last executing test programs:

17.837247652s ago: executing program 3 (id=6419):
r0 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0x0)
r2 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)

16.377218896s ago: executing program 3 (id=6425):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1c}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="10486b469182de87c348a87ae9472100332a356d54e67a671905959abfed246558706b60db22d863c5585dfa2eb8002b545dd55cd96927a5b3bdafb53a74a6fa7b8c22348b04b47012c27fa33a4a6b528c44ea614d6014701bf40d2c4854c8c3ffd375a73f741f0fd73902defe8016eebe90b70fb1026c3ba168252930659b93c4b7be3c9a29d736bf858d58", @nested={0x74, 0xa9, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @uid}, @nested={0x65, 0xab, 0x0, 0x1, [@typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x60}, @generic="cab41b2af6aa27ad2de4aab9da5e7767556f42f1e4e8d2d27894e699d395ad42243a2228f8213286eeeeadcb165286a52e8cd566dd5413f779"]}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="380000001000030500000000005165b235d35406ad9cb26604fc00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010069703665727370616e00000004000280"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05000700880000000600"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0)

12.727387125s ago: executing program 3 (id=6437):
openat$kvm(0x0, 0x0, 0x0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_mtu(r1, 0x29, 0x17, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x51, 0x30000, 0x23456})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48)

11.784346895s ago: executing program 3 (id=6439):
r0 = io_uring_setup(0x4031, &(0x7f0000000240)={0x0, 0x400008d6, 0x4000, 0x2, 0xd3})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default us'], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
bind$phonet(0xffffffffffffffff, &(0x7f0000000380)={0x23, 0xfd, 0x1, 0x6}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2000040)
syz_emit_ethernet(0xf2, &(0x7f00000007c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @udp={0xe, 0x6, "c02e51", 0xbc, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x16}, @mcast2, {[@routing={0x91255d0c93ccdc26, 0xe, 0x0, 0x0, 0x0, [@loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @private1]}, @routing={0x0, 0x6, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private1={0xfc, 0x1, '\x00', 0x1}]}], {0x4e20, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x5d, 0x0, @void}}}}}}}}, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x4000000)
pipe(0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "60000100", "9de66ebc3914c06f0f109088d190e700", "000e3102", "f8dd000000000092"}, 0x28)
syz_io_uring_setup(0x6031, &(0x7f00000000c0)={0x0, 0x409b, 0x2000, 0x1, 0x40196, 0x0, r0}, &(0x7f0000000200), &(0x7f0000000340))
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x51dd80, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)

10.82243763s ago: executing program 3 (id=6443):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read$hidraw(r3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@xino_on}, {@xino_off}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x30}}]})

8.951708582s ago: executing program 3 (id=6448):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1c}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="10486b469182de87c348a87ae9472100332a356d54e67a671905959abfed246558706b60db22d863c5585dfa2eb8002b545dd55cd96927a5b3bdafb53a74a6fa7b8c22348b04b47012c27fa33a4a6b528c44ea614d6014701bf40d2c4854c8c3ffd375a73f741f0fd73902defe8016eebe90b70fb1026c3ba168252930659b93c4b7be3c9a29d736bf858d58", @nested={0x74, 0xa9, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @uid}, @nested={0x65, 0xab, 0x0, 0x1, [@typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x60}, @generic="cab41b2af6aa27ad2de4aab9da5e7767556f42f1e4e8d2d27894e699d395ad42243a2228f8213286eeeeadcb165286a52e8cd566dd5413f779"]}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="380000001000030500000000005165b235d35406ad9cb26604fc00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010069703665727370616e00000004000280"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd0500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0)

7.986826276s ago: executing program 2 (id=6449):
syz_open_dev$usbmon(0x0, 0x8, 0x43a000)
r0 = syz_usbip_server_init(0x1)
sendmmsg(r0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000994bd740f60d5600b5a0000000010902"], 0x0)

6.539590824s ago: executing program 2 (id=6452):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x1c}}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x2000000, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x62040200)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000100)={0xfffffffb, 0x0, 0x40})
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003d40)={0x134, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="10486b469182de87c348a87ae9472100332a356d54e67a671905959abfed246558706b60db22d863c5585dfa2eb8002b545dd55cd96927a5b3bdafb53a74a6fa7b8c22348b04b47012c27fa33a4a6b528c44ea614d6014701bf40d2c4854c8c3ffd375a73f741f0fd73902defe8016eebe90b70fb1026c3ba168252930659b93c4b7be3c9a29d736bf858d58", @nested={0x74, 0xa9, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @uid}, @nested={0x65, 0xab, 0x0, 0x1, [@typed={0x14, 0xaa, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x145, 0x0, 0x0, @uid}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x60}, @generic="cab41b2af6aa27ad2de4aab9da5e7767556f42f1e4e8d2d27894e699d395ad42243a2228f8213286eeeeadcb165286a52e8cd566dd5413f779"]}]}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x134}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="380000001000030500000000005165b235d35406ad9cb26604fc00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e00010069703665727370616e00000004000280"], 0x38}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05000700880000000600"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0)

6.353712246s ago: executing program 4 (id=6453):
openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x28}}, 0x40000)
r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000080)={0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x5, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
sendmmsg(r4, 0x0, 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0)

5.908414806s ago: executing program 4 (id=6454):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x20000, 0x7e, 0xffffdfff, 0x0, 0x0, 0x1})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
getsockopt$inet_buf(r1, 0x118, 0x9, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00140408000004030c18"], 0x0, 0x0}, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
close(0x3)
r5 = socket(0x2b, 0x1, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x1ff, 0x800)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)

5.682084951s ago: executing program 1 (id=6455):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
write(r0, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046})

5.642353678s ago: executing program 0 (id=6456):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000005c0)={'ipvlan1\x00', &(0x7f0000000580)=@ethtool_gfeatures={0x3a, 0x1, [{}]}})
socket$kcm(0x29, 0x5, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pread64(r5, &(0x7f0000000200)=""/82, 0x52, 0x2000000fc)
bind$tipc(r5, 0x0, 0x0)
r6 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)={0x0, 0x0, @a}, 0x48, 0xfffffffffffffffa)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000300)={@desc={0x1, 0x0, @desc3}, 0x21, r6, '\x00', @c})
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r5)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x4c, r7, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x10000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040091}, 0x4)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)

5.534472596s ago: executing program 1 (id=6457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r0 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008000)

4.729032569s ago: executing program 0 (id=6458):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0xffff, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0x9241, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x48001, 0x5, 0x1, 0x1000, 0x9, 0x1, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x6ddd, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x4000100, 0x2, 0x8, 0xfffffffe, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x1c0, 0xf80, 0x7, 0x116b, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x10, 0x5, 0x6, 0xf, 0xff, 0x11, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0xfffff801, 0x1a, 0x2000000, 0x1ff, 0x844, 0x9, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x3, 0x1000, 0x0, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40)

4.640366222s ago: executing program 1 (id=6459):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x10, 0x3, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x38}, 0x20004850)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800, 0x3}}, './file0\x00'})
r7 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90)

4.583151373s ago: executing program 0 (id=6460):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001400)="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", 0x366}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="2219a8d1a15d2cc1d9f7e487ed6138173c17bebef35e5c", 0x17}, {0x0}], 0x5}, 0x800)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.869876444s ago: executing program 0 (id=6461):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000ec0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x0, 0x6, 0x2, "6eae"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback=r1, r1, 0x2f}, 0x20)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup=r1, r2, 0x2f, 0x8, 0x4, @void, @value=r1}, 0x20)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0)

3.242106698s ago: executing program 4 (id=6462):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4048840)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0x17}, @ioring_restriction_sqe_op={0x1, 0x19}], 0x2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20048041}, 0x4004080)
fcntl$setown(r2, 0x8, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x25dfdbff, {{@in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0xffffffffffffffff, 0x1000, 0x200000000000000, 0x3}, 0x800, 0x6e6bb0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x8008010)
syz_emit_ethernet(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048860}, 0x44)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xb, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x28}}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

2.311653581s ago: executing program 4 (id=6463):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x4, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x7f1, 0x66, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp={0x44, 0x4, 0xe, 0x0, 0x6}]}}, {0x4e20, 0x4e21, 0x7d9, 0x0, @wg=@data={0x4, 0x202, 0x4, "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"}}}}, 0x7ff) (fail_nth: 1)

2.096769504s ago: executing program 4 (id=6464):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r2, &(0x7f0000000e40)={0xa, 0x4e23, 0xfffffffc, @remote, 0x10001}, 0x1c)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e27, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0})
r3 = dup3(r1, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
r5 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x12ba, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x6, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x1, 0xa0, {0x9, 0x21, 0xb, 0x3c, 0x1, {0x22, 0xa90}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x4, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80, 0xc, 0x9}}]}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x9, 0x9f, 0x20, 0x7}, 0x2a, &(0x7f0000000280)={0x5, 0xf, 0x2a, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x88, 0x8}, @ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x6, 0x110f, 0x8, [0xff0000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x365f7993b8efeefb, 0x2, 0x23, 0xf4ce, 0x2}]}, 0xa, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0x85, &(0x7f0000000480)=@string={0x85, 0x3, "12d863f5ad26186e35506135b3d8a274a3c36c1d3b87b2b8cb23992d7557d183e0c4d7dfcfd657aef19386a39c1ce0129f5abed4016260fbfdf4c2bc324fa382c215d046354a0a049f62a8ccd38264659cae9b9e0adcf0485df3b900b82eb4036ec6e26c37eac5b49b2911e2f9fbd7d2f141aef61a43187580573637ec7c8bf0c781bc"}}, {0xc4, &(0x7f0000000740)=@string={0xc4, 0x3, "8c58bb576d29cdcbe4c8933ce096f9b73130f31f4735679f49c285383c10d2b747fddfce3e55cf6bf69d6efdd2a2c11d35da316d31074fdfdebe87febc9190406a19db307e2e5ab21b5df754ea288c222167ff99076c001c9ee1468847f6b5921c74dc20be2b5d659c9395f18fd895d143efe47b961a2ba660f07126d2ac722662da832b65e917a9c9d637bf2c4ffd2a6f5fd7ee990b4d669ff79cf8ef93f015d6526647aeecedcdd88fc4084583fb270e65294e6c11fd30e4e08f2818c066da5a83"}}, {0x28, &(0x7f0000000540)=@string={0x28, 0x3, "e0a3723ad1b8e22287843d97cc58031417cf86b7baae5273b121096db9327595aef2de0945bd"}}, {0xda, &(0x7f0000000840)=@string={0xda, 0x3, "aca64bf973440f9f51e308f4dbc9da24f96da3e2ae012810cca68baa7ed6d792abac22b72d5cab11c8e1b824bc1a1c8a7eb38b198397bcede9fbd6161960f204091dfa2d58a119fd134156530d133c3726924d274bba5ccd53519655505bc87f83cae4027bb0a77b8b1fa6bc9327afc77dd804a25ea21754d98ca3b8e421244f1779172d581a99f9f444c3d62ad15298cf96964fc11c6d77b86663d790416a585e8aee05b3fe81b8816d30d5f54c9753c39d7a43091659d0149c75d3815cb89b4aa93549d07e7f94d4e9724f49f1e2c02b5a271539058d2e"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x402}}, {0x30, &(0x7f00000005c0)=@string={0x30, 0x3, "734fcef58d9dc7b54b9dc666093bf5ba8ef9010cdbb78b734a23d7e9da266aed2d06e6a8cd6631d3a2e0258d0985"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44d}}, {0x94, &(0x7f0000000940)=@string={0x94, 0x3, "3fac82dcf63e2ad621ee2f6015fda5abd3e176d1dfc9e0dc310e54ee8bb0c010ad777d562e990b64e7726d8bd2b24cc05b6ac0657b2db45017332edc275478ecef54f04d6d512cb1b77ec88514c8454d95d50dde0868fd55d73f21512c487b8c441f5b87538ddee0f871f74bd7c54261165fc4e0c9b6d96b4cf748558313858f9762419678ecef88730004c75711fc4c353f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x340a}}]})
syz_usb_control_io$hid(r5, &(0x7f0000000bc0)={0xfffffffffffffe02, &(0x7f0000000ac0)={0x0, 0xc, 0x1c, {0x1c, 0x9, "c23682af0933f7b25a25bdc937efd50f26caf3752ee41c2869da"}}, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000b40)={0x0, 0x22, 0x4, {[@global=@item_012={0x0, 0x1, 0x7}, @main=@item_012={0x2, 0x0, 0xa, '\f6'}]}}, &(0x7f0000000b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x1f}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000c00)={0x40, 0x10, 0xc7, "959a3fc197ab25a889319312d28f99ff93c00802cfd4ba9d5c18845a33696da0f5a018e5a49a59f4674e1e74fe675802a27f47c86725d0cadfbb14d2a1a5e22080a52ac9a06c11704bbbd24eea2ca22036f3cacff749cb164875261e5b6176863cd911f3207f8bb5e0faa901f9f64faed75a446dfc4318a26f175d94838b7be394b32b5ced75de40bcbae3894625a0f69c2698d0eeb54fa9b523151bc0275082b3de509dcc94b57b32a0059f563c361cdc883cbcbc355541ad49ed91bf649424c75e0c83551209"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000d80)={0x20, 0x1, 0x7, "d37b7792bc475f"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x3}})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000)
syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r6 = socket$inet6(0xa, 0x3, 0x8000000003c)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x1d}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x26}, @fda={0x66646185, 0x800008, 0x1, 0x2d}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1.627759431s ago: executing program 1 (id=6466):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000000)=[{0x3, 0x4, 0xfa, 0x41}, {0x3ff, 0x1, 0x7, 0xfff}, {0x1ff, 0xb, 0x2, 0x6b}, {0x4, 0x9, 0xc, 0x9}, {0x7, 0x0, 0x4, 0x6}, {0x3, 0x8, 0x2, 0x6}, {0x1, 0x9, 0x6, 0x8}, {0xa, 0x1, 0x9, 0x7}]})
close_range(r0, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

1.531760197s ago: executing program 1 (id=6467):
r0 = mq_open(&(0x7f0000000580)='!\x7f\x00\xca\x00\x00\x00\f\x00vt\x00\x01E!\x05\x99\xb7|`', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x7})
mq_timedreceive(r0, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0)

1.463732034s ago: executing program 2 (id=6468):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
getpgrp(0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000002c0)={0x9a0000, 0x0, 0xd1f8, r2, 0x0, &(0x7f0000000140)={0xa00905, 0x2, '\x00', @ptr=0xffffffffffffffff}})
write(r2, &(0x7f00000000c0), 0x0)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f046})

1.369775295s ago: executing program 2 (id=6469):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async)
r3 = syz_open_dev$vbi(&(0x7f00000000c0), 0x3, 0x2)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000100)={0x9, "1c5f4eea9f66778d5c5f35ff0243892901403b2d0fedf5765193a097b0dab6f6", 0x3, 0x0, 0x8, 0x26da, 0x11, 0x2, 0x10001, 0x5}) (async)
getpeername(r1, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80) (async)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0xe, @vbi={0x9, 0x10001, 0x200, 0x20363159, [0x37, 0x7], [0x4, 0x4], 0x1}}) (async)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x4100, 0x0)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x4}) (async)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000003c0)=0x2, 0x4) (async)
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000400)={0x2, 0x3, 0x10}) (async)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000440)={0x7d, 0x1, 0x4, 0x7, 0x8, 0x81}) (async)
sendto$phonet(r4, &(0x7f0000000480)="a3cf790e61c7a57f42b63efb7424d99a81cc648d3cb6e901443f6e96320670e13cf51e894e9c55a5a06c79e73355e34e63d34fb61ff98c4870de2cfbd1b07d8b0af8dd9a6b89f8cea6e215fd334b8c482440230007b817f35046e588dd22d620a65b4c7015e665e8bc7077be6cfecf9411a2ed93f0a87b395d309f0fd0f3e3195bb6b602d0c68d46c4adfd583aa18f2da1bc71f24416c11551a21db9becbe2e30f2874829443fdb6ebf24852945f7a2ff9b50f0adcc039115bb5f5268ce484a37371e444d93a5770ea63a98cc3df968f4a147a8d37f2", 0xd6, 0x0, &(0x7f0000000580)={0x23, 0x3, 0x8, 0x6}, 0x10) (async)
ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x25}}, {0x2, 0x4e24, @empty}, 0x10, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)='veth0_to_bridge\x00', 0xffffffffffffffff, 0x4, 0x6}) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r4)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x218, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaf9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}]}, @TIPC_NLA_SOCK={0xe4, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x94}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4edb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3a19}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1e5}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd53d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf70}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2b4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_SOCK={0x9c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5f8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x40011}, 0x811) (async)
ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f00000009c0)={0x7, 0x200, "67f5242cfc1b9fd19095be26b9b2758ce82962bd119b42ff", {0xe, 0xffffffff}, 0x3}) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
ioctl$VIDIOC_QUERYBUF_DMABUF(r3, 0xc0585609, &(0x7f0000000a40)={0xb, 0x2, 0x4, 0x80, 0x4, {0x0, 0x2710}, {0x0, 0x1, 0x6, 0x40, 0xf, 0x3, "d32930da"}, 0x0, 0x4, {}, 0x5, 0x0, r4}) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000ac0)={0x0, <r6=>0x0})
sched_setaffinity(r6, 0x8, &(0x7f0000000b40)=0x1) (async)
setsockopt$inet6_int(r4, 0x29, 0xc8, &(0x7f0000000b80)=0x5, 0x4) (async)
ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000cc0)={r1, &(0x7f0000000bc0)='\x00', 0x80000, &(0x7f0000000c00)={@_ha_fsid={[0x1755, 0x28b]}, {0xb65, 0x3, 0xa, 0xfffffffffffffff0}}, 0x2000000, &(0x7f0000000c40), &(0x7f0000000c80)=0x2}) (async)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
sched_setaffinity(r6, 0x8, &(0x7f0000000d00)=0x5) (async)
lstat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0, <r8=>0x0})
sendmsg$nl_generic(r1, &(0x7f0000001040)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001000)={&(0x7f0000000e40)={0x198, 0x16, 0x200, 0x70bd2d, 0x25dfdbfd, {0x14}, [@typed={0x8, 0x8c, 0x0, 0x0, @u32=0x8001}, @generic="fda24cc74e19798f6e25bbb805293903cff82b3dca16e410298b28675119bebb15b7e0f56235474b5867d5d407fd354922ae9409eee0c20cbe65416b40bb3080e2b04fba29860c40d0da4cf5acdb0657bb01f016165ac72b499627c209548e8c74be1eba04b4d9b231e4d7492d5e2a8824f5d78333754fbe9b9e9825dbbd96b9c737f47c9ec5713cccbf588feca5f8d2fa93a4ea8987158b2478982e13a07fadee38", @nested={0xcf, 0xc0, 0x0, 0x1, [@generic="7a3321d098d6c0", @generic="db3f108e2f40c89ccdbe1bbdeaedfdc0b0b0f097374dbe5e1a7b41bccf1eec9b05df34872b16948633dbe564f6dcd46e149b03b02344484e5144e79eb2db1a251f52a8b68f9e6751eeb11fdc0f0e7db1665be719f50e61980d25efed4329d42e6f7eaeeb0c00eada7102dda30bfd6bd285d18a0a053876d37ffcdca1f9f76d493c1f8297af805e3d2e7c1204335c824ef4c99ca2ed54ddd9cf212c8ef506c4cdc7198ede34206c989040a353c7a8326d7133b88280917e1fd8f533a19a78364a", @nested={0x4, 0xce}]}, @typed={0x8, 0xe, 0x0, 0x0, @uid=r7}]}, 0x198}, 0x1, 0x0, 0x0, 0x40814}, 0x800)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000010c0)="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", 0x2000, &(0x7f0000003ec0)={&(0x7f00000030c0)={0x50, 0x0, 0x4000000000000000, {0x7, 0x2d, 0x8, 0x66014, 0xfff, 0x9254, 0x180000, 0x3, 0x0, 0x0, 0x8, 0x600000}}, &(0x7f0000003140)={0x18, 0x0, 0x1000, {0xb}}, &(0x7f0000003180)={0x18, 0x0, 0x2, {0x2}}, &(0x7f00000031c0)={0x18, 0x0, 0xa6f, {0x2}}, &(0x7f0000003200)={0x18, 0x0, 0x3, {0x7}}, &(0x7f0000003240)={0x28, 0x0, 0x5, {{0x8000000000000001, 0x1, 0x1, r6}}}, &(0x7f0000003280)={0x60, 0x0, 0x200, {{0x3, 0x100, 0xc, 0x5, 0x67b3, 0x7, 0x4, 0x75}}}, &(0x7f0000003300)={0x18, 0x0, 0x5, {0x5}}, &(0x7f0000003340)={0x13, 0x0, 0x200, {'#+\x00'}}, &(0x7f0000003380)={0x20, 0xffffffffffffffda}, &(0x7f0000003400)={0x78, 0x0, 0x9cf8, {0x41, 0x4, 0x0, {0x6, 0x6, 0x40, 0x5, 0xd6, 0x395, 0x8, 0x7f, 0x10, 0x2000, 0x7, 0x0, r8, 0x6, 0xffffffff}}}, &(0x7f0000003480)={0x90, 0xffffffffffffffda, 0x8, {0x3, 0x2, 0x3, 0xfffffffffffffffb, 0x2, 0x1, {0x0, 0x0, 0x294, 0xdc37, 0x3, 0x8, 0x1, 0x19be7615, 0x7f, 0xa000, 0x8, r7, r8, 0x1, 0xe13}}}, &(0x7f0000003540)={0xe0, 0xfffffffffffffffe, 0x7, [{0x6, 0x9, 0xe, 0x2, '/dev/ubi_ctrl\x00'}, {0x1, 0x0, 0x7, 0xac, 'TIPCv2\x00'}, {0x5, 0x2, 0x0, 0x6}, {0x5, 0x24410629, 0x10, 0x8, 'veth0_to_bridge\x00'}, {0x1, 0x0, 0x0, 0x2cd}, {0x6, 0x42, 0x11, 0x3, '[/*#-.^+/+-\\/])\xe9^'}]}, &(0x7f0000003800)={0x460, 0x0, 0x10, [{{0x5, 0x3, 0x34, 0x2, 0x5, 0xffffffc2, {0x1, 0x8, 0x7fff, 0x5, 0x9248, 0x1, 0x3, 0x5, 0x3ff, 0x1000, 0x3c, r7, 0x0, 0xfffffffe, 0xd0}}, {0x5, 0xdf62, 0x4, 0xea3, 'udp\x00'}}, {{0x0, 0x3, 0x11, 0x8, 0x4, 0x40, {0x2, 0x0, 0x9, 0x0, 0x6, 0x3, 0x6, 0x38, 0x8e, 0x8000, 0x1, 0x0, r8, 0x2, 0x3}}, {0x2, 0x11, 0x4, 0x1, 'udp\x00'}}, {{0x3, 0x1, 0x31, 0x8, 0x2, 0x1a945155, {0x4, 0x40, 0x5e, 0x3, 0x6, 0x1, 0x73, 0x2, 0x7, 0x8000, 0x2, r7, 0x0, 0x1000, 0xfffffffa}}, {0x6, 0x200, 0x0, 0x4}}, {{0x0, 0x1, 0x3, 0x2, 0x8, 0x1, {0x2, 0x1, 0x81, 0x8, 0x9, 0x2, 0x9, 0x29bdbd65, 0x400, 0x2000, 0x2, r7, 0x0, 0x4, 0x48}}, {0x6, 0x5, 0x0, 0x9}}, {{0x4, 0x1, 0xa7af, 0x7, 0x3, 0x9, {0x5, 0x9e0d, 0xff, 0x9, 0x2, 0x674, 0x4, 0x9, 0x3, 0x4000, 0xe193, r7, r8, 0x6, 0x8}}, {0x1, 0x4, 0x1, 0x80000000, '('}}, {{0x2, 0x2, 0x8, 0x4, 0x9, 0xae7, {0x5, 0xb72, 0x1, 0x8, 0x4, 0x21, 0x800000, 0x1, 0x6, 0x550ebfaa37e339db, 0x0, r7, r8, 0x396, 0x4a3}}, {0x3, 0x5, 0x3, 0x1, 'ib\x00'}}, {{0x4, 0x2, 0x2, 0xd6, 0x9, 0x93c, {0x5, 0xffffffffffffffff, 0x7, 0x4, 0x8, 0xffffffffffffff43, 0x80, 0x3, 0x7, 0x8000, 0x7fffffff, r7, r8, 0xc, 0x3}}, {0x6, 0x2, 0x4, 0x7, 'udp\x00'}}]}, &(0x7f0000003c80)={0xa0, 0xfffffffffffffffe, 0x800, {{0x4, 0x3, 0x6, 0x80000000, 0x9, 0x8001, {0x0, 0x400, 0xb, 0x4, 0x4, 0x7fff, 0xac, 0x80000001, 0x6, 0x1000, 0x80000001, r7, r8, 0x6, 0xa4}}, {0x0, 0x10}}}, &(0x7f0000003d40)={0x20, 0x0, 0x1, {0x7fffffff, 0x0, 0x5, 0x80000000}}, &(0x7f0000003d80)={0x130, 0xffffffffffffffda, 0x0, {0x10001, 0x10, 0x0, '\x00', {0x8000, 0x80000000, 0x800, 0x10, r7, r8, 0x7000, '\x00', 0xfffffffffffffffe, 0x4, 0x53b, 0x5, {0x7fffffffffffffff, 0xa}, {0x8}, {0x19ab4000000, 0x5}, {0x100000000000000, 0x5}, 0x9, 0x1, 0x0, 0x8}}}})

1.241380593s ago: executing program 2 (id=6470):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xe213, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}})

1.161443607s ago: executing program 2 (id=6471):
syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440170102030109026400020100680009040100de020d0000052406000105240000000d240f0100000000000000000006241a001c0008240821e407840009058103000200ee000904010000020d00000904010102020d0000090582020600000009090503"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001c80)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)

617.376879ms ago: executing program 1 (id=6472):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x20000, 0x7e, 0xffffdfff, 0x0, 0x0, 0x1})
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5bc})
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
getsockopt$inet_buf(r1, 0x118, 0x9, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb"], 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00140408000004030c18"], 0x0, 0x0}, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
close(0x3)
r5 = socket(0x2b, 0x1, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
remap_file_pages(&(0x7f0000250000/0x4000)=nil, 0x4000, 0x0, 0x1ff, 0x800)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)

459.336848ms ago: executing program 0 (id=6473):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103042, 0x47)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xff}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16], 0x34}}, 0x4040)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
read$hidraw(r2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0/file1\x00', &(0x7f00000000c0), 0x400, &(0x7f0000000100)={[{@xino_on}, {@xino_off}], [{@fowner_gt}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x30}}]})

176.535498ms ago: executing program 4 (id=6474):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=@newqdisc={0x120, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, r6, {0xe, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x200, 0x4, 0x7fb0, 0xd, 0x8b53, 0x0, 0xfffffff8, 0x80}}}}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0x81}}, @qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x416}}, @TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xf, 0x5, 0x0, 0x2, 0x203, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x16, 0x0, 0xe, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x1, 0xfff4, 0x1, 0x2, 0x3ff, 0x7, 0x7}}, {0x12, 0x2, [0x4, 0x7f, 0x7, 0xff, 0x7f0, 0x9, 0x7]}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000c8000000000001410000001c001700000000000000006574683a73797a6b616c6c657230d978111231bd880764b6d5213056d538809856b2e932a41d04006a5cf4fe78cbb5f36fb4491be6b60958cd58aefe8c8c2e941e230e9e9ae02ac0c2af408585b2e666d4327cead6f03c5d3209182124c8b6970bd1456de120dbd299d73fd4dd9875d4b8cfb761753566bc9ae2e7c790d1ae2179b41585cc856cca413269bce1e4133651bd2e0656bdae2a305cea3b6576f6902085b20d180ec6b2a59fb4", @ANYRES64=r0, @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'bridge_slave_1\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r10 = socket(0x24, 0x3, 0x0)
close(r9)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x2c, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xc889}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x2}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x4d}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0))
r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r13, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x1000, 0x6a76)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001080), 0x414100)
r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='mounts\x00')
pread64(r14, &(0x7f0000002380)=""/253, 0xfd, 0x4eb)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r1}, 0x18)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)

0s ago: executing program 0 (id=6475):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800ddff10003700b8000000000000000000000034f8cbe80b63776efb341483a890cfcf5c22876cc5cbe2bb90d3c86876364232b88d819ccff70b93ea", @ANYRES32=r6, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r6, @ANYBLOB], 0x38}}, 0x0)
ioperm(0x0, 0x2, 0x7e)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r8, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0)
read$FUSE(r9, &(0x7f0000001b40)={0x2020}, 0x205c)
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=<r10=>0x0)
timer_settime(r10, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
syz_io_uring_setup(0x4ed, &(0x7f0000000300)={0x0, 0xfec9, 0x0, 0xff7ffffc, 0x274}, &(0x7f00000001c0)=<r11=>0x0, &(0x7f0000000280)=<r12=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

kernel console output (not intermixed with test programs):

6472] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[ 1753.187848][T16472] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1753.290950][T16472] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[ 1753.307324][T16472] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1753.417201][T16472] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[ 1753.440476][T16472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1753.453359][T13186] usb 2-1: USB disconnect, device number 12
[ 1753.472155][T16472] usb 4-1: Product: syz
[ 1753.478371][T16472] usb 4-1: Manufacturer: syz
[ 1753.513479][T16472] usb 4-1: SerialNumber: syz
[ 1753.655357][T28419] FAULT_INJECTION: forcing a failure.
[ 1753.655357][T28419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1753.684577][T28419] CPU: 1 UID: 0 PID: 28419 Comm: syz.0.6144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1753.684609][T28419] Tainted: [L]=SOFTLOCKUP
[ 1753.684615][T28419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1753.684626][T28419] Call Trace:
[ 1753.684632][T28419]  <TASK>
[ 1753.684639][T28419]  dump_stack_lvl+0x100/0x190
[ 1753.684673][T28419]  should_fail_ex.cold+0x5/0xa
[ 1753.684696][T28419]  _copy_from_user+0x2e/0xd0
[ 1753.684721][T28419]  move_addr_to_kernel+0x65/0x170
[ 1753.684748][T28419]  __sys_connect+0xb5/0x170
[ 1753.684772][T28419]  ? __pfx___sys_connect+0x10/0x10
[ 1753.684796][T28419]  ? __fget_files+0x21f/0x3d0
[ 1753.684822][T28419]  ? __pfx_ksys_write+0x10/0x10
[ 1753.684853][T28419]  __x64_sys_connect+0x72/0xb0
[ 1753.684878][T28419]  ? lockdep_hardirqs_on+0x78/0x100
[ 1753.684896][T28419]  do_syscall_64+0x106/0xf80
[ 1753.684912][T28419]  ? clear_bhb_loop+0x40/0x90
[ 1753.684934][T28419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1753.684952][T28419] RIP: 0033:0x7fa68199c799
[ 1753.684969][T28419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1753.684986][T28419] RSP: 002b:00007fa682881028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1753.685004][T28419] RAX: ffffffffffffffda RBX: 00007fa681c15fa0 RCX: 00007fa68199c799
[ 1753.685017][T28419] RDX: 0000000000000032 RSI: 0000200000000240 RDI: 0000000000000003
[ 1753.685028][T28419] RBP: 00007fa682881090 R08: 0000000000000000 R09: 0000000000000000
[ 1753.685039][T28419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1753.685048][T28419] R13: 00007fa681c16038 R14: 00007fa681c15fa0 R15: 00007ffdae1d6318
[ 1753.685071][T28419]  </TASK>
[ 1754.003523][T28421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1754.012112][T13186] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1754.047487][T28421] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1754.070182][T28402] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1754.095409][T28402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1754.120716][T28402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1754.143614][T16472] cdc_ncm 4-1:1.1: bind() failure
[ 1754.192909][T28426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6146'.
[ 1754.200319][T13186] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1754.225025][T16472] usb 4-1: USB disconnect, device number 105
[ 1754.256124][T13186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1754.299534][T28427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6146'.
[ 1754.353769][T13186] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1754.457795][T13186] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1754.561353][T13186] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1754.648738][T13186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.775247][T13186] usb 2-1: config 0 descriptor??
[ 1755.154253][T28432] FAULT_INJECTION: forcing a failure.
[ 1755.154253][T28432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1755.191542][T28432] CPU: 0 UID: 0 PID: 28432 Comm: syz.2.6148 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1755.191573][T28432] Tainted: [L]=SOFTLOCKUP
[ 1755.191579][T28432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1755.191590][T28432] Call Trace:
[ 1755.191596][T28432]  <TASK>
[ 1755.191603][T28432]  dump_stack_lvl+0x100/0x190
[ 1755.191635][T28432]  should_fail_ex.cold+0x5/0xa
[ 1755.191662][T28432]  _copy_from_user+0x2e/0xd0
[ 1755.191686][T28432]  __sys_bpf+0x243/0x4b90
[ 1755.191709][T28432]  ? __pfx___sys_bpf+0x10/0x10
[ 1755.191725][T28432]  ? proc_fail_nth_write+0x9f/0x220
[ 1755.191749][T28432]  ? find_held_lock+0x2b/0x80
[ 1755.191776][T28432]  ? find_held_lock+0x2b/0x80
[ 1755.191797][T28432]  ? ksys_write+0x190/0x250
[ 1755.191828][T28432]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1755.191849][T28432]  ? __fget_files+0x215/0x3d0
[ 1755.191878][T28432]  ? fput+0x79/0x100
[ 1755.191897][T28432]  ? ksys_write+0x1ac/0x250
[ 1755.191922][T28432]  ? __pfx_ksys_write+0x10/0x10
[ 1755.191952][T28432]  __x64_sys_bpf+0x7b/0xc0
[ 1755.191971][T28432]  ? lockdep_hardirqs_on+0x78/0x100
[ 1755.191989][T28432]  do_syscall_64+0x106/0xf80
[ 1755.192007][T28432]  ? clear_bhb_loop+0x40/0x90
[ 1755.192030][T28432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1755.192048][T28432] RIP: 0033:0x7f79bd39c799
[ 1755.192064][T28432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1755.192081][T28432] RSP: 002b:00007f79be1d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1755.192099][T28432] RAX: ffffffffffffffda RBX: 00007f79bd615fa0 RCX: 00007f79bd39c799
[ 1755.192111][T28432] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1755.192122][T28432] RBP: 00007f79be1d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1755.192132][T28432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1755.192143][T28432] R13: 00007f79bd616038 R14: 00007f79bd615fa0 R15: 00007ffeb8b18828
[ 1755.192168][T28432]  </TASK>
[ 1755.563319][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.572745][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.580961][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.588759][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.596298][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.607834][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.616649][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.625654][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.634367][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.644294][T13186] plantronics 0003:047F:FFFF.0060: unknown main item tag 0x0
[ 1755.788685][T28440] netlink: 'syz.4.6149': attribute type 3 has an invalid length.
[ 1756.130413][T27353] Bluetooth: hci0: command 0x0406 tx timeout
[ 1756.683444][T13186] plantronics 0003:047F:FFFF.0060: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1757.063855][T28448] 9p: Bad value for 'rfdno'
[ 1757.112901][T28455] syzkaller0: entered promiscuous mode
[ 1757.128826][T28455] syzkaller0: entered allmulticast mode
[ 1757.283982][T10742] usb 2-1: USB disconnect, device number 13
[ 1757.437248][T28459] netlink: 'syz.4.6156': attribute type 13 has an invalid length.
[ 1757.885076][T28339] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1757.898293][T28459] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1757.905897][T28459] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1758.054421][T28339] usb 5-1: Using ep0 maxpacket: 8
[ 1758.067588][T28339] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1758.092964][T28339] usb 5-1: config 4 has an invalid interface number: 147 but max is 0
[ 1758.105074][T28339] usb 5-1: config 4 has an invalid descriptor of length 186, skipping remainder of the config
[ 1758.119681][T28459] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1758.128906][T28339] usb 5-1: config 4 has no interface number 0
[ 1758.151709][T28339] usb 5-1: language id specifier not provided by device, defaulting to English
[ 1758.159388][T13186] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1758.171605][T28459] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1758.171735][T28339] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1758.191657][T28339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1758.331896][T13186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1758.364769][T13186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1758.376179][T13186] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 1758.387898][T13186] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1758.397315][T13186] usb 3-1: Manufacturer: syz
[ 1758.428002][T13186] usb 3-1: config 0 descriptor??
[ 1758.581679][T28339] uvcvideo 5-1:4.147: Found multiple Units with ID 6
[ 1758.603416][T28339] uvcvideo 5-1:4.147: Found UVC 0.02 device <unnamed> (04f2:b746)
[ 1758.665916][T28339] uvcvideo 5-1:4.147: No valid video chain found.
[ 1758.683139][T28339] usb 5-1: USB disconnect, device number 21
[ 1758.911528][ T1149] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1758.995467][ T1149] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.097815][ T1149] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.121117][ T1149] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1759.426492][T28490] FAULT_INJECTION: forcing a failure.
[ 1759.426492][T28490] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1759.454626][T28490] CPU: 1 UID: 0 PID: 28490 Comm: syz.3.6164 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1759.454658][T28490] Tainted: [L]=SOFTLOCKUP
[ 1759.454665][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1759.454675][T28490] Call Trace:
[ 1759.454681][T28490]  <TASK>
[ 1759.454689][T28490]  dump_stack_lvl+0x100/0x190
[ 1759.454723][T28490]  should_fail_ex.cold+0x5/0xa
[ 1759.454746][T28490]  _copy_from_user+0x2e/0xd0
[ 1759.454772][T28490]  copy_msghdr_from_user+0x9f/0x4f0
[ 1759.454797][T28490]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1759.454825][T28490]  ? __pfx__kstrtoull+0x10/0x10
[ 1759.454848][T28490]  ___sys_sendmsg+0x106/0x1e0
[ 1759.454874][T28490]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1759.454907][T28490]  ? find_held_lock+0x2b/0x80
[ 1759.454945][T28490]  __sys_sendmmsg+0x205/0x430
[ 1759.454968][T28490]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1759.455000][T28490]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1759.455030][T28490]  ? fput+0x79/0x100
[ 1759.455050][T28490]  ? ksys_write+0x1ac/0x250
[ 1759.455075][T28490]  ? __pfx_ksys_write+0x10/0x10
[ 1759.455105][T28490]  __x64_sys_sendmmsg+0x9c/0x100
[ 1759.455123][T28490]  ? lockdep_hardirqs_on+0x78/0x100
[ 1759.455141][T28490]  do_syscall_64+0x106/0xf80
[ 1759.455157][T28490]  ? clear_bhb_loop+0x40/0x90
[ 1759.455179][T28490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1759.455198][T28490] RIP: 0033:0x7fd961d9c799
[ 1759.455213][T28490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1759.455230][T28490] RSP: 002b:00007fd962c93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1759.455248][T28490] RAX: ffffffffffffffda RBX: 00007fd962016090 RCX: 00007fd961d9c799
[ 1759.455259][T28490] RDX: 0000000000000002 RSI: 0000200000001240 RDI: 0000000000000003
[ 1759.455269][T28490] RBP: 00007fd962c93090 R08: 0000000000000000 R09: 0000000000000000
[ 1759.455279][T28490] R10: 0000000000002090 R11: 0000000000000246 R12: 0000000000000001
[ 1759.455289][T28490] R13: 00007fd962016128 R14: 00007fd962016090 R15: 00007ffcc3ffa478
[ 1759.455313][T28490]  </TASK>
[ 1759.527804][T13186] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0061/input/input194
[ 1760.451060][T13186] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0061/input/input195
[ 1760.478338][T28503] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6168'.
[ 1760.489670][T13186] uclogic 0003:256C:006D.0061: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0
[ 1760.528226][T13186] usb 3-1: USB disconnect, device number 112
[ 1760.774715][T28508] fido_id[28508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[ 1760.932964][T10742] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1761.128585][T10742] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1761.148305][T10742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1761.164598][T10742] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1761.176738][T10742] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1761.191926][T10742] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1761.203195][T10742] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1761.231414][T10742] usb 2-1: config 0 descriptor??
[ 1761.411885][T28523] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[ 1761.650395][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.682146][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.722522][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.742581][T28529] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6174'.
[ 1761.764985][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.804698][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.815417][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.880020][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.916963][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1761.933357][T28528] netlink: 584 bytes leftover after parsing attributes in process `syz.2.6173'.
[ 1761.963178][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1762.004933][T10742] plantronics 0003:047F:FFFF.0062: unknown main item tag 0x0
[ 1762.067403][T10742] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1762.225830][T13186] usb 2-1: USB disconnect, device number 14
[ 1762.276534][T28533] fido_id[28533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1762.440993][   T29] kauditd_printk_skb: 24 callbacks suppressed
[ 1762.441011][   T29] audit: type=1400 audit(1772139339.260:1576): avc:  denied  { setopt } for  pid=28535 comm="syz.4.6176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1762.528166][   T29] audit: type=1400 audit(1772139339.323:1577): avc:  denied  { ioctl } for  pid=28535 comm="syz.4.6176" path="socket:[142037]" dev="sockfs" ino=142037 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[ 1763.206726][  T792] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1763.378772][  T792] usb 3-1: Using ep0 maxpacket: 16
[ 1763.392996][  T792] usb 3-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1763.423095][  T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1763.483561][  T792] usb 3-1: config 0 has no interfaces?
[ 1763.503153][  T792] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1763.552255][  T792] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1763.599057][  T792] usb 3-1: Manufacturer: syz
[ 1763.651402][  T792] usb 3-1: config 0 descriptor??
[ 1764.252593][   T29] audit: type=1326 audit(1772139340.825:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.296992][T28549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6178'.
[ 1764.316457][T28549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6178'.
[ 1764.346499][   T29] audit: type=1326 audit(1772139340.825:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.399833][   T29] audit: type=1326 audit(1772139340.825:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.436855][   T29] audit: type=1326 audit(1772139340.835:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.553632][   T29] audit: type=1326 audit(1772139340.835:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.579615][   T29] audit: type=1326 audit(1772139340.835:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.603632][   T29] audit: type=1326 audit(1772139340.835:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1764.634683][   T29] audit: type=1326 audit(1772139340.835:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28553 comm="syz.0.6180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1765.326601][T28573] netlink: 'syz.0.6183': attribute type 1 has an invalid length.
[ 1765.410149][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6184'.
[ 1765.442786][T28575] bond1: option mode: unable to set because the bond device is up
[ 1765.478594][T28577] netlink: 'syz.3.6184': attribute type 4 has an invalid length.
[ 1765.499738][T28577] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6184'.
[ 1766.338821][T28595] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1766.849168][T28602] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1766.856379][T28602] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1766.867503][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6191'.
[ 1766.877998][T28602] bridge0: entered allmulticast mode
[ 1766.907373][T28600] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[ 1766.913927][T28600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1766.936395][T28605] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1766.941329][T28611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6191'.
[ 1766.944054][T28607] bridge_slave_1: left allmulticast mode
[ 1766.984886][T28600] vhci_hcd vhci_hcd.0: Device attached
[ 1766.997657][T28607] bridge_slave_1: left promiscuous mode
[ 1767.025736][T28607] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1767.038148][T28605] netlink: 'syz.1.6191': attribute type 4 has an invalid length.
[ 1767.053797][T28605] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6191'.
[ 1767.088090][T28607] bridge_slave_0: left allmulticast mode
[ 1767.088129][T28607] bridge_slave_0: left promiscuous mode
[ 1767.088662][T28607] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1767.136281][T28607] .`: (slave bridge0): Releasing backup interface
[ 1767.142931][T13186] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1767.211111][T28339] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1767.227402][T27685] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1767.235104][ T1206] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[ 1767.262037][T28605] .`: renamed from bond0 (while UP)
[ 1767.324901][T13186] usb 1-1: config 0 has no interfaces?
[ 1767.332840][T13186] usb 1-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[ 1767.445190][T28339] usb 5-1: Using ep0 maxpacket: 16
[ 1767.450467][T27685] usb 4-1: Using ep0 maxpacket: 32
[ 1767.466414][T28339] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1767.466438][T28339] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1767.476837][T13186] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.487866][T27685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1768.480533][T13186] usb 1-1: config 0 descriptor??
[ 1768.829472][T27685] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1768.855035][T28339] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1768.864064][T28339] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1768.887077][T27685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.001549][T28339] usb 5-1: Manufacturer: syz
[ 1769.040120][T13186] usb 1-1: USB disconnect, device number 38
[ 1769.103141][T28608] vhci_hcd: connection reset by peer
[ 1769.193116][   T29] kauditd_printk_skb: 19 callbacks suppressed
[ 1769.193164][   T29] audit: type=1326 audit(1772139346.326:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.319669][T26615] vhci_hcd vhci_hcd.0: stop threads
[ 1769.365189][T26615] vhci_hcd vhci_hcd.0: release socket
[ 1769.386461][T26615] vhci_hcd vhci_hcd.0: disconnect device
[ 1769.392646][   T29] audit: type=1326 audit(1772139346.326:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.418125][   T29] audit: type=1326 audit(1772139346.326:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.442857][   T29] audit: type=1326 audit(1772139346.326:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.443499][T27685] usb 4-1: config 0 descriptor??
[ 1769.473381][T28339] usb 5-1: config 0 descriptor??
[ 1769.478733][   T29] audit: type=1326 audit(1772139346.326:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.508883][   T29] audit: type=1326 audit(1772139346.337:1610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.536629][   T29] audit: type=1326 audit(1772139346.337:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.560720][   T29] audit: type=1326 audit(1772139346.337:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.584600][   T29] audit: type=1326 audit(1772139346.337:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.610935][   T29] audit: type=1326 audit(1772139346.337:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28620 comm="syz.1.6194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc702d9c799 code=0x7ffc0000
[ 1769.749387][T13186] usb 5-1: USB disconnect, device number 22
[ 1769.912524][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6196'.
[ 1770.816438][T27685] usb 4-1: can't set config #0, error -71
[ 1770.854159][T27685] usb 4-1: USB disconnect, device number 106
[ 1771.094281][T28339] usb 3-1: USB disconnect, device number 113
[ 1771.202401][T13186] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1771.293396][T27685] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1771.490989][T27685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1771.563793][T28658] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1771.588922][T27685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1771.599481][T27685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1771.785000][T13186] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1771.803967][T27685] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1771.814328][T13186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1771.836462][T27685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1771.853915][T13186] usb 1-1: Product: syz
[ 1771.859341][T27685] usb 4-1: config 0 descriptor??
[ 1771.889471][T13186] usb 1-1: Manufacturer: syz
[ 1771.899289][T13186] usb 1-1: SerialNumber: syz
[ 1771.922954][T13186] usb 1-1: config 0 descriptor??
[ 1772.102733][ T1206] vhci_hcd vhci_hcd.0: vhci_device speed not set
[ 1772.178820][T16472] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1772.272333][T27685] plantronics 0003:047F:FFFF.0063: reserved main item tag 0xd
[ 1772.305512][T27685] plantronics 0003:047F:FFFF.0063: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1772.327460][T16472] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1772.339881][T13186] usb 1-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115)
[ 1772.354970][T16472] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1772.377416][T16472] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1772.393597][T16472] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[ 1772.410065][T16472] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1772.437847][T16472] usb 5-1: config 0 descriptor??
[ 1772.513453][T28650] FAULT_INJECTION: forcing a failure.
[ 1772.513453][T28650] name failslab, interval 1, probability 0, space 0, times 0
[ 1772.527313][T28650] CPU: 1 UID: 0 PID: 28650 Comm: syz.3.6202 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1772.527340][T28650] Tainted: [L]=SOFTLOCKUP
[ 1772.527346][T28650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1772.527354][T28650] Call Trace:
[ 1772.527358][T28650]  <TASK>
[ 1772.527363][T28650]  dump_stack_lvl+0x100/0x190
[ 1772.527384][T28650]  should_fail_ex.cold+0x5/0xa
[ 1772.527403][T28650]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 1772.527423][T28650]  should_failslab+0xc2/0x120
[ 1772.527449][T28650]  __kmalloc_noprof+0xe0/0x850
[ 1772.527476][T28650]  tomoyo_realpath_from_path+0xb6/0x690
[ 1772.527493][T28650]  tomoyo_path_number_perm+0x23c/0x580
[ 1772.527510][T28650]  ? tomoyo_path_number_perm+0x22e/0x580
[ 1772.527528][T28650]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1772.527573][T28650]  ? find_held_lock+0x2b/0x80
[ 1772.527592][T28650]  ? __fget_files+0x215/0x3d0
[ 1772.527607][T28650]  ? hook_file_ioctl_common+0x146/0x410
[ 1772.527629][T28650]  ? __fget_files+0x21f/0x3d0
[ 1772.527641][T28650]  security_file_ioctl+0xd3/0x230
[ 1772.527654][T28650]  __x64_sys_ioctl+0xb7/0x210
[ 1772.527670][T28650]  do_syscall_64+0x106/0xf80
[ 1772.527681][T28650]  ? clear_bhb_loop+0x40/0x90
[ 1772.527703][T28650]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1772.527720][T28650] RIP: 0033:0x7fd961d9c799
[ 1772.527735][T28650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1772.527749][T28650] RSP: 002b:00007fd962cb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1772.527765][T28650] RAX: ffffffffffffffda RBX: 00007fd962015fa0 RCX: 00007fd961d9c799
[ 1772.527771][T28650] RDX: 0000200000000000 RSI: 00000000d01c4813 RDI: 0000000000000004
[ 1772.527778][T28650] RBP: 00007fd962cb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1772.527784][T28650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1772.527790][T28650] R13: 00007fd962016038 R14: 00007fd962015fa0 R15: 00007ffcc3ffa478
[ 1772.527803][T28650]  </TASK>
[ 1772.527808][T28650] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1772.748916][T28660] netlink: 'syz.4.6207': attribute type 4 has an invalid length.
[ 1772.776651][T27379] usb 4-1: USB disconnect, device number 107
[ 1772.791386][T13186] usb 1-1: failed to fetch extended address, random address set
[ 1772.800385][T13186] usb 1-1: atusb_probe: initialization failed, error = -524
[ 1772.816099][T13186] atusb 1-1:0.0: probe with driver atusb failed with error -524
[ 1772.841737][T13186] usb 1-1: USB disconnect, device number 39
[ 1773.016732][T28666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1773.026465][T28666] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1773.039428][T16472] acrux 0003:1A34:0802.0064: item fetching failed at offset 0/1
[ 1773.047811][T16472] acrux 0003:1A34:0802.0064: parse failed
[ 1773.053562][T16472] acrux 0003:1A34:0802.0064: probe with driver acrux failed with error -22
[ 1773.159866][T27379] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1773.283675][T27379] usb 2-1: device descriptor read/64, error -71
[ 1773.520665][T28674] No such timeout policy "syz1"
[ 1773.527200][T28674] No control pipe specified
[ 1773.559863][T27379] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1773.665117][ T1206] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1773.721823][T27379] usb 2-1: device descriptor read/64, error -71
[ 1773.807613][ T1206] usb 1-1: Using ep0 maxpacket: 16
[ 1773.813501][ T1206] usb 1-1: too many configurations: 112, using maximum allowed: 8
[ 1773.826829][T27379] usb usb2-port1: attempt power cycle
[ 1773.834559][ T1206] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1773.843776][ T1206] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[ 1773.852725][ T1206] usb 1-1: Product: syz
[ 1773.856973][ T1206] usb 1-1: Manufacturer: syz
[ 1773.864715][ T1206] r8152-cfgselector 1-1: Unknown version 0x0000
[ 1773.871143][ T1206] r8152-cfgselector 1-1: config 0 descriptor??
[ 1773.879214][ T1206] cdc_acm 1-1:0.0: Zero length descriptor references
[ 1773.886033][ T1206] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22
[ 1774.074080][ T1206] r8152-cfgselector 1-1: USB disconnect, device number 40
[ 1774.150518][T27379] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1774.170148][T27379] usb 2-1: device descriptor read/8, error -71
[ 1774.426602][T27379] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1774.446168][T27379] usb 2-1: device descriptor read/8, error -71
[ 1774.520266][T28678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6212'.
[ 1774.529372][T28678] bond1: option mode: unable to set because the bond device is up
[ 1774.539622][T28678] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6212'.
[ 1774.551231][T28678] netlink: 'syz.2.6212': attribute type 4 has an invalid length.
[ 1774.551301][T27379] usb usb2-port1: unable to enumerate USB device
[ 1774.559153][T28678] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6212'.
[ 1774.738398][T28686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6215'.
[ 1774.764259][T28687] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1774.773602][T28686] bond1: option mode: unable to set because the bond device is up
[ 1774.809229][T28689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6215'.
[ 1775.007717][T28690] netlink: 'syz.0.6215': attribute type 4 has an invalid length.
[ 1775.028082][T28690] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6215'.
[ 1775.035792][T27379] usb 5-1: USB disconnect, device number 23
[ 1775.219036][   T29] kauditd_printk_skb: 7 callbacks suppressed
[ 1775.219055][   T29] audit: type=1400 audit(1772139352.668:1622): avc:  denied  { getopt } for  pid=28693 comm="syz.0.6217" lport=35540 faddr=::ffff:100.1.1.2 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1
[ 1775.533740][   T29] audit: type=1326 audit(1772139352.962:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28695 comm="syz.2.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd39c799 code=0x7ffc0000
[ 1775.864193][   T29] audit: type=1326 audit(1772139352.972:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28695 comm="syz.2.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd39c799 code=0x7ffc0000
[ 1775.916969][   T29] audit: type=1326 audit(1772139352.972:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28695 comm="syz.2.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f79bd39c799 code=0x7ffc0000
[ 1775.940678][   T29] audit: type=1326 audit(1772139353.403:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28695 comm="syz.2.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd39c799 code=0x7ffc0000
[ 1775.980324][   T29] audit: type=1326 audit(1772139353.403:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28695 comm="syz.2.6218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79bd39c799 code=0x7ffc0000
[ 1776.250371][T28726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'.
[ 1776.272399][T28726] bond1: option mode: unable to set because the bond device is up
[ 1776.304491][T28726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6220'.
[ 1776.324336][T28726] netlink: 'syz.0.6220': attribute type 4 has an invalid length.
[ 1776.344282][T28726] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6220'.
[ 1776.598198][T16472] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1776.690291][   T29] audit: type=1400 audit(1772139354.222:1628): avc:  denied  { create } for  pid=28735 comm="syz.0.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1776.785562][   T29] audit: type=1400 audit(1772139354.222:1629): avc:  denied  { getopt } for  pid=28735 comm="syz.0.6225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[ 1776.805582][T16472] usb 4-1: Using ep0 maxpacket: 8
[ 1776.834243][T16472] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.04
[ 1776.961450][T28744] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1777.150093][T16472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1777.201861][T16472] usb 4-1: config 0 descriptor??
[ 1777.227664][T16472] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[ 1777.257271][T16472] usb 4-1: Detected SIO
[ 1777.282023][T16472] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1777.419470][T16472] usb 4-1: USB disconnect, device number 108
[ 1777.453935][T16472] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1777.513461][T16472] ftdi_sio 4-1:0.0: device disconnected
[ 1777.583553][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6228'.
[ 1777.686649][T28747] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1777.724444][T28751] netlink: 'syz.4.6228': attribute type 4 has an invalid length.
[ 1777.752803][T28751] .`: renamed from bond0
[ 1777.985747][T28759] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1777.992290][T28759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1778.141356][   T29] audit: type=1326 audit(1772139355.712:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28756 comm="syz.0.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1778.455520][T28759] vhci_hcd vhci_hcd.0: Device attached
[ 1778.486957][   T29] audit: type=1326 audit(1772139355.712:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28756 comm="syz.0.6230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1778.684221][T13186] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[ 1778.703347][T16472] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1778.877199][T16472] usb 2-1: config 0 has no interfaces?
[ 1778.882719][T16472] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[ 1778.892130][T16472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.922227][ T5880] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1778.930645][T16472] usb 2-1: config 0 descriptor??
[ 1779.017732][T27520] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1779.096809][ T5880] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1779.106290][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.114742][ T5880] usb 4-1: Product: syz
[ 1779.118949][ T5880] usb 4-1: Manufacturer: syz
[ 1779.124176][ T5880] usb 4-1: SerialNumber: syz
[ 1779.156721][T27685] usb 2-1: USB disconnect, device number 19
[ 1779.396007][T27520] usb 3-1: Using ep0 maxpacket: 16
[ 1779.402506][T28761] vhci_hcd: connection reset by peer
[ 1779.416823][T26615] vhci_hcd vhci_hcd.1: stop threads
[ 1779.425529][T26615] vhci_hcd vhci_hcd.1: release socket
[ 1779.488184][T26615] vhci_hcd vhci_hcd.1: disconnect device
[ 1779.574069][T27520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1779.585846][ T5880] usb 4-1: config 0 descriptor??
[ 1779.591077][T27520] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1779.653567][T27520] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1779.663534][T27520] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1779.671844][T27520] usb 3-1: Manufacturer: syz
[ 1779.693993][T27520] usb 3-1: config 0 descriptor??
[ 1779.782012][T28805] FAULT_INJECTION: forcing a failure.
[ 1779.782012][T28805] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1779.796428][T28805] CPU: 0 UID: 0 PID: 28805 Comm: syz.1.6241 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1779.796457][T28805] Tainted: [L]=SOFTLOCKUP
[ 1779.796464][T28805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1779.796474][T28805] Call Trace:
[ 1779.796480][T28805]  <TASK>
[ 1779.796487][T28805]  dump_stack_lvl+0x100/0x190
[ 1779.796525][T28805]  should_fail_ex.cold+0x5/0xa
[ 1779.796549][T28805]  _copy_from_user+0x2e/0xd0
[ 1779.796575][T28805]  __sys_bpf+0x243/0x4b90
[ 1779.796598][T28805]  ? __pfx___sys_bpf+0x10/0x10
[ 1779.796615][T28805]  ? proc_fail_nth_write+0x9f/0x220
[ 1779.796638][T28805]  ? find_held_lock+0x2b/0x80
[ 1779.796666][T28805]  ? find_held_lock+0x2b/0x80
[ 1779.796687][T28805]  ? ksys_write+0x190/0x250
[ 1779.796718][T28805]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1779.796738][T28805]  ? __fget_files+0x215/0x3d0
[ 1779.796770][T28805]  ? fput+0x79/0x100
[ 1779.796789][T28805]  ? ksys_write+0x1ac/0x250
[ 1779.796814][T28805]  ? __pfx_ksys_write+0x10/0x10
[ 1779.796844][T28805]  __x64_sys_bpf+0x7b/0xc0
[ 1779.796863][T28805]  ? lockdep_hardirqs_on+0x78/0x100
[ 1779.796880][T28805]  do_syscall_64+0x106/0xf80
[ 1779.796897][T28805]  ? clear_bhb_loop+0x40/0x90
[ 1779.796920][T28805]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1779.796937][T28805] RIP: 0033:0x7fc702d9c799
[ 1779.796953][T28805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1779.796970][T28805] RSP: 002b:00007fc703c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1779.796988][T28805] RAX: ffffffffffffffda RBX: 00007fc703015fa0 RCX: 00007fc702d9c799
[ 1779.797000][T28805] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1779.797011][T28805] RBP: 00007fc703c84090 R08: 0000000000000000 R09: 0000000000000000
[ 1779.797022][T28805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1779.797032][T28805] R13: 00007fc703016038 R14: 00007fc703015fa0 R15: 00007ffee288b068
[ 1779.797058][T28805]  </TASK>
[ 1780.423112][   T29] kauditd_printk_skb: 8 callbacks suppressed
[ 1780.423146][   T29] audit: type=1800 audit(1772139357.802:1640): pid=28809 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.6242" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1780.600480][ T5880] usb 4-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115)
[ 1780.619516][   T29] audit: type=1326 audit(1772139358.096:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.648518][   T29] audit: type=1326 audit(1772139358.096:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.681649][T28821] binder: 28820:28821 unknown command 0
[ 1780.688112][   T29] audit: type=1326 audit(1772139358.106:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.688290][T28821] binder: 28820:28821 ioctl c0306201 200000000080 returned -22
[ 1780.726129][   T29] audit: type=1326 audit(1772139358.463:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.775415][   T29] audit: type=1326 audit(1772139358.463:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.789944][ T5880] usb 4-1: failed to fetch extended address, random address set
[ 1780.803074][   T29] audit: type=1326 audit(1772139358.484:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.808910][ T5880] usb 4-1: atusb_probe: initialization failed, error = -524
[ 1780.831116][   T29] audit: type=1326 audit(1772139358.484:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.837740][ T5880] atusb 4-1:0.0: probe with driver atusb failed with error -524
[ 1780.861412][   T29] audit: type=1326 audit(1772139358.484:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.882019][ T5880] usb 4-1: USB disconnect, device number 109
[ 1780.935092][   T29] audit: type=1326 audit(1772139358.495:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28802 comm="syz.0.6240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa68199c799 code=0x7ffc0000
[ 1780.989059][T27685] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[ 1781.429018][T27685] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1781.447226][T27685] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1781.468049][T27685] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40
[ 1781.487493][T27685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1781.514222][T27685] usb 5-1: Product: 墌垻⥭쯍죤㲓雠럹〱ῳ㕇齧쉉㢅ြ럒﵇컟唾每鷶ﵮꋒ᷁洱ܱ뻞ﺇ醼䂐ᥪホ⹾뉚崛哷⣪⊌朡駿氇ᰀ衆銵琜⃜⮾敝鎜톕篤᪖ꘫ♱곒♲⮃ꤗ훉뼷伬⫽彯ங晍鏯ᗰ勖䝦췭还ࣄ荅⟻攎丩ᅬヽ⢏쀘荚
[ 1781.651760][T27685] usb 5-1: Manufacturer: ⚭渘倵㕡璢쎣ᵬ蜻뢲⏋⶙坵菑쓠훏깗鏱ꎆᲜዠ媟풾戁ﭠ볂伲芣ᗂ䛐䨵Њ抟첨苓敤꺜麛䣰¹⺸δ왮波듅⦛ﯹ틗䇱䌚甘垀㜶糬臇
[ 1781.676082][T27379] usb 3-1: USB disconnect, device number 114
[ 1781.687662][T27685] usb 5-1: SerialNumber: ꏠ㩲룑⋢蒇霽壌ᐃ켗랆꺺獒↱洉㊹镵৞뵅
[ 1781.720346][T28830] sp0: Synchronizing with TNC
[ 1781.961157][T28821] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1782.142078][T28842] __nla_validate_parse: 2 callbacks suppressed
[ 1782.142092][T28842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6250'.
[ 1782.258233][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6250'.
[ 1782.848101][ T1206] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1782.988349][T27685] usbhid 5-1:1.0: can't add hid device: -71
[ 1783.027745][T27685] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1783.088042][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1783.137019][ T1206] usb 4-1: Using ep0 maxpacket: 16
[ 1783.145271][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1783.163517][T27685] usb 5-1: USB disconnect, device number 24
[ 1783.176961][ T1206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1783.293067][ T1206] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1783.304780][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.630224][ T1206] usb 4-1: Product: syz
[ 1783.634470][ T1206] usb 4-1: Manufacturer: syz
[ 1783.644425][ T1206] usb 4-1: SerialNumber: syz
[ 1783.673718][ T1206] usb 4-1: config 0 descriptor??
[ 1783.688152][ T1206] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1783.688248][T13186] vhci_hcd vhci_hcd.1: vhci_device speed not set
[ 1783.709447][ T1206] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 1784.267427][T28878] FAULT_INJECTION: forcing a failure.
[ 1784.267427][T28878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1784.301071][T28878] CPU: 1 UID: 0 PID: 28878 Comm: syz.2.6259 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1784.301100][T28878] Tainted: [L]=SOFTLOCKUP
[ 1784.301107][T28878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1784.301117][T28878] Call Trace:
[ 1784.301124][T28878]  <TASK>
[ 1784.301131][T28878]  dump_stack_lvl+0x100/0x190
[ 1784.301164][T28878]  should_fail_ex.cold+0x5/0xa
[ 1784.301188][T28878]  _copy_from_user+0x2e/0xd0
[ 1784.301214][T28878]  copy_msghdr_from_user+0x9f/0x4f0
[ 1784.301237][T28878]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1784.301271][T28878]  ___sys_sendmsg+0x106/0x1e0
[ 1784.301296][T28878]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1784.301350][T28878]  __sys_sendmsg+0x170/0x220
[ 1784.301368][T28878]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1784.301401][T28878]  do_syscall_64+0x106/0xf80
[ 1784.301419][T28878]  ? clear_bhb_loop+0x40/0x90
[ 1784.301441][T28878]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1784.301459][T28878] RIP: 0033:0x7f79bd39c799
[ 1784.301475][T28878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1784.301491][T28878] RSP: 002b:00007f79be1d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1784.301510][T28878] RAX: ffffffffffffffda RBX: 00007f79bd615fa0 RCX: 00007f79bd39c799
[ 1784.301521][T28878] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1784.301531][T28878] RBP: 00007f79be1d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1784.301542][T28878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1784.301552][T28878] R13: 00007f79bd616038 R14: 00007f79bd615fa0 R15: 00007ffeb8b18828
[ 1784.301576][T28878]  </TASK>
[ 1784.486779][ T1206] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1784.493268][ T1206] em28xx 4-1:0.0: Config register raw data: 0x56
[ 1784.554594][T28885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6262'.
[ 1784.669070][T28888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6262'.
[ 1784.686029][T28848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1784.695029][T28848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1784.703602][ T5880] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 1784.762307][T28339] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1784.818427][T27685] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1784.929191][T28339] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1784.941874][T28339] usb 5-1: config 1 has no interface number 0
[ 1784.950325][T28339] usb 5-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[ 1784.974355][T28339] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1784.989052][T28339] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[ 1784.994194][T27685] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1785.035266][T28848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1785.044521][T28339] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1785.065041][T28848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1785.111414][T28339] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[ 1785.133313][T27685] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1785.147324][T28339] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1785.162773][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1785.165429][T28339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[ 1785.182620][T28339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1785.183427][T27685] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1785.202908][T28339] usb 5-1: Product: syz
[ 1785.207272][T28339] usb 5-1: Manufacturer: syz
[ 1785.213658][T28339] usb 5-1: SerialNumber: syz
[ 1785.223411][T27685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1785.291289][T27685] usb 3-1: Product: syz
[ 1785.315381][T27685] usb 3-1: Manufacturer: syz
[ 1785.325023][T27685] usb 3-1: SerialNumber: syz
[ 1785.352432][T27685] usb 3-1: config 0 descriptor??
[ 1785.493411][ T5880] usb 2-1: config 0 has no interface number 0
[ 1785.499684][ T5880] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1785.512087][ T5880] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1785.512912][T28339] cdc_ncm 5-1:1.1: bind() failure
[ 1785.522230][ T5880] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1785.522261][ T5880] usb 2-1: config 0 interface 1 has no altsetting 0
[ 1785.522292][ T5880] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1785.522315][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.570337][ T1206] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[ 1785.579756][ T5880] usb 2-1: config 0 descriptor??
[ 1785.588454][ T1206] em28xx 4-1:0.0: No AC97 audio processor
[ 1785.613658][   T29] kauditd_printk_skb: 13 callbacks suppressed
[ 1785.613673][   T29] audit: type=1400 audit(1772139363.587:1663): avc:  denied  { append } for  pid=28886 comm="syz.2.6263" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1786.049750][ T1206] usb 3-1: USB disconnect, device number 115
[ 1786.098353][T28339] usb 5-1: USB disconnect, device number 25
[ 1786.178641][T27685] usb 4-1: USB disconnect, device number 110
[ 1786.185714][T27685] em28xx 4-1:0.0: Disconnecting em28xx
[ 1786.217185][T27685] em28xx 4-1:0.0: Freeing device
[ 1786.387610][ T5880] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0065/input/input197
[ 1786.494592][ T5880] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0065/input/input198
[ 1786.521223][T27685] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1786.580565][T28881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1786.618496][T28881] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1786.689047][ T5880] uclogic 0003:145F:0212.0065: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1
[ 1786.703806][T27685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1786.834147][T27685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1786.857851][ T5880] usb 2-1: USB disconnect, device number 20
[ 1787.843027][T28910] fido_id[28910]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1787.875688][T27685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1787.915257][T27685] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1788.263212][T27685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.325523][T27685] usb 4-1: config 0 descriptor??
[ 1788.336055][T28913] nbd0: detected capacity change from 0 to 63
[ 1789.054445][T25796] block nbd0: Receive control failed (result -104)
[ 1789.169375][T27685] plantronics 0003:047F:FFFF.0066: reserved main item tag 0xd
[ 1789.215273][T28900] bond2: Removing last arp target with arp_interval on
[ 1789.271030][T28900] bond2: entered promiscuous mode
[ 1789.277734][T27685] plantronics 0003:047F:FFFF.0066: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1789.296835][T28900] bond2: entered allmulticast mode
[ 1789.309113][T28900] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1789.561694][T27685] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1789.782912][T27685] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1789.801765][T27685] usb 5-1: config 1 has no interface number 0
[ 1789.808113][T27685] usb 5-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[ 1789.811250][ T5880] usb 4-1: USB disconnect, device number 111
[ 1789.823460][T27685] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1789.838003][T27685] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[ 1789.946729][T27685] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1790.002284][T27685] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[ 1790.033959][T27685] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1790.294786][T28339] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1790.333003][T27685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[ 1790.366089][T27685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.387048][T27685] usb 5-1: Product: syz
[ 1790.396367][T27685] usb 5-1: Manufacturer: syz
[ 1790.469976][T27685] usb 5-1: SerialNumber: syz
[ 1790.542109][T28339] usb 2-1: Using ep0 maxpacket: 16
[ 1790.586025][T28339] usb 2-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1790.594714][T28339] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1790.605650][T28339] usb 2-1: config 0 has no interfaces?
[ 1790.625276][T28339] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1790.634775][T28339] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1790.643142][T28339] usb 2-1: Manufacturer: syz
[ 1790.722386][T28339] usb 2-1: config 0 descriptor??
[ 1790.730650][T27685] cdc_ncm 5-1:1.1: bind() failure
[ 1790.754258][T27685] usb 5-1: USB disconnect, device number 26
[ 1790.846992][ T1206] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1790.904940][   T29] audit: type=1400 audit(1772139369.141:1664): avc:  denied  { read write } for  pid=28955 comm="syz.3.6281" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1790.960265][T28950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6278'.
[ 1790.988869][   T29] audit: type=1400 audit(1772139369.141:1665): avc:  denied  { open } for  pid=28955 comm="syz.3.6281" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1
[ 1791.028144][ T1206] usb 1-1: Using ep0 maxpacket: 32
[ 1791.043699][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1791.052643][ T1206] usb 1-1: config 0 has no interface number 0
[ 1791.059096][ T1206] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1791.095169][T28956] bond3 (unregistering): Released all slaves
[ 1791.140516][T28963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'.
[ 1791.180124][ T1206] usb 1-1: config 0 interface 1 has no altsetting 0
[ 1791.268127][ T1206] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[ 1791.292486][T28968] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6283'.
[ 1791.354412][ T1206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1791.439692][ T1206] usb 1-1: Product: syz
[ 1791.494130][ T1206] usb 1-1: Manufacturer: syz
[ 1791.517302][ T1206] usb 1-1: SerialNumber: syz
[ 1792.053366][ T1206] usb 1-1: config 0 descriptor??
[ 1792.444183][ T1206] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[ 1792.477641][ T1206] cx231xx 1-1:0.1: Failed to read PCB config
[ 1792.993196][ T1206] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[ 1793.457542][ T1206] usb 1-1: USB disconnect, device number 41
[ 1793.699264][T28994] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1794.135913][T29008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6291'.
[ 1794.185105][T28998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6291'.
[ 1794.233633][T29009] netlink: 'syz.4.6291': attribute type 4 has an invalid length.
[ 1794.281264][T29009] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6291'.
[ 1794.483238][T29014] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1794.783158][T29016] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1795.125024][T29008] bond1: option mode: unable to set because the bond device is up
[ 1795.286355][T29020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6296'.
[ 1795.851568][   T29] audit: type=1326 audit(1772139373.981:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1795.987036][   T29] audit: type=1326 audit(1772139373.981:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.055323][   T29] audit: type=1326 audit(1772139373.992:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.272311][T29027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6298'.
[ 1796.339820][   T29] audit: type=1326 audit(1772139373.992:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.398644][   T29] audit: type=1326 audit(1772139373.992:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.454374][   T29] audit: type=1326 audit(1772139374.002:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.479825][   T29] audit: type=1326 audit(1772139374.002:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.508741][   T29] audit: type=1326 audit(1772139374.002:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.537164][   T29] audit: type=1326 audit(1772139374.002:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1796.560905][   T29] audit: type=1326 audit(1772139374.002:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29017 comm="syz.3.6295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1797.707930][T29050] FAULT_INJECTION: forcing a failure.
[ 1797.707930][T29050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1797.737200][T29050] CPU: 1 UID: 0 PID: 29050 Comm: syz.3.6301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1797.737221][T29050] Tainted: [L]=SOFTLOCKUP
[ 1797.737225][T29050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1797.737232][T29050] Call Trace:
[ 1797.737236][T29050]  <TASK>
[ 1797.737242][T29050]  dump_stack_lvl+0x100/0x190
[ 1797.737263][T29050]  should_fail_ex.cold+0x5/0xa
[ 1797.737278][T29050]  _copy_from_user+0x2e/0xd0
[ 1797.737294][T29050]  copy_msghdr_from_user+0x9f/0x4f0
[ 1797.737309][T29050]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1797.737325][T29050]  ? __pfx__kstrtoull+0x10/0x10
[ 1797.737338][T29050]  ___sys_sendmsg+0x106/0x1e0
[ 1797.737353][T29050]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1797.737373][T29050]  ? find_held_lock+0x2b/0x80
[ 1797.737395][T29050]  __sys_sendmmsg+0x205/0x430
[ 1797.737407][T29050]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1797.737421][T29050]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1797.737439][T29050]  ? fput+0x79/0x100
[ 1797.737451][T29050]  ? ksys_write+0x1ac/0x250
[ 1797.737466][T29050]  ? __pfx_ksys_write+0x10/0x10
[ 1797.737483][T29050]  __x64_sys_sendmmsg+0x9c/0x100
[ 1797.737493][T29050]  ? lockdep_hardirqs_on+0x78/0x100
[ 1797.737504][T29050]  do_syscall_64+0x106/0xf80
[ 1797.737514][T29050]  ? clear_bhb_loop+0x40/0x90
[ 1797.737527][T29050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1797.737538][T29050] RIP: 0033:0x7fd961d9c799
[ 1797.737549][T29050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1797.737559][T29050] RSP: 002b:00007fd962cb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1797.737570][T29050] RAX: ffffffffffffffda RBX: 00007fd962015fa0 RCX: 00007fd961d9c799
[ 1797.737577][T29050] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003
[ 1797.737583][T29050] RBP: 00007fd962cb4090 R08: 0000000000000000 R09: 0000000000000000
[ 1797.737590][T29050] R10: 00000000200400c0 R11: 0000000000000246 R12: 0000000000000001
[ 1797.737596][T29050] R13: 00007fd962016038 R14: 00007fd962015fa0 R15: 00007ffcc3ffa478
[ 1797.737609][T29050]  </TASK>
[ 1798.289138][ T5880] usb 2-1: USB disconnect, device number 21
[ 1798.333613][T13186] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1798.467121][T26414] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1798.472595][T29070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6310'.
[ 1798.474949][T13186] usb 1-1: device descriptor read/64, error -71
[ 1798.743492][T26414] usb 4-1: Using ep0 maxpacket: 32
[ 1798.798210][T26414] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[ 1798.831717][T26414] usb 4-1: config 0 has no interface number 0
[ 1798.860124][T26414] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1798.906475][T26414] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1798.932629][T26414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1798.966685][T26414] usb 4-1: Product: syz
[ 1798.982175][T26414] usb 4-1: Manufacturer: syz
[ 1798.997246][T26414] usb 4-1: SerialNumber: syz
[ 1799.034306][T26414] usb 4-1: config 0 descriptor??
[ 1799.047750][T13186] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 1799.060531][T29056] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1799.209551][T13186] usb 1-1: device descriptor read/64, error -71
[ 1799.247786][ T5880] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1799.307591][T29056] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1799.336160][T13186] usb usb1-port1: attempt power cycle
[ 1799.452511][ T5880] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1799.466566][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1799.483928][ T5880] usb 5-1: Product: syz
[ 1799.493571][ T5880] usb 5-1: Manufacturer: syz
[ 1799.503731][ T5880] usb 5-1: SerialNumber: syz
[ 1799.533986][ T5880] usb 5-1: config 0 descriptor??
[ 1799.697563][T13186] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[ 1799.743229][T13186] usb 1-1: device descriptor read/8, error -71
[ 1800.076001][ T5880] usb 5-1: Firmware: major: 182, minor: 167, hardware type: UNKNOWN (115)
[ 1800.086597][T13186] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1800.125589][T13186] usb 1-1: device descriptor read/8, error -71
[ 1800.229407][T13186] usb usb1-port1: unable to enumerate USB device
[ 1800.270096][ T5880] usb 5-1: failed to fetch extended address, random address set
[ 1800.280915][ T5880] usb 5-1: atusb_probe: initialization failed, error = -524
[ 1800.293940][ T5880] atusb 5-1:0.0: probe with driver atusb failed with error -524
[ 1800.313060][ T5880] usb 5-1: USB disconnect, device number 27
[ 1800.362148][ T1206] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1800.514676][ T1206] usb 2-1: Using ep0 maxpacket: 16
[ 1800.536345][ T1206] usb 2-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1800.556036][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1800.598467][ T1206] usb 2-1: config 0 has no interfaces?
[ 1800.617675][ T1206] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1800.635753][ T1206] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1800.646321][T26414] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1800.651100][ T1206] usb 2-1: Manufacturer: syz
[ 1800.671047][T26414] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[ 1800.698906][ T1206] usb 2-1: config 0 descriptor??
[ 1800.714154][T26414] asix 4-1:0.188: probe with driver asix failed with error -71
[ 1800.729274][T26414] usb 4-1: USB disconnect, device number 112
[ 1800.933486][ T5880] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1800.974227][   T29] kauditd_printk_skb: 13 callbacks suppressed
[ 1800.974244][   T29] audit: type=1400 audit(1772139379.724:1689): avc:  denied  { map } for  pid=29097 comm="syz.4.6318" path="socket:[144291]" dev="sockfs" ino=144291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1801.019601][   T29] audit: type=1400 audit(1772139379.724:1690): avc:  denied  { read } for  pid=29097 comm="syz.4.6318" path="socket:[144291]" dev="sockfs" ino=144291 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[ 1801.044386][T29083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6312'.
[ 1801.060281][T29100] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1801.083870][T29083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'.
[ 1801.124031][ T5880] usb 3-1: Using ep0 maxpacket: 16
[ 1801.131823][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1801.166525][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1801.186358][ T5880] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1801.206914][ T5880] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1801.223441][ T5880] usb 3-1: Manufacturer: syz
[ 1801.242478][ T5880] usb 3-1: config 0 descriptor??
[ 1801.333528][T28339] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1801.562763][T28339] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1801.615377][T28339] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1801.647482][T28339] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1801.656019][T28339] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[ 1801.667047][T28339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1801.705452][T28339] usb 5-1: config 0 descriptor??
[ 1802.113909][T28339] magicmouse 0003:05AC:0265.0067: item fetching failed at offset 1/5
[ 1802.137056][T28339] magicmouse 0003:05AC:0265.0067: magicmouse hid parse failed
[ 1802.144755][T27685] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1802.152389][T28339] magicmouse 0003:05AC:0265.0067: probe with driver magicmouse failed with error -22
[ 1802.305240][T28339] usb 5-1: USB disconnect, device number 28
[ 1802.311165][T27685] usb 1-1: Using ep0 maxpacket: 32
[ 1802.324643][T27685] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 255, using maximum allowed: 30
[ 1802.344761][T27685] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1802.356944][T27685] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1802.371363][T27685] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1802.378375][T27685] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[ 1802.388297][T27685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1802.398096][T27685] usb 1-1: config 0 descriptor??
[ 1802.763055][ T1206] usb 2-1: USB disconnect, device number 22
[ 1802.816519][T27685] logitech 0003:046D:C298.0068: unknown main item tag 0x2
[ 1802.882623][T27685] logitech 0003:046D:C298.0068: hidraw0: USB HID v0.02 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0
[ 1802.897747][   T29] audit: type=1400 audit(1772139381.740:1691): avc:  denied  { ioctl } for  pid=29124 comm="syz.1.6326" path="socket:[146572]" dev="sockfs" ino=146572 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1802.934452][T27685] logitech 0003:046D:C298.0068: no inputs found
[ 1803.531553][ T5880] usb 3-1: USB disconnect, device number 116
[ 1803.831894][T29142] input: syz0 as /devices/virtual/input/input200
[ 1804.479718][T29156] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1804.678419][T29155] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1804.730769][T26414] usb 1-1: USB disconnect, device number 46
[ 1804.845126][T29162] syzkaller0: entered promiscuous mode
[ 1805.331421][T29162] syzkaller0: entered allmulticast mode
[ 1805.449676][T29175] FAULT_INJECTION: forcing a failure.
[ 1805.449676][T29175] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1805.464316][T29175] CPU: 0 UID: 0 PID: 29175 Comm: syz.3.6339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1805.464345][T29175] Tainted: [L]=SOFTLOCKUP
[ 1805.464351][T29175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1805.464360][T29175] Call Trace:
[ 1805.464367][T29175]  <TASK>
[ 1805.464373][T29175]  dump_stack_lvl+0x100/0x190
[ 1805.464406][T29175]  should_fail_ex.cold+0x5/0xa
[ 1805.464427][T29175]  _copy_from_user+0x2e/0xd0
[ 1805.464451][T29175]  copy_msghdr_from_user+0x9f/0x4f0
[ 1805.464475][T29175]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1805.464505][T29175]  ___sys_sendmsg+0x106/0x1e0
[ 1805.464529][T29175]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1805.464576][T29175]  __sys_sendmsg+0x170/0x220
[ 1805.464590][T29175]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1805.464613][T29175]  do_syscall_64+0x106/0xf80
[ 1805.464627][T29175]  ? clear_bhb_loop+0x40/0x90
[ 1805.464647][T29175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1805.464664][T29175] RIP: 0033:0x7fd961d9c799
[ 1805.464678][T29175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1805.464694][T29175] RSP: 002b:00007fd962c93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1805.464712][T29175] RAX: ffffffffffffffda RBX: 00007fd962016090 RCX: 00007fd961d9c799
[ 1805.464729][T29175] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1805.464739][T29175] RBP: 00007fd962c93090 R08: 0000000000000000 R09: 0000000000000000
[ 1805.464748][T29175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1805.464758][T29175] R13: 00007fd962016128 R14: 00007fd962016090 R15: 00007ffcc3ffa478
[ 1805.464781][T29175]  </TASK>
[ 1806.206846][   T29] audit: type=1400 audit(2000000003.275:1692): avc:  denied  { create } for  pid=29178 comm="syz.0.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1806.598315][   T29] audit: type=1400 audit(2000000003.663:1693): avc:  denied  { setopt } for  pid=29178 comm="syz.0.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1807.022586][   T29] audit: type=1400 audit(2000000003.663:1694): avc:  denied  { connect } for  pid=29178 comm="syz.0.6340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[ 1807.048877][T29195] can0: slcan on ttyS3.
[ 1807.119491][   T29] audit: type=1400 audit(2000000004.136:1695): avc:  denied  { ioctl } for  pid=29182 comm="syz.2.6344" path="socket:[146666]" dev="sockfs" ino=146666 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[ 1807.201652][T29182] can0 (unregistered): slcan off ttyS3.
[ 1807.331007][   T29] audit: type=1400 audit(2000000004.451:1696): avc:  denied  { transfer } for  pid=29205 comm="syz.3.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1807.461022][   T29] audit: type=1400 audit(2000000004.587:1697): avc:  denied  { bind } for  pid=29211 comm="syz.0.6349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1807.535250][   T29] audit: type=1400 audit(2000000004.619:1698): avc:  denied  { read } for  pid=29211 comm="syz.0.6349" path="socket:[147664]" dev="sockfs" ino=147664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1809.168129][   T29] audit: type=1326 audit(2000000006.372:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29217 comm="syz.3.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1809.240373][   T29] audit: type=1326 audit(2000000006.372:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29217 comm="syz.3.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1809.313138][   T29] audit: type=1326 audit(2000000006.382:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29217 comm="syz.3.6351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1809.753867][ T5880] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1809.950014][ T5880] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1809.961305][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1809.969905][ T5880] usb 1-1: Product: syz
[ 1809.980946][ T5880] usb 1-1: Manufacturer: syz
[ 1809.987085][ T5880] usb 1-1: SerialNumber: syz
[ 1810.943186][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1810.955656][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1811.430836][ T1206] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1811.449898][T27685] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1811.516580][T28339] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1811.524453][T27379] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1811.573733][ T1206] usb 3-1: Using ep0 maxpacket: 16
[ 1811.580271][ T1206] usb 3-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1811.590821][ T1206] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1811.604441][ T1206] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1811.613628][T27685] usb 4-1: Using ep0 maxpacket: 16
[ 1811.618802][ T1206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1811.627238][ T1206] usb 3-1: Product: syz
[ 1811.631663][ T1206] usb 3-1: Manufacturer: syz
[ 1811.636288][ T1206] usb 3-1: SerialNumber: syz
[ 1811.641391][T27685] usb 4-1: config 0 has an invalid descriptor of length 85, skipping remainder of the config
[ 1811.652865][T27685] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1811.667949][T27685] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[ 1811.677081][T28339] usb 2-1: Using ep0 maxpacket: 8
[ 1811.682185][T27379] usb 5-1: Using ep0 maxpacket: 16
[ 1811.687379][T27685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1811.696292][T27685] usb 4-1: Product: syz
[ 1811.700806][T27685] usb 4-1: Manufacturer: syz
[ 1811.705603][T27685] usb 4-1: SerialNumber: syz
[ 1811.711574][T27379] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1811.711672][T28339] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[ 1811.729873][T27379] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1811.740016][T28339] usb 2-1: config 2 has no interface number 0
[ 1811.747060][T27685] usb 4-1: config 0 descriptor??
[ 1811.754294][T27379] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1811.763349][T27379] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1811.778601][T28339] usb 2-1: config 2 interface 31 has no altsetting 0
[ 1811.785987][T27379] usb 5-1: Manufacturer: syz
[ 1811.793234][T28339] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1811.802733][T28339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1811.811521][T28339] usb 2-1: Product: syz
[ 1811.815737][T28339] usb 2-1: Manufacturer: syz
[ 1811.820350][T28339] usb 2-1: SerialNumber: syz
[ 1811.825213][T27379] usb 5-1: config 0 descriptor??
[ 1811.914674][ T1206] usb 3-1: USB disconnect, device number 117
[ 1812.176133][ T1206] usb 4-1: USB disconnect, device number 113
[ 1812.471738][T29288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1812.485674][T29288] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1812.544259][T29293] FAULT_INJECTION: forcing a failure.
[ 1812.544259][T29293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1812.558037][T29293] CPU: 0 UID: 0 PID: 29293 Comm: syz.2.6373 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1812.558066][T29293] Tainted: [L]=SOFTLOCKUP
[ 1812.558073][T29293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1812.558083][T29293] Call Trace:
[ 1812.558090][T29293]  <TASK>
[ 1812.558097][T29293]  dump_stack_lvl+0x100/0x190
[ 1812.558139][T29293]  should_fail_ex.cold+0x5/0xa
[ 1812.558163][T29293]  _copy_from_user+0x2e/0xd0
[ 1812.558187][T29293]  copy_msghdr_from_user+0x9f/0x4f0
[ 1812.558212][T29293]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1812.558248][T29293]  ___sys_sendmsg+0x106/0x1e0
[ 1812.558274][T29293]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1812.558325][T29293]  __sys_sendmsg+0x170/0x220
[ 1812.558343][T29293]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1812.558377][T29293]  do_syscall_64+0x106/0xf80
[ 1812.558395][T29293]  ? clear_bhb_loop+0x40/0x90
[ 1812.558418][T29293]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1812.558435][T29293] RIP: 0033:0x7f79bd39c799
[ 1812.558450][T29293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1812.558466][T29293] RSP: 002b:00007f79be1d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1812.558484][T29293] RAX: ffffffffffffffda RBX: 00007f79bd615fa0 RCX: 00007f79bd39c799
[ 1812.558495][T29293] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 1812.558505][T29293] RBP: 00007f79be1d0090 R08: 0000000000000000 R09: 0000000000000000
[ 1812.558515][T29293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1812.558525][T29293] R13: 00007f79bd616038 R14: 00007f79bd615fa0 R15: 00007ffeb8b18828
[ 1812.558549][T29293]  </TASK>
[ 1812.648688][T28339] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[ 1812.743814][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[ 1812.767518][T28339] usb 2-1: USB disconnect, device number 23
[ 1812.775192][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1812.799791][ T5880] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1812.810851][ T5880] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1812.829192][ T5880] usb 1-1: USB disconnect, device number 47
[ 1813.154611][T27379] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1813.354645][T27379] usb 4-1: Using ep0 maxpacket: 16
[ 1813.395421][T27379] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1813.416267][T27379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1813.432830][T27379] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1813.447692][T27379] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1813.457302][T27379] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1813.474140][T27379] usb 4-1: Manufacturer: syz
[ 1813.482286][T27379] usb 4-1: config 0 descriptor??
[ 1813.569922][T29310] FAULT_INJECTION: forcing a failure.
[ 1813.569922][T29310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1813.588332][T29310] CPU: 0 UID: 0 PID: 29310 Comm: syz.1.6381 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1813.588363][T29310] Tainted: [L]=SOFTLOCKUP
[ 1813.588370][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1813.588380][T29310] Call Trace:
[ 1813.588387][T29310]  <TASK>
[ 1813.588394][T29310]  dump_stack_lvl+0x100/0x190
[ 1813.588427][T29310]  should_fail_ex.cold+0x5/0xa
[ 1813.588451][T29310]  _copy_from_user+0x2e/0xd0
[ 1813.588476][T29310]  copy_msghdr_from_user+0x9f/0x4f0
[ 1813.588502][T29310]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 1813.588538][T29310]  ___sys_sendmsg+0x106/0x1e0
[ 1813.588564][T29310]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1813.588615][T29310]  __sys_sendmsg+0x170/0x220
[ 1813.588633][T29310]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1813.588667][T29310]  do_syscall_64+0x106/0xf80
[ 1813.588685][T29310]  ? clear_bhb_loop+0x40/0x90
[ 1813.588708][T29310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1813.588726][T29310] RIP: 0033:0x7fc702d9c799
[ 1813.588740][T29310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1813.588757][T29310] RSP: 002b:00007fc703c84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1813.588774][T29310] RAX: ffffffffffffffda RBX: 00007fc703015fa0 RCX: 00007fc702d9c799
[ 1813.588787][T29310] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003
[ 1813.588798][T29310] RBP: 00007fc703c84090 R08: 0000000000000000 R09: 0000000000000000
[ 1813.588809][T29310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1813.588826][T29310] R13: 00007fc703016038 R14: 00007fc703015fa0 R15: 00007ffee288b068
[ 1813.588851][T29310]  </TASK>
[ 1814.126445][T29317] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1814.362059][T27379] usb 5-1: USB disconnect, device number 29
[ 1814.379059][T27353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1814.391023][T27353] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1814.400503][T27353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1814.414540][T27353] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1814.430395][T27353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1814.623246][T29327] binder: 29326:29327 unknown command 0
[ 1814.636833][T29327] binder: 29326:29327 ioctl c0306201 200000000080 returned -22
[ 1815.103388][T29320] chnl_net:caif_netlink_parms(): no params data found
[ 1815.317682][T28339] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1815.405564][T29320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1815.414862][T29320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1815.422295][T29320] bridge_slave_0: entered allmulticast mode
[ 1815.436418][T29320] bridge_slave_0: entered promiscuous mode
[ 1815.453101][T29320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1815.468578][T29320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1815.482531][T29320] bridge_slave_1: entered allmulticast mode
[ 1815.491389][T28339] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1815.492167][T29320] bridge_slave_1: entered promiscuous mode
[ 1815.521029][T28339] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1815.539921][T28339] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40
[ 1815.549218][T28339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.557312][T28339] usb 5-1: Product: 墌垻⥭쯍죤㲓雠럹〱ῳ㕇齧쉉㢅ြ럒﵇컟唾每鷶ﵮꋒ᷁洱ܱ뻞ﺇ醼䂐ᥪホ⹾뉚崛哷⣪⊌朡駿氇ᰀ衆銵琜⃜⮾敝鎜톕篤᪖ꘫ♱곒♲⮃ꤗ훉뼷伬⫽彯ங晍鏯ᗰ勖䝦췭还ࣄ荅⟻攎丩ᅬヽ⢏쀘荚
[ 1815.574969][T29320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1815.585658][T28339] usb 5-1: Manufacturer: ⚭渘倵㕡璢쎣ᵬ蜻뢲⏋⶙坵菑쓠훏깗鏱ꎆᲜዠ媟풾戁ﭠ볂伲芣ᗂ䛐䨵Њ抟첨苓敤꺜麛䣰¹⺸δ왮波듅⦛ﯹ틗䇱䌚甘垀㜶糬臇
[ 1815.601217][T29320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1815.625625][T28339] usb 5-1: SerialNumber: ꏠ㩲룑⋢蒇霽壌ᐃ켗랆꺺獒↱洉㊹镵৞뵅
[ 1815.639643][T29327] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1815.657319][T29320] team0: Port device team_slave_0 added
[ 1815.665887][T29320] team0: Port device team_slave_1 added
[ 1815.701072][T29320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1815.708468][T29320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1815.735187][T29320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1815.753321][T29320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1815.761065][T27520] usb 4-1: USB disconnect, device number 114
[ 1815.762407][T29320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1815.794921][T29320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1815.886827][T29320] hsr_slave_0: entered promiscuous mode
[ 1815.893603][T29320] hsr_slave_1: entered promiscuous mode
[ 1815.900190][T29320] debugfs: 'hsr0' already exists in 'hsr'
[ 1815.912114][T29320] Cannot create hsr debugfs directory
[ 1816.177275][T27520] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1816.177834][T28339] usbhid 5-1:1.0: can't add hid device: -71
[ 1816.555627][T25796] Bluetooth: hci3: command tx timeout
[ 1816.569732][T28339] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1816.583591][T28339] usb 5-1: USB disconnect, device number 30
[ 1816.707851][T27520] usb 4-1: Using ep0 maxpacket: 32
[ 1816.715892][T27520] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1816.725665][T27520] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1816.734622][T27520] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1816.738811][T29320] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1816.746328][T27520] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1816.760140][T27520] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1816.763942][T29320] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1816.770731][T27520] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1816.840576][T29320] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1816.853366][T29320] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1816.860167][T27520] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1816.860195][T27520] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1816.866620][T27520] usb 4-1: config 0 descriptor??
[ 1816.946263][T29320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1816.973226][T29320] 8021q: adding VLAN 0 to HW filter on device team0
[ 1816.998482][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1817.005648][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1817.023198][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1817.030345][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1817.090013][T29342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1817.101796][T29342] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.118738][T27520] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 115 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1817.168055][T27520] usb 4-1: USB disconnect, device number 115
[ 1817.181295][T27520] usblp0: removed
[ 1817.230319][T17475] block nbd0: Possible stuck request ffff888027ba8000: control (read@0,1024B). Runtime 30 seconds
[ 1817.242898][T29320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1817.250053][T17475] block nbd0: Possible stuck request ffff888027ba8200: control (read@1024,1024B). Runtime 30 seconds
[ 1817.261451][T17475] block nbd0: Possible stuck request ffff888027ba8400: control (read@2048,1024B). Runtime 30 seconds
[ 1817.272486][T17475] block nbd0: Possible stuck request ffff888027ba8600: control (read@3072,1024B). Runtime 30 seconds
[ 1817.299102][T29320] veth0_vlan: entered promiscuous mode
[ 1817.310374][T29320] veth1_vlan: entered promiscuous mode
[ 1817.339016][T29320] veth0_macvtap: entered promiscuous mode
[ 1817.350295][T29320] veth1_macvtap: entered promiscuous mode
[ 1817.386004][T29320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1817.397230][T29320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1817.404687][T26414] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1817.527014][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1817.572962][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1817.723544][   T29] kauditd_printk_skb: 33 callbacks suppressed
[ 1817.723575][   T29] audit: type=1400 audit(2000000015.285:1735): avc:  denied  { ioctl } for  pid=29341 comm="syz.3.6388" path="/587/file0" dev="tmpfs" ino=3070 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[ 1817.936666][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1817.945667][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1817.993750][T26414] usb 5-1: Using ep0 maxpacket: 16
[ 1818.006363][T26414] usb 5-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1818.028815][T26414] usb 5-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1818.051720][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1818.054623][T26414] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1818.078240][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1818.098973][T26414] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1818.117050][T26414] usb 5-1: Product: syz
[ 1818.122757][ T1325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1818.130713][T26414] usb 5-1: Manufacturer: syz
[ 1818.130732][T26414] usb 5-1: SerialNumber: syz
[ 1818.147510][ T1325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1818.277524][T29385] FAULT_INJECTION: forcing a failure.
[ 1818.277524][T29385] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1818.292002][T29385] CPU: 1 UID: 0 PID: 29385 Comm: syz.2.6383 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1818.292033][T29385] Tainted: [L]=SOFTLOCKUP
[ 1818.292039][T29385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1818.292050][T29385] Call Trace:
[ 1818.292056][T29385]  <TASK>
[ 1818.292063][T29385]  dump_stack_lvl+0x100/0x190
[ 1818.292095][T29385]  should_fail_ex.cold+0x5/0xa
[ 1818.292119][T29385]  _copy_from_user+0x2e/0xd0
[ 1818.292143][T29385]  __sys_bpf+0x243/0x4b90
[ 1818.292166][T29385]  ? __pfx___sys_bpf+0x10/0x10
[ 1818.292182][T29385]  ? proc_fail_nth_write+0x9f/0x220
[ 1818.292206][T29385]  ? find_held_lock+0x2b/0x80
[ 1818.292234][T29385]  ? find_held_lock+0x2b/0x80
[ 1818.292254][T29385]  ? ksys_write+0x190/0x250
[ 1818.292283][T29385]  ? __mutex_unlock_slowpath+0x15c/0x790
[ 1818.292304][T29385]  ? __fget_files+0x215/0x3d0
[ 1818.292334][T29385]  ? fput+0x79/0x100
[ 1818.292352][T29385]  ? ksys_write+0x1ac/0x250
[ 1818.292377][T29385]  ? __pfx_ksys_write+0x10/0x10
[ 1818.292405][T29385]  __x64_sys_bpf+0x7b/0xc0
[ 1818.292424][T29385]  ? lockdep_hardirqs_on+0x78/0x100
[ 1818.292442][T29385]  do_syscall_64+0x106/0xf80
[ 1818.292459][T29385]  ? clear_bhb_loop+0x40/0x90
[ 1818.292482][T29385]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1818.292499][T29385] RIP: 0033:0x7f596659c799
[ 1818.292514][T29385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1818.292530][T29385] RSP: 002b:00007f596751f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1818.292547][T29385] RAX: ffffffffffffffda RBX: 00007f5966815fa0 RCX: 00007f596659c799
[ 1818.292559][T29385] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[ 1818.292570][T29385] RBP: 00007f596751f090 R08: 0000000000000000 R09: 0000000000000000
[ 1818.292580][T29385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1818.292596][T29385] R13: 00007f5966816038 R14: 00007f5966815fa0 R15: 00007fff871c45c8
[ 1818.292621][T29385]  </TASK>
[ 1818.524747][T25796] Bluetooth: hci3: command tx timeout
[ 1818.801146][T26414] usb 5-1: USB disconnect, device number 31
[ 1818.955696][T16472] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1819.146408][T16472] usb 2-1: Using ep0 maxpacket: 16
[ 1819.157376][T16472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1819.184844][T16472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1819.643117][T16472] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1819.657521][T16472] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1819.676987][T16472] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1819.692069][T16472] usb 2-1: Manufacturer: syz
[ 1819.707603][T16472] usb 2-1: config 0 descriptor??
[ 1820.286373][   T29] audit: type=1326 audit(2000000017.909:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29409 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1820.499383][T25796] Bluetooth: hci3: command tx timeout
[ 1820.936688][   T29] audit: type=1326 audit(2000000017.909:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29409 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1820.991814][   T29] audit: type=1326 audit(2000000017.909:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29409 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1821.047247][T29431] binder: 29430:29431 unknown command 0
[ 1821.059445][T29431] binder: 29430:29431 ioctl c0306201 200000000080 returned -22
[ 1821.067988][   T29] audit: type=1326 audit(2000000018.434:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29409 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1821.110611][   T29] audit: type=1326 audit(2000000018.434:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29409 comm="syz.3.6402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd961d9c799 code=0x7ffc0000
[ 1821.346752][T16472] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[ 1821.519306][T16472] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1821.539742][T26414] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1821.558436][T16472] usb 4-1: config 1 interface 0 has no altsetting 0
[ 1821.584236][T16472] usb 4-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40
[ 1821.603523][T16472] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1821.612878][T16472] usb 4-1: Product: 墌垻⥭쯍죤㲓雠럹〱ῳ㕇齧쉉㢅ြ럒﵇컟唾每鷶ﵮꋒ᷁洱ܱ뻞ﺇ醼䂐ᥪホ⹾뉚崛哷⣪⊌朡駿氇ᰀ衆銵琜⃜⮾敝鎜톕篤᪖ꘫ♱곒♲⮃ꤗ훉뼷伬⫽彯ங晍鏯ᗰ勖䝦췭还ࣄ荅⟻攎丩ᅬヽ⢏쀘荚
[ 1821.647808][T16472] usb 4-1: Manufacturer: ⚭渘倵㕡璢쎣ᵬ蜻뢲⏋⶙坵菑쓠훏깗鏱ꎆᲜዠ媟풾戁ﭠ볂伲芣ᗂ䛐䨵Њ抟첨苓敤꺜麛䣰¹⺸δ왮波듅⦛ﯹ틗䇱䌚甘垀㜶糬臇
[ 1821.680433][T16472] usb 4-1: SerialNumber: ꏠ㩲룑⋢蒇霽壌ᐃ켗랆꺺獒↱洉㊹镵৞뵅
[ 1821.706022][ T1206] usb 2-1: USB disconnect, device number 24
[ 1821.720986][T26414] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1821.731611][T26414] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1821.783541][T29431] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1821.832339][T27520] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1821.859269][T26414] usb 1-1: config 0 descriptor??
[ 1821.879585][T26414] cp210x 1-1:0.0: cp210x converter detected
[ 1822.080410][T27520] usb 3-1: Using ep0 maxpacket: 16
[ 1822.158183][T27520] usb 3-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1822.574891][T25796] Bluetooth: hci3: command tx timeout
[ 1822.614095][T27520] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1822.625449][T27520] usb 3-1: config 0 has no interfaces?
[ 1822.632183][T27520] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1822.642076][T27520] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1822.650719][T27520] usb 3-1: Manufacturer: syz
[ 1822.670616][T27520] usb 3-1: config 0 descriptor??
[ 1822.852781][T26414] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 1822.900792][T26414] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1822.913986][T16472] usbhid 4-1:1.0: can't add hid device: -71
[ 1822.921138][T16472] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 1822.930792][T29451] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6409'.
[ 1823.099609][   T29] audit: type=1400 audit(2000000020.996:1741): avc:  denied  { write } for  pid=29462 comm="syz.1.6414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1823.359693][T16472] usb 4-1: USB disconnect, device number 116
[ 1823.386426][T29464] loop5: detected capacity change from 0 to 7
[ 1823.426104][T26073] Dev loop5: unable to read RDB block 7
[ 1823.466200][T26073]  loop5: unable to read partition table
[ 1823.627270][T26073] loop5: partition table beyond EOD, truncated
[ 1823.648573][T29464] Dev loop5: unable to read RDB block 7
[ 1823.733502][   T29] audit: type=1326 audit(2000000021.657:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.4.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1824.145468][T29464]  loop5: unable to read partition table
[ 1824.176265][ T5880] usb 1-1: USB disconnect, device number 48
[ 1824.182580][T29464] loop5: partition table beyond EOD, truncated
[ 1824.201318][T29464] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1824.213794][   T29] audit: type=1326 audit(2000000021.657:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.4.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1824.240419][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1824.262880][ T5880] cp210x 1-1:0.0: device disconnected
[ 1824.300211][   T29] audit: type=1326 audit(2000000021.657:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.4.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1824.361684][   T29] audit: type=1326 audit(2000000022.129:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.4.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1824.509737][   T29] audit: type=1326 audit(2000000022.129:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29466 comm="syz.4.6415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1825.376538][T27379] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1825.539376][T27379] usb 2-1: Using ep0 maxpacket: 16
[ 1825.572282][T27379] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1825.619916][T27379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1825.673386][T27379] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1825.723049][T27379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.756866][T27379] usb 2-1: Product: syz
[ 1825.775915][T27379] usb 2-1: Manufacturer: syz
[ 1825.807889][T27379] usb 2-1: SerialNumber: syz
[ 1825.846272][T27379] usb 2-1: config 0 descriptor??
[ 1825.902303][T27379] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1825.954906][T27379] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1826.423895][T27520] usb 3-1: USB disconnect, device number 118
[ 1826.476884][T27379] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1826.491047][T29519] netlink: 112 bytes leftover after parsing attributes in process `syz.2.6428'.
[ 1826.511519][T27379] em28xx 2-1:0.0: Config register raw data: 0x56
[ 1826.519379][ T5880] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1826.662175][T16472] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[ 1826.680925][ T5880] usb 4-1: Using ep0 maxpacket: 16
[ 1826.687328][ T5880] usb 4-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1826.699939][ T1206] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1826.705711][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.708630][T29502] netlink: 'syz.1.6422': attribute type 1 has an invalid length.
[ 1826.764541][ T5880] usb 4-1: config 0 has no interfaces?
[ 1826.771378][T27379] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[ 1826.781912][T27379] em28xx 2-1:0.0: No AC97 audio processor
[ 1826.794143][T27379] usb 2-1: USB disconnect, device number 25
[ 1826.804728][ T5880] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1826.820442][ T5880] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1826.821350][T27379] em28xx 2-1:0.0: Disconnecting em28xx
[ 1826.828619][T27520] usb 3-1: new low-speed USB device number 119 using dummy_hcd
[ 1826.830660][T16472] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1826.859862][ T5880] usb 4-1: Manufacturer: syz
[ 1826.871862][ T1206] usb 5-1: Using ep0 maxpacket: 16
[ 1826.884426][ T1206] usb 5-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.895513][T27379] em28xx 2-1:0.0: Freeing device
[ 1826.898758][ T5880] usb 4-1: config 0 descriptor??
[ 1826.904490][ T1206] usb 5-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1826.926183][ T1206] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1826.937426][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1826.946412][T16472] usb 1-1: config 1 has no interface number 0
[ 1826.953597][ T1206] usb 5-1: Product: syz
[ 1826.954522][T16472] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[ 1826.968926][T27520] usb 3-1: device descriptor read/64, error -71
[ 1826.985017][ T1206] usb 5-1: Manufacturer: syz
[ 1826.990231][ T1206] usb 5-1: SerialNumber: syz
[ 1826.999819][T16472] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1827.031929][T16472] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[ 1827.063533][T16472] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1827.082815][T16472] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[ 1827.107059][T16472] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1827.142285][T16472] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[ 1827.160255][T16472] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.173929][T16472] usb 1-1: Product: syz
[ 1827.176316][T29512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6425'.
[ 1827.187207][T16472] usb 1-1: Manufacturer: syz
[ 1827.187228][T16472] usb 1-1: SerialNumber: syz
[ 1827.196901][T27520] usb 3-1: new low-speed USB device number 120 using dummy_hcd
[ 1827.328685][T27520] usb 3-1: device descriptor read/64, error -71
[ 1827.424272][T16472] cdc_ncm 1-1:1.1: bind() failure
[ 1827.445948][T27520] usb usb3-port1: attempt power cycle
[ 1827.476879][ T1206] usb 5-1: USB disconnect, device number 32
[ 1827.492210][T16472] usb 1-1: USB disconnect, device number 49
[ 1827.681233][T13186] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[ 1827.804993][T27520] usb 3-1: new low-speed USB device number 121 using dummy_hcd
[ 1827.824408][T27520] usb 3-1: device descriptor read/8, error -71
[ 1827.836837][T13186] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1827.846318][T13186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.854578][T13186] usb 2-1: Product: syz
[ 1827.858850][T13186] usb 2-1: Manufacturer: syz
[ 1827.863494][T13186] usb 2-1: SerialNumber: syz
[ 1827.870082][T13186] usb 2-1: config 0 descriptor??
[ 1828.074330][T13186] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1828.091180][T27520] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[ 1828.131537][T27520] usb 3-1: device descriptor read/8, error -71
[ 1828.274025][T27520] usb usb3-port1: unable to enumerate USB device
[ 1828.902392][   T29] audit: type=1326 audit(2000000026.559:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29530 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1828.960656][T29533] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[ 1829.023391][   T29] audit: type=1326 audit(2000000026.559:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29530 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1829.105636][   T29] audit: type=1326 audit(2000000026.559:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29530 comm="syz.4.6432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f572079c799 code=0x7ffc0000
[ 1829.588079][ T5880] usb 4-1: USB disconnect, device number 117
[ 1830.168673][T13186] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1830.207829][T13186] usb 2-1: USB disconnect, device number 26
[ 1830.321340][T29561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6438'.
[ 1830.648883][T29565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6440'.
[ 1832.079047][T29580] FAULT_INJECTION: forcing a failure.
[ 1832.079047][T29580] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1832.092337][T29580] CPU: 0 UID: 0 PID: 29580 Comm: syz.1.6442 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1832.092363][T29580] Tainted: [L]=SOFTLOCKUP
[ 1832.092368][T29580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1832.092379][T29580] Call Trace:
[ 1832.092385][T29580]  <TASK>
[ 1832.092392][T29580]  dump_stack_lvl+0x100/0x190
[ 1832.092424][T29580]  should_fail_ex.cold+0x5/0xa
[ 1832.092444][T29580]  _copy_from_iter+0x1f4/0x1690
[ 1832.092469][T29580]  ? __pfx__copy_from_iter+0x10/0x10
[ 1832.092487][T29580]  ? _parse_integer_limit+0x17f/0x1d0
[ 1832.092503][T29580]  ? _kstrtoull+0x13c/0x1f0
[ 1832.092515][T29580]  ? __pfx__kstrtoull+0x10/0x10
[ 1832.092534][T29580]  tun_get_user+0x3ba/0x3e10
[ 1832.092559][T29580]  ? __pfx_tun_get_user+0x10/0x10
[ 1832.092576][T29580]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1832.092603][T29580]  ? find_held_lock+0x2b/0x80
[ 1832.092620][T29580]  ? tun_get+0x191/0x370
[ 1832.092633][T29580]  ? tun_get+0x191/0x370
[ 1832.092652][T29580]  tun_chr_write_iter+0xdc/0x200
[ 1832.092670][T29580]  vfs_write+0x6ac/0x1070
[ 1832.092691][T29580]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1832.092715][T29580]  ? __pfx_vfs_write+0x10/0x10
[ 1832.092733][T29580]  ? find_held_lock+0x2b/0x80
[ 1832.092761][T29580]  ksys_write+0x12a/0x250
[ 1832.092780][T29580]  ? __pfx_ksys_write+0x10/0x10
[ 1832.092804][T29580]  do_syscall_64+0x106/0xf80
[ 1832.092819][T29580]  ? clear_bhb_loop+0x40/0x90
[ 1832.092836][T29580]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1832.092849][T29580] RIP: 0033:0x7fc702d9c799
[ 1832.092861][T29580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1832.092874][T29580] RSP: 002b:00007fc703c84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1832.092889][T29580] RAX: ffffffffffffffda RBX: 00007fc703015fa0 RCX: 00007fc702d9c799
[ 1832.092898][T29580] RDX: 000000000000ffdd RSI: 0000200000000840 RDI: 0000000000000003
[ 1832.092906][T29580] RBP: 00007fc703c84090 R08: 0000000000000000 R09: 0000000000000000
[ 1832.092914][T29580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1832.092922][T29580] R13: 00007fc703016038 R14: 00007fc703015fa0 R15: 00007ffee288b068
[ 1832.092941][T29580]  </TASK>
[ 1833.066423][T29579] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1833.291968][   T29] audit: type=1400 audit(2000000031.703:1750): avc:  denied  { bind } for  pid=29583 comm="syz.4.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1833.314534][   T29] audit: type=1400 audit(2000000031.703:1751): avc:  denied  { setopt } for  pid=29583 comm="syz.4.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1833.334411][   T29] audit: type=1400 audit(2000000031.735:1752): avc:  denied  { write } for  pid=29583 comm="syz.4.6445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1833.958555][T27520] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1834.177573][T27520] usb 4-1: Using ep0 maxpacket: 16
[ 1834.188541][T27520] usb 4-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1834.216036][T27520] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1834.246428][T27520] usb 4-1: config 0 has no interfaces?
[ 1834.289941][T27520] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1834.310633][T27520] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1834.327713][T27520] usb 4-1: Manufacturer: syz
[ 1834.359391][T27520] usb 4-1: config 0 descriptor??
[ 1834.407462][T29604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[ 1834.413984][T29604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1834.423922][T29604] vhci_hcd vhci_hcd.0: Device attached
[ 1834.569048][T29602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6448'.
[ 1834.649291][T27379] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1834.674394][T10742] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1834.971665][T10742] usb 3-1: config 0 has no interfaces?
[ 1834.977512][T10742] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[ 1834.989250][T10742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1835.005649][T10742] usb 3-1: config 0 descriptor??
[ 1835.261601][T13186] usb 3-1: USB disconnect, device number 123
[ 1835.270092][T29605] vhci_hcd: connection reset by peer
[ 1835.278201][ T1149] vhci_hcd vhci_hcd.2: stop threads
[ 1835.285936][ T1149] vhci_hcd vhci_hcd.2: release socket
[ 1835.291524][ T1149] vhci_hcd vhci_hcd.2: disconnect device
[ 1836.273524][T10742] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1836.468028][T10742] usb 3-1: Using ep0 maxpacket: 16
[ 1836.475460][T10742] usb 3-1: config index 0 descriptor too short (expected 8192, got 56)
[ 1836.491353][T10742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1836.518400][T10742] usb 3-1: config 0 has no interfaces?
[ 1836.535999][T10742] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1836.553725][T10742] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1836.571446][T10742] usb 3-1: Manufacturer: syz
[ 1836.587268][T10742] usb 3-1: config 0 descriptor??
[ 1836.751968][T13186] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1836.818530][T29618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6452'.
[ 1836.845571][T29628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6456'.
[ 1836.988111][T13186] usb 5-1: Using ep0 maxpacket: 16
[ 1836.994936][T13186] usb 5-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config
[ 1837.008662][T13186] usb 5-1: config 157 has 0 interfaces, different from the descriptor's value: 1
[ 1837.514165][T13186] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1837.537337][T13186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1837.549603][T13186] usb 5-1: Product: syz
[ 1837.560530][T13186] usb 5-1: Manufacturer: syz
[ 1837.582013][T13186] usb 5-1: SerialNumber: syz
[ 1837.620521][T29636] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1837.629099][T29636] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1838.545249][T13186] usb 5-1: USB disconnect, device number 33
[ 1838.807157][  T792] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1838.973463][  T792] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1838.984633][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1838.995621][  T792] usb 1-1: Product: syz
[ 1839.002949][  T792] usb 1-1: Manufacturer: syz
[ 1839.010634][  T792] usb 1-1: SerialNumber: syz
[ 1839.449453][  T792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1839.459796][T29650] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6462'.
[ 1839.779825][T27379] vhci_hcd vhci_hcd.2: vhci_device speed not set
[ 1839.870930][  T792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1840.059910][T29654] syzkaller1: entered promiscuous mode
[ 1840.067675][T29654] syzkaller1: entered allmulticast mode
[ 1840.237118][T29656] binder: 29655:29656 unknown command 0
[ 1840.243996][T29656] binder: 29655:29656 ioctl c0306201 200000000080 returned -22
[ 1840.337303][T27520] usb 4-1: USB disconnect, device number 118
[ 1840.502613][T28339] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[ 1840.552385][T27353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1840.565324][T27353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1840.574005][T27353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1840.584952][T27353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1840.599547][T27353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1840.713572][T28339] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1840.739880][T28339] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1840.754063][T28339] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.40
[ 1840.767353][T28339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1840.778831][T28339] usb 5-1: Product: 墌垻⥭쯍죤㲓雠럹〱ῳ㕇齧쉉㢅ြ럒﵇컟唾每鷶ﵮꋒ᷁洱ܱ뻞ﺇ醼䂐ᥪホ⹾뉚崛哷⣪⊌朡駿氇ᰀ衆銵琜⃜⮾敝鎜톕篤᪖ꘫ♱곒♲⮃ꤗ훉뼷伬⫽彯ங晍鏯ᗰ勖䝦췭还ࣄ荅⟻攎丩ᅬヽ⢏쀘荚
[ 1840.817059][T28339] usb 5-1: Manufacturer: ⚭渘倵㕡璢쎣ᵬ蜻뢲⏋⶙坵菑쓠훏깗鏱ꎆᲜዠ媟풾戁ﭠ볂伲芣ᗂ䛐䨵Њ抟첨苓敤꺜麛䣰¹⺸δ왮波듅⦛ﯹ틗䇱䌚甘垀㜶糬臇
[ 1840.842721][T10742] usb 3-1: USB disconnect, device number 124
[ 1840.864345][T28339] usb 5-1: SerialNumber: ꏠ㩲룑⋢蒇霽壌ᐃ켗랆꺺獒↱洉㊹镵৞뵅
[ 1840.903866][T29656] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1840.994017][   T29] audit: type=1400 audit(2000000039.787:1753): avc:  denied  { ioctl } for  pid=29668 comm="syz.2.6469" path="socket:[150157]" dev="sockfs" ino=150157 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[ 1840.994926][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1841.139082][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1841.222272][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1841.275041][  T792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[ 1841.290858][  T792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1841.313699][  T792] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1841.337151][  T792] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1841.356433][  T792] usb 1-1: USB disconnect, device number 50
[ 1841.371329][T29658] chnl_net:caif_netlink_parms(): no params data found
[ 1841.419255][T28339] usbhid 5-1:1.0: can't add hid device: -71
[ 1841.434575][T28339] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1841.446904][T28339] usb 5-1: USB disconnect, device number 34
[ 1841.447366][T27520] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1841.613483][T29658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1841.621444][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 1841.621583][T29658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1841.636232][T29658] bridge_slave_0: entered allmulticast mode
[ 1841.643109][T29658] bridge_slave_0: entered promiscuous mode
[ 1841.656474][T27520] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1841.659919][T29658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1841.672868][T29658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1841.680278][T29658] bridge_slave_1: entered allmulticast mode
[ 1841.686979][T27520] usb 3-1: config 1 has no interface number 0
[ 1841.693092][T27520] usb 3-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[ 1841.705982][T29658] bridge_slave_1: entered promiscuous mode
[ 1841.725988][T27520] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1841.747299][T27520] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[ 1841.778370][T27520] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1841.790278][T27520] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[ 1841.801954][T27520] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1841.818534][T27520] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[ 1841.841229][T27520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1841.857609][T27520] usb 3-1: Product: syz
[ 1841.861799][T27520] usb 3-1: Manufacturer: syz
[ 1841.885093][T27520] usb 3-1: SerialNumber: syz
[ 1842.046333][T29702] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[ 1842.122802][  T792] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1842.341828][T29705] ==================================================================
[ 1842.349910][T29705] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4c/0xd0
[ 1842.357275][T29705] Write of size 4 at addr ffff88802acc8d08 by task syz.2.6471/29705
[ 1842.365237][T29705] 
[ 1842.367540][T29705] CPU: 1 UID: 0 PID: 29705 Comm: syz.2.6471 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1842.367557][T29705] Tainted: [L]=SOFTLOCKUP
[ 1842.367562][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1842.367569][T29705] Call Trace:
[ 1842.367574][T29705]  <TASK>
[ 1842.367581][T29705]  dump_stack_lvl+0x100/0x190
[ 1842.367609][T29705]  print_report+0x156/0x4c9
[ 1842.367639][T29705]  ? __virt_addr_valid+0x81/0x620
[ 1842.367663][T29705]  ? __phys_addr+0xe8/0x180
[ 1842.367679][T29705]  ? try_module_get+0x4c/0xd0
[ 1842.367692][T29705]  kasan_report+0xdf/0x1e0
[ 1842.367709][T29705]  ? try_module_get+0x4c/0xd0
[ 1842.367727][T29705]  kasan_check_range+0x10f/0x1e0
[ 1842.367745][T29705]  try_module_get+0x4c/0xd0
[ 1842.367766][T29705]  dvb_device_open+0x124/0x3b0
[ 1842.367784][T29705]  ? __pfx_dvb_device_open+0x10/0x10
[ 1842.367802][T29705]  chrdev_open+0x234/0x6a0
[ 1842.367813][T29705]  ? __pfx_chrdev_open+0x10/0x10
[ 1842.367823][T29705]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1842.367836][T29705]  do_dentry_open+0x6d8/0x1660
[ 1842.367852][T29705]  ? __pfx_chrdev_open+0x10/0x10
[ 1842.367865][T29705]  vfs_open+0x82/0x3f0
[ 1842.367886][T29705]  path_openat+0x208c/0x31a0
[ 1842.367907][T29705]  ? __pfx_path_openat+0x10/0x10
[ 1842.367927][T29705]  do_file_open+0x20e/0x430
[ 1842.367944][T29705]  ? __pfx_do_file_open+0x10/0x10
[ 1842.367959][T29705]  ? alloc_fd+0x476/0x790
[ 1842.367970][T29705]  ? do_getname+0x191/0x390
[ 1842.367983][T29705]  do_sys_openat2+0x10d/0x1e0
[ 1842.367995][T29705]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1842.368011][T29705]  __x64_sys_openat+0x12d/0x210
[ 1842.368031][T29705]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1842.368055][T29705]  do_syscall_64+0x106/0xf80
[ 1842.368071][T29705]  ? clear_bhb_loop+0x40/0x90
[ 1842.368089][T29705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1842.368101][T29705] RIP: 0033:0x7f596655cfce
[ 1842.368111][T29705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1842.368122][T29705] RSP: 002b:00007f59674fdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1842.368135][T29705] RAX: ffffffffffffffda RBX: 00007f59674fe6c0 RCX: 00007f596655cfce
[ 1842.368143][T29705] RDX: 0000000000040002 RSI: 00007f59674fdc00 RDI: ffffffffffffff9c
[ 1842.368151][T29705] RBP: 00007f59674fdc00 R08: 0000000000000000 R09: 0000000000000000
[ 1842.368161][T29705] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1842.368172][T29705] R13: 00007f5966816128 R14: 00007f5966816090 R15: 00007fff871c45c8
[ 1842.368189][T29705]  </TASK>
[ 1842.368195][T29705] 
[ 1842.620573][T29705] Allocated by task 26:
[ 1842.624697][T29705]  kasan_save_stack+0x30/0x50
[ 1842.629354][T29705]  kasan_save_track+0x14/0x30
[ 1842.634122][T29705]  __kasan_kmalloc+0xaa/0xb0
[ 1842.638706][T29705]  __kmalloc_noprof+0x301/0x850
[ 1842.643553][T29705]  security_inode_init_security+0x113/0x370
[ 1842.649450][T29705]  shmem_mknod+0x2bf/0x470
[ 1842.653864][T29705]  vfs_mknod+0x3a5/0x7f0
[ 1842.658097][T29705]  devtmpfs_work_loop+0x48d/0xae4
[ 1842.663115][T29705]  devtmpfsd+0x3f/0x50
[ 1842.667165][T29705]  kthread+0x370/0x450
[ 1842.671217][T29705]  ret_from_fork+0x754/0xd80
[ 1842.675784][T29705]  ret_from_fork_asm+0x1a/0x30
[ 1842.680527][T29705] 
[ 1842.682843][T29705] Freed by task 26:
[ 1842.686638][T29705]  kasan_save_stack+0x30/0x50
[ 1842.691321][T29705]  kasan_save_track+0x14/0x30
[ 1842.695993][T29705]  kasan_save_free_info+0x3b/0x70
[ 1842.700990][T29705]  __kasan_slab_free+0x5f/0x80
[ 1842.705748][T29705]  kfree+0x1f6/0x6b0
[ 1842.709634][T29705]  security_inode_init_security+0x2bf/0x370
[ 1842.715515][T29705]  shmem_mknod+0x2bf/0x470
[ 1842.719908][T29705]  vfs_mknod+0x3a5/0x7f0
[ 1842.724141][T29705]  devtmpfs_work_loop+0x48d/0xae4
[ 1842.729138][T29705]  devtmpfsd+0x3f/0x50
[ 1842.733191][T29705]  kthread+0x370/0x450
[ 1842.737246][T29705]  ret_from_fork+0x754/0xd80
[ 1842.741831][T29705]  ret_from_fork_asm+0x1a/0x30
[ 1842.746588][T29705] 
[ 1842.748905][T29705] The buggy address belongs to the object at ffff88802acc8c00
[ 1842.748905][T29705]  which belongs to the cache kmalloc-256 of size 256
[ 1842.762950][T29705] The buggy address is located 8 bytes to the right of
[ 1842.762950][T29705]  allocated 256-byte region [ffff88802acc8c00, ffff88802acc8d00)
[ 1842.777438][T29705] 
[ 1842.779772][T29705] The buggy address belongs to the physical page:
[ 1842.786168][T29705] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802acc8a00 pfn:0x2acc8
[ 1842.796229][T29705] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1842.804724][T29705] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1842.813228][T29705] page_type: f5(slab)
[ 1842.817221][T29705] raw: 00fff00000000240 ffff88813fe3ab40 ffffea0000c58990 ffffea0000e00510
[ 1842.825790][T29705] raw: ffff88802acc8a00 000000000010000b 00000000f5000000 0000000000000000
[ 1842.834381][T29705] head: 00fff00000000240 ffff88813fe3ab40 ffffea0000c58990 ffffea0000e00510
[ 1842.843047][T29705] head: ffff88802acc8a00 000000000010000b 00000000f5000000 0000000000000000
[ 1842.851733][T29705] head: 00fff00000000001 ffffea0000ab3201 00000000ffffffff 00000000ffffffff
[ 1842.860401][T29705] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1842.869044][T29705] page dumped because: kasan: bad access detected
[ 1842.875432][T29705] page_owner tracks the page as allocated
[ 1842.881116][T29705] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 26, tgid 26 (kdevtmpfs), ts 7540994664, free_ts 0
[ 1842.900101][T29705]  post_alloc_hook+0x153/0x170
[ 1842.904861][T29705]  get_page_from_freelist+0x111d/0x3140
[ 1842.910394][T29705]  __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 1842.916264][T29705]  new_slab+0xa6/0x6d0
[ 1842.920306][T29705]  refill_objects+0x26b/0x400
[ 1842.924971][T29705]  __pcs_replace_empty_main+0x19f/0x600
[ 1842.930511][T29705]  __kmalloc_noprof+0x688/0x850
[ 1842.935367][T29705]  security_inode_init_security+0x113/0x370
[ 1842.941247][T29705]  shmem_mknod+0x2bf/0x470
[ 1842.945657][T29705]  shmem_mkdir+0x31/0x80
[ 1842.949889][T29705]  vfs_mkdir+0x361/0x850
[ 1842.954123][T29705]  devtmpfs_work_loop+0x2e3/0xae4
[ 1842.959154][T29705]  devtmpfsd+0x3f/0x50
[ 1842.963207][T29705]  kthread+0x370/0x450
[ 1842.967264][T29705]  ret_from_fork+0x754/0xd80
[ 1842.971841][T29705]  ret_from_fork_asm+0x1a/0x30
[ 1842.976605][T29705] page_owner free stack trace missing
[ 1842.981965][T29705] 
[ 1842.984261][T29705] Memory state around the buggy address:
[ 1842.989859][T29705]  ffff88802acc8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1842.997907][T29705]  ffff88802acc8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1843.005963][T29705] >ffff88802acc8d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1843.014005][T29705]                       ^
[ 1843.018312][T29705]  ffff88802acc8d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1843.026361][T29705]  ffff88802acc8e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1843.034395][T29705] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1843.042875][T27353] Bluetooth: hci4: command tx timeout
[ 1843.075367][ T1149] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1843.080511][  T792] usb 2-1: Using ep0 maxpacket: 16
[ 1843.102784][T29705] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1843.110009][T29705] CPU: 1 UID: 0 PID: 29705 Comm: syz.2.6471 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1843.120948][T29705] Tainted: [L]=SOFTLOCKUP
[ 1843.125267][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1843.135317][T29705] Call Trace:
[ 1843.138596][T29705]  <TASK>
[ 1843.141521][T29705]  dump_stack_lvl+0x100/0x190
[ 1843.146220][T29705]  vpanic+0x552/0x970
[ 1843.150193][T29705]  ? __pfx_vpanic+0x10/0x10
[ 1843.154680][T29705]  ? try_module_get+0x4c/0xd0
[ 1843.159344][T29705]  panic+0xd1/0xe0
[ 1843.163048][T29705]  ? __pfx_panic+0x10/0x10
[ 1843.167443][T29705]  ? try_module_get+0x4c/0xd0
[ 1843.172107][T29705]  ? preempt_schedule_common+0x42/0xc0
[ 1843.177552][T29705]  check_panic_on_warn.cold+0x19/0x34
[ 1843.182994][T29705]  end_report.part.0+0x3a/0x90
[ 1843.187740][T29705]  kasan_report.cold+0xe/0x18
[ 1843.192400][T29705]  ? try_module_get+0x4c/0xd0
[ 1843.197057][T29705]  kasan_check_range+0x10f/0x1e0
[ 1843.201975][T29705]  try_module_get+0x4c/0xd0
[ 1843.206461][T29705]  dvb_device_open+0x124/0x3b0
[ 1843.211207][T29705]  ? __pfx_dvb_device_open+0x10/0x10
[ 1843.217023][T29705]  chrdev_open+0x234/0x6a0
[ 1843.221420][T29705]  ? __pfx_chrdev_open+0x10/0x10
[ 1843.226337][T29705]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 1843.232643][T29705]  do_dentry_open+0x6d8/0x1660
[ 1843.237390][T29705]  ? __pfx_chrdev_open+0x10/0x10
[ 1843.242307][T29705]  vfs_open+0x82/0x3f0
[ 1843.246361][T29705]  path_openat+0x208c/0x31a0
[ 1843.250932][T29705]  ? __pfx_path_openat+0x10/0x10
[ 1843.255850][T29705]  do_file_open+0x20e/0x430
[ 1843.260338][T29705]  ? __pfx_do_file_open+0x10/0x10
[ 1843.265346][T29705]  ? alloc_fd+0x476/0x790
[ 1843.269652][T29705]  ? do_getname+0x191/0x390
[ 1843.274135][T29705]  do_sys_openat2+0x10d/0x1e0
[ 1843.278791][T29705]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1843.283985][T29705]  __x64_sys_openat+0x12d/0x210
[ 1843.288821][T29705]  ? __pfx___x64_sys_openat+0x10/0x10
[ 1843.294177][T29705]  do_syscall_64+0x106/0xf80
[ 1843.298744][T29705]  ? clear_bhb_loop+0x40/0x90
[ 1843.303402][T29705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1843.309271][T29705] RIP: 0033:0x7f596655cfce
[ 1843.313666][T29705] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1843.333252][T29705] RSP: 002b:00007f59674fdb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 1843.341643][T29705] RAX: ffffffffffffffda RBX: 00007f59674fe6c0 RCX: 00007f596655cfce
[ 1843.349593][T29705] RDX: 0000000000040002 RSI: 00007f59674fdc00 RDI: ffffffffffffff9c
[ 1843.357541][T29705] RBP: 00007f59674fdc00 R08: 0000000000000000 R09: 0000000000000000
[ 1843.365489][T29705] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[ 1843.373437][T29705] R13: 00007f5966816128 R14: 00007f5966816090 R15: 00007fff871c45c8
[ 1843.381398][T29705]  </TASK>
[ 1843.384703][T29705] Kernel Offset: disabled
[ 1843.389007][T29705] Rebooting in 86400 seconds..