last executing test programs:

6.872892554s ago: executing program 1 (id=3736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000b00)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r5, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x302, 0x8, 0x1e5, 0x9, 0x2})
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_GET_MSRS_cpu(r9, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0x199, 0x0, 0x8001}]})
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="6003000000000000f9ffffffffffffff04000000000000000300000000000000070000000000000005010000000000000001000004000000020000000000000000000000010000000400000000000000008000000000000006000000000000000500000000000000e7ffffff000400000600000000a0000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff0f000026000000000000000100000000000000a8b900000000000007000000a6000000757365725f696400030000000000000009000000000000000900000000000000030000000000000004000000400000000100000000000000060000000000000040000000000000000900000000000000090000000000000008000000000000000600000006000000090000000020000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0700000000c00100000000000400000000000000040000000000000034000000000000002c402d2de0f62cdf2873f2f79b8c8a35b21d3366e55dcfc1e347bc32add4794af62ed63de376000000000000000000000000000000000000000000000000000001000000000000000001000000000000060000000000000006000000020000000000000000000000030000000000000054440000000000008e06000000000000b000000000000000070000000000000006000000050000000800000000100000ff070000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="ff7f000009000000000000000100727ad00000000000000600000000000000080000009b00000067726f75705f6964030000000000000003000000000000000700000000000000080000000000000006000000010000000100000000000000940000000000000001000000000000000100000000000080030000000000000008000000000000000200000021000000ff0f00000020000003", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0400000001800000000000000600000000000000000000000000000001000000060000005e00000000000000020000000000000000000000000000000500000000000000b000000400000000d3d9000001000080000000000000000000200000000000020100000000000000020000000000000009000000000000000600000000000000070000005b0c0000ff0f000000f00000a50f0000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="020000000300000000000000030000000000000002000000000000000700000003000000245b2a2e357c2700"], 0x0, 0x0, 0x0})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r10, 0x0)
r11 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, 0x0, &(0x7f0000000080))
getdents64(r6, 0x0, 0xc0)

5.04522276s ago: executing program 2 (id=3751):
r0 = socket$netlink(0x10, 0x3, 0x9) (async)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x800) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x20000001}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)

5.03303315s ago: executing program 2 (id=3752):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x41, 0xd1, 0xe0, 0x70, 0x403, 0xb810, 0x5a2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc1, 0xc3, 0x0, 0x53, 0x7e, 0xbc, 0x10}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x44, &(0x7f00000001c0)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r2, 0x0, 0x0, 0x5)

3.572068748s ago: executing program 1 (id=3761):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r2)
pipe2$watch_queue(&(0x7f0000000040)={<r4=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xcd)
r5 = add_key$fscrypt_v1(&(0x7f0000000380), &(0x7f0000000280)={'fscrypt:', @auto=[0xe, 0x0, 0x0, 0x36, 0x61, 0x38, 0x62, 0x64, 0x31, 0x35, 0x34, 0x35, 0x0, 0x39, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x24}, 0x48, r2)
keyctl$KEYCTL_MOVE(0x1e, r5, r2, r3, 0x1)
keyctl$unlink(0x9, r5, r3)
keyctl$instantiate(0xc, r5, &(0x7f0000000240)=ANY=[@ANYBLOB="6e65772064656661756c743c757365723a73797e2030303030309f3030303030303030303033373234003c4b3cacc6b193c7ffd0aa0f8b82f21188d437b6055a001a6361776e"], 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'trusted:'}, 0x1d, 0xfffffffffffffffd)
prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0)
syz_clone(0x900800, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r6)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d0800090002", 0x17}], 0x1}, 0x24044880)
ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="000200"})
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r8 = socket(0x2c, 0x3, 0x0)
r9 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000})
getsockopt(r8, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000))

3.485615787s ago: executing program 1 (id=3762):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x9000000}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

3.425061947s ago: executing program 1 (id=3763):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) (async)
ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000000300)={0x84, 0x45, "20fb67624ecea9cb09a3cef9d86b36850eba801bae4d24c9fef3091d9ec0da8c3837cb19e3835aa3b59eb1e17c2255ec874e9db7c538c4a643edef91cecd788dc7894b738f"})
r1 = syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
unlink(&(0x7f0000000100)='./file0/file1\x00') (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000180)='./file0/file1\x00', 0x0, 0x1085408, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r3, 0xbf7c) (async)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r6, &(0x7f0000000240)=""/186, 0xba) (async)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xd7615ec2ef3840f9}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) (async)
r8 = syz_open_dev$I2C(&(0x7f0000000140), 0x7fffffffffffffff, 0x201)
ioctl$I2C_RETRIES(r8, 0x701, 0x1) (async)
setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async)
connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x10009, @empty, 0xa}, 0x1c) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) (async)
r10 = socket$netlink(0x10, 0x3, 0x4)
writev(r10, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000200)={0x6, 0x19, 0xbfc2, 0x6, 0x7, "b8c81200eb0fffff0d0400000000002000"}) (async)
syz_open_dev$ptys(0xc, 0x3, 0x0)

2.664570156s ago: executing program 3 (id=3772):
r0 = syz_io_uring_setup(0x48ce, &(0x7f0000000200)={0x0, 0x5e9a, 0x800, 0x3, 0x19e}, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x10010, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x489})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0x1000})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
getpid()
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000080)={r7, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})
r8 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_buf(r8, 0x29, 0x1d, &(0x7f00000001c0)="ec003ab9", 0x4)
ppoll(&(0x7f0000000280)=[{r0, 0x2408}, {r1, 0xc0}, {0xffffffffffffffff, 0x9410}, {r5, 0x6000}, {r0, 0x40}, {0xffffffffffffffff, 0x9023}, {r7, 0x2}, {r8, 0x86}], 0x8, &(0x7f00000002c0)={0x0, 0x989680}, &(0x7f0000000300), 0x8)
setns(0xffffffffffffffff, 0x24020000)
r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_pidfd_open(r9, 0x0)
setns(r10, 0x24020000)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x189, 0x0)
syz_usb_connect(0xe3b58763dc97bd6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000020000907000000000000000905e8ff000900000009050a", @ANYRES64=0x0], 0x0)

1.919138668s ago: executing program 2 (id=3776):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x6c}}, 0x0)
fchdir(r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0)

1.77778168s ago: executing program 2 (id=3779):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000101400032bbd7000ffdbdf2508000100050000000800030004000000080001000100000008014b001300000008000300010000000800150005000000"], 0x40}, 0x1, 0x0, 0x0, 0x808}, 0x4c804)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x7e000, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRESOCT=r4], 0x7c}, 0x1, 0x0, 0x0, 0x80008d4}, 0x0)
r6 = timerfd_create(0x0, 0x0)
timerfd_settime(r6, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1})
timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x6c}}, 0x8)
fchdir(r1)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x5, 0x486, 0x1000, {}, {0x77359400}, {0x2, 0x0, 0x1}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "e05ad60a92c50497"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
sendmsg$can_bcm(r7, &(0x7f0000000340)={0x0, 0xffffffffffffff96, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000003000020010300006ee7ba2197db18bc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
preadv2(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/167, 0xa7}, {&(0x7f0000000340)=""/95, 0x5f}], 0x2, 0x5, 0x1, 0x6)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00')
ftruncate(r8, 0x7fffffffffffffff)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', &(0x7f0000000140)={0x400000, 0x20, 0x22}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x10000, 0x12a)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)

1.705048403s ago: executing program 3 (id=3780):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x6c}}, 0x0)
fchdir(r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) (fail_nth: 2)

1.637209179s ago: executing program 2 (id=3782):
mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='cgroup2\x00', 0x2000000000000000, 0x0)

1.436218476s ago: executing program 3 (id=3783):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x4000000000000000)

1.400108411s ago: executing program 2 (id=3784):
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = syz_usb_connect(0x3, 0x8d, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x3, "8b38c9"}, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0, 0x19})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000880)={0x20, 0x18, 0x3, "5cba26"}, 0x0, 0x0})
r2 = getpgrp(0x0)
prlimit64(r2, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r5 = dup(r4)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000bc0)={'mpc624\x00', [0x1000, 0x0, 0x7, 0x8, 0x5, 0x8, 0xfffffffa, 0x1, 0x1000, 0x3, 0x1ff, 0x7a34, 0xfffff196, 0xd2, 0x7, 0x2, 0x5, 0x7ff, 0x3, 0x2, 0xffff, 0xb42, 0x0, 0xe, 0x1000, 0x0, 0xffffffff, 0x2bab482c, 0xc1, 0x40, 0xda, 0x7]})
r6 = openat$cgroup_int(r3, &(0x7f00000004c0)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f00000000c0)=0x202, 0x12)
r7 = openat$cgroup(r3, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff)

1.213121719s ago: executing program 3 (id=3786):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x9900)
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={0x0, 0x38})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$sock_int(r3, 0x1, 0x22, &(0x7f0000000000)=0x1, 0x4)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000040)={r6, 0x2, 0x8, 0x20000190, &(0x7f0000000100)=[{0x8001, 0x0, 0x10}]})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000340)={r6, 0x101, 0x0, 0x5, 0x2, [], [0x0, 0x2, 0x68e13858, 0xdcd], [0x1, 0x8, 0x42f4, 0x8001], [0x10000, 0x5, 0xfffffffffffff800]})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x6375, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r9=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DROP_MASTER(r9, 0x641f)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000000050005000a00000011000300686173683a69702c706f7274000000006f"], 0x4c}}, 0x2)

1.127420273s ago: executing program 0 (id=3787):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500c00108005400000060ec971201983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0xa, 0x34324152, 0x3, 0xc, [{0x6, 0xfffffff8}, {0xdc5, 0x5}, {0x0, 0x5}, {0x8, 0x10000}, {0x1000, 0xcf}, {0x5, 0x6}, {0x1, 0xfffffff9}, {0x8003, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0xd4, 0x0, 0xb, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xb0, 0x1, '/dev/video2\x00\x0fS\xa9\xd5\xeb\xd0\\\xa2.\xeb\xd5\xc4\xfa\xe7\xa4\x92\x87\xed\xfbA\xddjnn=%\xecj\xa7M\xa3\t\xf3\f\x1c\xe4\x19M\xe5\xf3)\xaf\xa9R\x81\xb0\v6\x8e\x96dO\\7\xd7\xb2\x01\x0e\x13|\x0f\xcb!\xa1\xb4]F\xa3\x15;*\xdf\x81y)_\b\xb7\xc8hH\xc9n8\x12\xad\x9e!P\xa3\xc2\x84q\x90\x00;\x0f\xb3\x91\x05A\xf6+\at\x96x\xe8\"\x99\xcam~+\x86$\x8f\x15\x90\xea`\xa4\xab\f\xc0{\x9e;\x13\x17\xb8\xd0\xfb\xfbAVHd0\r\xee\xdcPi\xb5~7\xff\xce\f\aP\xc9\x1d\xf4f\xe1\xe1g\n'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000540)={0xc})

1.081319093s ago: executing program 3 (id=3788):
syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000440)="62b24c4e1d99cb7dc62638f909d9cb7b164e6b8293bfcc6aafbe66be134a41ea25000000bc5bda539c714f2e0aba867ac0243dee47e036b9bf4b145c7914bb1366e93439953f33cb638b60f7ed1a56daa998968940752f1e80b220cd392e7795fe11e29f0b18e5b6b3beed6afb3d5b038144b42cbf7505a88dd7109e948e770c1da74893e0", 0x85, r1)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000200)={0x8, 0x2000000, [{0x80000008, 0x405, 0x3, 0x200, 0x4, 0x3}, {0x6, 0x5, 0x0, 0x7ff, 0x6, 0xa, 0x3}, {0x40000000, 0x2, 0x4, 0x0, 0xa7, 0x3}, {0x2, 0x4, 0x2, 0x4, 0x53b, 0x2, 0xb}, {0x4, 0x5, 0x0, 0x9303, 0x80000001, 0x5, 0x10000}, {0x40000000, 0x7fff, 0x6, 0x8, 0x3, 0x2, 0x3}, {0x1, 0x12, 0x9, 0x3, 0x1, 0x4, 0x401}, {0x80000019, 0x7ff, 0x3, 0x1, 0xd7, 0x9}]})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x8, 0x1, 0x80, 0x0, 0xa, 0x6, 0xff, 0xa, 0x9, 0x7, 0x6, 0x48, 0x0, 0x1000, 0xffff, 0x5, 0x6, 0x8, 0x4, '\x00', 0x3, 0x7})
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x6301, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)

916.419301ms ago: executing program 0 (id=3789):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001600010a00000000000000000a0002"], 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x830}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000000)=0x100, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x17, 0x1}, 0x4a, [0x7ff, 0x3, 0x1, 0x40, 0x0, 0x4, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x86, 0x0, 0x0, 0x4000010, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x5, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x1, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0x9, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x2, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x40000000, 0x0, 0x1, 0x4, 0x81, 0xfffffff8, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb44, 0x10000, 0x2, 0x4, 0x10001, 0x75, 0xf, 0x3, 0x0, 0xd, 0x80000000, 0x0, 0x3ff, 0x9, 0x2, 0x9, 0x2, 0x103, 0x5, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0x75a, 0x2, 0x7ffffffd, 0x6, 0x9], [0x0, 0x8001, 0x3, 0x9f5, 0x0, 0xb, 0x1c75, 0xf51, 0x6, 0x40, 0x4, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x3, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0x563, 0x6, 0x8, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x3, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x45, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x4, 0x4, 0x45d, 0x4, 0x0, 0xd, 0xb2, 0x4, 0xb]}, 0x45c)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @private=0xa010102}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
socket$pppl2tp(0x18, 0x1, 0x1)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="000100000314020028bd7000fddbdf250900020073797a310000000008004100736977001400330076657468305f766972745f77696669000900020073797a310000000008004100727865001400330076657468305f6d6163767461700000000900020073797a320000000008004100727865001400330076656f5f7465616d0000000900020073797a31000000000800410072786500140033006272696467655f736c6176655f3100000900020073797a3200000000080041007369770014003300726f73653000000000000000000000000900020073797a31000000000800410072786500140033006772653000"/256], 0x100}, 0x1, 0x0, 0x0, 0x8004}, 0x4000)

855.936482ms ago: executing program 0 (id=3790):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1)
sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x731, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x488a1}, 0x80)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x17, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}], 0x10)

787.083797ms ago: executing program 0 (id=3791):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f000009de40)={0x30, r3, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)
getsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000007240)=""/116, &(0x7f00000072c0)=0x74)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010008000900010073797a30000000006c000000090a010400000000000000000100000008000a40000000000900020000087a32000000000900010073797a3000000000080005400000003d300011800b00010074617267657400002000028005000300c400000008000240000000000a0001"], 0xb4}, 0x1, 0x0, 0x0, 0x890}, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1000b2f8, 0x101440)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xb}, &(0x7f0000000140)=0x8)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_RESET_DIRTY_RINGS(r9, 0xaec7)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4)
r11 = accept4(r10, 0x0, 0x0, 0x0)
sendmsg$alg(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c810}, 0x40001)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/comedi4\x00', 0x201, 0x0)
r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r13=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r12, 0xc02064b6, &(0x7f00000001c0)={r13, <r14=>0x0, <r15=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r12, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r14, r15, 0x10, 0x9, 0x5778, 0x8, {0xf, 0x40, 0x8, 0xf, 0x6, 0x0, 0xa, 0x6, 0x0, 0x9cea, 0x49c, 0xfff, 0x5, 0x0, "df3230788dc8efa0c04d638ab166b1dd4b9c2285c738c8fd8939bec8e0613e1c"}})
recvmmsg$unix(r11, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000180)={0x1})
ioctl$USBDEVFS_RELEASE_PORT(r6, 0x80045519, &(0x7f0000000000)=0x2)

676.639414ms ago: executing program 0 (id=3792):
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x40000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

655.91882ms ago: executing program 0 (id=3793):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000406a05d200000000000001090224000100000036090432330919ac10d4b63839635e0ae400b90103000000092100080501220500090581030000070201"], 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$sock_int(r1, 0x1, 0x26, &(0x7f0000000000)=0x3, 0x4)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x1a9918b, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r9, 0xc0404807, &(0x7f0000000140)={0x4, "91d6286945b4e4abd20e1105b15d4a1007e387dd2f267a9b91a6dcff71b3f1a9e79f6c3287ad44a149ae578375de656eec78b71552c46712762afc3fd097b317"})
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r10, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0xc04})
fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, <r11=>0x0})
r12 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc))
setpgid(r11, r12)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r10})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r10, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000100)={0x28, 0x5, r10, r10, 0x1000, 0x800, 0x3ffe})

298.792004ms ago: executing program 1 (id=3794):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'pcl816\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x5, 0x5, 0x1000, 0x1, 0x3, 0x8504, 0x200009, 0x4, 0x79, 0x4, 0xffffffa8, 0x7ffffffa, 0x2e6a, 0x3, 0x7, 0x21, 0xa, 0xe2df, 0x8000706f, 0x8, 0x1, 0x3, 0xa, 0xffff, 0x1fe]})

435.552µs ago: executing program 1 (id=3795):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r3 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448cb, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r3, 0x0, 0x20008010)
close(0x3)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6)
r6 = dup3(r1, r0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r8, 0x0, 0x2000c800)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)

0s ago: executing program 3 (id=3796):
fremovexattr(0xffffffffffffffff, 0x0) (async, rerun: 64)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301"], 0x16) (async, rerun: 64)
sync() (async, rerun: 64)
sync() (async, rerun: 64)
sync() (async, rerun: 32)
socket(0x2, 0x80805, 0x0) (rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) (async)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000018}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4804)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x2, &(0x7f0000000580)=[{0x79b4, 0x7, 0x2, 0x7fffffff}, {0x1, 0xff, 0xc, 0x80}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') (async)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r4, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
sync() (async, rerun: 64)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (rerun: 64)
r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:*\tm', @ANYRESDEC=r6], 0xa)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x102) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
lsetxattr$trusted_overlay_upper(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), 0x0, 0x0, 0x1)

kernel console output (not intermixed with test programs):

b+0xa8/0x100
[  511.887201][T14757]  __kmalloc_noprof+0xdf/0x800
[  511.887228][T14757]  ? tomoyo_encode+0x28b/0x550
[  511.887261][T14757]  tomoyo_encode+0x28b/0x550
[  511.887294][T14757]  tomoyo_realpath_from_path+0x58d/0x5d0
[  511.887326][T14757]  ? tomoyo_domain+0xd8/0x130
[  511.887361][T14757]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  511.887383][T14757]  tomoyo_path_number_perm+0x1e8/0x5a0
[  511.887409][T14757]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  511.887449][T14757]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  511.887490][T14757]  ? __fget_files+0x2a/0x420
[  511.887516][T14757]  ? __fget_files+0x3a0/0x420
[  511.887534][T14757]  ? __fget_files+0x2a/0x420
[  511.887558][T14757]  security_file_ioctl+0xcb/0x2d0
[  511.887580][T14757]  __se_sys_ioctl+0x47/0x170
[  511.887612][T14757]  do_syscall_64+0xfa/0xf80
[  511.887655][T14757]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.887676][T14757]  ? clear_bhb_loop+0x60/0xb0
[  511.887702][T14757]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.887723][T14757] RIP: 0033:0x7f080518f749
[  511.887743][T14757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.887762][T14757] RSP: 002b:00007f0805f8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  511.887784][T14757] RAX: ffffffffffffffda RBX: 00007f08053e5fa0 RCX: 00007f080518f749
[  511.887801][T14757] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008
[  511.887815][T14757] RBP: 00007f0805f8e090 R08: 0000000000000000 R09: 0000000000000000
[  511.887835][T14757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.887849][T14757] R13: 00007f08053e6038 R14: 00007f08053e5fa0 R15: 00007ffcb3858718
[  511.887884][T14757]  </TASK>
[  512.146665][T14757] ERROR: Out of memory at tomoyo_realpath_from_path.
[  512.177245][T14763] netlink: zone id is out of range
[  512.186246][T14763] netlink: set zone limit has 8 unknown bytes
[  512.459885][T14771] FAULT_INJECTION: forcing a failure.
[  512.459885][T14771] name failslab, interval 1, probability 0, space 0, times 0
[  512.541515][T14774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3179'.
[  512.555737][T14771] CPU: 1 UID: 0 PID: 14771 Comm: syz.1.3179 Not tainted syzkaller #0 PREEMPT(full) 
[  512.555769][T14771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  512.555792][T14771] Call Trace:
[  512.555801][T14771]  <TASK>
[  512.555810][T14771]  dump_stack_lvl+0x189/0x250
[  512.555837][T14771]  ? __pfx____ratelimit+0x10/0x10
[  512.555868][T14771]  ? __pfx_dump_stack_lvl+0x10/0x10
[  512.555890][T14771]  ? __pfx__printk+0x10/0x10
[  512.555925][T14771]  ? __pfx___might_resched+0x10/0x10
[  512.555957][T14771]  ? fs_reclaim_acquire+0x7d/0x100
[  512.555995][T14771]  should_fail_ex+0x414/0x560
[  512.556026][T14771]  should_failslab+0xa8/0x100
[  512.556049][T14771]  __kmalloc_cache_noprof+0x84/0x700
[  512.556078][T14771]  ? __pfx___mutex_trylock_common+0x10/0x10
[  512.556101][T14771]  ? fuse_lookup_name+0x1b5/0x860
[  512.556128][T14771]  fuse_lookup_name+0x1b5/0x860
[  512.556154][T14771]  ? do_syscall_64+0xfa/0xf80
[  512.556193][T14771]  ? __pfx_fuse_lookup_name+0x10/0x10
[  512.556214][T14771]  ? fuse_lock_inode+0xd3/0x120
[  512.556262][T14771]  ? __lock_acquire+0x6b6/0x2cf0
[  512.556308][T14771]  fuse_lookup+0x1f0/0x480
[  512.556338][T14771]  ? __pfx_fuse_lookup+0x10/0x10
[  512.556362][T14771]  ? do_raw_spin_lock+0x121/0x290
[  512.556398][T14771]  ? do_raw_spin_unlock+0x122/0x240
[  512.556427][T14771]  ? _raw_spin_unlock+0x28/0x50
[  512.556455][T14771]  ? d_alloc+0x144/0x190
[  512.556482][T14771]  lookup_one_qstr_excl+0x131/0x360
[  512.556512][T14771]  filename_create+0x209/0x360
[  512.556549][T14771]  ? __pfx_filename_create+0x10/0x10
[  512.556589][T14771]  do_linkat+0x191/0x5a0
[  512.556631][T14771]  ? __pfx_do_linkat+0x10/0x10
[  512.556667][T14771]  ? getname_flags+0x1e5/0x540
[  512.556692][T14771]  __x64_sys_link+0x82/0x90
[  512.556726][T14771]  do_syscall_64+0xfa/0xf80
[  512.556760][T14771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.556788][T14771]  ? clear_bhb_loop+0x60/0xb0
[  512.556815][T14771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.556836][T14771] RIP: 0033:0x7fe21c78f749
[  512.556855][T14771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.556875][T14771] RSP: 002b:00007fe21d60d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056
[  512.556898][T14771] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78f749
[  512.556915][T14771] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000200000000280
[  512.556930][T14771] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  512.556944][T14771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  512.556957][T14771] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  512.556993][T14771]  </TASK>
[  512.932767][T14790] netlink: 'syz.2.3183': attribute type 10 has an invalid length.
[  512.971105][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3185'.
[  512.987586][T14790] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3183'.
[  513.146668][T14802] input: syz1 as /devices/virtual/input/input37
[  513.295285][T14811] FAULT_INJECTION: forcing a failure.
[  513.295285][T14811] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  513.312713][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.3.3189 Not tainted syzkaller #0 PREEMPT(full) 
[  513.312751][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  513.312765][T14811] Call Trace:
[  513.312773][T14811]  <TASK>
[  513.312783][T14811]  dump_stack_lvl+0x189/0x250
[  513.312809][T14811]  ? __pfx____ratelimit+0x10/0x10
[  513.312843][T14811]  ? __pfx_dump_stack_lvl+0x10/0x10
[  513.312865][T14811]  ? __pfx__printk+0x10/0x10
[  513.312899][T14811]  ? __might_fault+0xb0/0x130
[  513.312939][T14811]  should_fail_ex+0x414/0x560
[  513.312970][T14811]  _copy_from_iter+0x1cd/0x1630
[  513.313004][T14811]  ? __build_skb_around+0x22d/0x3c0
[  513.313043][T14811]  ? __pfx__copy_from_iter+0x10/0x10
[  513.313069][T14811]  ? __alloc_skb+0x2f1/0x430
[  513.313103][T14811]  ? __pfx___alloc_skb+0x10/0x10
[  513.313137][T14811]  ? netlink_sendmsg+0x642/0xb30
[  513.313160][T14811]  ? skb_put+0x11b/0x210
[  513.313196][T14811]  netlink_sendmsg+0x6b2/0xb30
[  513.313220][T14811]  ? aa_sk_perm+0x15f/0x920
[  513.313253][T14811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  513.313279][T14811]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  513.313318][T14811]  ? __pfx_netlink_sendmsg+0x10/0x10
[  513.313341][T14811]  sock_sendmsg_nosec+0x18f/0x1d0
[  513.313372][T14811]  ____sys_sendmsg+0x577/0x880
[  513.313402][T14811]  ? __pfx_____sys_sendmsg+0x10/0x10
[  513.313433][T14811]  ? import_iovec+0x74/0xa0
[  513.313469][T14811]  ___sys_sendmsg+0x21f/0x2a0
[  513.313493][T14811]  ? __pfx____sys_sendmsg+0x10/0x10
[  513.313521][T14811]  ? rcu_read_lock_any_held+0xb3/0x120
[  513.313572][T14811]  ? __fget_files+0x2a/0x420
[  513.313593][T14811]  ? __fget_files+0x3a0/0x420
[  513.313626][T14811]  __x64_sys_sendmsg+0x19b/0x260
[  513.313651][T14811]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  513.313682][T14811]  ? __pfx_ksys_write+0x10/0x10
[  513.313716][T14811]  ? do_syscall_64+0xbe/0xf80
[  513.313761][T14811]  do_syscall_64+0xfa/0xf80
[  513.313794][T14811]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.313815][T14811]  ? clear_bhb_loop+0x60/0xb0
[  513.313842][T14811]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  513.313863][T14811] RIP: 0033:0x7f81dab8f749
[  513.313883][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  513.313903][T14811] RSP: 002b:00007f81db966038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  513.313927][T14811] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8f749
[  513.313944][T14811] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  513.313959][T14811] RBP: 00007f81db966090 R08: 0000000000000000 R09: 0000000000000000
[  513.313973][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.313986][T14811] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  513.314020][T14811]  </TASK>
[  513.697331][ T5892] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  513.735001][T14821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  513.748685][T14821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  513.780596][T14821] usb usb7: usbfs: process 14821 (syz.3.3191) did not claim interface 0 before use
[  513.855368][T14825] vlan0: entered promiscuous mode
[  513.872418][T14825] vlan0: entered allmulticast mode
[  513.888320][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  513.891057][  T985] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  513.903796][ T5892] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  513.910473][T14825] veth0_vlan: entered allmulticast mode
[  513.916647][ T5892] usb 3-1: can't read configurations, error -22
[  514.044594][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'.
[  514.047350][  T985] usb 2-1: Using ep0 maxpacket: 32
[  514.064256][  T985] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  514.070673][ T5892] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  514.077404][  T985] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  514.101382][  T985] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  514.111828][  T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  514.127385][  T985] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  514.150718][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'.
[  514.157263][  T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  514.179731][  T985] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  514.211017][  T985] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  514.224747][  T985] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  514.234882][  T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.249954][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  514.257539][  T985] usb 2-1: config 0 descriptor??
[  514.268041][ T5892] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  514.286350][ T5892] usb 3-1: can't read configurations, error -22
[  514.308948][ T5892] usb usb3-port1: attempt power cycle
[  514.472983][  T985] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  514.509455][  T985] usb 2-1: USB disconnect, device number 23
[  514.523003][  T985] usblp0: removed
[  514.677644][ T5892] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  514.709285][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  514.716963][ T5892] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  514.725237][ T5892] usb 3-1: can't read configurations, error -22
[  514.840978][T14858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'.
[  514.860155][ T5892] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  514.898065][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  514.905737][ T5892] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  514.914440][ T5892] usb 3-1: can't read configurations, error -22
[  514.922457][ T5892] usb usb3-port1: unable to enumerate USB device
[  514.958585][T14862] overlayfs: failed to resolve './file2': -2
[  514.967147][  T985] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  514.989405][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3206'.
[  515.127436][  T985] usb 2-1: Using ep0 maxpacket: 32
[  515.138779][  T985] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  515.157118][  T985] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  515.165774][  T985] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  515.200220][  T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  515.212569][  T985] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  515.222475][  T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  515.222584][T14864] 
: renamed from bond_slave_0 (while UP)
[  515.232284][  T985] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  515.232324][  T985] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  515.232383][  T985] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  515.232408][  T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.245214][  T985] usb 2-1: config 0 descriptor??
[  515.295881][T14865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.306640][T14865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  515.416318][T14870] virt_wifi0 speed is unknown, defaulting to 1000
[  515.523966][  T985] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  515.541365][  T985] usb 2-1: USB disconnect, device number 24
[  515.551081][  T985] usblp0: removed
[  515.601287][T14874] overlayfs: failed to clone upperpath
[  515.806528][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3213'.
[  516.102384][ T5839] Bluetooth: hci2: unexpected event for opcode 0x040d
[  516.373439][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'.
[  516.590132][T14920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3228'.
[  516.707129][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  516.728026][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.738240][ T5892] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  516.897176][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  516.914519][ T5892] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  516.933206][ T5892] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  516.954449][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  516.964899][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  516.975234][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  516.986403][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  516.996793][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  517.009440][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  517.036689][ T5892] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  517.045934][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.067970][ T5892] usb 3-1: config 0 descriptor??
[  517.098873][T14935] FAULT_INJECTION: forcing a failure.
[  517.098873][T14935] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  517.112564][T14935] CPU: 1 UID: 0 PID: 14935 Comm: syz.1.3236 Not tainted syzkaller #0 PREEMPT(full) 
[  517.112594][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  517.112611][T14935] Call Trace:
[  517.112621][T14935]  <TASK>
[  517.112630][T14935]  dump_stack_lvl+0x189/0x250
[  517.112657][T14935]  ? __pfx____ratelimit+0x10/0x10
[  517.112688][T14935]  ? __pfx_dump_stack_lvl+0x10/0x10
[  517.112709][T14935]  ? __pfx__printk+0x10/0x10
[  517.112742][T14935]  ? __might_fault+0xb0/0x130
[  517.112782][T14935]  should_fail_ex+0x414/0x560
[  517.112811][T14935]  _copy_from_iter+0x1cd/0x1630
[  517.112844][T14935]  ? __build_skb_around+0x22d/0x3c0
[  517.112882][T14935]  ? __pfx__copy_from_iter+0x10/0x10
[  517.112908][T14935]  ? __alloc_skb+0x2f1/0x430
[  517.112941][T14935]  ? __pfx___alloc_skb+0x10/0x10
[  517.112975][T14935]  ? netlink_sendmsg+0x642/0xb30
[  517.112997][T14935]  ? skb_put+0x11b/0x210
[  517.113034][T14935]  netlink_sendmsg+0x6b2/0xb30
[  517.113057][T14935]  ? aa_sk_perm+0x15f/0x920
[  517.113090][T14935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.113117][T14935]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  517.113156][T14935]  ? __pfx_netlink_sendmsg+0x10/0x10
[  517.113180][T14935]  sock_sendmsg_nosec+0x18f/0x1d0
[  517.113210][T14935]  ____sys_sendmsg+0x577/0x880
[  517.113241][T14935]  ? __pfx_____sys_sendmsg+0x10/0x10
[  517.113272][T14935]  ? import_iovec+0x74/0xa0
[  517.113308][T14935]  ___sys_sendmsg+0x21f/0x2a0
[  517.113332][T14935]  ? __pfx____sys_sendmsg+0x10/0x10
[  517.113373][T14935]  ? rcu_read_lock_any_held+0xb3/0x120
[  517.113432][T14935]  ? __fget_files+0x2a/0x420
[  517.113453][T14935]  ? __fget_files+0x3a0/0x420
[  517.113485][T14935]  __x64_sys_sendmsg+0x19b/0x260
[  517.113508][T14935]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  517.113539][T14935]  ? __pfx_ksys_write+0x10/0x10
[  517.113572][T14935]  ? do_syscall_64+0xbe/0xf80
[  517.113608][T14935]  do_syscall_64+0xfa/0xf80
[  517.113641][T14935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.113663][T14935]  ? clear_bhb_loop+0x60/0xb0
[  517.113688][T14935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.113709][T14935] RIP: 0033:0x7fe21c78f749
[  517.113730][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.113749][T14935] RSP: 002b:00007fe21d60d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  517.113770][T14935] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78f749
[  517.113786][T14935] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  517.113799][T14935] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  517.113811][T14935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.113822][T14935] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  517.113855][T14935]  </TASK>
[  517.440102][ T5892] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 84 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  517.487586][ T5892] usb 3-1: USB disconnect, device number 84
[  517.513535][ T5892] usblp0: removed
[  517.568642][T14944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.587337][T14944] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.892355][T14952] __nla_validate_parse: 1 callbacks suppressed
[  517.892379][T14952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3241'.
[  517.927063][ T5892] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  518.027387][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3245'.
[  518.096515][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  518.103680][ T5892] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  518.113165][ T5892] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  518.121936][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  518.134955][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  518.145756][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  518.156551][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  518.166779][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  518.177006][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  518.190454][ T5892] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  518.199999][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.221301][ T5892] usb 3-1: config 0 descriptor??
[  518.279702][T14966] hugetlbfs: syz.3.3247 (14966): Using mlock ulimits for SHM_HUGETLB is obsolete
[  518.341107][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.351132][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.431853][ T5892] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  518.448976][ T5892] usb 3-1: USB disconnect, device number 85
[  518.461597][ T5892] usblp0: removed
[  518.566951][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.579747][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.700689][T14972] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3250'.
[  518.713283][T14972] syzkaller1: entered promiscuous mode
[  518.719302][T14972] syzkaller1: entered allmulticast mode
[  519.096476][ T5947] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  519.198190][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3254'.
[  519.256676][ T5892] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  519.282329][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  519.302455][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  519.314454][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  519.324764][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  519.338091][ T5947] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  519.347663][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.369584][ T5947] usb 2-1: config 0 descriptor??
[  519.428259][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  519.446368][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  519.467286][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  519.477609][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  519.504441][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  519.517137][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.534349][ T5892] usb 3-1: config 0 descriptor??
[  519.786646][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.794196][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.803101][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.811845][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.819456][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.826944][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.834388][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.841982][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.849650][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.857178][ T5947] plantronics 0003:047F:FFFF.004F: unknown main item tag 0x0
[  519.869634][ T5947] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  519.968525][ T5892] plantronics 0003:047F:FFFF.0050: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  520.048357][T14975] FAULT_INJECTION: forcing a failure.
[  520.048357][T14975] name failslab, interval 1, probability 0, space 0, times 0
[  520.063272][T14975] CPU: 1 UID: 0 PID: 14975 Comm: syz.1.3251 Not tainted syzkaller #0 PREEMPT(full) 
[  520.063294][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  520.063304][T14975] Call Trace:
[  520.063310][T14975]  <TASK>
[  520.063317][T14975]  dump_stack_lvl+0x189/0x250
[  520.063337][T14975]  ? __pfx____ratelimit+0x10/0x10
[  520.063360][T14975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  520.063387][T14975]  ? __pfx__printk+0x10/0x10
[  520.063414][T14975]  ? __pfx___might_resched+0x10/0x10
[  520.063436][T14975]  ? fs_reclaim_acquire+0x7d/0x100
[  520.063461][T14975]  should_fail_ex+0x414/0x560
[  520.063482][T14975]  should_failslab+0xa8/0x100
[  520.063498][T14975]  __kmalloc_cache_noprof+0x84/0x700
[  520.063519][T14975]  ? hiddev_ioctl_usage+0x79/0x1a90
[  520.063545][T14975]  hiddev_ioctl_usage+0x79/0x1a90
[  520.063572][T14975]  ? usbhid_init_reports+0x128/0x270
[  520.063594][T14975]  hiddev_ioctl+0x8d2/0x1670
[  520.063620][T14975]  ? __pfx_hiddev_ioctl+0x10/0x10
[  520.063654][T14975]  ? __fget_files+0x2a/0x420
[  520.063672][T14975]  ? bpf_lsm_file_ioctl+0x9/0x20
[  520.063694][T14975]  ? __pfx_hiddev_ioctl+0x10/0x10
[  520.063716][T14975]  __se_sys_ioctl+0xfc/0x170
[  520.063736][T14975]  do_syscall_64+0xfa/0xf80
[  520.063759][T14975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.063774][T14975]  ? clear_bhb_loop+0x60/0xb0
[  520.063792][T14975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.063806][T14975] RIP: 0033:0x7fe21c78f749
[  520.063819][T14975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  520.063832][T14975] RSP: 002b:00007fe21d60d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  520.063848][T14975] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78f749
[  520.063859][T14975] RDX: 0000200000000040 RSI: 00000000c018480d RDI: 0000000000000004
[  520.063869][T14975] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  520.063879][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  520.063888][T14975] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  520.063911][T14975]  </TASK>
[  520.065787][ T5892] usb 2-1: USB disconnect, device number 25
[  520.246887][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.298616][ T5947] usb 3-1: USB disconnect, device number 86
[  520.307666][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.325571][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  520.334440][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  520.593425][T15011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'.
[  521.146015][ T5947] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  521.296123][ T5947] usb 3-1: Using ep0 maxpacket: 16
[  521.302966][ T5947] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  521.311307][ T5947] usb 3-1: config 0 has no interface number 0
[  521.320796][ T5947] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  521.330311][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.338435][ T5947] usb 3-1: Product: syz
[  521.342706][ T5947] usb 3-1: Manufacturer: syz
[  521.347396][ T5947] usb 3-1: SerialNumber: syz
[  521.354627][ T5947] usb 3-1: config 0 descriptor??
[  521.363600][ T5947] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  521.561249][ T5947] gspca_spca1528: reg_w err -71
[  521.596069][ T5947] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  521.610510][ T5947] usb 3-1: USB disconnect, device number 87
[  521.885729][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'.
[  522.055874][T15037] netlink: 'syz.3.3274': attribute type 1 has an invalid length.
[  522.065987][T15037] netlink: 'syz.3.3274': attribute type 3 has an invalid length.
[  522.073756][T15037] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3274'.
[  522.219307][T15049] netlink: 'syz.3.3277': attribute type 1 has an invalid length.
[  522.227292][T15049] netlink: 'syz.3.3277': attribute type 3 has an invalid length.
[  522.244546][T15049] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3277'.
[  522.385554][T15051] binder: 15050:15051 ioctl c0306201 200000000180 returned -14
[  522.795846][  T985] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  522.866621][ T5947] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  522.967220][  T985] usb 2-1: Using ep0 maxpacket: 32
[  523.019238][  T985] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  523.027921][  T985] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  523.051751][  T985] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  523.063373][ T5947] usb 3-1: Using ep0 maxpacket: 32
[  523.082208][ T5947] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  523.094570][  T985] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  523.095514][T15079] PKCS7: Unknown OID: [5] (bad)
[  523.115740][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.124785][  T985] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  523.136108][ T5947] usb 3-1: Product: syz
[  523.140318][ T5947] usb 3-1: Manufacturer: syz
[  523.140554][T15079] PKCS7: Only support pkcs7_signedData type
[  523.144961][ T5947] usb 3-1: SerialNumber: syz
[  523.156199][  T985] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  523.171379][  T985] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  523.185612][  T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.196975][ T5947] usb 3-1: config 0 descriptor??
[  523.224997][  T985] usb 2-1: config 0 descriptor??
[  523.414912][ T5947] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  523.457519][  T985] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  523.489935][  T985] usb 2-1: USB disconnect, device number 26
[  523.501594][  T985] usblp0: removed
[  523.555438][T15091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  523.569835][T15091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.065790][ T5947] usb 3-1: reset high-speed USB device number 88 using dummy_hcd
[  524.120890][T15098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.131846][T15098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.145349][T15098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  524.154215][T15098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.449807][ T5947] usb 3-1: [UEAGLE-ATM] interface 1 not found
[  524.456327][ T5947] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  524.616762][ T5947] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  524.652070][  T796] usb 3-1: USB disconnect, device number 88
[  524.707041][T15107] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3299'.
[  524.777590][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  524.787276][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  524.800908][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  524.812311][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024
[  524.823469][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  524.834621][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  524.857832][T15112] netlink: 'syz.3.3301': attribute type 46 has an invalid length.
[  524.858623][ T5947] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  524.870079][T15112] netlink: 'syz.3.3301': attribute type 28 has an invalid length.
[  524.874997][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.892397][ T5947] usb 2-1: Product: syz
[  524.896961][ T5947] usb 2-1: Manufacturer: syz
[  524.903207][ T5947] usb 2-1: SerialNumber: syz
[  524.911699][ T5947] usb 2-1: config 0 descriptor??
[  525.110325][T15118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.120894][T15118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.331826][T15105] overlayfs: conflicting options: nfs_export=on,index=off
[  525.342507][T15118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  525.344433][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3298'.
[  525.358642][T15118] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  525.373578][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.382651][ T5947] input input38: Device does not respond to id packet M
[  525.390335][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.397914][ T5947] input input38: Device does not respond to id packet P
[  525.405323][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.412187][ T5947] input input38: Device does not respond to id packet B
[  525.422057][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.428218][ T5947] input input38: Device does not respond to id packet N
[  525.435649][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.442392][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.449104][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.455692][ T5947] iforce 2-1:0.0: usb_submit_urb failed: -71
[  525.467353][ T5947] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input38
[  525.499678][ T5947] usb 2-1: USB disconnect, device number 27
[  525.499733][    C0] iforce 2-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19
[  525.656839][ T5839] Bluetooth: hci4: ACL packet for unknown connection handle 977
[  526.123720][T15161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.138128][T15161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.688294][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.698569][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.807989][T15177] binder: 15176:15177 unknown command 0
[  526.813830][T15177] binder: 15176:15177 ioctl c0306201 2000000001c0 returned -22
[  526.913662][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.928370][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.306007][ T5947] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  527.428568][T15200] syz.2.3336 (15200) used greatest stack depth: 16672 bytes left
[  527.474951][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[  527.498170][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 256, setting to 64
[  527.528220][ T5947] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  527.548939][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.557861][ T5947] usb 2-1: Product: syz
[  527.564254][ T5947] usb 2-1: Manufacturer: syz
[  527.569443][ T5947] usb 2-1: SerialNumber: syz
[  527.581482][ T5947] usb 2-1: config 0 descriptor??
[  527.731194][T15215] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  527.756368][T15210] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  527.763866][T15210] overlayfs: cannot append lower layer
[  528.011481][  T985] usb 2-1: USB disconnect, device number 28
[  528.115243][ T5947] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  528.265314][ T5947] usb 3-1: Using ep0 maxpacket: 16
[  528.272850][ T5947] usb 3-1: config 0 has an invalid interface number: 90 but max is 0
[  528.282718][ T5947] usb 3-1: config 0 has no interface number 0
[  528.291106][ T5947] usb 3-1: New USB device found, idVendor=0846, idProduct=9021, bcdDevice=cb.97
[  528.300258][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.308385][ T5947] usb 3-1: Product: syz
[  528.312760][ T5947] usb 3-1: Manufacturer: syz
[  528.317522][ T5947] usb 3-1: SerialNumber: syz
[  528.325532][ T5947] usb 3-1: config 0 descriptor??
[  528.364602][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  528.373437][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  528.541999][  T796] usb 3-1: USB disconnect, device number 89
[  528.895464][ T5947] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  528.949111][T15246] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3352'.
[  529.046171][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  529.062497][ T5947] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  529.073791][ T5947] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  529.082747][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  529.092056][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  529.108799][ T5947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  529.118678][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  529.132102][ T5947] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  529.141355][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.163692][ T5947] usb 2-1: config 0 descriptor??
[  529.378154][ T5947] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  529.394015][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3358'.
[  529.408883][ T5947] usb 2-1: USB disconnect, device number 29
[  529.437038][ T5947] usblp0: removed
[  529.709367][T15280] dvmrp0: entered allmulticast mode
[  529.763006][T15283] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  529.905484][ T5947] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  529.965240][  T796] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  530.055121][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  530.061826][ T5947] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  530.070663][ T5947] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  530.079460][ T5947] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  530.088598][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  530.098382][ T5947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  530.105106][  T796] usb 3-1: device descriptor read/64, error -71
[  530.108091][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  530.128996][ T5947] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  530.138189][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.148745][ T5947] usb 2-1: config 0 descriptor??
[  530.345065][  T796] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  530.367337][ T5947] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  530.383976][ T5947] usb 2-1: USB disconnect, device number 30
[  530.393182][ T5947] usblp0: removed
[  530.475110][  T796] usb 3-1: device descriptor read/64, error -71
[  530.585771][  T796] usb usb3-port1: attempt power cycle
[  530.704848][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'.
[  530.902113][T15307] overlay: Unknown parameter 'fowner>00000000000000000000'
[  530.925099][  T796] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  530.956907][  T796] usb 3-1: device descriptor read/8, error -71
[  531.171026][T15314] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39
[  531.195237][  T796] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  531.225731][  T796] usb 3-1: device descriptor read/8, error -71
[  531.337470][  T796] usb usb3-port1: unable to enumerate USB device
[  531.506448][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.517125][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.694767][T15329] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3385'.
[  531.892522][T15336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3388'.
[  531.906734][T15336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.200439][T15346] kernel profiling enabled (shift: 8)
[  532.266735][T15351] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3394'.
[  532.298746][T15348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3394'.
[  532.468487][T15359] FAULT_INJECTION: forcing a failure.
[  532.468487][T15359] name failslab, interval 1, probability 0, space 0, times 0
[  532.483996][T15359] CPU: 1 UID: 0 PID: 15359 Comm: syz.1.3398 Not tainted syzkaller #0 PREEMPT(full) 
[  532.484026][T15359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  532.484041][T15359] Call Trace:
[  532.484050][T15359]  <TASK>
[  532.484060][T15359]  dump_stack_lvl+0x189/0x250
[  532.484092][T15359]  ? __pfx____ratelimit+0x10/0x10
[  532.484124][T15359]  ? __pfx_dump_stack_lvl+0x10/0x10
[  532.484144][T15359]  ? __pfx__printk+0x10/0x10
[  532.484181][T15359]  ? __pfx___might_resched+0x10/0x10
[  532.484212][T15359]  ? fs_reclaim_acquire+0x7d/0x100
[  532.484248][T15359]  should_fail_ex+0x414/0x560
[  532.484279][T15359]  should_failslab+0xa8/0x100
[  532.484302][T15359]  kmem_cache_alloc_noprof+0x88/0x710
[  532.484332][T15359]  ? getname_flags+0xb8/0x540
[  532.484357][T15359]  getname_flags+0xb8/0x540
[  532.484383][T15359]  __x64_sys_mkdirat+0x7a/0xa0
[  532.484415][T15359]  do_syscall_64+0xfa/0xf80
[  532.484449][T15359]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.484471][T15359]  ? clear_bhb_loop+0x60/0xb0
[  532.484498][T15359]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  532.484520][T15359] RIP: 0033:0x7fe21c78f749
[  532.484540][T15359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  532.484560][T15359] RSP: 002b:00007fe21d60d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  532.484583][T15359] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78f749
[  532.484601][T15359] RDX: 00000000000001c0 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  532.484615][T15359] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  532.484630][T15359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  532.484643][T15359] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  532.484678][T15359]  </TASK>
[  532.993626][T15381] comedi: valid board names for 8255 driver are:
[  533.001867][T15381]  8255
[  533.004676][T15381] comedi: valid board names for vmk80xx driver are:
[  533.018466][T15381]  vmk80xx
[  533.021544][T15381] comedi: valid board names for usbduxsigma driver are:
[  533.028756][T15381]  usbduxsigma
[  533.032157][T15381] comedi: valid board names for usbduxfast driver are:
[  533.039655][T15381]  usbduxfast
[  533.042967][T15381] comedi: valid board names for usbdux driver are:
[  533.055074][T15381]  usbdux
[  533.058203][T15381] comedi: valid board names for ni6501 driver are:
[  533.066851][  T796] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  533.074856][T15381]  ni6501
[  533.078000][T15381] comedi: valid board names for dt9812 driver are:
[  533.118636][T15381]  dt9812
[  533.133673][T15381] comedi: valid board names for ni_labpc_cs driver are:
[  533.154871][T15381]  ni_labpc_cs
[  533.158452][T15381] comedi: valid board names for ni_daq_700 driver are:
[  533.167961][T15381]  ni_daq_700
[  533.171302][T15381] comedi: valid board names for labpc_pci driver are:
[  533.179891][T15381]  labpc_pci
[  533.183134][T15381] comedi: valid board names for adl_pci9118 driver are:
[  533.200757][T15381]  pci9118dg
[  533.204106][T15381]  pci9118hg
[  533.214281][T15381]  pci9118hr
[  533.220999][T15381] comedi: valid board names for 8255_pci driver are:
[  533.235196][T15381]  8255_pci
[  533.241471][T15381] comedi: valid board names for s526 driver are:
[  533.250516][  T796] usb 3-1: unable to get BOS descriptor or descriptor too short
[  533.250609][T15381]  s526
[  533.266559][  T796] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  533.267501][T15381] comedi: valid board names for multiq3 driver are:
[  533.287578][T15381]  multiq3
[  533.290693][T15381] comedi: valid board names for pcmuio driver are:
[  533.298982][  T796] usb 3-1: config 1 has no interface number 1
[  533.299622][T15381]  pcmuio48
[  533.308584][T15381]  pcmuio96
[  533.311905][T15381] comedi: valid board names for pcmmio driver are:
[  533.318740][  T796] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  533.319108][T15381]  pcmmio
[  533.335116][  T796] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  533.344452][  T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.345469][T15381] comedi: valid board names for pcmda12 driver are:
[  533.359700][T15381]  pcmda12
[  533.362767][T15381] comedi: valid board names for pcmad driver are:
[  533.374839][  T796] usb 3-1: Product: syz
[  533.379252][  T796] usb 3-1: Manufacturer: syz
[  533.390150][T15381]  pcmad12
[  533.393242][T15381]  pcmad16
[  533.393404][  T796] usb 3-1: SerialNumber: syz
[  533.400889][T15381] comedi: valid board names for ni_labpc driver are:
[  533.418125][T15381]  lab-pc-1200
[  533.421655][T15381]  lab-pc-1200ai
[  533.431822][T15381]  lab-pc+
[  533.439488][T15381] comedi: valid board names for atmio16 driver are:
[  533.453213][T15381]  atmio16
[  533.457353][T15381]  atmio16d
[  533.460519][T15381] comedi: valid board names for ni_at_ao driver are:
[  533.475208][T15381]  at-ao-6
[  533.478281][T15381]  at-ao-10
[  533.482513][T15381] comedi: valid board names for ni_at_a2150 driver are:
[  533.490150][T15381]  ni_at_a2150
[  533.493690][T15381] comedi: valid board names for adq12b driver are:
[  533.500714][T15381]  adq12b
[  533.505779][T15381] comedi: valid board names for mpc624 driver are:
[  533.512903][T15381]  mpc624
[  533.516976][T15381] comedi: valid board names for c6xdigio driver are:
[  533.523754][T15381]  c6xdigio
[  533.527495][T15381] comedi: valid board names for aio_iiro_16 driver are:
[  533.534565][T15381]  aio_iiro_16
[  533.541370][T15381] comedi: valid board names for aio_aio12_8 driver are:
[  533.548814][T15381]  aio_aio12_8
[  533.552356][T15381]  aio_ai12_8
[  533.557435][T15381]  aio_ao12_4
[  533.560866][T15381] comedi: valid board names for fl512 driver are:
[  533.568078][T15381]  fl512
[  533.571046][T15381] comedi: valid board names for dmm32at driver are:
[  533.578750][T15381]  dmm32at
[  533.581903][T15381] comedi: valid board names for dt282x driver are:
[  533.590493][T15381]  dt2821
[  533.593559][T15381]  dt2821-f
[  533.600278][T15381]  dt2821-g
[  533.603514][T15381]  dt2823
[  533.607827][T15381]  dt2824-pgh
[  533.611275][T15381]  dt2824-pgl
[  533.614674][T15381]  dt2825
[  533.618375][T15381]  dt2827
[  533.645921][  T796] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  533.654207][T15381]  dt2828
[  533.657596][T15381]  dt2829
[  533.660648][  T796] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  533.670684][T15381]  dt21-ez
[  533.673832][T15381]  dt23-ez
[  533.677780][  T796] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  533.686302][T15381]  dt24-ez
[  533.689435][T15381]  dt24-ez-pgl
[  533.692882][T15381] comedi: valid board names for dt2817 driver are:
[  533.701673][  T796] usb 3-1: found format II with max.bitrate = 26774, frame size=2
[  533.714548][T15381]  dt2817
[  533.719833][T15381] comedi: valid board names for dt2815 driver are:
[  533.727118][T15381]  dt2815
[  533.730403][T15381] comedi: valid board names for dt2814 driver are:
[  533.750689][T15381]  dt2814
[  533.760299][T15381] comedi: valid board names for dt2811 driver are:
[  533.774271][  T796] usb 3-1: USB disconnect, device number 94
[  533.786380][T15381]  dt2811-pgh
[  533.812984][T15381]  dt2811-pgl
[  533.824969][T15381] comedi: valid board names for dt2801 driver are:
[  533.840099][T15381]  dt2801
[  533.846246][T15381] comedi: valid board names for das6402 driver are:
[  533.860680][T15381]  das6402-12
[  533.867436][T15381]  das6402-16
[  533.872149][T15381] comedi: valid board names for das1800 driver are:
[  533.894292][T15381]  das-1701st
[  533.898703][T15381]  das-1701st-da
[  533.905927][T15381]  das-1702st
[  533.909413][T15381]  das-1702st-da
[  533.914323][T15381]  das-1702hr
[  533.918497][T15381]  das-1702hr-da
[  533.922070][T15381]  das-1701ao
[  533.927125][T15381]  das-1702ao
[  533.930444][T15381]  das-1801st
[  533.933821][T15381]  das-1801st-da
[  533.938953][T15381]  das-1802st
[  533.942255][T15381]  das-1802st-da
[  533.945846][T15381]  das-1802hr
[  533.949173][T15381]  das-1802hr-da
[  533.952729][T15381]  das-1801hc
[  533.956057][T15381]  das-1802hc
[  533.959362][T15381]  das-1801ao
[  533.962652][T15381]  das-1802ao
[  533.966052][T15381] comedi: valid board names for das800 driver are:
[  533.972566][T15381]  das-800
[  533.975669][T15381]  cio-das800
[  533.978988][T15381]  das-801
[  533.982008][T15381]  cio-das801
[  533.985389][T15381]  das-802
[  533.988422][T15381]  cio-das802
[  533.991705][T15381]  cio-das802/16
[  533.995391][T15381] comedi: valid board names for isa-das08 driver are:
[  534.002204][T15381]  isa-das08
[  534.005606][T15381]  das08-pgm
[  534.008823][T15381]  das08-pgh
[  534.012061][T15381]  das08-pgl
[  534.016593][T15381]  das08-aoh
[  534.019824][T15381]  das08-aol
[  534.023020][T15381]  das08-aom
[  534.026363][T15381]  das08/jr-ao
[  534.029748][T15381]  das08jr-16-ao
[  534.033289][T15381]  pc104-das08
[  534.036816][T15381]  das08jr/16
[  534.040131][T15381] comedi: valid board names for das16m1 driver are:
[  534.047644][T15381]  das16m1
[  534.050705][T15381] comedi: valid board names for dac02 driver are:
[  534.057217][T15381]  dac02
[  534.060105][T15381] comedi: valid board names for rti802 driver are:
[  534.066678][T15381]  rti802
[  534.069631][T15381] comedi: valid board names for rti800 driver are:
[  534.076211][T15381]  rti800
[  534.079170][T15381]  rti815
[  534.082139][T15381] comedi: valid board names for pcm3724 driver are:
[  534.088848][T15381]  pcm3724
[  534.091887][T15381] comedi: valid board names for pcl818 driver are:
[  534.098487][T15381]  pcl818l
[  534.101530][T15381]  pcl818h
[  534.104564][T15381]  pcl818hd
[  534.107728][T15381]  pcl818hg
[  534.110853][T15381]  pcl818
[  534.113789][T15381]  pcl718
[  534.118129][T15381]  pcm3718
[  534.121185][T15381] comedi: valid board names for pcl816 driver are:
[  534.127831][T15381]  pcl816
[  534.130784][T15381]  pcl814b
[  534.133804][T15381] comedi: valid board names for pcl812 driver are:
[  534.140375][T15381]  pcl812
[  534.143349][T15381]  pcl812pg
[  534.146552][T15381]  acl8112pg
[  534.149769][T15381]  acl8112dg
[  534.152985][T15381]  acl8112hg
[  534.156307][T15381]  a821pgl
[  534.159350][T15381]  a821pglnda
[  534.162653][T15381]  a821pgh
[  534.165806][T15381]  a822pgl
[  534.168851][T15381]  a822pgh
[  534.171919][T15381]  a823pgl
[  534.175862][T15381]  a823pgh
[  534.179206][T15381]  pcl813
[  534.182173][T15381]  pcl813b
[  534.185298][T15381]  acl8113
[  534.188353][T15381]  iso813
[  534.191328][T15381]  acl8216
[  534.194370][T15381]  a826pg
[  534.197408][T15381] comedi: valid board names for pcl730 driver are:
[  534.203941][T15381]  pcl730
[  534.207039][T15381]  iso730
[  534.210024][T15381]  acl7130
[  534.213106][T15381]  pcm3730
[  534.216393][T15381]  pcl725
[  534.221162][T15381]  p8r8dio
[  534.224303][T15381]  acl7225b
[  534.228809][T15381]  p16r16dio
[  534.232117][T15381]  pcl733
[  534.235217][T15381]  pcl734
[  534.238189][T15381]  opmm-1616-xt
[  534.241682][T15381]  pearl-mm-p
[  534.245476][T15381]  ir104-pbf
[  534.248780][T15381] comedi: valid board names for pcl726 driver are:
[  534.256381][T15381]  pcl726
[  534.259366][T15381]  pcl727
[  534.262317][T15381]  pcl728
[  534.265631][T15381]  acl6126
[  534.268715][T15381]  acl6128
[  534.271737][T15381] comedi: valid board names for pcl724 driver are:
[  534.278321][T15381]  pcl724
[  534.281292][T15381]  pcl722
[  534.284230][T15381]  pcl731
[  534.287304][T15381]  acl7122
[  534.290343][T15381]  acl7124
[  534.293410][T15381]  pet48dio
[  534.296705][T15381]  pcmio48
[  534.299824][T15381]  onyx-mm-dio
[  534.303210][T15381] comedi: valid board names for pcl711 driver are:
[  534.309778][T15381]  pcl711
[  534.312730][T15381]  pcl711b
[  534.315864][T15381]  acl8112hg
[  534.319081][T15381]  acl8112dg
[  534.323457][T15381] comedi: valid board names for amplc_pc263 driver are:
[  534.330560][T15381]  pc263
[  534.333426][T15381] comedi: valid board names for amplc_pc236 driver are:
[  534.340572][T15381]  pc36at
[  534.343535][T15381] comedi: valid board names for amplc_dio200 driver are:
[  534.350722][T15381]  pc212e
[  534.353683][T15381]  pc214e
[  534.356713][T15381]  pc215e
[  534.359673][T15381]  pc218e
[  534.362621][T15381]  pc272e
[  534.365769][T15381] comedi: valid board names for comedi_parport driver are:
[  534.372986][T15381]  comedi_parport
[  534.376677][T15381] comedi: valid board names for comedi_test driver are:
[  534.383629][T15381]  comedi_test
[  534.387120][T15381] comedi: valid board names for comedi_bond driver are:
[  534.394070][T15381]  comedi_bond
[  534.397665][T15397] comedi comedi0: pcl816: I/O port conflict (0x6,16)
[  534.613110][T15418] netlink: 'syz.1.3418': attribute type 12 has an invalid length.
[  534.694232][T15425] netlink: 'syz.1.3418': attribute type 12 has an invalid length.
[  534.963069][T15439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.972860][T15440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.981718][T15439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.989976][T15440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.000549][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.009343][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.018193][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.027093][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.035812][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.044490][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.053762][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.066550][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.155118][ T5948] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  535.304864][ T5948] usb 2-1: Using ep0 maxpacket: 32
[  535.311960][ T5948] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  535.330787][ T5948] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  535.340600][ T5948] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  535.353508][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  535.365223][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  535.375647][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  535.434402][ T5948] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  535.444095][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.469594][ T5948] usb 2-1: config 0 descriptor??
[  535.478140][T15455] Dead loop on virtual device ip6_vti0, fix it urgently!
[  535.684212][ T5948] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  535.718473][ T5948] usb 2-1: USB disconnect, device number 31
[  535.742373][ T5948] usblp0: removed
[  535.842683][T15471] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3440'.
[  535.852326][T15471] FAULT_INJECTION: forcing a failure.
[  535.852326][T15471] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  535.867004][T15471] CPU: 1 UID: 0 PID: 15471 Comm: syz.3.3440 Not tainted syzkaller #0 PREEMPT(full) 
[  535.867025][T15471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  535.867035][T15471] Call Trace:
[  535.867041][T15471]  <TASK>
[  535.867048][T15471]  dump_stack_lvl+0x189/0x250
[  535.867066][T15471]  ? __pfx____ratelimit+0x10/0x10
[  535.867088][T15471]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.867102][T15471]  ? __pfx__printk+0x10/0x10
[  535.867134][T15471]  should_fail_ex+0x414/0x560
[  535.867154][T15471]  _copy_to_user+0x31/0xb0
[  535.867178][T15471]  simple_read_from_buffer+0xe1/0x170
[  535.867207][T15471]  proc_fail_nth_read+0x1b3/0x220
[  535.867232][T15471]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  535.867255][T15471]  ? rw_verify_area+0x2a6/0x4d0
[  535.867275][T15471]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  535.867297][T15471]  vfs_read+0x200/0xa30
[  535.867316][T15471]  ? fdget_pos+0x247/0x320
[  535.867333][T15471]  ? __pfx___mutex_lock+0x10/0x10
[  535.867347][T15471]  ? __pfx_vfs_read+0x10/0x10
[  535.867367][T15471]  ? __fget_files+0x2a/0x420
[  535.867385][T15471]  ? __fget_files+0x3a0/0x420
[  535.867398][T15471]  ? __fget_files+0x2a/0x420
[  535.867418][T15471]  ksys_read+0x145/0x250
[  535.867439][T15471]  ? __pfx_ksys_read+0x10/0x10
[  535.867461][T15471]  ? do_syscall_64+0xbe/0xf80
[  535.867486][T15471]  do_syscall_64+0xfa/0xf80
[  535.867509][T15471]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.867524][T15471]  ? clear_bhb_loop+0x60/0xb0
[  535.867542][T15471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.867556][T15471] RIP: 0033:0x7f81dab8e15c
[  535.867569][T15471] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  535.867582][T15471] RSP: 002b:00007f81db966030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  535.867598][T15471] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8e15c
[  535.867610][T15471] RDX: 000000000000000f RSI: 00007f81db9660a0 RDI: 0000000000000003
[  535.867619][T15471] RBP: 00007f81db966090 R08: 0000000000000000 R09: 0000000000000000
[  535.867629][T15471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.867638][T15471] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  535.867661][T15471]  </TASK>
[  536.183340][T15476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.192447][T15476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.225091][  T985] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  536.354738][  T985] usb 3-1: device descriptor read/64, error -71
[  536.425641][ T5948] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  536.574683][ T5948] usb 2-1: Using ep0 maxpacket: 32
[  536.581745][ T5948] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  536.590252][ T5948] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  536.598937][  T985] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  536.606652][ T5948] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  536.616627][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  536.626409][ T5948] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  536.636173][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  536.649331][ T5948] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  536.658454][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.669575][ T5948] usb 2-1: config 0 descriptor??
[  536.744697][  T985] usb 3-1: device descriptor read/64, error -71
[  536.854922][  T985] usb usb3-port1: attempt power cycle
[  536.892488][ T5948] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  537.195948][  T985] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  537.200494][T15505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.217376][T15505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.235984][  T985] usb 3-1: device descriptor read/8, error -71
[  537.446415][ T5947] usb 2-1: USB disconnect, device number 32
[  537.461120][ T5947] usblp0: removed
[  537.485062][  T985] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  537.515209][  T985] usb 3-1: device descriptor read/8, error -71
[  537.627037][  T985] usb usb3-port1: unable to enumerate USB device
[  537.793057][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.802505][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.815590][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.827263][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.403046][T15555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'.
[  538.492486][T15559] netlink: 'syz.0.3478': attribute type 1 has an invalid length.
[  538.500929][T15559] netlink: 'syz.0.3478': attribute type 2 has an invalid length.
[  538.505612][ T5892] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  538.510661][T15559] netlink: 'syz.0.3478': attribute type 1 has an invalid length.
[  538.526821][T15559] netlink: 'syz.0.3478': attribute type 2 has an invalid length.
[  538.535609][T15559] netlink: 'syz.0.3478': attribute type 2 has an invalid length.
[  538.543595][T15559] netlink: 'syz.0.3478': attribute type 2 has an invalid length.
[  538.676688][ T5892] usb 2-1: too many configurations: 151, using maximum allowed: 8
[  538.702377][ T5892] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  538.711883][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  538.720256][ T5892] usb 2-1: Product: syz
[  538.724793][ T5892] usb 2-1: Manufacturer: syz
[  538.729446][ T5892] usb 2-1: SerialNumber: syz
[  538.737307][ T5892] usb 2-1: config 0 descriptor??
[  538.803108][T15567] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3481'.
[  538.882740][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3483'.
[  538.890790][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3482'.
[  538.954673][T15572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.984935][T15572] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.199845][T15582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3487'.
[  539.365855][T15577] can: request_module (can-proto-0) failed.
[  539.795043][T15604] FAULT_INJECTION: forcing a failure.
[  539.795043][T15604] name failslab, interval 1, probability 0, space 0, times 0
[  539.808572][T15604] CPU: 1 UID: 0 PID: 15604 Comm: syz.2.3494 Not tainted syzkaller #0 PREEMPT(full) 
[  539.808593][T15604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  539.808603][T15604] Call Trace:
[  539.808609][T15604]  <TASK>
[  539.808615][T15604]  dump_stack_lvl+0x189/0x250
[  539.808634][T15604]  ? __pfx____ratelimit+0x10/0x10
[  539.808656][T15604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  539.808671][T15604]  ? __pfx__printk+0x10/0x10
[  539.808695][T15604]  ? __pfx___might_resched+0x10/0x10
[  539.808718][T15604]  ? fs_reclaim_acquire+0x7d/0x100
[  539.808751][T15604]  should_fail_ex+0x414/0x560
[  539.808772][T15604]  should_failslab+0xa8/0x100
[  539.808793][T15604]  kmem_cache_alloc_noprof+0x88/0x710
[  539.808814][T15604]  ? vm_area_dup+0x2b/0x680
[  539.808848][T15604]  vm_area_dup+0x2b/0x680
[  539.808883][T15604]  __split_vma+0x1a9/0xa00
[  539.808917][T15604]  ? __pfx___split_vma+0x10/0x10
[  539.808941][T15604]  ? can_vma_merge_left+0x195/0x6b0
[  539.808961][T15604]  vma_modify+0x952/0x1a70
[  539.808989][T15604]  vma_modify_flags+0x208/0x2e0
[  539.809006][T15604]  ? __pfx_vma_modify_flags+0x10/0x10
[  539.809031][T15604]  ? mas_next_slot+0xc20/0xcf0
[  539.809057][T15604]  mlock_fixup+0x29c/0x410
[  539.809077][T15604]  ? __pfx_mlock_fixup+0x10/0x10
[  539.809093][T15604]  ? mas_find+0xb0e/0xd30
[  539.809119][T15604]  apply_vma_lock_flags+0x285/0x390
[  539.809135][T15604]  ? vfs_write+0x956/0xb30
[  539.809157][T15604]  ? __pfx_apply_vma_lock_flags+0x10/0x10
[  539.809181][T15604]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  539.809196][T15604]  ? __pfx_vfs_write+0x10/0x10
[  539.809218][T15604]  do_mlock+0x524/0x720
[  539.809239][T15604]  ? __pfx_do_mlock+0x10/0x10
[  539.809254][T15604]  ? fput+0xa0/0xd0
[  539.809270][T15604]  ? ksys_write+0x22a/0x250
[  539.809292][T15604]  ? __pfx_ksys_write+0x10/0x10
[  539.809316][T15604]  __x64_sys_mlock+0x60/0x70
[  539.809330][T15604]  do_syscall_64+0xfa/0xf80
[  539.809354][T15604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.809370][T15604]  ? clear_bhb_loop+0x60/0xb0
[  539.809387][T15604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.809402][T15604] RIP: 0033:0x7f080518f749
[  539.809416][T15604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  539.809430][T15604] RSP: 002b:00007f0805f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095
[  539.809446][T15604] RAX: ffffffffffffffda RBX: 00007f08053e6180 RCX: 00007f080518f749
[  539.809457][T15604] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000
[  539.809467][T15604] RBP: 00007f0805f4c090 R08: 0000000000000000 R09: 0000000000000000
[  539.809476][T15604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.809485][T15604] R13: 00007f08053e6218 R14: 00007f08053e6180 R15: 00007ffcb3858718
[  539.809508][T15604]  </TASK>
[  540.348767][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'.
[  541.280572][ T5892] usb 2-1: USB disconnect, device number 33
[  541.322319][T15620] FAULT_INJECTION: forcing a failure.
[  541.322319][T15620] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  541.328912][ T5839] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  541.339581][ T5832] Bluetooth: hci1: command 0x1003 tx timeout
[  541.350282][T15620] CPU: 1 UID: 0 PID: 15620 Comm: syz.1.3498 Not tainted syzkaller #0 PREEMPT(full) 
[  541.350310][T15620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  541.350323][T15620] Call Trace:
[  541.350332][T15620]  <TASK>
[  541.350341][T15620]  dump_stack_lvl+0x189/0x250
[  541.350365][T15620]  ? __pfx____ratelimit+0x10/0x10
[  541.350392][T15620]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.350411][T15620]  ? __pfx__printk+0x10/0x10
[  541.350451][T15620]  should_fail_ex+0x414/0x560
[  541.350477][T15620]  _copy_to_user+0x31/0xb0
[  541.350506][T15620]  simple_read_from_buffer+0xe1/0x170
[  541.350542][T15620]  proc_fail_nth_read+0x1b3/0x220
[  541.350574][T15620]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  541.350603][T15620]  ? rw_verify_area+0x2a6/0x4d0
[  541.350626][T15620]  ? kfree+0x4d/0x660
[  541.350646][T15620]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  541.350685][T15620]  vfs_read+0x200/0xa30
[  541.350709][T15620]  ? fdget_pos+0x247/0x320
[  541.350731][T15620]  ? __pfx___mutex_lock+0x10/0x10
[  541.350749][T15620]  ? __pfx_vfs_read+0x10/0x10
[  541.350774][T15620]  ? __fget_files+0x2a/0x420
[  541.350796][T15620]  ? __fget_files+0x3a0/0x420
[  541.350815][T15620]  ? __fget_files+0x2a/0x420
[  541.350839][T15620]  ksys_read+0x145/0x250
[  541.350864][T15620]  ? __pfx_ksys_read+0x10/0x10
[  541.350893][T15620]  ? do_syscall_64+0xbe/0xf80
[  541.350926][T15620]  do_syscall_64+0xfa/0xf80
[  541.350956][T15620]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.350974][T15620]  ? clear_bhb_loop+0x60/0xb0
[  541.350997][T15620]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.351017][T15620] RIP: 0033:0x7fe21c78e15c
[  541.351035][T15620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  541.351052][T15620] RSP: 002b:00007fe21d60d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  541.351073][T15620] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78e15c
[  541.351087][T15620] RDX: 000000000000000f RSI: 00007fe21d60d0a0 RDI: 0000000000000004
[  541.351100][T15620] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  541.351111][T15620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.351122][T15620] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  541.351151][T15620]  </TASK>
[  541.772950][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3502'.
[  542.040051][T15636] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3505'.
[  542.258486][T15644] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.584517][ T5892] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  542.626571][T15663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.635805][T15663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.736588][ T5892] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  542.745566][ T5892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.756423][ T5892] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  542.774195][ T5892] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  542.783851][T15665] FAULT_INJECTION: forcing a failure.
[  542.783851][T15665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.797500][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.804675][T15665] CPU: 1 UID: 0 PID: 15665 Comm: syz.1.3519 Not tainted syzkaller #0 PREEMPT(full) 
[  542.804709][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  542.804725][T15665] Call Trace:
[  542.804735][T15665]  <TASK>
[  542.804748][T15665]  dump_stack_lvl+0x189/0x250
[  542.804777][T15665]  ? __pfx____ratelimit+0x10/0x10
[  542.804812][T15665]  ? __pfx_dump_stack_lvl+0x10/0x10
[  542.804839][T15665]  ? __pfx__printk+0x10/0x10
[  542.804875][T15665]  ? __might_fault+0xb0/0x130
[  542.804936][T15665]  should_fail_ex+0x414/0x560
[  542.804967][T15665]  _copy_from_iter+0x1cd/0x1630
[  542.805014][T15665]  ? __pfx__copy_from_iter+0x10/0x10
[  542.805052][T15665]  ? dev_get_by_index+0x22/0x2f0
[  542.805081][T15665]  ? dev_get_by_index+0x22/0x2f0
[  542.805111][T15665]  ? skb_put+0x11b/0x210
[  542.805152][T15665]  raw_sendmsg+0x3a6/0x1320
[  542.805200][T15665]  ? __pfx_raw_sendmsg+0x10/0x10
[  542.805236][T15665]  ? __pfx_aa_sk_perm+0x10/0x10
[  542.805277][T15665]  ? __pfx_raw_sendmsg+0x10/0x10
[  542.805307][T15665]  sock_sendmsg_nosec+0x18f/0x1d0
[  542.805342][T15665]  ____sys_sendmsg+0x577/0x880
[  542.805386][T15665]  ? __pfx_____sys_sendmsg+0x10/0x10
[  542.805421][T15665]  ? import_iovec+0x74/0xa0
[  542.805461][T15665]  ___sys_sendmsg+0x21f/0x2a0
[  542.805488][T15665]  ? __pfx____sys_sendmsg+0x10/0x10
[  542.805519][T15665]  ? rcu_read_lock_any_held+0xb3/0x120
[  542.805569][T15665]  ? __fget_files+0x2a/0x420
[  542.805591][T15665]  ? __fget_files+0x3a0/0x420
[  542.805621][T15665]  __x64_sys_sendmsg+0x19b/0x260
[  542.805645][T15665]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  542.805676][T15665]  ? __pfx_ksys_write+0x10/0x10
[  542.805709][T15665]  ? do_syscall_64+0xbe/0xf80
[  542.805751][T15665]  do_syscall_64+0xfa/0xf80
[  542.805792][T15665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.805818][T15665]  ? clear_bhb_loop+0x60/0xb0
[  542.805846][T15665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.805874][T15665] RIP: 0033:0x7fe21c78f749
[  542.805896][T15665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.805917][T15665] RSP: 002b:00007fe21d60d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  542.805943][T15665] RAX: ffffffffffffffda RBX: 00007fe21c9e5fa0 RCX: 00007fe21c78f749
[  542.805962][T15665] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003
[  542.805979][T15665] RBP: 00007fe21d60d090 R08: 0000000000000000 R09: 0000000000000000
[  542.805996][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.806010][T15665] R13: 00007fe21c9e6038 R14: 00007fe21c9e5fa0 R15: 00007fff610d1af8
[  542.806050][T15665]  </TASK>
[  543.067640][ T5892] usb 3-1: Product: syz
[  543.071856][ T5892] usb 3-1: Manufacturer: syz
[  543.076613][ T5892] usb 3-1: SerialNumber: syz
[  543.374458][ T5892] usb 3-1: USB disconnect, device number 99
[  543.478136][T15680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  543.494861][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  543.509469][T15680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  543.935267][ T5947] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  544.084425][ T5947] usb 2-1: device descriptor read/64, error -71
[  544.190744][T15704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'.
[  544.201940][T15704] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3535'.
[  544.212169][T15704] tipc: Invalid UDP bearer configuration
[  544.212219][T15704] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  544.292209][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.300884][ T5948] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  544.311143][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.324455][ T5947] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  544.455213][ T5948] usb 3-1: Using ep0 maxpacket: 8
[  544.462144][ T5947] usb 2-1: device descriptor read/64, error -71
[  544.471207][ T5948] usb 3-1: config 4 has an invalid interface number: 47 but max is 0
[  544.479851][ T5948] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  544.489797][ T5948] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  544.504034][ T5948] usb 3-1: config 4 has no interface number 0
[  544.511402][ T5948] usb 3-1: config 4 interface 47 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15
[  544.530446][ T5948] usb 3-1: config 4 interface 47 has no altsetting 0
[  544.562687][T15712] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3537'.
[  544.574872][ T5947] usb usb2-port1: attempt power cycle
[  544.924485][ T5947] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  544.969242][ T5947] usb 2-1: device descriptor read/8, error -71
[  545.146101][T15732] netlink: 796 bytes leftover after parsing attributes in process `syz.0.3544'.
[  545.234754][ T5947] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  545.265314][ T5947] usb 2-1: device descriptor read/8, error -71
[  545.401791][ T5947] usb usb2-port1: unable to enumerate USB device
[  545.492755][T15749] netlink: 'syz.3.3547': attribute type 1 has an invalid length.
[  545.792547][T15760] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3550'.
[  545.804311][T15760] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  546.476743][T15779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.487578][T15779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.884999][T15789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.894743][T15789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.100594][ T5948] usb 3-1: New USB device found, idVendor=04b4, idProduct=bd29, bcdDevice=4f.a9
[  547.122577][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.131162][ T5948] usb 3-1: Product: 獂๖嘈衽뙌臱
[  547.148266][ T5948] usb 3-1: can't set config #4, error -71
[  547.163885][ T5948] usb 3-1: USB disconnect, device number 100
[  547.323982][T15807] netlink: get zone limit has 4 unknown bytes
[  547.347790][T15807] FAULT_INJECTION: forcing a failure.
[  547.347790][T15807] name failslab, interval 1, probability 0, space 0, times 0
[  547.362856][T15807] CPU: 1 UID: 0 PID: 15807 Comm: syz.2.3564 Not tainted syzkaller #0 PREEMPT(full) 
[  547.362887][T15807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  547.362901][T15807] Call Trace:
[  547.362911][T15807]  <TASK>
[  547.362920][T15807]  dump_stack_lvl+0x189/0x250
[  547.362946][T15807]  ? __pfx____ratelimit+0x10/0x10
[  547.362978][T15807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  547.362999][T15807]  ? __pfx__printk+0x10/0x10
[  547.363034][T15807]  ? __pfx___might_resched+0x10/0x10
[  547.363066][T15807]  ? fs_reclaim_acquire+0x7d/0x100
[  547.363104][T15807]  should_fail_ex+0x414/0x560
[  547.363133][T15807]  should_failslab+0xa8/0x100
[  547.363156][T15807]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  547.363187][T15807]  ? __alloc_skb+0x255/0x430
[  547.363217][T15807]  ? napi_skb_cache_get+0x4a5/0x780
[  547.363253][T15807]  ? napi_skb_cache_get+0x151/0x780
[  547.363289][T15807]  __alloc_skb+0x255/0x430
[  547.363323][T15807]  ? __pfx___alloc_skb+0x10/0x10
[  547.363361][T15807]  ? netlink_ack_tlv_len+0x6c/0x210
[  547.363387][T15807]  netlink_ack+0x146/0xa50
[  547.363408][T15807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  547.363453][T15807]  netlink_rcv_skb+0x28c/0x470
[  547.363478][T15807]  ? __pfx_genl_rcv_msg+0x10/0x10
[  547.363507][T15807]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  547.363544][T15807]  ? down_read+0x274/0x2e0
[  547.363560][T15807]  ? genl_rcv+0xd/0x40
[  547.363589][T15807]  genl_rcv+0x28/0x40
[  547.363615][T15807]  netlink_unicast+0x82f/0x9e0
[  547.363658][T15807]  ? __pfx_netlink_unicast+0x10/0x10
[  547.363693][T15807]  ? netlink_sendmsg+0x642/0xb30
[  547.363715][T15807]  ? skb_put+0x11b/0x210
[  547.363749][T15807]  netlink_sendmsg+0x805/0xb30
[  547.363771][T15807]  ? aa_sk_perm+0x15f/0x920
[  547.363805][T15807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  547.363831][T15807]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  547.363873][T15807]  ? __pfx_netlink_sendmsg+0x10/0x10
[  547.363893][T15807]  sock_sendmsg_nosec+0x18f/0x1d0
[  547.363924][T15807]  ____sys_sendmsg+0x577/0x880
[  547.363956][T15807]  ? __pfx_____sys_sendmsg+0x10/0x10
[  547.363987][T15807]  ? import_iovec+0x74/0xa0
[  547.364024][T15807]  ___sys_sendmsg+0x21f/0x2a0
[  547.364061][T15807]  ? __pfx____sys_sendmsg+0x10/0x10
[  547.364089][T15807]  ? rcu_read_lock_any_held+0xb3/0x120
[  547.364140][T15807]  ? __fget_files+0x2a/0x420
[  547.364161][T15807]  ? __fget_files+0x3a0/0x420
[  547.364192][T15807]  __x64_sys_sendmsg+0x19b/0x260
[  547.364215][T15807]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  547.364254][T15807]  ? __pfx_ksys_write+0x10/0x10
[  547.364287][T15807]  ? do_syscall_64+0xbe/0xf80
[  547.364322][T15807]  do_syscall_64+0xfa/0xf80
[  547.364354][T15807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.364376][T15807]  ? clear_bhb_loop+0x60/0xb0
[  547.364402][T15807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.364423][T15807] RIP: 0033:0x7f080518f749
[  547.364443][T15807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  547.364462][T15807] RSP: 002b:00007f0805f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  547.364485][T15807] RAX: ffffffffffffffda RBX: 00007f08053e5fa0 RCX: 00007f080518f749
[  547.364501][T15807] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003
[  547.364515][T15807] RBP: 00007f0805f8e090 R08: 0000000000000000 R09: 0000000000000000
[  547.364528][T15807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  547.364541][T15807] R13: 00007f08053e6038 R14: 00007f08053e5fa0 R15: 00007ffcb3858718
[  547.364576][T15807]  </TASK>
[  547.792326][T15813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3565'.
[  548.000829][T15824] input: syz0 as /devices/virtual/input/input40
[  548.017322][T15826] FAULT_INJECTION: forcing a failure.
[  548.017322][T15826] name failslab, interval 1, probability 0, space 0, times 0
[  548.030517][T15826] CPU: 0 UID: 0 PID: 15826 Comm: syz.2.3572 Not tainted syzkaller #0 PREEMPT(full) 
[  548.030545][T15826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  548.030559][T15826] Call Trace:
[  548.030568][T15826]  <TASK>
[  548.030578][T15826]  dump_stack_lvl+0x189/0x250
[  548.030604][T15826]  ? __pfx____ratelimit+0x10/0x10
[  548.030636][T15826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.030668][T15826]  ? __pfx__printk+0x10/0x10
[  548.030762][T15826]  ? __pfx___might_resched+0x10/0x10
[  548.030987][T15826]  should_fail_ex+0x414/0x560
[  548.031243][T15826]  should_failslab+0xa8/0x100
[  548.031398][T15826]  __kmalloc_noprof+0xdf/0x800
[  548.031436][T15826]  ? kfree+0x4d/0x660
[  548.031465][T15826]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  548.031499][T15826]  tomoyo_realpath_from_path+0xe3/0x5d0
[  548.031528][T15826]  ? tomoyo_domain+0xd8/0x130
[  548.031561][T15826]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  548.031583][T15826]  tomoyo_path_number_perm+0x1e8/0x5a0
[  548.031609][T15826]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  548.031648][T15826]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  548.031685][T15826]  ? __fget_files+0x2a/0x420
[  548.031710][T15826]  ? __fget_files+0x3a0/0x420
[  548.031730][T15826]  ? __fget_files+0x2a/0x420
[  548.031755][T15826]  security_file_ioctl+0xcb/0x2d0
[  548.031778][T15826]  __se_sys_ioctl+0x47/0x170
[  548.031814][T15826]  do_syscall_64+0xfa/0xf80
[  548.031848][T15826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.031869][T15826]  ? clear_bhb_loop+0x60/0xb0
[  548.031895][T15826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.031916][T15826] RIP: 0033:0x7f080518f749
[  548.031935][T15826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  548.031959][T15826] RSP: 002b:00007f0805f8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  548.031982][T15826] RAX: ffffffffffffffda RBX: 00007f08053e5fa0 RCX: 00007f080518f749
[  548.031997][T15826] RDX: 0000200000000440 RSI: 0000000000008922 RDI: 0000000000000007
[  548.032011][T15826] RBP: 00007f0805f8e090 R08: 0000000000000000 R09: 0000000000000000
[  548.032024][T15826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.032037][T15826] R13: 00007f08053e6038 R14: 00007f08053e5fa0 R15: 00007ffcb3858718
[  548.032071][T15826]  </TASK>
[  548.032080][T15826] ERROR: Out of memory at tomoyo_realpath_from_path.
[  548.324285][ T5892] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  548.474371][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  548.492835][ T5892] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  548.507585][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.522897][ T5892] usb 2-1: Product: syz
[  548.530467][ T5892] usb 2-1: Manufacturer: syz
[  548.535495][ T5892] usb 2-1: SerialNumber: syz
[  548.553044][ T5892] usb 2-1: config 0 descriptor??
[  548.763311][   T30] audit: type=1326 audit(1764750364.249:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15814 comm="syz.1.3567" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe21c78f749 code=0x0
[  548.979804][T15854] netlink: zone id is out of range
[  548.985396][T15854] netlink: set zone limit has 8 unknown bytes
[  549.053388][T15857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.072511][T15857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.215420][T15867] bond0: (slave caif0): Error: Device type is different from other slaves
[  549.338880][T15874] netlink: 'syz.2.3591': attribute type 10 has an invalid length.
[  549.346961][T15874] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3591'.
[  549.396269][T15876] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3593'.
[  549.458616][T15878] FAULT_INJECTION: forcing a failure.
[  549.458616][T15878] name failslab, interval 1, probability 0, space 0, times 0
[  549.472336][T15878] CPU: 0 UID: 0 PID: 15878 Comm: syz.2.3594 Not tainted syzkaller #0 PREEMPT(full) 
[  549.472358][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  549.472369][T15878] Call Trace:
[  549.472375][T15878]  <TASK>
[  549.472382][T15878]  dump_stack_lvl+0x189/0x250
[  549.472401][T15878]  ? __pfx____ratelimit+0x10/0x10
[  549.472426][T15878]  ? __pfx_dump_stack_lvl+0x10/0x10
[  549.472441][T15878]  ? __pfx__printk+0x10/0x10
[  549.472471][T15878]  ? __pfx___might_resched+0x10/0x10
[  549.472493][T15878]  ? fs_reclaim_acquire+0x7d/0x100
[  549.472519][T15878]  should_fail_ex+0x414/0x560
[  549.472541][T15878]  should_failslab+0xa8/0x100
[  549.472557][T15878]  __kmalloc_noprof+0xdf/0x800
[  549.472577][T15878]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  549.472599][T15878]  ? rcu_is_watching+0x15/0xb0
[  549.472617][T15878]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  549.472644][T15878]  genl_family_rcv_msg_doit+0xb8/0x300
[  549.472670][T15878]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  549.472694][T15878]  ? __pfx_genl_get_cmd+0x10/0x10
[  549.472713][T15878]  ? __pfx_hwsim_get_radio_nl+0x10/0x10
[  549.472733][T15878]  ? __pfx_hwsim_dump_radio_nl+0x10/0x10
[  549.472754][T15878]  ? __lock_acquire+0x6b6/0x2cf0
[  549.472792][T15878]  genl_rcv_msg+0x60e/0x790
[  549.472818][T15878]  ? __pfx_genl_rcv_msg+0x10/0x10
[  549.472839][T15878]  ? __pfx_hwsim_get_radio_nl+0x10/0x10
[  549.472871][T15878]  netlink_rcv_skb+0x208/0x470
[  549.472888][T15878]  ? __pfx_genl_rcv_msg+0x10/0x10
[  549.472910][T15878]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  549.472939][T15878]  ? down_read+0x274/0x2e0
[  549.472953][T15878]  ? genl_rcv+0xd/0x40
[  549.472974][T15878]  genl_rcv+0x28/0x40
[  549.472992][T15878]  netlink_unicast+0x82f/0x9e0
[  549.473029][T15878]  ? __pfx_netlink_unicast+0x10/0x10
[  549.473066][T15878]  ? netlink_sendmsg+0x642/0xb30
[  549.473088][T15878]  ? skb_put+0x11b/0x210
[  549.473122][T15878]  netlink_sendmsg+0x805/0xb30
[  549.473138][T15878]  ? aa_sk_perm+0x15f/0x920
[  549.473162][T15878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.473180][T15878]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  549.473209][T15878]  ? __pfx_netlink_sendmsg+0x10/0x10
[  549.473225][T15878]  sock_sendmsg_nosec+0x18f/0x1d0
[  549.473248][T15878]  ____sys_sendmsg+0x577/0x880
[  549.473269][T15878]  ? __pfx_____sys_sendmsg+0x10/0x10
[  549.473291][T15878]  ? import_iovec+0x74/0xa0
[  549.473317][T15878]  ___sys_sendmsg+0x21f/0x2a0
[  549.473333][T15878]  ? __pfx____sys_sendmsg+0x10/0x10
[  549.473353][T15878]  ? rcu_read_lock_any_held+0xb3/0x120
[  549.473390][T15878]  ? __fget_files+0x2a/0x420
[  549.473405][T15878]  ? __fget_files+0x3a0/0x420
[  549.473428][T15878]  __x64_sys_sendmsg+0x19b/0x260
[  549.473445][T15878]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  549.473468][T15878]  ? __pfx_ksys_write+0x10/0x10
[  549.473491][T15878]  ? do_syscall_64+0xbe/0xf80
[  549.473518][T15878]  do_syscall_64+0xfa/0xf80
[  549.473542][T15878]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.473558][T15878]  ? clear_bhb_loop+0x60/0xb0
[  549.473576][T15878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  549.473592][T15878] RIP: 0033:0x7f080518f749
[  549.473607][T15878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  549.473620][T15878] RSP: 002b:00007f0805f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  549.473637][T15878] RAX: ffffffffffffffda RBX: 00007f08053e5fa0 RCX: 00007f080518f749
[  549.473649][T15878] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  549.473659][T15878] RBP: 00007f0805f8e090 R08: 0000000000000000 R09: 0000000000000000
[  549.473668][T15878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  549.473677][T15878] R13: 00007f08053e6038 R14: 00007f08053e5fa0 R15: 00007ffcb3858718
[  549.473702][T15878]  </TASK>
[  550.653184][T15898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.662146][T15898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.664242][  T985] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  550.824394][  T985] usb 3-1: Using ep0 maxpacket: 32
[  550.833809][  T985] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  550.850261][ T5947] usb 2-1: USB disconnect, device number 38
[  550.869490][  T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.886677][  T985] usb 3-1: Product: syz
[  550.890910][  T985] usb 3-1: Manufacturer: syz
[  550.900063][  T985] usb 3-1: SerialNumber: syz
[  550.914855][  T985] usb 3-1: config 0 descriptor??
[  550.926960][  T985] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  550.934690][  T985] dvb-usb: bulk message failed: -22 (2/0)
[  550.944472][  T985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  550.955900][  T985] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  550.964004][  T985] usb 3-1: media controller created
[  550.991718][  T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  551.019681][  T985] usb 3-1: selecting invalid altsetting 7
[  551.025569][  T985] cxusb: set interface failed
[  551.030279][  T985] dvb-usb: bulk message failed: -22 (1/0)
[  551.077418][  T985] DVB: Unable to find symbol lgdt330x_attach()
[  551.083751][  T985] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  551.174292][  T985] rc_core: IR keymap rc-dvico-portable not found
[  551.180676][  T985] Registered IR keymap rc-empty
[  551.201080][  T985] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  551.214931][  T985] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input41
[  551.232653][  T985] dvb-usb: schedule remote query interval to 100 msecs.
[  551.240425][  T985] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  551.256567][  T985] usb 3-1: USB disconnect, device number 101
[  551.258904][T15912] Invalid option length (1048467) for dns_resolver key
[  551.280367][T15911] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  551.309091][T15911] VFS: Can't find a romfs filesystem on dev nullb0.
[  551.309091][T15911] 
[  551.390547][  T985] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  551.463338][T15919] netlink: 'syz.3.3608': attribute type 10 has an invalid length.
[  551.471396][T15919] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3608'.
[  551.520997][T15921] overlayfs: failed to clone upperpath
[  551.684206][ T5892] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  551.854176][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  551.865611][ T5892] usb 2-1: config 1 has an invalid interface number: 249 but max is 0
[  551.873871][ T5892] usb 2-1: config 1 has no interface number 0
[  551.905013][ T5892] usb 2-1: config 1 interface 249 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  551.944123][ T5892] usb 2-1: config 1 interface 249 has no altsetting 0
[  551.958266][ T5892] usb 2-1: New USB device found, idVendor=06f8, idProduct=0004, bcdDevice=16.fc
[  551.968456][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.987893][ T5892] usb 2-1: Product: syz
[  551.992154][ T5892] usb 2-1: Manufacturer: syz
[  552.014128][ T5892] usb 2-1: SerialNumber: syz
[  552.122915][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.132285][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.142827][T15938] fuse: Bad value for 'user_id'
[  552.147847][T15938] fuse: Bad value for 'user_id'
[  552.235830][T15918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.246429][T15918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  552.275716][ T5892] usb 2-1: USB disconnect, device number 39
[  552.520620][T15956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3624'.
[  552.656830][T15962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3627'.
[  552.889266][T15973] FAULT_INJECTION: forcing a failure.
[  552.889266][T15973] name failslab, interval 1, probability 0, space 0, times 0
[  552.906010][T15973] CPU: 1 UID: 0 PID: 15973 Comm: syz.2.3632 Not tainted syzkaller #0 PREEMPT(full) 
[  552.906040][T15973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  552.906054][T15973] Call Trace:
[  552.906062][T15973]  <TASK>
[  552.906072][T15973]  dump_stack_lvl+0x189/0x250
[  552.906098][T15973]  ? __pfx____ratelimit+0x10/0x10
[  552.906128][T15973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.906148][T15973]  ? __pfx__printk+0x10/0x10
[  552.906186][T15973]  ? __pfx___might_resched+0x10/0x10
[  552.906215][T15973]  ? fs_reclaim_acquire+0x7d/0x100
[  552.906251][T15973]  should_fail_ex+0x414/0x560
[  552.906280][T15973]  should_failslab+0xa8/0x100
[  552.906303][T15973]  __kmalloc_noprof+0xdf/0x800
[  552.906331][T15973]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  552.906360][T15973]  ? rcu_is_watching+0x15/0xb0
[  552.906386][T15973]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  552.906424][T15973]  genl_family_rcv_msg_doit+0xb8/0x300
[  552.906460][T15973]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  552.906496][T15973]  ? apparmor_capable+0x137/0x1a0
[  552.906531][T15973]  ? bpf_lsm_capable+0x9/0x20
[  552.906561][T15973]  ? security_capable+0x7e/0x2e0
[  552.906592][T15973]  genl_rcv_msg+0x60e/0x790
[  552.906627][T15973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  552.906655][T15973]  ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10
[  552.906713][T15973]  netlink_rcv_skb+0x208/0x470
[  552.906738][T15973]  ? __pfx_genl_rcv_msg+0x10/0x10
[  552.906769][T15973]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  552.906811][T15973]  ? down_read+0x274/0x2e0
[  552.906832][T15973]  ? genl_rcv+0xd/0x40
[  552.906863][T15973]  genl_rcv+0x28/0x40
[  552.906889][T15973]  netlink_unicast+0x82f/0x9e0
[  552.906934][T15973]  ? __pfx_netlink_unicast+0x10/0x10
[  552.906970][T15973]  ? netlink_sendmsg+0x642/0xb30
[  552.906992][T15973]  ? skb_put+0x11b/0x210
[  552.907032][T15973]  netlink_sendmsg+0x805/0xb30
[  552.907055][T15973]  ? aa_sk_perm+0x15f/0x920
[  552.907086][T15973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  552.907112][T15973]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  552.907153][T15973]  ? __pfx_netlink_sendmsg+0x10/0x10
[  552.907176][T15973]  sock_sendmsg_nosec+0x18f/0x1d0
[  552.907207][T15973]  ____sys_sendmsg+0x577/0x880
[  552.907239][T15973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  552.907271][T15973]  ? import_iovec+0x74/0xa0
[  552.907307][T15973]  ___sys_sendmsg+0x21f/0x2a0
[  552.907331][T15973]  ? __pfx____sys_sendmsg+0x10/0x10
[  552.907360][T15973]  ? rcu_read_lock_any_held+0xb3/0x120
[  552.907414][T15973]  ? __fget_files+0x2a/0x420
[  552.907435][T15973]  ? __fget_files+0x3a0/0x420
[  552.907469][T15973]  __x64_sys_sendmsg+0x19b/0x260
[  552.907495][T15973]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  552.907528][T15973]  ? __pfx_ksys_write+0x10/0x10
[  552.907570][T15973]  ? do_syscall_64+0xbe/0xf80
[  552.907608][T15973]  do_syscall_64+0xfa/0xf80
[  552.907642][T15973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.907665][T15973]  ? clear_bhb_loop+0x60/0xb0
[  552.907691][T15973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.907712][T15973] RIP: 0033:0x7f080518f749
[  552.907733][T15973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.907752][T15973] RSP: 002b:00007f0805f8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  552.907776][T15973] RAX: ffffffffffffffda RBX: 00007f08053e5fa0 RCX: 00007f080518f749
[  552.907792][T15973] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005
[  552.907806][T15973] RBP: 00007f0805f8e090 R08: 0000000000000000 R09: 0000000000000000
[  552.907821][T15973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.907834][T15973] R13: 00007f08053e6038 R14: 00007f08053e5fa0 R15: 00007ffcb3858718
[  552.907870][T15973]  </TASK>
[  553.335792][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3633'.
[  553.378240][T15975] pimreg3: entered allmulticast mode
[  553.632712][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.641569][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.858588][ T5824] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  554.014154][ T5824] usb 2-1: Using ep0 maxpacket: 16
[  554.021154][ T5824] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  554.042256][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  554.055563][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  554.070453][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  554.081711][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  554.097815][ T5824] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  554.098991][T15996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3641'.
[  554.107189][ T5824] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  554.107220][ T5824] usb 2-1: Manufacturer: syz
[  554.131193][ T5824] usb 2-1: config 0 descriptor??
[  554.404276][ T5824] rc_core: IR keymap rc-hauppauge not found
[  554.411063][ T5824] Registered IR keymap rc-empty
[  554.417119][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.444259][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.466015][ T5824] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  554.479406][ T5824] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input42
[  554.495995][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.514430][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.534198][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.554180][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.574222][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.594170][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.614173][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.634288][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.654334][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.674195][ T5824] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  554.696261][ T5824] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  554.704548][ T5824] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  554.721420][ T5824] usb 2-1: USB disconnect, device number 40
[  554.952292][ T5839] Bluetooth: hci3: Malformed HCI Event
[  554.952898][T16017] netlink: get zone limit has 4 unknown bytes
[  555.029499][T16020] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  555.036048][T16020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  555.046576][T16024] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3649'.
[  555.061791][T16024] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3649'.
[  555.074972][T16020] vhci_hcd vhci_hcd.0: Device attached
[  555.161312][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.171895][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.207972][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3652'.
[  555.254852][T12841] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  555.314139][T12841] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[  555.334153][ T5824] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  555.387534][T16029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  555.396337][T16029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  555.484273][ T5824] usb 3-1: Using ep0 maxpacket: 32
[  555.491111][ T5824] usb 3-1: config 10 has an invalid interface number: 171 but max is 0
[  555.499784][ T5824] usb 3-1: config 10 has no interface number 0
[  555.506082][ T5824] usb 3-1: config 10 interface 171 altsetting 187 endpoint 0x1 has an invalid bInterval 133, changing to 7
[  555.517580][ T5824] usb 3-1: config 10 interface 171 has no altsetting 0
[  555.527905][ T5824] usb 3-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=d0.8f
[  555.537039][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.545159][ T5824] usb 3-1: Product: syz
[  555.549347][ T5824] usb 3-1: Manufacturer: syz
[  555.553947][ T5824] usb 3-1: SerialNumber: syz
[  555.769967][ T5824] s2255 3-1:10.171: Could not find bulk-in endpoint
[  555.776819][ T5824] Sensoray 2255 driver load failed: 0xfffffff4
[  555.780493][T16022] vhci_hcd: connection reset by peer
[  555.782999][ T5824] s2255 3-1:10.171: probe with driver s2255 failed with error -12
[  555.792630][ T5824] usb 3-1: USB disconnect, device number 102
[  555.798945][ T1160] vhci_hcd vhci_hcd.1: stop threads
[  555.808393][ T1160] vhci_hcd vhci_hcd.1: release socket
[  555.816573][ T1160] vhci_hcd vhci_hcd.1: disconnect device
[  556.146601][T16043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  556.157953][T16043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  556.340984][ T5948] hid_parser_main: 20 callbacks suppressed
[  556.341009][ T5948] hid-generic 0000:0000:0000.0051: unknown main item tag 0x0
[  556.383704][ T5948] hid-generic 0000:0000:0000.0051: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  556.553913][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'.
[  556.655700][T16060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'.
[  556.724437][  T796] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  556.737513][T16062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'.
[  556.747040][T16064] sctp: [Deprecated]: syz.3.3667 (pid 16064) Use of int in max_burst socket option.
[  556.747040][T16064] Use struct sctp_assoc_value instead
[  556.821834][T16070] netlink: 'syz.3.3669': attribute type 1 has an invalid length.
[  556.835850][T16070] netlink: 'syz.3.3669': attribute type 3 has an invalid length.
[  556.843717][T16070] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3669'.
[  556.854211][T16070] FAULT_INJECTION: forcing a failure.
[  556.854211][T16070] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.867765][T16070] CPU: 1 UID: 0 PID: 16070 Comm: syz.3.3669 Not tainted syzkaller #0 PREEMPT(full) 
[  556.867792][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  556.867806][T16070] Call Trace:
[  556.867815][T16070]  <TASK>
[  556.867824][T16070]  dump_stack_lvl+0x189/0x250
[  556.867852][T16070]  ? __pfx____ratelimit+0x10/0x10
[  556.867878][T16070]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.867895][T16070]  ? __pfx__printk+0x10/0x10
[  556.867930][T16070]  should_fail_ex+0x414/0x560
[  556.867954][T16070]  _copy_to_user+0x31/0xb0
[  556.867982][T16070]  simple_read_from_buffer+0xe1/0x170
[  556.868013][T16070]  proc_fail_nth_read+0x1b3/0x220
[  556.868041][T16070]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  556.868068][T16070]  ? rw_verify_area+0x2a6/0x4d0
[  556.868090][T16070]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  556.868116][T16070]  vfs_read+0x200/0xa30
[  556.868137][T16070]  ? fdget_pos+0x247/0x320
[  556.868157][T16070]  ? __pfx___mutex_lock+0x10/0x10
[  556.868174][T16070]  ? __pfx_vfs_read+0x10/0x10
[  556.868203][T16070]  ? __fget_files+0x2a/0x420
[  556.868223][T16070]  ? __fget_files+0x3a0/0x420
[  556.868240][T16070]  ? __fget_files+0x2a/0x420
[  556.868269][T16070]  ksys_read+0x145/0x250
[  556.868294][T16070]  ? __pfx_ksys_read+0x10/0x10
[  556.868320][T16070]  ? do_syscall_64+0xbe/0xf80
[  556.868349][T16070]  do_syscall_64+0xfa/0xf80
[  556.868375][T16070]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.868393][T16070]  ? clear_bhb_loop+0x60/0xb0
[  556.868413][T16070]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  556.868430][T16070] RIP: 0033:0x7f81dab8e15c
[  556.868446][T16070] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  556.868461][T16070] RSP: 002b:00007f81db966030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  556.868479][T16070] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8e15c
[  556.868492][T16070] RDX: 000000000000000f RSI: 00007f81db9660a0 RDI: 0000000000000004
[  556.868503][T16070] RBP: 00007f81db966090 R08: 0000000000000000 R09: 0000000000000000
[  556.868521][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  556.868531][T16070] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  556.868558][T16070]  </TASK>
[  556.884141][  T796] usb 2-1: Using ep0 maxpacket: 8
[  556.985769][T16074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  557.070062][  T796] usb 2-1: unable to get BOS descriptor or descriptor too short
[  557.080341][T16074] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  557.105198][  T796] usb 2-1: config 17 has an invalid interface number: 8 but max is 1
[  557.143241][  T796] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2
[  557.157098][  T796] usb 2-1: config 17 has no interface number 0
[  557.163548][  T796] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  557.177171][  T796] usb 2-1: config 17 interface 8 has no altsetting 0
[  557.186684][  T796] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[  557.196366][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.204854][  T796] usb 2-1: Product: syz
[  557.209282][  T796] usb 2-1: Manufacturer: syz
[  557.214107][  T796] usb 2-1: SerialNumber: syz
[  557.439506][T16085] netlink: 304 bytes leftover after parsing attributes in process `syz.0.3675'.
[  557.448967][T16084] netlink: 'syz.2.3674': attribute type 1 has an invalid length.
[  557.448993][T16084] netlink: 'syz.2.3674': attribute type 3 has an invalid length.
[  557.576228][T16088] fuse: Unknown parameter '�̣u�Χg���ǃBk�>U#؜CJ
[  557.576228][T16088] P|��}Ʋe>y<Uud�*<z���j�Xi�\�Ga}��D'
[  557.652429][  T796] usb 2-1: selecting invalid altsetting 0
[  557.658358][  T796] usb 2-1: 8:6 : UAC_AS_GENERAL descriptor not found
[  557.665568][  T796] usb 2-1: selecting invalid altsetting 0
[  557.688030][  T796] usb 2-1: USB disconnect, device number 41
[  557.698499][ T6203] udevd[6203]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  557.714807][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  558.238139][T16097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  558.251574][T16097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  559.383572][T16118] __nla_validate_parse: 1 callbacks suppressed
[  559.383594][T16118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3687'.
[  559.402122][T16118] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3687'.
[  559.459877][T16122] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3689'.
[  559.807249][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  559.818979][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.125068][  T796] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  560.152397][T16145] tipc: Started in network mode
[  560.157726][T16145] tipc: Node identity 4, cluster identity 4711
[  560.164555][T16145] tipc: Node number set to 4
[  560.297289][  T796] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  560.305927][  T796] usb 2-1: config 0 has no interface number 0
[  560.317740][  T796] usb 2-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  560.327127][  T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.335481][  T796] usb 2-1: Product: syz
[  560.339886][  T796] usb 2-1: Manufacturer: syz
[  560.344681][  T796] usb 2-1: SerialNumber: syz
[  560.354799][  T796] usb 2-1: config 0 descriptor??
[  560.434093][T12841] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  560.561790][  T796] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  560.608248][  T796] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  560.635576][  T796] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  560.654109][  T796] usb 2-1: media controller created
[  560.668814][  T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  560.727775][T16156] FAT-fs (nullb0): bogus number of reserved sectors
[  560.744579][T16156] FAT-fs (nullb0): Can't find a valid FAT filesystem
[  560.797019][  T796] DVB: Unable to find symbol dib7000p_attach()
[  560.817289][  T796] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  560.836614][  T796] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  560.857870][  T796] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  560.885809][  T796] usb 2-1: media controller created
[  560.901906][  T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  560.939254][  T796] dib0700: the master dib7090 has to be initialized first
[  560.952474][  T796] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  561.054177][  T796] rc_core: IR keymap rc-dib0700-rc5 not found
[  561.062671][  T796] Registered IR keymap rc-empty
[  561.078722][  T796] dvb-usb: could not initialize remote control.
[  561.089246][  T796] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  561.105512][T16171] binder: 16170:16171 unknown command 0
[  561.109289][  T796] usb 2-1: USB disconnect, device number 42
[  561.151541][T16171] binder: 16170:16171 ioctl c0306201 2000000001c0 returned -22
[  561.160786][  T796] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  561.615508][  T796] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  561.784122][  T796] usb 2-1: Using ep0 maxpacket: 16
[  561.798588][  T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.819968][  T796] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  561.844095][  T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.866927][  T796] usb 2-1: config 0 descriptor??
[  562.076648][T16206] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  562.141326][T16207] 
@0�: renamed from bond_slave_1 (while UP)
[  562.283347][  T796] mcp2221 0003:04D8:00DD.0052: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  562.690573][T16180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.700851][T16180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.759457][T16180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  562.770514][T16180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  562.784479][ T5948] usb 2-1: USB disconnect, device number 43
[  562.896865][ T5839] Bluetooth: hci3: command tx timeout
[  563.215115][ T5947] usb 3-1: new low-speed USB device number 103 using dummy_hcd
[  563.344160][ T5947] usb 3-1: device descriptor read/64, error -71
[  563.584082][ T5947] usb 3-1: new low-speed USB device number 104 using dummy_hcd
[  563.714009][ T5947] usb 3-1: device descriptor read/64, error -71
[  563.734228][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout
[  563.824956][ T5947] usb usb3-port1: attempt power cycle
[  564.164121][ T5947] usb 3-1: new low-speed USB device number 105 using dummy_hcd
[  564.184672][ T5947] usb 3-1: device descriptor read/8, error -71
[  564.424014][ T5947] usb 3-1: new low-speed USB device number 106 using dummy_hcd
[  564.436394][T16240] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3737'.
[  564.455259][ T5947] usb 3-1: device descriptor read/8, error -71
[  564.564414][ T5947] usb usb3-port1: unable to enumerate USB device
[  564.643605][T16244] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3738'.
[  564.656175][  T796] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  564.826465][  T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.839288][  T796] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  564.850925][  T796] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  564.864419][  T796] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  564.873507][  T796] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.885125][  T796] usb 2-1: config 0 descriptor??
[  564.939848][T12841] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0
[  564.966111][T12841] hid-generic 0000:0000:0000.0053: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  565.058297][T16255] fido_id[16255]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  565.122530][T16258] cgroup: release_agent respecified
[  565.298544][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.313480][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.321524][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.329753][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.337790][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.345898][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.353453][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.363444][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.371381][  T796] plantronics 0003:047F:FFFF.0054: unknown main item tag 0x0
[  565.394354][  T796] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  565.795795][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3745'.
[  566.050047][T16271] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3746'.
[  566.130945][T16275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.147171][T16275] hfs: can't find a HFS filesystem on dev nbd2
[  566.461553][T16290] net veth1_virt_wifi : renamed from virt_wifi0
[  566.504006][  T796] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  566.654099][  T796] usb 3-1: Using ep0 maxpacket: 32
[  566.661127][  T796] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  566.669938][  T796] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  566.679055][  T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  566.691050][  T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  566.701009][  T796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  566.710946][  T796] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  566.724312][  T796] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  566.733363][  T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.743985][T12841] usb 2-1: reset high-speed USB device number 44 using dummy_hcd
[  566.752292][  T796] usb 3-1: config 0 descriptor??
[  566.970761][  T796] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 107 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  566.988888][  T796] usb 3-1: USB disconnect, device number 107
[  567.000234][  T796] usblp1: removed
[  567.414033][  T796] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  567.516852][T16305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  567.535775][T16305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  567.564155][  T796] usb 3-1: Using ep0 maxpacket: 32
[  567.576750][  T796] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  567.585467][  T796] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  567.594238][  T796] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  567.603291][  T796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  567.613335][  T796] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  567.623163][  T796] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  567.636327][  T796] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  567.645670][  T796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.661303][  T796] usb 3-1: config 0 descriptor??
[  567.709298][T16307] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  567.723256][T16307] trusted_key: encrypted_key: insufficient parameters specified
[  567.737462][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  567.757258][T16307] trusted_key: encrypted_key: keylen parameter is missing
[  567.873347][  T796] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 108 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  568.204330][T16319] Bluetooth: MGMT ver 1.23
[  568.212463][T16319] netlink: 'syz.3.3766': attribute type 9 has an invalid length.
[  568.220440][T16319] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3766'.
[  568.306019][ T5895] usb 2-1: USB disconnect, device number 44
[  568.464019][ T5895] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  568.594010][ T5895] usb 2-1: device descriptor read/64, error -71
[  568.690866][T16340] loop2: detected capacity change from 0 to 7
[  568.722324][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.731874][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.740109][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.749304][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.757600][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.766774][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.775959][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.785216][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.794744][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.803998][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.812426][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.821642][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.829862][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.839026][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.846939][ T5895] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[  568.847634][T16340] ldm_validate_partition_table(): Disk read failed.
[  568.864324][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.873535][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.881741][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.890919][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.898982][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.908181][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  568.916860][T16340] Dev loop2: unable to read RDB block 0
[  568.923308][T16340]  loop2: unable to read partition table
[  568.930018][T16340] loop2: partition table beyond EOD, truncated
[  568.940873][T16340] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  568.984572][ T5895] usb 2-1: device descriptor read/64, error -71
[  569.094317][ T5895] usb usb2-port1: attempt power cycle
[  569.327972][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3775'.
[  569.339162][T12841] usb 3-1: USB disconnect, device number 108
[  569.359949][T12841] usblp1: removed
[  569.434982][ T5895] usb 2-1: new low-speed USB device number 47 using dummy_hcd
[  569.464662][ T5895] usb 2-1: device descriptor read/8, error -71
[  569.702770][T16362] FAULT_INJECTION: forcing a failure.
[  569.702770][T16362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  569.716101][ T5895] usb 2-1: new low-speed USB device number 48 using dummy_hcd
[  569.740673][T16362] CPU: 1 UID: 0 PID: 16362 Comm: syz.3.3780 Not tainted syzkaller #0 PREEMPT(full) 
[  569.740706][T16362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  569.740720][T16362] Call Trace:
[  569.740730][T16362]  <TASK>
[  569.740740][T16362]  dump_stack_lvl+0x189/0x250
[  569.740767][T16362]  ? __pfx____ratelimit+0x10/0x10
[  569.740799][T16362]  ? __pfx_dump_stack_lvl+0x10/0x10
[  569.740821][T16362]  ? __pfx__printk+0x10/0x10
[  569.740867][T16362]  should_fail_ex+0x414/0x560
[  569.740897][T16362]  strncpy_from_user+0x36/0x2c0
[  569.740938][T16362]  getname_flags+0xf3/0x540
[  569.740963][T16362]  __x64_sys_mkdirat+0x7a/0xa0
[  569.740993][T16362]  do_syscall_64+0xfa/0xf80
[  569.741026][T16362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.741047][T16362]  ? clear_bhb_loop+0x60/0xb0
[  569.741072][T16362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  569.741093][T16362] RIP: 0033:0x7f81dab8f749
[  569.741111][T16362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  569.741130][T16362] RSP: 002b:00007f81db966038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  569.741152][T16362] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8f749
[  569.741168][T16362] RDX: 00000000000001c0 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  569.741183][T16362] RBP: 00007f81db966090 R08: 0000000000000000 R09: 0000000000000000
[  569.741196][T16362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  569.741228][T16362] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  569.741263][T16362]  </TASK>
[  569.754883][ T5895] usb 2-1: device descriptor read/8, error -71
[  570.085550][ T5895] usb usb2-port1: unable to enumerate USB device
[  570.263999][ T5947] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  570.329701][T16390] random: crng reseeded on system resumption
[  570.404012][ T5947] usb 3-1: device descriptor read/64, error -71
[  570.654011][ T5947] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  571.203360][T16405] comedi comedi0: pcl816: I/O port conflict (0x6,16)
[  571.224005][ T5947] usb 3-1: device descriptor read/64, error -71
[  571.265251][T16407] binder: 16406:16407 ioctl c0306201 0 returned -14
[  571.280020][T16409] ------------[ cut here ]------------
[  571.285527][T16409] workqueue: cannot queue hci_rx_work on wq hci0
[  571.291914][T16409] WARNING: kernel/workqueue.c:2252 at 0x0, CPU#0: syz.3.3796/16409
[  571.299834][T16409] Modules linked in:
[  571.303756][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.3.3796 Not tainted syzkaller #0 PREEMPT(full) 
[  571.313166][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  571.323236][T16409] RIP: 0010:__queue_work+0xd4b/0xf90
[  571.328551][T16409] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 46 57 9d 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc
[  571.339717][T16413] binder: 16406:16413 ioctl c0306201 0 returned -14
[  571.348186][T16409] RSP: 0018:ffffc90010f67a70 EFLAGS: 00010086
[  571.348216][T16409] RAX: 1ffff1100c38a97b RBX: 0000000000000008 RCX: ffff88802f1cdb80
[  571.348246][T16409] RDX: ffff88807ce05178 RSI: ffffffff8a5d2fc0 RDI: ffffffff8fc5e330
[  571.348264][T16409] RBP: 0000000000000000 R08: ffff888061c54bc7 R09: 1ffff1100c38a978
[  571.356803][T16413] binder: 16406:16413 ioctl c0306201 0 returned -14
[  571.360936][T16409] R10: dffffc0000000000 R11: ffffed100c38a979 R12: dffffc0000000000
[  571.360957][T16409] R13: ffff888061c54bd8 R14: ffffffff8fc5e330 R15: ffff88807ce05178
[  571.360976][T16409] FS:  00007f81db9666c0(0000) GS:ffff8881259fd000(0000) knlGS:0000000000000000
[  571.372244][T16413] binder: 16406:16413 ioctl c018620b 0 returned -14
[  571.376962][T16409] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  571.376983][T16409] CR2: 00007f81db945d58 CR3: 0000000033cfe000 CR4: 00000000003526f0
[  571.377004][T16409] Call Trace:
[  571.377016][T16409]  <TASK>
[  571.377033][T16409]  ? rcu_is_watching+0x15/0xb0
[  571.386713][ T5947] usb usb3-port1: attempt power cycle
[  571.391604][T16409]  queue_work_on+0x181/0x270
[  571.391665][T16409]  ? lockdep_hardirqs_on+0x98/0x140
[  571.391701][T16409]  ? __pfx_queue_work_on+0x10/0x10
[  571.391732][T16409]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  571.391764][T16409]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  571.391800][T16409]  ? skb_queue_tail+0x30/0xf0
[  571.391833][T16409]  hci_recv_frame+0x625/0x7c0
[  571.391855][T16409]  ? skb_pull+0xc1/0x1d0
[  571.391884][T16409]  vhci_write+0x358/0x4a0
[  571.391916][T16409]  vfs_write+0x5c9/0xb30
[  571.391951][T16409]  ? __pfx_vhci_write+0x10/0x10
[  571.391978][T16409]  ? __pfx_vfs_write+0x10/0x10
[  571.392019][T16409]  ? __fget_files+0x2a/0x420
[  571.392051][T16409]  ksys_write+0x145/0x250
[  571.392084][T16409]  ? __pfx_ksys_write+0x10/0x10
[  571.392119][T16409]  ? do_syscall_64+0xbe/0xf80
[  571.392169][T16409]  do_syscall_64+0xfa/0xf80
[  571.536143][T16409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.542239][T16409]  ? clear_bhb_loop+0x60/0xb0
[  571.546929][T16409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.552836][T16409] RIP: 0033:0x7f81dab8e1ff
[  571.557278][T16409] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  571.576903][T16409] RSP: 002b:00007f81db966000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  571.585332][T16409] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8e1ff
[  571.593312][T16409] RDX: 0000000000000016 RSI: 0000200000000140 RDI: 00000000000000ca
[  571.601301][T16409] RBP: 00007f81dac13f91 R08: 0000000000000000 R09: 0000000000000000
[  571.609301][T16409] R10: 0000200000000140 R11: 0000000000000293 R12: 0000000000000000
[  571.617291][T16409] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  571.625296][T16409]  </TASK>
[  571.628327][T16409] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  571.635621][T16409] CPU: 0 UID: 0 PID: 16409 Comm: syz.3.3796 Not tainted syzkaller #0 PREEMPT(full) 
[  571.645013][T16409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  571.655070][T16409] Call Trace:
[  571.658370][T16409]  <TASK>
[  571.661306][T16409]  dump_stack_lvl+0x99/0x250
[  571.665912][T16409]  ? __asan_memcpy+0x40/0x70
[  571.670594][T16409]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.675832][T16409]  ? __pfx__printk+0x10/0x10
[  571.680461][T16409]  vpanic+0x237/0x6d0
[  571.684456][T16409]  ? __pfx_vpanic+0x10/0x10
[  571.688964][T16409]  ? is_bpf_text_address+0x292/0x2b0
[  571.694277][T16409]  ? is_bpf_text_address+0x26/0x2b0
[  571.699493][T16409]  panic+0xb9/0xc0
[  571.703243][T16409]  ? __pfx_panic+0x10/0x10
[  571.707686][T16409]  __warn+0x317/0x4b0
[  571.711689][T16409]  __report_bug+0x288/0x500
[  571.716218][T16409]  ? stack_depot_save_flags+0x40/0x850
[  571.721698][T16409]  ? __pfx___report_bug+0x10/0x10
[  571.726737][T16409]  ? kasan_save_track+0x4f/0x80
[  571.731602][T16409]  ? __pfx_hci_rx_work+0x10/0x10
[  571.736561][T16409]  ? __lock_acquire+0x6b6/0x2cf0
[  571.741520][T16409]  report_bug_entry+0x16a/0x220
[  571.746386][T16409]  ? __queue_work+0xd4b/0xf90
[  571.751081][T16409]  ? __queue_work+0xd50/0xf90
[  571.755775][T16409]  handle_bug+0xca/0x200
[  571.760029][T16409]  exc_invalid_op+0x1a/0x50
[  571.764548][T16409]  asm_exc_invalid_op+0x1a/0x20
[  571.769409][T16409] RIP: 0010:__queue_work+0xd4b/0xf90
[  571.774711][T16409] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 46 57 9d 00 49 8b 75 00 49 81 c7 78 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc
[  571.794329][T16409] RSP: 0018:ffffc90010f67a70 EFLAGS: 00010086
[  571.800410][T16409] RAX: 1ffff1100c38a97b RBX: 0000000000000008 RCX: ffff88802f1cdb80
[  571.808395][T16409] RDX: ffff88807ce05178 RSI: ffffffff8a5d2fc0 RDI: ffffffff8fc5e330
[  571.816379][T16409] RBP: 0000000000000000 R08: ffff888061c54bc7 R09: 1ffff1100c38a978
[  571.824359][T16409] R10: dffffc0000000000 R11: ffffed100c38a979 R12: dffffc0000000000
[  571.832368][T16409] R13: ffff888061c54bd8 R14: ffffffff8fc5e330 R15: ffff88807ce05178
[  571.840358][T16409]  ? __pfx_hci_rx_work+0x10/0x10
[  571.845330][T16409]  ? rcu_is_watching+0x15/0xb0
[  571.850104][T16409]  queue_work_on+0x181/0x270
[  571.854714][T16409]  ? lockdep_hardirqs_on+0x98/0x140
[  571.859929][T16409]  ? __pfx_queue_work_on+0x10/0x10
[  571.865054][T16409]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  571.870960][T16409]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  571.877304][T16409]  ? skb_queue_tail+0x30/0xf0
[  571.881994][T16409]  hci_recv_frame+0x625/0x7c0
[  571.886678][T16409]  ? skb_pull+0xc1/0x1d0
[  571.890936][T16409]  vhci_write+0x358/0x4a0
[  571.895290][T16409]  vfs_write+0x5c9/0xb30
[  571.899549][T16409]  ? __pfx_vhci_write+0x10/0x10
[  571.904410][T16409]  ? __pfx_vfs_write+0x10/0x10
[  571.909204][T16409]  ? __fget_files+0x2a/0x420
[  571.913808][T16409]  ksys_write+0x145/0x250
[  571.918157][T16409]  ? __pfx_ksys_write+0x10/0x10
[  571.923027][T16409]  ? do_syscall_64+0xbe/0xf80
[  571.927730][T16409]  do_syscall_64+0xfa/0xf80
[  571.932263][T16409]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.938343][T16409]  ? clear_bhb_loop+0x60/0xb0
[  571.943038][T16409]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  571.948944][T16409] RIP: 0033:0x7f81dab8e1ff
[  571.953380][T16409] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  571.973012][T16409] RSP: 002b:00007f81db966000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  571.981445][T16409] RAX: ffffffffffffffda RBX: 00007f81dade5fa0 RCX: 00007f81dab8e1ff
[  571.989426][T16409] RDX: 0000000000000016 RSI: 0000200000000140 RDI: 00000000000000ca
[  571.997406][T16409] RBP: 00007f81dac13f91 R08: 0000000000000000 R09: 0000000000000000
[  572.005390][T16409] R10: 0000200000000140 R11: 0000000000000293 R12: 0000000000000000
[  572.013376][T16409] R13: 00007f81dade6038 R14: 00007f81dade5fa0 R15: 00007ffff945bd78
[  572.021403][T16409]  </TASK>
[  572.024779][T16409] Kernel Offset: disabled
[  572.029109][T16409] Rebooting in 86400 seconds..