271.474080][T31708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2271.485459][T31708] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2271.495895][T31708] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2271.505116][T16001] usb 4-1: Using ep0 maxpacket: 16
[ 2271.511419][T31708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.521232][T16001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2271.535338][T31708] usb 3-1: config 0 descriptor??
[ 2271.547090][  T893] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2271.549229][T16001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2271.560219][T11687] usb 6-1: Using ep0 maxpacket: 32
[ 2271.572922][  T893] tipc: Resetting bearer <eth:syzkaller0>
[ 2271.585382][T16001] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2271.609623][T11687] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 2271.619159][T11687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2271.627485][T11687] usb 6-1: Product: syz
[ 2271.632636][T16001] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[ 2271.646506][T11687] usb 6-1: Manufacturer: syz
[ 2271.646571][T16001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2271.670072][T16001] usb 4-1: config 0 descriptor??
[ 2271.684904][T11687] usb 6-1: SerialNumber: syz
[ 2271.692802][T11687] usb 6-1: config 0 descriptor??
[ 2271.702792][T11687] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 2271.723634][  T892] tipc: Disabling bearer <eth:syzkaller0>
[ 2271.728882][T11687] dvb-usb: bulk message failed: -22 (4/0)
[ 2271.741035][T11687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2271.751917][T11687] dvb-usb: bulk message failed: -22 (5/0)
[ 2271.757782][T11687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2271.775061][  T897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7442'.
[ 2271.787554][T11687] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2271.797721][T11687] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 2271.805946][T11687] usb 6-1: media controller created
[ 2271.874432][T11687] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2271.910896][T11687] usb 6-1: selecting invalid altsetting 3
[ 2271.916801][T11687] ttusb2: set interface to alts=3 failed
[ 2271.969395][T11687] DVB: Unable to find symbol tda10086_attach()
[ 2271.975628][T11687] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 2271.985670][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.006133][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.010582][T11687] dvb-usb: bulk message failed: -22 (4/0)
[ 2272.026193][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.030439][T11687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2272.046431][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.064645][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.072570][T11687] dvb-usb: bulk message failed: -22 (5/0)
[ 2272.078348][T11687] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2272.084061][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.108702][T11687] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 2272.111132][T31708] playstation 0003:054C:0BA0.00A4: unknown main item tag 0x0
[ 2272.127797][T11687] usb 6-1: USB disconnect, device number 26
[ 2272.147940][T16001] kye 0003:0458:0087.00A5: unknown main item tag 0x0
[ 2272.156409][T16001] kye 0003:0458:0087.00A5: unknown main item tag 0x0
[ 2272.168772][T16001] kye 0003:0458:0087.00A5: unknown main item tag 0x0
[ 2272.213202][T31708] playstation 0003:054C:0BA0.00A4: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[ 2272.238536][T16001] kye 0003:0458:0087.00A5: hidraw1: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0
[ 2272.319425][T31708] playstation 0003:054C:0BA0.00A4: Invalid byte count transferred, expected 16 got 0
[ 2272.329888][T11687] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 2272.341130][T31708] playstation 0003:054C:0BA0.00A4: Failed to retrieve DualShock4 pairing info: -22
[ 2272.367610][T20079] Bluetooth: hci3: unknown advertising packet type: 0x6b
[ 2272.367674][T20079] Bluetooth: hci3: unknown advertising packet type: 0x80
[ 2272.380306][T20079] Bluetooth: hci3: Dropping invalid advertising data
[ 2272.390209][T31708] playstation 0003:054C:0BA0.00A4: Failed to get MAC address from DualShock4
[ 2272.395453][T20079] Bluetooth: hci3: Malformed LE Event: 0x02
[ 2272.477181][T16001] usb 4-1: USB disconnect, device number 9
[ 2272.491458][T31708] playstation 0003:054C:0BA0.00A4: Failed to create dualshock4.
[ 2272.552601][T31708] playstation 0003:054C:0BA0.00A4: probe with driver playstation failed with error -22
[ 2272.619201][T31708] usb 3-1: USB disconnect, device number 18
[ 2272.645371][  T903] fido_id[903]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 2273.088601][T31708] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2273.108643][T16001] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2273.248950][T31708] usb 6-1: Using ep0 maxpacket: 32
[ 2273.274438][T31708] usb 6-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 2273.283768][T31708] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.292006][T16001] usb 2-1: Using ep0 maxpacket: 16
[ 2273.373475][  T927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7449'.
[ 2273.374834][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035d58c00: rx timeout, send abort
[ 2273.493608][T31708] usb 6-1: Product: syz
[ 2273.505273][T16001] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[ 2273.514944][T31708] usb 6-1: Manufacturer: syz
[ 2273.527685][T31708] usb 6-1: SerialNumber: syz
[ 2273.533919][T16001] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2273.558310][T31708] usb 6-1: config 0 descriptor??
[ 2273.568879][T16001] usb 2-1: Product: syz
[ 2273.591407][T31708] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 2273.601911][T16001] usb 2-1: Manufacturer: syz
[ 2273.609461][T16001] usb 2-1: SerialNumber: syz
[ 2273.616951][T31708] dvb-usb: bulk message failed: -22 (4/0)
[ 2273.628349][T31708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2273.639514][T16001] usb 2-1: config 0 descriptor??
[ 2273.662378][T31708] dvb-usb: bulk message failed: -22 (5/0)
[ 2273.678398][T31708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2273.711036][T31708] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2273.729670][T31708] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 2273.739231][T31708] usb 6-1: media controller created
[ 2273.764568][T31708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2273.815778][T31708] usb 6-1: selecting invalid altsetting 3
[ 2273.822745][T31708] ttusb2: set interface to alts=3 failed
[ 2273.874923][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035d5ac00: rx timeout, send abort
[ 2273.891059][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035d58c00: abort rx timeout. Force session deactivation
[ 2273.960391][T16001] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2273.981349][  T931] dvb-usb: bulk message failed: -22 (7/0)
[ 2273.987217][  T931] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0)
[ 2274.008620][  T931] ttusb2: i2c transfer failed.
[ 2274.043383][T16001] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1
[ 2274.053840][T31708] DVB: Unable to find symbol tda10086_attach()
[ 2274.060472][T16001] usb-storage 2-1:0.0: This device (054c,002e,0500 S 04 P 5c) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[ 2274.060472][T16001]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 2274.085816][T31708] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 2274.096987][T31708] dvb-usb: bulk message failed: -22 (4/0)
[ 2274.102855][T31708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2274.115245][T31708] dvb-usb: bulk message failed: -22 (5/0)
[ 2274.226898][T31708] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 2274.237556][T31708] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 2274.294737][T16001] usb 2-1: USB disconnect, device number 123
[ 2274.383318][    C1] vcan0: j1939_tp_rxtimer: 0xffff888035d5ac00: abort rx timeout. Force session deactivation
[ 2275.933477][  T953] fuse: Invalid uid '0x0000000000000008'
[ 2276.413445][T11691] usb 6-1: USB disconnect, device number 27
[ 2276.944837][T11691] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 2277.938604][T16001] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2278.573369][  T974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7458'.
[ 2278.675098][T16001] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[ 2278.688369][T16001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2278.708630][T16001] usb 6-1: Product: syz
[ 2278.733088][T16001] usb 6-1: Manufacturer: syz
[ 2278.737890][T16001] usb 6-1: SerialNumber: syz
[ 2278.760150][T16001] usb 6-1: config 0 descriptor??
[ 2278.781787][T16001] hub 6-1:0.0: bad descriptor, ignoring hub
[ 2278.789468][T16001] hub 6-1:0.0: probe with driver hub failed with error -5
[ 2278.800294][T16001] usbsevseg 6-1:0.0: USB 7 Segment device now attached
[ 2279.378814][T11687] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2279.475209][  T991] netlink: 1744 bytes leftover after parsing attributes in process `syz.0.7463'.
[ 2279.534495][T11687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2279.562153][T11687] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2279.605773][T11687] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2279.645872][T11687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2279.667860][T11687] usb 3-1: config 0 descriptor??
[ 2279.944657][  T999] fuse: Bad value for 'group_id'
[ 2279.949885][  T999] fuse: Bad value for 'group_id'
[ 2279.968680][   T30] kauditd_printk_skb: 199 callbacks suppressed
[ 2279.968700][   T30] audit: type=1326 audit(1774507441.712:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.050763][   T30] audit: type=1326 audit(1774507441.712:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.160357][T11687] hid_parser_main: 35 callbacks suppressed
[ 2280.160384][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.187401][ T1000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7466'.
[ 2280.187505][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.204581][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.214546][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.223574][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.228268][   T30] audit: type=1326 audit(1774507441.712:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.259058][T15995] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 2280.315262][   T30] audit: type=1326 audit(1774507441.722:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.356528][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.366939][   T30] audit: type=1326 audit(1774507441.722:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.373697][T11687] playstation 0003:054C:0BA0.00A6: unknown main item tag 0x0
[ 2280.520862][T11687] playstation 0003:054C:0BA0.00A6: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0
[ 2280.555676][   T30] audit: type=1326 audit(1774507441.722:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.660341][T11687] playstation 0003:054C:0BA0.00A6: Failed to retrieve feature with reportID 18: -32
[ 2280.808551][T11687] playstation 0003:054C:0BA0.00A6: Failed to retrieve DualShock4 pairing info: -32
[ 2280.840385][   T30] audit: type=1326 audit(1774507441.722:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.935525][   T30] audit: type=1326 audit(1774507441.722:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2280.983521][T11687] playstation 0003:054C:0BA0.00A6: Failed to get MAC address from DualShock4
[ 2281.042088][   T30] audit: type=1326 audit(1774507441.722:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2281.147013][T11687] playstation 0003:054C:0BA0.00A6: Failed to create dualshock4.
[ 2281.188884][   T30] audit: type=1326 audit(1774507441.722:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=995 comm="syz.3.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd5599c799 code=0x7ffc0000
[ 2281.234638][T11687] playstation 0003:054C:0BA0.00A6: probe with driver playstation failed with error -32
[ 2281.357792][T11687] usb 3-1: USB disconnect, device number 19
[ 2281.431174][T15995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[ 2281.463282][T15995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2281.542958][T15995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 14385, setting to 64
[ 2281.748926][T31708] usb 6-1: USB disconnect, device number 28
[ 2281.755911][T31708] usbsevseg 6-1:0.0: USB 7 Segment now disconnected
[ 2281.887674][T15995] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 2281.897501][T15995] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2281.926404][T15995] usb 4-1: Product: syz
[ 2281.930815][T15995] usb 4-1: Manufacturer: syz
[ 2281.935546][T15995] usb 4-1: SerialNumber: syz
[ 2281.952035][T15995] usb 4-1: config 0 descriptor??
[ 2283.081149][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7474'.
[ 2283.208141][ T1028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2283.309524][T15995] adutux 4-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 2283.324665][T15995] usb 4-1: USB disconnect, device number 10
[ 2283.411337][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2283.417675][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2283.602013][ T1035] fuse: Unknown parameter 'useO_id'
[ 2284.206658][ T1041] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7477'.
[ 2284.219998][ T1041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2284.247028][ T1041] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7477'.
[ 2284.625214][T15995] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 2284.821534][T15995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2284.835120][T15995] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2284.876195][T15995] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2285.010465][T15995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2285.041832][T15995] usb 4-1: config 0 descriptor??
[ 2285.467913][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.583895][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.607778][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.710918][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.831714][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.865633][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.905796][T15995] playstation 0003:054C:0BA0.00A7: unknown main item tag 0x0
[ 2285.988426][T15995] playstation 0003:054C:0BA0.00A7: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0
[ 2286.130327][T15995] playstation 0003:054C:0BA0.00A7: Failed to retrieve feature with reportID 18: -32
[ 2286.158807][T15995] playstation 0003:054C:0BA0.00A7: Failed to retrieve DualShock4 pairing info: -32
[ 2286.215994][T15995] playstation 0003:054C:0BA0.00A7: Failed to get MAC address from DualShock4
[ 2286.255705][T15995] playstation 0003:054C:0BA0.00A7: Failed to create dualshock4.
[ 2286.350006][T15995] playstation 0003:054C:0BA0.00A7: probe with driver playstation failed with error -32
[ 2286.440850][T15995] usb 4-1: USB disconnect, device number 11
[ 2286.641726][ T1066] fido_id[1066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 2287.234972][ T1083] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7485'.
[ 2287.583703][ T1083] 8021q: VLANs not supported on vxcan1
[ 2287.598113][ T1089] FAULT_INJECTION: forcing a failure.
[ 2287.598113][ T1089] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2287.618017][ T1089] CPU: 0 UID: 0 PID: 1089 Comm: syz.2.7487 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2287.618046][ T1089] Tainted: [L]=SOFTLOCKUP
[ 2287.618052][ T1089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2287.618063][ T1089] Call Trace:
[ 2287.618069][ T1089]  <TASK>
[ 2287.618077][ T1089]  dump_stack_lvl+0xe8/0x150
[ 2287.618105][ T1089]  should_fail_ex+0x412/0x560
[ 2287.618132][ T1089]  _copy_from_iter+0x1d3/0x1670
[ 2287.618161][ T1089]  ? rcu_is_watching+0x15/0xb0
[ 2287.618188][ T1089]  ? __pfx__copy_from_iter+0x10/0x10
[ 2287.618221][ T1089]  ? netlink_sendmsg+0x650/0xb40
[ 2287.618235][ T1089]  ? skb_put+0x11b/0x210
[ 2287.618255][ T1089]  netlink_sendmsg+0x6c0/0xb40
[ 2287.618278][ T1089]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2287.618296][ T1089]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2287.618327][ T1089]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2287.618347][ T1089]  ____sys_sendmsg+0x972/0x9f0
[ 2287.618372][ T1089]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2287.618422][ T1089]  ? import_iovec+0x73/0xa0
[ 2287.618451][ T1089]  ___sys_sendmsg+0x2a5/0x360
[ 2287.618481][ T1089]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2287.618538][ T1089]  ? __fget_files+0x2a/0x420
[ 2287.618572][ T1089]  ? __fget_files+0x3a0/0x420
[ 2287.618613][ T1089]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2287.618640][ T1089]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2287.618665][ T1089]  ? __pfx_ksys_write+0x10/0x10
[ 2287.618690][ T1089]  do_syscall_64+0x14d/0xf80
[ 2287.618708][ T1089]  ? trace_irq_disable+0x3b/0x150
[ 2287.618731][ T1089]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2287.618747][ T1089]  ? clear_bhb_loop+0x40/0x90
[ 2287.618772][ T1089]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2287.618788][ T1089] RIP: 0033:0x7fc946f9c799
[ 2287.618804][ T1089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2287.618817][ T1089] RSP: 002b:00007fc947e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2287.618834][ T1089] RAX: ffffffffffffffda RBX: 00007fc947215fa0 RCX: 00007fc946f9c799
[ 2287.618846][ T1089] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003
[ 2287.618856][ T1089] RBP: 00007fc947e3e090 R08: 0000000000000000 R09: 0000000000000000
[ 2287.618866][ T1089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2287.618875][ T1089] R13: 00007fc947216038 R14: 00007fc947215fa0 R15: 00007fc94733fa48
[ 2287.618898][ T1089]  </TASK>
[ 2288.412306][ T1096] geneve0: entered promiscuous mode
[ 2288.418582][T31708] usb 2-1: new low-speed USB device number 124 using dummy_hcd
[ 2288.466741][ T1096] geneve0: entered allmulticast mode
[ 2288.601344][T31708] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 2288.636113][T31708] usb 2-1: config 0 has no interface number 0
[ 2288.666108][T31708] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 2288.717516][T31708] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 2288.768150][T31708] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2288.828408][T31708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2288.929610][T31708] usb 2-1: config 0 descriptor??
[ 2288.959615][ T1105] Cannot find add_set index 0 as target
[ 2288.968582][ T1092] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2288.996170][T31708] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 2289.136794][T15995] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[ 2289.217847][T31708] usb 2-1: USB disconnect, device number 124
[ 2289.224316][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 2289.309964][ T1113] FAULT_INJECTION: forcing a failure.
[ 2289.309964][ T1113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2289.370923][T15995] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2289.389148][ T1113] CPU: 1 UID: 0 PID: 1113 Comm: syz.2.7494 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2289.389185][ T1113] Tainted: [L]=SOFTLOCKUP
[ 2289.389194][ T1113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2289.389207][ T1113] Call Trace:
[ 2289.389216][ T1113]  <TASK>
[ 2289.389233][ T1113]  dump_stack_lvl+0xe8/0x150
[ 2289.389260][ T1113]  should_fail_ex+0x412/0x560
[ 2289.389287][ T1113]  _copy_to_user+0x31/0xb0
[ 2289.389307][ T1113]  simple_read_from_buffer+0xe1/0x170
[ 2289.389335][ T1113]  proc_fail_nth_read+0x1bb/0x230
[ 2289.389361][ T1113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2289.389386][ T1113]  ? rw_verify_area+0x2a6/0x4d0
[ 2289.389402][ T1113]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2289.389426][ T1113]  vfs_read+0x20c/0xa70
[ 2289.389441][ T1113]  ? fdget_pos+0x246/0x320
[ 2289.389454][ T1113]  ? __pfx_proc_submiturb+0x10/0x10
[ 2289.389609][ T1113]  ? __pfx___mutex_lock+0x10/0x10
[ 2289.389629][ T1113]  ? __pfx_vfs_read+0x10/0x10
[ 2289.389647][ T1113]  ? __fget_files+0x2a/0x420
[ 2289.389673][ T1113]  ? __fget_files+0x3a0/0x420
[ 2289.389695][ T1113]  ? __fget_files+0x2a/0x420
[ 2289.389729][ T1113]  ksys_read+0x150/0x270
[ 2289.389748][ T1113]  ? __pfx_ksys_read+0x10/0x10
[ 2289.389764][ T1113]  ? __pfx_usbdev_ioctl+0x10/0x10
[ 2289.389793][ T1113]  do_syscall_64+0x14d/0xf80
[ 2289.389811][ T1113]  ? trace_irq_disable+0x3b/0x150
[ 2289.389835][ T1113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2289.389850][ T1113]  ? clear_bhb_loop+0x40/0x90
[ 2289.389869][ T1113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2289.389885][ T1113] RIP: 0033:0x7fc946f5cfce
[ 2289.389900][ T1113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2289.389913][ T1113] RSP: 002b:00007fc947e3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2289.389930][ T1113] RAX: ffffffffffffffda RBX: 00007fc947e3e6c0 RCX: 00007fc946f5cfce
[ 2289.389941][ T1113] RDX: 000000000000000f RSI: 00007fc947e3e0a0 RDI: 0000000000000005
[ 2289.389951][ T1113] RBP: 00007fc947e3e090 R08: 0000000000000000 R09: 0000000000000000
[ 2289.389961][ T1113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2289.389970][ T1113] R13: 00007fc947216038 R14: 00007fc947215fa0 R15: 00007fc94733fa48
[ 2289.389994][ T1113]  </TASK>
[ 2289.621849][T15995] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2289.689394][T15995] usb 4-1: config 0 descriptor??
[ 2289.979413][ T1092] syzkaller0: entered promiscuous mode
[ 2289.985216][ T1092] syzkaller0: entered allmulticast mode
[ 2290.019897][T15995] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2290.431117][T15995] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 2290.443350][T15995] [drm] Initialized udl on minor 2
[ 2290.485559][T15995] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 2290.513790][T15995] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 2290.715347][T11687] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2290.749986][T15995] usb 4-1: USB disconnect, device number 12
[ 2291.769195][T31708] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2292.227646][T31708] usb 4-1: Using ep0 maxpacket: 16
[ 2292.261324][T31708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2292.409275][T31708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2292.430840][T31708] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2292.739114][T31708] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2292.818602][T31708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2292.898869][T31708] usb 4-1: config 0 descriptor??
[ 2293.428166][T31708] microsoft 0003:045E:07DA.00A8: ignoring exceeding usage max
[ 2293.440757][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2293.448502][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2293.495990][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2293.510912][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2293.519639][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2293.660275][  T336] psmouse serio7: Failed to reset mouse on : -5
[ 2293.682650][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2294.171927][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2294.206450][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2294.236906][T31708] microsoft 0003:045E:07DA.00A8: unknown main item tag 0x0
[ 2294.283785][T31708] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.00A8/input/input247
[ 2294.469039][T31708] microsoft 0003:045E:07DA.00A8: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 2294.878574][T15995] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2295.030877][T15995] usb 6-1: Using ep0 maxpacket: 32
[ 2295.038371][T15995] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 2295.047318][T15995] usb 6-1: config 0 has no interface number 0
[ 2295.056451][T15995] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2295.066168][T15995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2295.075064][T15995] usb 6-1: Product: syz
[ 2295.079426][T15995] usb 6-1: Manufacturer: syz
[ 2295.087139][T15995] usb 6-1: SerialNumber: syz
[ 2295.130813][T15995] usb 6-1: config 0 descriptor??
[ 2295.151044][T15995] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2295.381007][T15995] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2295.396725][T15995] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2295.508601][T16001] usb 4-1: reset high-speed USB device number 13 using dummy_hcd
[ 2295.786487][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2295.794778][T15995] usb 6-1: USB disconnect, device number 29
[ 2295.820079][T15995] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2295.853624][T15995] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2295.889413][T15995] quatech2 6-1:0.51: device disconnected
[ 2296.248645][T15995] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2296.414207][T15995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2296.439876][T15995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2296.458640][T15995] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2296.474168][T15995] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2296.483701][T15995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2296.503125][T15995] usb 3-1: config 0 descriptor??
[ 2296.918674][T21857] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[ 2296.940040][T15995] plantronics 0003:047F:FFFF.00A9: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 2297.080811][T21857] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2297.101329][T21857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2297.118794][T21857] usb 6-1: config 0 descriptor??
[ 2297.352906][T21857] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2297.607572][T21857] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[ 2297.614612][T21857] [drm] Initialized udl on minor 2
[ 2297.778661][  T336] misc userio: Buffer overflowed, userio client isn't keeping up
[ 2297.811931][T21857] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 2297.836318][T21857] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 2298.388363][T11687] usb 3-1: reset high-speed USB device number 20 using dummy_hcd
[ 2298.657284][T11699] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2298.705935][T11699] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2298.729862][T21857] usb 6-1: USB disconnect, device number 30
[ 2298.768788][T11699] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 2298.890927][  T336] input: PS/2 Generic Mouse as /devices/serio7/input/input246
[ 2298.996389][ T1177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7509'.
[ 2299.118566][  T336] psmouse serio7: Failed to enable mouse on 
[ 2299.475145][T15995] usb 3-1: USB disconnect, device number 20
[ 2299.500501][ T1188] FAULT_INJECTION: forcing a failure.
[ 2299.500501][ T1188] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2299.555408][ T1189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7511'.
[ 2299.617265][ T1189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.642542][ T1189] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7511'.
[ 2299.770084][ T1188] CPU: 1 UID: 0 PID: 1188 Comm: syz.5.7512 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2299.770122][ T1188] Tainted: [L]=SOFTLOCKUP
[ 2299.770130][ T1188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2299.770145][ T1188] Call Trace:
[ 2299.770153][ T1188]  <TASK>
[ 2299.770163][ T1188]  dump_stack_lvl+0xe8/0x150
[ 2299.770201][ T1188]  should_fail_ex+0x412/0x560
[ 2299.770238][ T1188]  _copy_to_user+0x31/0xb0
[ 2299.770257][ T1188]  simple_read_from_buffer+0xe1/0x170
[ 2299.770284][ T1188]  proc_fail_nth_read+0x1bb/0x230
[ 2299.770312][ T1188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2299.770338][ T1188]  ? rw_verify_area+0x2a6/0x4d0
[ 2299.770354][ T1188]  ? reacquire_held_locks+0x104/0x190
[ 2299.770377][ T1188]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2299.770401][ T1188]  vfs_read+0x20c/0xa70
[ 2299.770416][ T1188]  ? fdget_pos+0x246/0x320
[ 2299.770433][ T1188]  ? __pfx___mutex_lock+0x10/0x10
[ 2299.770454][ T1188]  ? __pfx_vfs_read+0x10/0x10
[ 2299.770472][ T1188]  ? __fget_files+0x2a/0x420
[ 2299.770498][ T1188]  ? __fget_files+0x3a0/0x420
[ 2299.770521][ T1188]  ? __fget_files+0x2a/0x420
[ 2299.770550][ T1188]  ksys_read+0x150/0x270
[ 2299.770568][ T1188]  ? __pfx_ksys_read+0x10/0x10
[ 2299.770591][ T1188]  ? fput+0xa0/0xd0
[ 2299.770621][ T1188]  do_syscall_64+0x14d/0xf80
[ 2299.770638][ T1188]  ? trace_irq_disable+0x3b/0x150
[ 2299.770661][ T1188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2299.770677][ T1188]  ? clear_bhb_loop+0x40/0x90
[ 2299.770696][ T1188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2299.770712][ T1188] RIP: 0033:0x7fa876d5cfce
[ 2299.770726][ T1188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2299.770740][ T1188] RSP: 002b:00007fa877c3afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2299.770756][ T1188] RAX: ffffffffffffffda RBX: 00007fa877c3b6c0 RCX: 00007fa876d5cfce
[ 2299.770769][ T1188] RDX: 000000000000000f RSI: 00007fa877c3b0a0 RDI: 0000000000000004
[ 2299.770778][ T1188] RBP: 00007fa877c3b090 R08: 0000000000000000 R09: 0000000000000000
[ 2299.770788][ T1188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2299.770797][ T1188] R13: 00007fa877016038 R14: 00007fa877015fa0 R15: 00007fa87713fa48
[ 2299.770821][ T1188]  </TASK>
[ 2300.240347][T31708] usb 4-1: USB disconnect, device number 13
[ 2302.189948][T31708] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 2302.380552][T11691] usb 6-1: new full-speed USB device number 31 using dummy_hcd
[ 2302.408604][T31708] usb 2-1: Using ep0 maxpacket: 8
[ 2302.419076][T31708] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 2302.474196][T31708] usb 2-1: config 0 has no interface number 0
[ 2302.494052][T31708] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2302.526795][T31708] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2302.596110][T11691] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2302.626279][T31708] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2302.637885][T11691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.665361][T31708] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2302.696365][T11691] usb 6-1: config 0 descriptor??
[ 2302.731028][T31708] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2302.743128][T31708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2302.807013][T31708] usb 2-1: config 0 descriptor??
[ 2302.877812][T31708] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2302.958374][T11691] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2303.185175][ T1228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2303.230300][T11691] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2
[ 2303.238590][ T1228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2303.259905][T16001] usb 2-1: USB disconnect, device number 125
[ 2303.270724][T16001] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 2303.309110][T11691] [drm] Initialized udl on minor 2
[ 2303.367448][T11691] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 2303.389284][T11691] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 2303.578811][T15995] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2303.586988][T15995] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 2303.594893][T11691] usb 6-1: USB disconnect, device number 31
[ 2305.048905][T11691] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2305.088068][ T1252] FAULT_INJECTION: forcing a failure.
[ 2305.088068][ T1252] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2305.159535][ T1252] CPU: 1 UID: 0 PID: 1252 Comm: syz.3.7530 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2305.159572][ T1252] Tainted: [L]=SOFTLOCKUP
[ 2305.159581][ T1252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2305.159594][ T1252] Call Trace:
[ 2305.159603][ T1252]  <TASK>
[ 2305.159613][ T1252]  dump_stack_lvl+0xe8/0x150
[ 2305.159653][ T1252]  should_fail_ex+0x412/0x560
[ 2305.159703][ T1252]  _copy_from_iter+0x1d3/0x1670
[ 2305.159743][ T1252]  ? rcu_is_watching+0x15/0xb0
[ 2305.159782][ T1252]  ? __pfx__copy_from_iter+0x10/0x10
[ 2305.159824][ T1252]  ? netlink_sendmsg+0x650/0xb40
[ 2305.159847][ T1252]  ? skb_put+0x11b/0x210
[ 2305.159875][ T1252]  netlink_sendmsg+0x6c0/0xb40
[ 2305.159905][ T1252]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2305.159929][ T1252]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2305.159965][ T1252]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2305.159995][ T1252]  ____sys_sendmsg+0x972/0x9f0
[ 2305.160030][ T1252]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2305.160065][ T1252]  ? import_iovec+0x73/0xa0
[ 2305.160093][ T1252]  ___sys_sendmsg+0x2a5/0x360
[ 2305.160124][ T1252]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2305.160185][ T1252]  ? __fget_files+0x2a/0x420
[ 2305.160218][ T1252]  ? __fget_files+0x3a0/0x420
[ 2305.160261][ T1252]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2305.160290][ T1252]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2305.160325][ T1252]  ? __pfx_ksys_write+0x10/0x10
[ 2305.160361][ T1252]  do_syscall_64+0x14d/0xf80
[ 2305.160391][ T1252]  ? trace_irq_disable+0x3b/0x150
[ 2305.160423][ T1252]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2305.160447][ T1252]  ? clear_bhb_loop+0x40/0x90
[ 2305.160473][ T1252]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2305.160495][ T1252] RIP: 0033:0x7efd5599c799
[ 2305.160515][ T1252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2305.160534][ T1252] RSP: 002b:00007efd56797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2305.160558][ T1252] RAX: ffffffffffffffda RBX: 00007efd55c15fa0 RCX: 00007efd5599c799
[ 2305.160575][ T1252] RDX: 0000000004000000 RSI: 0000200000000480 RDI: 0000000000000004
[ 2305.160590][ T1252] RBP: 00007efd56797090 R08: 0000000000000000 R09: 0000000000000000
[ 2305.160604][ T1252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2305.160617][ T1252] R13: 00007efd55c16038 R14: 00007efd55c15fa0 R15: 00007efd55d3fa48
[ 2305.160651][ T1252]  </TASK>
[ 2305.186353][ T1254] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7531'.
[ 2305.426433][T11691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2305.439470][T11691] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2305.454111][T11691] usb 6-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[ 2305.463567][T11691] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2305.475012][T11691] usb 6-1: config 0 descriptor??
[ 2305.738712][T31708] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[ 2305.957178][ T1273] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7536'.
[ 2306.069317][T31708] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2306.080016][T31708] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2306.091960][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.123800][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.134958][T31708] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2306.170802][T31708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2306.184023][T31708] usb 2-1: config 0 descriptor??
[ 2306.193047][T31708] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2306.200438][T31708] dvb-usb: bulk message failed: -22 (3/0)
[ 2306.218107][T31708] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2306.228640][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.237552][T31708] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2306.246355][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.266034][T31708] usb 2-1: media controller created
[ 2306.269490][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.286673][T31708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2306.298402][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.316770][T31708] dvb-usb: bulk message failed: -22 (6/0)
[ 2306.329940][T11691] playstation 0003:054C:0BA0.00AA: unknown main item tag 0x0
[ 2306.340977][T31708] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2306.354568][T31708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input248
[ 2306.377555][T11691] playstation 0003:054C:0BA0.00AA: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.5-1/input0
[ 2306.379346][T31708] dvb-usb: schedule remote query interval to 150 msecs.
[ 2306.412490][ T1254] dvb-usb: bulk message failed: -22 (7/0)
[ 2306.462655][T31708] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2306.506754][T31708] usb 2-1: USB disconnect, device number 126
[ 2306.520823][T11691] playstation 0003:054C:0BA0.00AA: Failed to retrieve feature with reportID 18: -32
[ 2306.557164][T11691] playstation 0003:054C:0BA0.00AA: Failed to retrieve DualShock4 pairing info: -32
[ 2306.604855][T11691] playstation 0003:054C:0BA0.00AA: Failed to get MAC address from DualShock4
[ 2306.614857][T31708] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2306.756825][T11691] playstation 0003:054C:0BA0.00AA: Failed to create dualshock4.
[ 2306.778789][T11691] playstation 0003:054C:0BA0.00AA: probe with driver playstation failed with error -32
[ 2306.806920][T11691] usb 6-1: USB disconnect, device number 32
[ 2307.938402][ T1311] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7547'.
[ 2307.986266][ T1311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2308.195532][ T1311] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7547'.
[ 2308.633708][T11691] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2308.803874][T11691] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 2308.814843][T11691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2308.825926][T11691] usb 4-1: Product: syz
[ 2308.835012][T11691] usb 4-1: Manufacturer: syz
[ 2308.842347][T11691] usb 4-1: SerialNumber: syz
[ 2309.071962][ T1317] FAULT_INJECTION: forcing a failure.
[ 2309.071962][ T1317] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2309.091208][ T1317] CPU: 0 UID: 0 PID: 1317 Comm: syz.3.7550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2309.091235][ T1317] Tainted: [L]=SOFTLOCKUP
[ 2309.091241][ T1317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2309.091253][ T1317] Call Trace:
[ 2309.091260][ T1317]  <TASK>
[ 2309.091268][ T1317]  dump_stack_lvl+0xe8/0x150
[ 2309.091296][ T1317]  should_fail_ex+0x412/0x560
[ 2309.091323][ T1317]  _copy_to_user+0x31/0xb0
[ 2309.091343][ T1317]  simple_read_from_buffer+0xe1/0x170
[ 2309.091375][ T1317]  proc_fail_nth_read+0x1bb/0x230
[ 2309.091402][ T1317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2309.091426][ T1317]  ? rw_verify_area+0x2a6/0x4d0
[ 2309.091443][ T1317]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2309.091466][ T1317]  vfs_read+0x20c/0xa70
[ 2309.091482][ T1317]  ? fdget_pos+0x246/0x320
[ 2309.091498][ T1317]  ? __pfx___mutex_lock+0x10/0x10
[ 2309.091518][ T1317]  ? __pfx_vfs_read+0x10/0x10
[ 2309.091536][ T1317]  ? __fget_files+0x2a/0x420
[ 2309.091562][ T1317]  ? __fget_files+0x3a0/0x420
[ 2309.091584][ T1317]  ? __fget_files+0x2a/0x420
[ 2309.091613][ T1317]  ksys_read+0x150/0x270
[ 2309.091631][ T1317]  ? __pfx_ksys_read+0x10/0x10
[ 2309.091647][ T1317]  ? __pfx_raw_ioctl+0x10/0x10
[ 2309.091757][ T1317]  do_syscall_64+0x14d/0xf80
[ 2309.091776][ T1317]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2309.091792][ T1317]  ? clear_bhb_loop+0x40/0x90
[ 2309.091811][ T1317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2309.091827][ T1317] RIP: 0033:0x7efd5595cfce
[ 2309.091843][ T1317] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 2309.091856][ T1317] RSP: 002b:00007efd56796fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2309.091876][ T1317] RAX: ffffffffffffffda RBX: 00007efd567976c0 RCX: 00007efd5595cfce
[ 2309.091888][ T1317] RDX: 000000000000000f RSI: 00007efd567970a0 RDI: 0000000000000004
[ 2309.091898][ T1317] RBP: 00007efd56797090 R08: 0000000000000000 R09: 0000000000000000
[ 2309.091908][ T1317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2309.091917][ T1317] R13: 00007efd55c16038 R14: 00007efd55c15fa0 R15: 00007efd55d3fa48
[ 2309.091941][ T1317]  </TASK>
[ 2309.258949][T20079] Bluetooth: hci1: command 0x0406 tx timeout
[ 2309.319362][T11687] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2309.593090][T11691] rtl8150 4-1:1.0: couldn't reset the device
[ 2309.608341][T11691] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[ 2309.637726][T11687] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2309.657894][T11691] usb 4-1: USB disconnect, device number 14
[ 2309.670831][T11687] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2309.701344][T11687] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2309.757298][T11687] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2309.782201][T11687] usb 6-1: Product: syz
[ 2309.796565][T11687] usb 6-1: Manufacturer: syz
[ 2309.808821][T11687] usb 6-1: SerialNumber: syz
[ 2309.831530][T11687] usb 6-1: config 0 descriptor??
[ 2309.847426][ T1331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7553'.
[ 2309.892680][T11687] usb 6-1: selecting invalid altsetting 0
[ 2310.138752][T31708] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[ 2310.193844][T16001] usb 6-1: USB disconnect, device number 33
[ 2310.194094][ T1338] FAULT_INJECTION: forcing a failure.
[ 2310.194094][ T1338] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2310.220249][ T1338] CPU: 0 UID: 0 PID: 1338 Comm: syz.1.7556 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2310.220289][ T1338] Tainted: [L]=SOFTLOCKUP
[ 2310.220297][ T1338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2310.220310][ T1338] Call Trace:
[ 2310.220319][ T1338]  <TASK>
[ 2310.220343][ T1338]  dump_stack_lvl+0xe8/0x150
[ 2310.220380][ T1338]  should_fail_ex+0x412/0x560
[ 2310.220416][ T1338]  _copy_from_iter+0x1d3/0x1670
[ 2310.220454][ T1338]  ? rcu_is_watching+0x15/0xb0
[ 2310.220492][ T1338]  ? __pfx__copy_from_iter+0x10/0x10
[ 2310.220535][ T1338]  ? netlink_sendmsg+0x650/0xb40
[ 2310.220555][ T1338]  ? skb_put+0x11b/0x210
[ 2310.220582][ T1338]  netlink_sendmsg+0x6c0/0xb40
[ 2310.220611][ T1338]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2310.220635][ T1338]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2310.220666][ T1338]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2310.220695][ T1338]  ____sys_sendmsg+0x972/0x9f0
[ 2310.220730][ T1338]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2310.220765][ T1338]  ? import_iovec+0x73/0xa0
[ 2310.220793][ T1338]  ___sys_sendmsg+0x2a5/0x360
[ 2310.220824][ T1338]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2310.220881][ T1338]  ? __fget_files+0x2a/0x420
[ 2310.220912][ T1338]  ? __fget_files+0x3a0/0x420
[ 2310.220953][ T1338]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2310.220982][ T1338]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2310.221018][ T1338]  ? __pfx_ksys_write+0x10/0x10
[ 2310.221053][ T1338]  do_syscall_64+0x14d/0xf80
[ 2310.221078][ T1338]  ? trace_irq_disable+0x3b/0x150
[ 2310.221110][ T1338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.221143][ T1338]  ? clear_bhb_loop+0x40/0x90
[ 2310.221171][ T1338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2310.221193][ T1338] RIP: 0033:0x7f413d39c799
[ 2310.221216][ T1338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2310.221234][ T1338] RSP: 002b:00007f413e278028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2310.221258][ T1338] RAX: ffffffffffffffda RBX: 00007f413d615fa0 RCX: 00007f413d39c799
[ 2310.221275][ T1338] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004
[ 2310.221289][ T1338] RBP: 00007f413e278090 R08: 0000000000000000 R09: 0000000000000000
[ 2310.221304][ T1338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2310.221318][ T1338] R13: 00007f413d616038 R14: 00007f413d615fa0 R15: 00007f413d73fa48
[ 2310.221352][ T1338]  </TASK>
[ 2310.345819][T31708] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2310.530937][ T1344] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7557'.
[ 2310.611380][T31708] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2310.620501][T31708] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2310.630406][T31708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.641948][T31708] usb 4-1: config 0 descriptor??
[ 2310.663863][T31708] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2310.670879][T31708] dvb-usb: bulk message failed: -22 (3/0)
[ 2310.688360][T31708] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2310.702196][T31708] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2310.715636][T31708] usb 4-1: media controller created
[ 2310.783218][T31708] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2310.809747][T31708] dvb-usb: bulk message failed: -22 (6/0)
[ 2310.831639][T31708] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2310.854979][T31708] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input249
[ 2310.871867][ T1331] dvb-usb: bulk message failed: -22 (7/0)
[ 2310.904117][T31708] dvb-usb: schedule remote query interval to 150 msecs.
[ 2310.918620][T31708] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2310.944624][T31708] usb 4-1: USB disconnect, device number 15
[ 2310.991618][T31708] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2311.195418][ T1350] netlink: 'syz.0.7559': attribute type 1 has an invalid length.
[ 2311.421990][ T1350] 8021q: adding VLAN 0 to HW filter on device bond2
[ 2311.460326][ T1351] erspan0: entered allmulticast mode
[ 2311.500698][ T1351] bond1: (slave erspan0): Releasing active interface
[ 2311.531952][ T1351] bond2: (slave erspan0): making interface the new active one
[ 2311.545607][ T1351] bond2: (slave erspan0): Enslaving as an active interface with an up link
[ 2312.025912][ T1364] FAULT_INJECTION: forcing a failure.
[ 2312.025912][ T1364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2312.053243][ T1364] CPU: 1 UID: 0 PID: 1364 Comm: syz.5.7563 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2312.053279][ T1364] Tainted: [L]=SOFTLOCKUP
[ 2312.053286][ T1364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2312.053295][ T1364] Call Trace:
[ 2312.053302][ T1364]  <TASK>
[ 2312.053309][ T1364]  dump_stack_lvl+0xe8/0x150
[ 2312.053337][ T1364]  should_fail_ex+0x412/0x560
[ 2312.053365][ T1364]  _copy_from_iter+0x1d3/0x1670
[ 2312.053393][ T1364]  ? rcu_is_watching+0x15/0xb0
[ 2312.053420][ T1364]  ? __pfx__copy_from_iter+0x10/0x10
[ 2312.053450][ T1364]  ? netlink_sendmsg+0x650/0xb40
[ 2312.053464][ T1364]  ? skb_put+0x11b/0x210
[ 2312.053483][ T1364]  netlink_sendmsg+0x6c0/0xb40
[ 2312.053505][ T1364]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2312.053528][ T1364]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2312.053553][ T1364]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2312.053573][ T1364]  ____sys_sendmsg+0x972/0x9f0
[ 2312.053598][ T1364]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2312.053622][ T1364]  ? import_iovec+0x73/0xa0
[ 2312.053641][ T1364]  ___sys_sendmsg+0x2a5/0x360
[ 2312.053663][ T1364]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2312.053705][ T1364]  ? __fget_files+0x2a/0x420
[ 2312.053728][ T1364]  ? __fget_files+0x3a0/0x420
[ 2312.053758][ T1364]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2312.053778][ T1364]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2312.053803][ T1364]  ? __pfx_ksys_write+0x10/0x10
[ 2312.053828][ T1364]  do_syscall_64+0x14d/0xf80
[ 2312.053870][ T1364]  ? trace_irq_disable+0x3b/0x150
[ 2312.053893][ T1364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2312.053909][ T1364]  ? clear_bhb_loop+0x40/0x90
[ 2312.053928][ T1364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2312.053944][ T1364] RIP: 0033:0x7fa876d9c799
[ 2312.053959][ T1364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2312.053972][ T1364] RSP: 002b:00007fa877c3b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2312.053989][ T1364] RAX: ffffffffffffffda RBX: 00007fa877015fa0 RCX: 00007fa876d9c799
[ 2312.054001][ T1364] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 2312.054010][ T1364] RBP: 00007fa877c3b090 R08: 0000000000000000 R09: 0000000000000000
[ 2312.054019][ T1364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2312.054029][ T1364] R13: 00007fa877016038 R14: 00007fa877015fa0 R15: 00007fa87713fa48
[ 2312.054052][ T1364]  </TASK>
[ 2312.449026][T11687] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[ 2312.913246][ T1371] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7564'.
[ 2312.951637][ T1371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2312.968987][ T1371] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7564'.
[ 2313.025533][T11687] usb 4-1: config index 0 descriptor too short (expected 8192, got 36)
[ 2313.039167][T11687] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2313.098625][   T30] kauditd_printk_skb: 291 callbacks suppressed
[ 2313.098647][   T30] audit: type=1326 audit(1774507474.842:10448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2313.108312][T11687] usb 4-1: config 0 has no interfaces?
[ 2313.488562][T11691] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2313.654696][   T30] audit: type=1326 audit(1774507474.842:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2313.708931][T11687] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2313.728693][T11687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2313.750905][T11687] usb 4-1: config 0 descriptor??
[ 2313.919146][T11691] usb 6-1: Using ep0 maxpacket: 32
[ 2313.947639][   T30] audit: type=1326 audit(1774507474.842:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2314.019921][T11691] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 2314.043267][T11691] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2314.082431][T11691] usb 6-1: Product: syz
[ 2314.092581][T11691] usb 6-1: Manufacturer: syz
[ 2314.098050][   T30] audit: type=1326 audit(1774507474.842:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2314.148555][T11691] usb 6-1: SerialNumber: syz
[ 2314.189795][T11691] usb 6-1: config 0 descriptor??
[ 2314.276330][   T30] audit: type=1326 audit(1774507474.842:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2314.544845][   T30] audit: type=1326 audit(1774507475.412:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2314.697423][   T30] audit: type=1326 audit(1774507475.412:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa876d9c799 code=0x7ffc0000
[ 2314.931971][T11691] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 034
[ 2315.101026][   T30] audit: type=1326 audit(1774507476.692:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa876d9c42b code=0x7ffc0000
[ 2315.295866][   T30] audit: type=1326 audit(1774507476.692:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa876d9c42b code=0x7ffc0000
[ 2315.387874][   T30] audit: type=1326 audit(1774507476.692:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1373 comm="syz.5.7565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa876d5cfce code=0x7ffc0000
[ 2315.491921][T11691] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[ 2315.650592][T11691] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 2315.660154][T11691] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2315.682606][T11691] usb 3-1: config 0 descriptor??
[ 2315.746032][T11687] usb 4-1: USB disconnect, device number 16
[ 2315.885052][ T1391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7570'.
[ 2315.900907][T11691] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 2316.114634][T11691] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[ 2316.121638][T11691] [drm] Initialized udl on minor 2
[ 2316.149161][T11699] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 2316.302141][T11691] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[ 2316.316403][T11691] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 2316.337348][T11699] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2316.348320][T11699] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2316.360867][T11699] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2316.371073][T11699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2316.417475][T11699] usb 2-1: config 0 descriptor??
[ 2316.451391][T11699] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2316.514897][T11687] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 2316.516253][T31708] usb 3-1: USB disconnect, device number 21
[ 2316.534823][T11687] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[ 2316.535645][T11699] dvb-usb: bulk message failed: -22 (3/0)
[ 2316.586942][T11699] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2316.615975][T11699] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2316.632960][T11699] usb 2-1: media controller created
[ 2316.644580][T11699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2316.669262][T11699] dvb-usb: bulk message failed: -22 (6/0)
[ 2316.685984][T11699] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2316.705097][T11699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input250
[ 2316.741051][T11699] dvb-usb: schedule remote query interval to 150 msecs.
[ 2316.762558][T11699] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2316.918558][T11699] dvb-usb: bulk message failed: -22 (1/0)
[ 2316.924771][T11699] dvb-usb: error while querying for an remote control event.
[ 2317.099369][T11699] dvb-usb: bulk message failed: -22 (1/0)
[ 2317.115718][T11699] dvb-usb: error while querying for an remote control event.
[ 2317.184704][ T1391] i2c i2c-1: failure writing data
[ 2317.190483][T11687] usb 6-1: USB disconnect, device number 34
[ 2317.212424][T11691] usb 2-1: USB disconnect, device number 127
[ 2317.286641][T11691] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2317.508227][ T1408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7573'.
[ 2317.862555][ T1407] kvm_pr_unimpl_wrmsr: 225 callbacks suppressed
[ 2317.862574][ T1407] kvm: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0xc1) = 0x87
[ 2318.139125][ T1407] kvm: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0xc2) = 0x87
[ 2318.399465][ T1407] kvm: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0x87
[ 2318.746583][ T1407] kvm: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0x87
[ 2318.757663][ T1407] kvm: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0x87
[ 2318.822507][ T1407] kvm_intel: kvm [1406]: vcpu0, guest rIP: 0x912c Unhandled WRMSR(0x1d9) = 0x87
[ 2319.706598][ T1435] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7579'.
[ 2320.594782][ T1441] FAULT_INJECTION: forcing a failure.
[ 2320.594782][ T1441] name failslab, interval 1, probability 0, space 0, times 0
[ 2320.644567][ T1441] CPU: 1 UID: 0 PID: 1441 Comm: syz.1.7581 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2320.644603][ T1441] Tainted: [L]=SOFTLOCKUP
[ 2320.644611][ T1441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2320.644625][ T1441] Call Trace:
[ 2320.644636][ T1441]  <TASK>
[ 2320.644645][ T1441]  dump_stack_lvl+0xe8/0x150
[ 2320.644684][ T1441]  should_fail_ex+0x412/0x560
[ 2320.644720][ T1441]  should_failslab+0xa8/0x100
[ 2320.644751][ T1441]  __kmalloc_noprof+0xe8/0x760
[ 2320.644784][ T1441]  ? load_msg+0xd1/0x3b0
[ 2320.644875][ T1441]  load_msg+0xd1/0x3b0
[ 2320.644894][ T1441]  do_msgsnd+0x1a9/0x1530
[ 2320.644912][ T1441]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2320.644935][ T1441]  ? __fget_files+0x3a0/0x420
[ 2320.644968][ T1441]  ? __pfx_do_msgsnd+0x10/0x10
[ 2320.644988][ T1441]  ? __might_fault+0xaf/0x130
[ 2320.645006][ T1441]  ? __x64_sys_msgsnd+0xee/0x120
[ 2320.645024][ T1441]  do_syscall_64+0x14d/0xf80
[ 2320.645042][ T1441]  ? trace_irq_disable+0x3b/0x150
[ 2320.645065][ T1441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2320.645081][ T1441]  ? clear_bhb_loop+0x40/0x90
[ 2320.645100][ T1441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2320.645116][ T1441] RIP: 0033:0x7f413d39c799
[ 2320.645132][ T1441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2320.645146][ T1441] RSP: 002b:00007f413e257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045
[ 2320.645169][ T1441] RAX: ffffffffffffffda RBX: 00007f413d616090 RCX: 00007f413d39c799
[ 2320.645181][ T1441] RDX: 0000000000002000 RSI: 0000200000000340 RDI: 0000000000000000
[ 2320.645191][ T1441] RBP: 00007f413e257090 R08: 0000000000000000 R09: 0000000000000000
[ 2320.645201][ T1441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2320.645211][ T1441] R13: 00007f413d616128 R14: 00007f413d616090 R15: 00007f413d73fa48
[ 2320.645235][ T1441]  </TASK>
[ 2321.253080][ T1452] pim6reg: entered allmulticast mode
[ 2321.402658][T11687] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 2321.582567][T11687] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2321.601792][T11687] usb 4-1: not running at top speed; connect to a high speed hub
[ 2321.625407][T11687] usb 4-1: config 81 has an invalid interface number: 90 but max is 3
[ 2321.665916][ T1460] input: syz0 as /devices/virtual/input/input251
[ 2321.751536][ T1446] ALSA: mixer_oss: invalid OSS volume ''
[ 2321.788875][ T1462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7586'.
[ 2321.815605][T11687] usb 4-1: config 81 has an invalid interface number: 80 but max is 3
[ 2321.832461][T11687] usb 4-1: config 81 has an invalid interface number: 188 but max is 3
[ 2321.881434][T11687] usb 4-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config
[ 2322.218523][T11687] usb 4-1: config 81 has 3 interfaces, different from the descriptor's value: 4
[ 2322.244910][T11687] usb 4-1: config 81 has no interface number 0
[ 2322.259095][T11687] usb 4-1: config 81 has no interface number 1
[ 2322.265543][T11687] usb 4-1: config 81 has no interface number 2
[ 2322.272258][T11687] usb 4-1: config 81 interface 90 altsetting 7 endpoint 0xA has invalid maxpacket 1023, setting to 64
[ 2322.338621][T11699] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[ 2322.368588][T11687] usb 4-1: config 81 interface 90 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[ 2322.402595][T11687] usb 4-1: config 81 interface 80 altsetting 128 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 2322.438243][T11687] usb 4-1: config 81 interface 80 altsetting 128 has a duplicate endpoint with address 0xA, skipping
[ 2322.514814][T11687] usb 4-1: config 81 interface 80 altsetting 128 endpoint 0xE has invalid maxpacket 512, setting to 64
[ 2322.532249][T11699] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2322.588741][T11687] usb 4-1: config 81 interface 80 altsetting 128 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 2322.641888][T11699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2322.655592][T11699] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 2322.668767][T11699] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2322.706556][T11699] usb 3-1: config 0 descriptor??
[ 2322.712698][T11687] usb 4-1: config 81 interface 80 altsetting 128 has a duplicate endpoint with address 0x2, skipping
[ 2322.725813][T11699] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 2322.738638][T11699] dvb-usb: bulk message failed: -22 (3/0)
[ 2322.768982][T11687] usb 4-1: config 81 interface 188 altsetting 133 has a duplicate endpoint with address 0xA, skipping
[ 2322.799216][T11699] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 2322.849774][T11699] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 2322.858622][T11699] usb 3-1: media controller created
[ 2322.873017][T11687] usb 4-1: config 81 interface 188 altsetting 133 endpoint 0xB has invalid wMaxPacketSize 0
[ 2322.897650][T11687] usb 4-1: config 81 interface 188 altsetting 133 has 3 endpoint descriptors, different from the interface descriptor's value: 12
[ 2322.902408][T11699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2322.967262][ T1462] dvb-usb: bulk message failed: -22 (7/0)
[ 2322.975959][T11687] usb 4-1: config 81 interface 90 has no altsetting 0
[ 2323.008701][T11687] usb 4-1: config 81 interface 80 has no altsetting 0
[ 2323.028818][T11687] usb 4-1: config 81 interface 188 has no altsetting 0
[ 2323.177568][T11687] usb 4-1: Dual-Role OTG device on HNP port
[ 2323.196198][T11687] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice= 1.36
[ 2323.206660][T11687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2323.240504][T11687] usb 4-1: Product: syz
[ 2323.263790][T11687] usb 4-1: Manufacturer: syz
[ 2323.282920][T11699] dvb-usb: bulk message failed: -22 (6/0)
[ 2323.303124][T11687] usb 4-1: SerialNumber: syz
[ 2323.319662][T11699] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 2323.384920][T11699] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input252
[ 2323.484646][T11699] dvb-usb: schedule remote query interval to 150 msecs.
[ 2323.514498][T11699] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 2323.654995][T11687] kvaser_usb 4-1:81.90: error -ENODEV: Cannot get usb endpoint(s)
[ 2323.668617][T16001] dvb-usb: bulk message failed: -22 (1/0)
[ 2323.674577][T16001] dvb-usb: error while querying for an remote control event.
[ 2323.710105][T11687] kvaser_usb 4-1:81.80: error -ENODEV: Cannot get usb endpoint(s)
[ 2323.766155][T11699] usb 3-1: USB disconnect, device number 22
[ 2323.813230][T11687] kvaser_usb 4-1:81.188: error -ENODEV: Cannot get usb endpoint(s)
[ 2323.869272][T11687] usb 4-1: USB disconnect, device number 17
[ 2323.911744][T11699] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 2324.046930][ T1478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7591'.
[ 2325.068672][T11699] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 2325.221668][ T1500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7593'.
[ 2325.298697][T11699] usb 4-1: Using ep0 maxpacket: 8
[ 2325.370730][T11699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2325.389160][T11699] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2325.448583][T11699] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[ 2325.459898][ T1498] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2325.476993][T11699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2325.506863][   T30] kauditd_printk_skb: 16 callbacks suppressed
[ 2325.506887][   T30] audit: type=1800 audit(1774507487.282:10474): pid=1498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7594" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[ 2325.551439][T11699] usb 4-1: config 0 descriptor??
[ 2325.976865][ T1508] FAULT_INJECTION: forcing a failure.
[ 2325.976865][ T1508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2326.026648][ T1508] CPU: 0 UID: 0 PID: 1508 Comm: syz.2.7596 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2326.026690][ T1508] Tainted: [L]=SOFTLOCKUP
[ 2326.026699][ T1508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2326.026713][ T1508] Call Trace:
[ 2326.026723][ T1508]  <TASK>
[ 2326.026733][ T1508]  dump_stack_lvl+0xe8/0x150
[ 2326.026771][ T1508]  should_fail_ex+0x412/0x560
[ 2326.026808][ T1508]  _copy_from_iter+0x1d3/0x1670
[ 2326.026847][ T1508]  ? rcu_is_watching+0x15/0xb0
[ 2326.026884][ T1508]  ? __pfx__copy_from_iter+0x10/0x10
[ 2326.026926][ T1508]  ? netlink_sendmsg+0x650/0xb40
[ 2326.026946][ T1508]  ? skb_put+0x11b/0x210
[ 2326.026973][ T1508]  netlink_sendmsg+0x6c0/0xb40
[ 2326.027004][ T1508]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2326.027027][ T1508]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 2326.027059][ T1508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2326.027086][ T1508]  ____sys_sendmsg+0x972/0x9f0
[ 2326.027120][ T1508]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2326.027152][ T1508]  ? import_iovec+0x73/0xa0
[ 2326.027179][ T1508]  ___sys_sendmsg+0x2a5/0x360
[ 2326.027211][ T1508]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2326.027273][ T1508]  ? __fget_files+0x2a/0x420
[ 2326.027304][ T1508]  ? __fget_files+0x3a0/0x420
[ 2326.027347][ T1508]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 2326.027376][ T1508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2326.027412][ T1508]  ? __pfx_ksys_write+0x10/0x10
[ 2326.027442][ T1508]  ? __secure_computing+0xe1/0x2a0
[ 2326.027471][ T1508]  do_syscall_64+0x14d/0xf80
[ 2326.027496][ T1508]  ? trace_irq_disable+0x3b/0x150
[ 2326.027528][ T1508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.027551][ T1508]  ? clear_bhb_loop+0x40/0x90
[ 2326.027578][ T1508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.027601][ T1508] RIP: 0033:0x7fc946f9c799
[ 2326.027630][ T1508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2326.027650][ T1508] RSP: 002b:00007fc947e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2326.027675][ T1508] RAX: ffffffffffffffda RBX: 00007fc947215fa0 RCX: 00007fc946f9c799
[ 2326.027691][ T1508] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011
[ 2326.027705][ T1508] RBP: 00007fc947e3e090 R08: 0000000000000000 R09: 0000000000000000
[ 2326.027719][ T1508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2326.027733][ T1508] R13: 00007fc947216038 R14: 00007fc947215fa0 R15: 00007fc94733fa48
[ 2326.027767][ T1508]  </TASK>
[ 2326.673093][ T1514] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7597'.
[ 2326.693433][ T1514] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7597'.
[ 2326.746973][ T1516] 
[ 2326.749348][ T1516] =====================================================
[ 2326.756352][ T1516] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 2326.763887][ T1516] syzkaller #0 Tainted: G             L     
[ 2326.769882][ T1516] -----------------------------------------------------
[ 2326.776842][ T1516] syz.2.7598/1516 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2326.784478][ T1516] ffff888028d0a468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150
[ 2326.793115][ T1516] 
[ 2326.793115][ T1516] and this task is already holding:
[ 2326.800493][ T1516] ffffffff8effcc98 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0
[ 2326.809203][ T1516] which would create a new lock dependency:
[ 2326.815129][ T1516]  (kbd_event_lock){..-.}-{3:3} -> (&tty->flow.lock){....}-{3:3}
[ 2326.822896][ T1516] 
[ 2326.822896][ T1516] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 2326.832429][ T1516]  (kbd_event_lock){..-.}-{3:3}
[ 2326.832458][ T1516] 
[ 2326.832458][ T1516] ... which became SOFTIRQ-irq-safe at:
[ 2326.845066][ T1516]   lock_acquire+0xf0/0x2e0
[ 2326.849606][ T1516]   _raw_spin_lock+0x2e/0x40
[ 2326.854207][ T1516]   kbd_event+0xd6/0x40d0
[ 2326.858545][ T1516]   input_handle_events_default+0xd4/0x1a0
[ 2326.864392][ T1516]   input_pass_values+0x288/0x890
[ 2326.869499][ T1516]   input_event_dispose+0x3e5/0x6b0
[ 2326.874712][ T1516]   input_event+0x89/0xe0
[ 2326.879285][ T1516]   hidinput_hid_event+0x14cb/0x1ed0
[ 2326.884595][ T1516]   hid_process_event+0x4be/0x620
[ 2326.889659][ T1516]   hid_report_raw_event+0xec2/0x1730
[ 2326.895046][ T1516]   hid_input_report+0x44b/0x580
[ 2326.900005][ T1516]   hid_irq_in+0x47e/0x6d0
[ 2326.904594][ T1516]   __usb_hcd_giveback_urb+0x376/0x540
[ 2326.904746][ T1516]   dummy_timer+0xbbd/0x45d0
[ 2326.914836][ T1516]   __hrtimer_run_queues+0x53a/0xcc0
[ 2326.914864][ T1516]   hrtimer_run_softirq+0x182/0x5a0
[ 2326.914887][ T1516]   handle_softirqs+0x22a/0x870
[ 2326.914907][ T1516]   __irq_exit_rcu+0x5f/0x150
[ 2326.914927][ T1516]   irq_exit_rcu+0x9/0x30
[ 2326.914945][ T1516]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2326.914963][ T1516]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2326.914979][ T1516]   pv_native_safe_halt+0xf/0x20
[ 2326.914994][ T1516]   default_idle+0x9/0x20
[ 2326.915012][ T1516]   default_idle_call+0x72/0xb0
[ 2326.915031][ T1516]   do_idle+0x36a/0x5f0
[ 2326.915051][ T1516]   cpu_startup_entry+0x43/0x60
[ 2326.915072][ T1516]   start_secondary+0x101/0x110
[ 2326.915090][ T1516]   common_startup_64+0x13e/0x147
[ 2326.915105][ T1516] 
[ 2326.915105][ T1516] to a SOFTIRQ-irq-unsafe lock:
[ 2326.915120][ T1516]  (tasklist_lock){.+.+}-{3:3}
[ 2326.915138][ T1516] 
[ 2326.915138][ T1516] ... which became SOFTIRQ-irq-unsafe at:
[ 2326.915146][ T1516] ...
[ 2326.915200][ T1516]   lock_acquire+0xf0/0x2e0
[ 2326.915239][ T1516]   _raw_read_lock+0x36/0x50
[ 2326.915260][ T1516]   __do_wait+0xde/0x740
[ 2326.915281][ T1516]   do_wait+0x1e7/0x540
[ 2326.915304][ T1516]   kernel_wait+0xd6/0x1c0
[ 2326.915329][ T1516]   call_usermodehelper_exec_work+0xbe/0x230
[ 2326.915349][ T1516]   process_scheduled_works+0xb6e/0x18c0
[ 2326.915368][ T1516]   worker_thread+0xa53/0xfc0
[ 2326.915387][ T1516]   kthread+0x388/0x470
[ 2326.915413][ T1516]   ret_from_fork+0x51e/0xb90
[ 2326.915437][ T1516]   ret_from_fork_asm+0x1a/0x30
[ 2326.915459][ T1516] 
[ 2326.915459][ T1516] other info that might help us debug this:
[ 2326.915459][ T1516] 
[ 2326.915466][ T1516] Chain exists of:
[ 2326.915466][ T1516]   kbd_event_lock --> &tty->flow.lock --> tasklist_lock
[ 2326.915466][ T1516] 
[ 2326.915497][ T1516]  Possible interrupt unsafe locking scenario:
[ 2326.915497][ T1516] 
[ 2326.915503][ T1516]        CPU0                    CPU1
[ 2326.915509][ T1516]        ----                    ----
[ 2326.915549][ T1516]   lock(tasklist_lock);
[ 2326.915561][ T1516]                                local_irq_disable();
[ 2326.915568][ T1516]                                lock(kbd_event_lock);
[ 2326.915582][ T1516]                                lock(&tty->flow.lock);
[ 2326.915595][ T1516]   <Interrupt>
[ 2326.915600][ T1516]     lock(kbd_event_lock);
[ 2326.915647][ T1516] 
[ 2326.915647][ T1516]  *** DEADLOCK ***
[ 2326.915647][ T1516] 
[ 2326.915653][ T1516] 5 locks held by syz.2.7598/1516:
[ 2326.915663][ T1516]  #0: ffff88802b90b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 2326.915703][ T1516]  #1: ffff88802b75c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 2326.915752][ T1516]  #2: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 2326.915795][ T1516]  #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 2326.915840][ T1516]  #4: ffffffff8effcc98 (kbd_event_lock){..-.}-{3:3}, at: kbd_event+0xd6/0x40d0
[ 2326.915879][ T1516] 
[ 2326.915879][ T1516] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 2326.915888][ T1516] -> (kbd_event_lock){..-.}-{3:3} {
[ 2326.915910][ T1516]    IN-SOFTIRQ-W at:
[ 2326.915968][ T1516]                     lock_acquire+0xf0/0x2e0
[ 2326.915987][ T1516]                     _raw_spin_lock+0x2e/0x40
[ 2326.916001][ T1516]                     kbd_event+0xd6/0x40d0
[ 2326.916015][ T1516]                     input_handle_events_default+0xd4/0x1a0
[ 2326.916031][ T1516]                     input_pass_values+0x288/0x890
[ 2326.916053][ T1516]                     input_event_dispose+0x3e5/0x6b0
[ 2326.916072][ T1516]                     input_event+0x89/0xe0
[ 2326.916089][ T1516]                     hidinput_hid_event+0x14cb/0x1ed0
[ 2326.916105][ T1516]                     hid_process_event+0x4be/0x620
[ 2326.916136][ T1516]                     hid_report_raw_event+0xec2/0x1730
[ 2326.916157][ T1516]                     hid_input_report+0x44b/0x580
[ 2326.916182][ T1516]                     hid_irq_in+0x47e/0x6d0
[ 2326.916200][ T1516]                     __usb_hcd_giveback_urb+0x376/0x540
[ 2326.916223][ T1516]                     dummy_timer+0xbbd/0x45d0
[ 2326.916245][ T1516]                     __hrtimer_run_queues+0x53a/0xcc0
[ 2326.916267][ T1516]                     hrtimer_run_softirq+0x182/0x5a0
[ 2326.916289][ T1516]                     handle_softirqs+0x22a/0x870
[ 2326.916309][ T1516]                     __irq_exit_rcu+0x5f/0x150
[ 2326.916328][ T1516]                     irq_exit_rcu+0x9/0x30
[ 2326.916365][ T1516]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2326.916389][ T1516]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2326.916413][ T1516]                     pv_native_safe_halt+0xf/0x20
[ 2326.916438][ T1516]                     default_idle+0x9/0x20
[ 2326.916466][ T1516]                     default_idle_call+0x72/0xb0
[ 2326.916486][ T1516]                     do_idle+0x36a/0x5f0
[ 2326.916507][ T1516]                     cpu_startup_entry+0x43/0x60
[ 2326.916529][ T1516]                     start_secondary+0x101/0x110
[ 2326.916547][ T1516]                     common_startup_64+0x13e/0x147
[ 2326.916562][ T1516]    INITIAL USE at:
[ 2326.916594][ T1516]                    lock_acquire+0xf0/0x2e0
[ 2326.916616][ T1516]                    _raw_spin_lock_irqsave+0x40/0x60
[ 2326.916631][ T1516]                    vt_reset_unicode+0x2b/0x1a0
[ 2326.916646][ T1516]                    reset_vc+0x68/0x1b0
[ 2326.916665][ T1516]                    vc_init+0x70/0x4a0
[ 2326.916711][ T1516]                    con_init+0x377/0x6a0
[ 2326.916803][ T1516]                    console_init+0x10b/0x4d0
[ 2326.916859][ T1516]                    start_kernel+0x22b/0x3d0
[ 2326.916885][ T1516]                    x86_64_start_reservations+0x24/0x30
[ 2326.916926][ T1516]                    x86_64_start_kernel+0x143/0x1c0
[ 2326.916947][ T1516]                    common_startup_64+0x13e/0x147
[ 2326.916961][ T1516]  }
[ 2326.916967][ T1516]  ... key      at: [<ffffffff8effcc98>] kbd_event_lock+0x18/0xa0
[ 2326.917076][ T1516] 
[ 2326.917076][ T1516] the dependencies between the lock to be acquired
[ 2326.917082][ T1516]  and SOFTIRQ-irq-unsafe lock:
[ 2326.917105][ T1516]    -> (tasklist_lock){.+.+}-{3:3} {
[ 2326.917137][ T1516]       HARDIRQ-ON-R at:
[ 2326.917146][ T1516]                           lock_acquire+0xf0/0x2e0
[ 2326.917166][ T1516]                           _raw_read_lock+0x36/0x50
[ 2326.917180][ T1516]                           __do_wait+0xde/0x740
[ 2326.917196][ T1516]                           do_wait+0x1e7/0x540
[ 2326.917211][ T1516]                           kernel_wait+0xd6/0x1c0
[ 2326.917227][ T1516]                           call_usermodehelper_exec_work+0xbe/0x230
[ 2326.917248][ T1516]                           process_scheduled_works+0xb6e/0x18c0
[ 2326.917268][ T1516]                           worker_thread+0xa53/0xfc0
[ 2326.917288][ T1516]                           kthread+0x388/0x470
[ 2326.917302][ T1516]                           ret_from_fork+0x51e/0xb90
[ 2326.917322][ T1516]                           ret_from_fork_asm+0x1a/0x30
[ 2326.917345][ T1516]       SOFTIRQ-ON-R at:
[ 2326.917354][ T1516]                           lock_acquire+0xf0/0x2e0
[ 2326.917373][ T1516]                           _raw_read_lock+0x36/0x50
[ 2326.917387][ T1516]                           __do_wait+0xde/0x740
[ 2326.917403][ T1516]                           do_wait+0x1e7/0x540
[ 2326.917418][ T1516]                           kernel_wait+0xd6/0x1c0
[ 2326.917434][ T1516]                           call_usermodehelper_exec_work+0xbe/0x230
[ 2326.917453][ T1516]                           process_scheduled_works+0xb6e/0x18c0
[ 2326.917473][ T1516]                           worker_thread+0xa53/0xfc0
[ 2326.917518][ T1516]                           kthread+0x388/0x470
[ 2326.917537][ T1516]                           ret_from_fork+0x51e/0xb90
[ 2326.917566][ T1516]                           ret_from_fork_asm+0x1a/0x30
[ 2326.917596][ T1516]       INITIAL USE at:
[ 2326.917606][ T1516]                          lock_acquire+0xf0/0x2e0
[ 2326.917627][ T1516]                          _raw_write_lock_irq+0x3d/0x50
[ 2326.917643][ T1516]                          copy_process+0x247a/0x3cd0
[ 2326.917664][ T1516]                          kernel_clone+0x248/0x8e0
[ 2326.917686][ T1516]                          user_mode_thread+0x110/0x180
[ 2326.917708][ T1516]                          rest_init+0x23/0x300
[ 2326.917729][ T1516]                          start_kernel+0x385/0x3d0
[ 2326.917746][ T1516]                          x86_64_start_reservations+0x24/0x30
[ 2326.917768][ T1516]                          x86_64_start_kernel+0x143/0x1c0
[ 2326.917789][ T1516]                          common_startup_64+0x13e/0x147
[ 2326.917804][ T1516]       INITIAL READ USE at:
[ 2326.917814][ T1516]                               lock_acquire+0xf0/0x2e0
[ 2326.917833][ T1516]                               _raw_read_lock+0x36/0x50
[ 2326.917847][ T1516]                               __do_wait+0xde/0x740
[ 2326.917862][ T1516]                               do_wait+0x1e7/0x540
[ 2326.917878][ T1516]                               kernel_wait+0xd6/0x1c0
[ 2326.917893][ T1516]                               call_usermodehelper_exec_work+0xbe/0x230
[ 2326.917913][ T1516]                               process_scheduled_works+0xb6e/0x18c0
[ 2326.917932][ T1516]                               worker_thread+0xa53/0xfc0
[ 2326.917952][ T1516]                               kthread+0x388/0x470
[ 2326.917966][ T1516]                               ret_from_fork+0x51e/0xb90
[ 2326.917985][ T1516]                               ret_from_fork_asm+0x1a/0x30
[ 2326.918008][ T1516]     }
[ 2326.918013][ T1516]     ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[ 2326.918103][ T1516]     ... acquired at:
[ 2326.918110][ T1516]    _raw_read_lock+0x36/0x50
[ 2326.918130][ T1516]    send_sigio+0x101/0x370
[ 2326.918146][ T1516]    dnotify_handle_event+0x169/0x440
[ 2326.918165][ T1516]    fsnotify+0x1831/0x1ae0
[ 2326.918178][ T1516]    fsnotify_move+0x1d7/0x5b0
[ 2326.918198][ T1516]    vfs_rename+0xcdd/0xeb0
[ 2326.918218][ T1516]    filename_renameat2+0x539/0x9c0
[ 2326.918239][ T1516]    __se_sys_renameat2+0x5a/0x2c0
[ 2326.918260][ T1516]    do_syscall_64+0x14d/0xf80
[ 2326.918277][ T1516]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.918292][ T1516] 
[ 2326.918297][ T1516]   -> (&f_owner->lock){....}-{3:3} {
[ 2326.918321][ T1516]      INITIAL USE at:
[ 2326.918330][ T1516]                        lock_acquire+0xf0/0x2e0
[ 2326.918349][ T1516]                        _raw_write_lock_irq+0x3d/0x50
[ 2326.918364][ T1516]                        __f_setown+0x67/0x370
[ 2326.918379][ T1516]                        fcntl_dirnotify+0x3f9/0x6a0
[ 2326.918396][ T1516]                        do_fcntl+0x77e/0x1a20
[ 2326.918412][ T1516]                        __se_sys_fcntl+0xc8/0x150
[ 2326.918445][ T1516]                        do_syscall_64+0x14d/0xf80
[ 2326.918467][ T1516]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.918488][ T1516]      INITIAL READ USE at:
[ 2326.918502][ T1516]                             lock_acquire+0xf0/0x2e0
[ 2326.918528][ T1516]                             _raw_read_lock_irqsave+0x48/0x60
[ 2326.918553][ T1516]                             send_sigio+0x38/0x370
[ 2326.918568][ T1516]                             dnotify_handle_event+0x169/0x440
[ 2326.918586][ T1516]                             fsnotify+0x1831/0x1ae0
[ 2326.918599][ T1516]                             path_openat+0x15c2/0x3860
[ 2326.918639][ T1516]                             do_file_open+0x23e/0x4a0
[ 2326.918662][ T1516]                             do_sys_openat2+0x113/0x200
[ 2326.918694][ T1516]                             __x64_sys_openat+0x138/0x170
[ 2326.918724][ T1516]                             do_syscall_64+0x14d/0xf80
[ 2326.918741][ T1516]                             entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.918775][ T1516]    }
[ 2326.918780][ T1516]    ... key      at: [<ffffffff9a2ef1e0>] file_f_owner_allocate.__key+0x0/0x20
[ 2326.918842][ T1516]    ... acquired at:
[ 2326.918848][ T1516]    _raw_read_lock_irqsave+0x48/0x60
[ 2326.918862][ T1516]    send_sigio+0x38/0x370
[ 2326.918877][ T1516]    kill_fasync+0x24d/0x4d0
[ 2326.918893][ T1516]    lease_break_callback+0x26/0x30
[ 2326.918910][ T1516]    __break_lease+0x81c/0x1e80
[ 2326.918932][ T1516]    vfs_remove_acl+0x21c/0x830
[ 2326.918945][ T1516]    path_removexattrat+0x4c4/0x750
[ 2326.918962][ T1516]    __x64_sys_fremovexattr+0x62/0x70
[ 2326.918977][ T1516]    do_syscall_64+0x14d/0xf80
[ 2326.918993][ T1516]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.919008][ T1516] 
[ 2326.919012][ T1516]  -> (&new->fa_lock){....}-{3:3} {
[ 2326.919035][ T1516]     INITIAL USE at:
[ 2326.919046][ T1516]                      lock_acquire+0xf0/0x2e0
[ 2326.919064][ T1516]                      _raw_write_lock_irq+0x3d/0x50
[ 2326.919079][ T1516]                      fasync_remove_entry+0xf1/0x1c0
[ 2326.919095][ T1516]                      sock_fasync+0x85/0xf0
[ 2326.919121][ T1516]                      __fput+0x8a5/0xa70
[ 2326.919142][ T1516]                      task_work_run+0x1d9/0x270
[ 2326.919158][ T1516]                      exit_to_user_mode_loop+0xed/0x480
[ 2326.919176][ T1516]                      do_syscall_64+0x32d/0xf80
[ 2326.919193][ T1516]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.919208][ T1516]     INITIAL READ USE at:
[ 2326.919218][ T1516]                           lock_acquire+0xf0/0x2e0
[ 2326.919236][ T1516]                           _raw_read_lock_irqsave+0x48/0x60
[ 2326.919251][ T1516]                           kill_fasync+0x199/0x4d0
[ 2326.919267][ T1516]                           lease_break_callback+0x26/0x30
[ 2326.919283][ T1516]                           __break_lease+0x81c/0x1e80
[ 2326.919305][ T1516]                           vfs_remove_acl+0x21c/0x830
[ 2326.919319][ T1516]                           path_removexattrat+0x4c4/0x750
[ 2326.919337][ T1516]                           __x64_sys_fremovexattr+0x62/0x70
[ 2326.919353][ T1516]                           do_syscall_64+0x14d/0xf80
[ 2326.919370][ T1516]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.919385][ T1516]   }
[ 2326.919390][ T1516]   ... key      at: [<ffffffff9a2ef200>] fasync_insert_entry.__key+0x0/0x20
[ 2326.919410][ T1516]   ... acquired at:
[ 2326.919416][ T1516]    _raw_read_lock_irqsave+0x48/0x60
[ 2326.919430][ T1516]    kill_fasync+0x199/0x4d0
[ 2326.919446][ T1516]    __start_tty+0x18c/0x220
[ 2326.919467][ T1516]    tty_send_xchar+0x1d2/0x4d0
[ 2326.919489][ T1516]    tty_ioctl+0x9c5/0xde0
[ 2326.919502][ T1516]    __se_sys_ioctl+0xfc/0x170
[ 2326.919518][ T1516]    do_syscall_64+0x14d/0xf80
[ 2326.919534][ T1516]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.919548][ T1516] 
[ 2326.919552][ T1516] -> (&tty->flow.lock){....}-{3:3} {
[ 2326.919574][ T1516]    INITIAL USE at:
[ 2326.919584][ T1516]                    lock_acquire+0xf0/0x2e0
[ 2326.919603][ T1516]                    _raw_spin_lock_irqsave+0x40/0x60
[ 2326.919619][ T1516]                    start_tty+0x20/0x70
[ 2326.919641][ T1516]                    n_tty_set_termios+0xa7c/0x10c0
[ 2326.919660][ T1516]                    tty_set_termios+0xdb3/0x1800
[ 2326.919682][ T1516]                    set_termios+0x566/0x710
[ 2326.919704][ T1516]                    tty_mode_ioctl+0x4a6/0x7d0
[ 2326.919744][ T1516]                    tty_ioctl+0x9c5/0xde0
[ 2326.919764][ T1516]                    __se_sys_ioctl+0xfc/0x170
[ 2326.919787][ T1516]                    do_syscall_64+0x14d/0xf80
[ 2326.919817][ T1516]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.919834][ T1516]  }
[ 2326.919839][ T1516]  ... key      at: [<ffffffff9a5ce720>] alloc_tty_struct.__key.35+0x0/0x20
[ 2326.919911][ T1516]  ... acquired at:
[ 2326.919917][ T1516]    _raw_spin_lock_irqsave+0x40/0x60
[ 2326.919931][ T1516]    stop_tty+0x2f/0x150
[ 2326.919952][ T1516]    kbd_event+0x2ec1/0x40d0
[ 2326.919967][ T1516]    input_handle_events_default+0xd4/0x1a0
[ 2326.919983][ T1516]    input_pass_values+0x288/0x890
[ 2326.920005][ T1516]    input_event_dispose+0x330/0x6b0
[ 2326.920023][ T1516]    input_inject_event+0x1dd/0x340
[ 2326.920041][ T1516]    evdev_write+0x325/0x4c0
[ 2326.920054][ T1516]    vfs_write+0x29a/0xb90
[ 2326.920069][ T1516]    ksys_write+0x150/0x270
[ 2326.920084][ T1516]    do_syscall_64+0x14d/0xf80
[ 2326.920101][ T1516]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.920121][ T1516] 
[ 2326.920125][ T1516] 
[ 2326.920125][ T1516] stack backtrace:
[ 2326.920144][ T1516] CPU: 1 UID: 0 PID: 1516 Comm: syz.2.7598 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2326.920165][ T1516] Tainted: [L]=SOFTLOCKUP
[ 2326.920171][ T1516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 2326.920182][ T1516] Call Trace:
[ 2326.920189][ T1516]  <TASK>
[ 2326.920198][ T1516]  dump_stack_lvl+0xe8/0x150
[ 2326.920220][ T1516]  __lock_acquire+0x2a94/0x2cf0
[ 2326.920248][ T1516]  lock_acquire+0xf0/0x2e0
[ 2326.920267][ T1516]  ? stop_tty+0x2f/0x150
[ 2326.920292][ T1516]  _raw_spin_lock_irqsave+0x40/0x60
[ 2326.920306][ T1516]  ? stop_tty+0x2f/0x150
[ 2326.920327][ T1516]  stop_tty+0x2f/0x150
[ 2326.920350][ T1516]  kbd_event+0x2ec1/0x40d0
[ 2326.920368][ T1516]  ? __pfx_kbd_event+0x10/0x10
[ 2326.920382][ T1516]  ? finish_task_switch+0x240/0x920
[ 2326.920400][ T1516]  ? lockdep_hardirqs_on+0x7a/0x110
[ 2326.920419][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[ 2326.920440][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[ 2326.920463][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[ 2326.920483][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[ 2326.920506][ T1516]  ? __lock_acquire+0x6b5/0x2cf0
[ 2326.920527][ T1516]  ? lock_acquire+0xf0/0x2e0
[ 2326.920547][ T1516]  input_handle_events_default+0xd4/0x1a0
[ 2326.920564][ T1516]  ? input_pass_values+0x8d/0x890
[ 2326.920586][ T1516]  input_pass_values+0x288/0x890
[ 2326.920611][ T1516]  ? input_handle_event+0x70c/0xf30
[ 2326.920633][ T1516]  input_event_dispose+0x330/0x6b0
[ 2326.920653][ T1516]  input_inject_event+0x1dd/0x340
[ 2326.920673][ T1516]  ? input_inject_event+0xb6/0x340
[ 2326.920692][ T1516]  evdev_write+0x325/0x4c0
[ 2326.920709][ T1516]  ? __pfx_evdev_write+0x10/0x10
[ 2326.920723][ T1516]  ? bpf_lsm_file_permission+0x9/0x20
[ 2326.920742][ T1516]  ? security_file_permission+0x75/0x260
[ 2326.920763][ T1516]  ? rw_verify_area+0x255/0x4d0
[ 2326.920778][ T1516]  ? __pfx_evdev_write+0x10/0x10
[ 2326.920792][ T1516]  vfs_write+0x29a/0xb90
[ 2326.920810][ T1516]  ? __pfx_vfs_write+0x10/0x10
[ 2326.920827][ T1516]  ? __fget_files+0x2a/0x420
[ 2326.920875][ T1516]  ? __fget_files+0x2a/0x420
[ 2326.920909][ T1516]  ? __fget_files+0x3a0/0x420
[ 2326.920944][ T1516]  ? __fget_files+0x2a/0x420
[ 2326.920970][ T1516]  ksys_write+0x150/0x270
[ 2326.920987][ T1516]  ? __pfx_ksys_write+0x10/0x10
[ 2326.921021][ T1516]  do_syscall_64+0x14d/0xf80
[ 2326.921038][ T1516]  ? trace_irq_disable+0x3b/0x150
[ 2326.921061][ T1516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.921077][ T1516]  ? clear_bhb_loop+0x40/0x90
[ 2326.921094][ T1516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2326.921110][ T1516] RIP: 0033:0x7fc946f9c799
[ 2326.921130][ T1516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 2326.921144][ T1516] RSP: 002b:00007fc947e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2326.921160][ T1516] RAX: ffffffffffffffda RBX: 00007fc947215fa0 RCX: 00007fc946f9c799
[ 2326.921172][ T1516] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000005
[ 2326.921182][ T1516] RBP: 00007fc947032c99 R08: 0000000000000000 R09: 0000000000000000
[ 2326.921192][ T1516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2326.921200][ T1516] R13: 00007fc947216038 R14: 00007fc947215fa0 R15: 00007fc94733fa48
[ 2326.921217][ T1516]  </TASK>
[ 2327.814339][T11687] usb 4-1: USB disconnect, device number 18