last executing test programs:

17.123700521s ago: executing program 4 (id=502):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4148a1b414e7e323)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r0, 0x0, 0x10)

15.2996501s ago: executing program 2 (id=507):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = fsmount(r1, 0x1, 0x0) (rerun: 64)
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) (async)
openat$cgroup_subtree(r2, &(0x7f0000000040), 0x2, 0x0)
fchdir(r2) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 32)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x2000001f}, 0x18) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
r8 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r8, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async, rerun: 64)
syz_open_dev$sndctrl(0x0, 0x0, 0x0) (rerun: 64)
bind$unix(r8, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r11=>0x0})
r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004)

15.20169626s ago: executing program 4 (id=508):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4060000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r4, @ANYBLOB="5f7b94c2d0c61134f27fab3b2b4e9322127341c52d7ad57e2ab21c7d308241c6eecf46cb6314c7f665e8a2fec8b2a6ce46d6dfecfcf41c304da72ca5dfe8ae198e38691446ff2ebf59fd6f114f199a07b60548dab6961f0709007f72054821596875ea43ed424835f1f4697fc9af8c51e0efcd1bd243bb0bf1f3b13c59d9eb624e"], 0x40}}, 0x4000000)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4060000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r4, @ANYBLOB="5f7b94c2d0c61134f27fab3b2b4e9322127341c52d7ad57e2ab21c7d308241c6eecf46cb6314c7f665e8a2fec8b2a6ce46d6dfecfcf41c304da72ca5dfe8ae198e38691446ff2ebf59fd6f114f199a07b60548dab6961f0709007f72054821596875ea43ed424835f1f4697fc9af8c51e0efcd1bd243bb0bf1f3b13c59d9eb624e"], 0x40}}, 0x4000000) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) (async)

12.55436583s ago: executing program 1 (id=513):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = dup(r0)
io_setup(0x19, &(0x7f00000009c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400008008060103000000000000000000000008050001000700b6258b9598f56617c0253501000700000005000100070000000500010007000000050001000700000005"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

11.097004548s ago: executing program 0 (id=515):
r0 = socket(0x10, 0x3, 0x0)
getpeername$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xfa, 0x5, 0x30, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x1, 0x5, 0x5}})
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast2}, &(0x7f0000000240)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x10, 0x3, 0x1, {{0x16, 0x4, 0x0, 0x25, 0x58, 0x64, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, {[@cipso={0x86, 0x37, 0x2, [{0x6, 0x8, "0d8f3e63a331"}, {0x7, 0x3, "dd"}, {0x0, 0x6, "80eff97f"}, {0x1, 0xe, "9c2b8e1e27bd1952e1adf822"}, {0x6, 0xa, "9e450e29d88a7fa6"}, {0x0, 0x8, "5e4e574a0578"}]}, @end, @generic={0x86, 0xa, "257ad03f5a1d1b67"}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x8000, 0x7, 0x9, 0x0, {{0x18, 0x4, 0x3, 0x7, 0x60, 0x66, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@noop, @generic={0x83, 0x7, "889bcc5eb1"}, @end, @timestamp_addr={0x44, 0x34, 0x83, 0x1, 0x7, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x2}, {@multicast2, 0x431}, {@multicast1, 0x8}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1000}]}, @generic={0x83, 0xd, "0fd17a355bd3c2c5127bd4"}]}}}}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x90)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0xff, 0x0, 0x6, 0x0, @loopback, @private2, 0x10, 0x7800, 0x5, 0x1377}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg2\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000580)={'vxcan1\x00'})
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0), &(0x7f0000000600)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="410605000700000008000400000100001400168010"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40010)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640))
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'ip6gre0\x00', &(0x7f0000000680)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x1f, 0x1000, 0x46, @loopback, @mcast1, 0x8, 0x10, 0x2, 0x4}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000007c0)={'ip_vti0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x80, 0x81, 0x9, 0x2dd9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010100, {[@generic={0xcf, 0xe, "17d963d34fe988089379fe01"}, @timestamp_addr={0x44, 0x14, 0xdf, 0x1, 0x0, [{@multicast2, 0x5}, {@multicast2, 0x3}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x8, 0x81, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x80, 0x4, 0xd}})
socket$nl_route(0x10, 0x3, 0x0)

11.085936641s ago: executing program 3 (id=516):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x5)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000000))

10.710423105s ago: executing program 3 (id=517):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000280)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x1, 0x6, "7f36c525"}]}]}}, 'Z'}}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020)

10.463805519s ago: executing program 4 (id=518):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4148a1b414e7e323)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r0, 0x0, 0x10)

10.088182499s ago: executing program 0 (id=519):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@canfd={{0x1, 0x1, 0x1, 0x1}, 0x13, 0x0, 0x0, 0x0, "0f4079e026f735a266008b84d00e52b8a063643e8b9c4e85636455887bc4027c55e842dcb08d79f99556bfd9552ba16a53e5eda93dc4326e32677b63ed2c5af8"}, 0x48}, 0x1, 0x0, 0x0, 0x44845}, 0x804)
ioctl$GIO_SCRNMAP(r0, 0x4b3d, 0x0)

9.966739265s ago: executing program 4 (id=520):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={<r1=>0x0})
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r1, 0x1, r2, 0x0, 0x80000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x92)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9.896148854s ago: executing program 1 (id=521):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "b524be350e7611b133a163b4ab1b040000000000fdffffff00000000200080ca925f71ffff1122765bc8e7157e278f87ee19f333b4d628c5ac4b44c07bd2708ff2c7bd51d4f9c36c027fd192db335bca10551a4b61635dbeda79e3eac5dcba174008edb66e7c6b16ea5612e2b90233374eac86caf07aad4598836160adf8caff54a1cef9907a9c2595598201db3dcd9820394b9dbc463818139cafb3322f0271602083b8d908ce6a9d80476c34eb660f79198c1ad63552c072b96e5b1ec80cc080d4e7cfb812d05e15e41ae812d8f2063307ccaf73b8059d9436020947a3"}, 0xe9)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

9.792058156s ago: executing program 0 (id=522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fb}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]})
request_key(0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0xa08, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000980)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7fb}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) (async)
request_key(0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, 0x0, 0xa08, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

9.536270576s ago: executing program 2 (id=523):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "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"}, 0x10b)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

9.529221133s ago: executing program 1 (id=524):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "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"}, 0x10b)
write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000480)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

8.624415722s ago: executing program 4 (id=525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x463e, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x10001, <r4=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x10, r4}, 0x94)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
eventfd2(0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
r6 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = syz_pidfd_open(r6, 0x0)
pidfd_getfd(r7, r7, 0x0)
fsopen(&(0x7f0000000300)='tracefs\x00', 0x0)
ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f000001a000/0x3000)=nil)

8.528044798s ago: executing program 0 (id=526):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@assoc={0x18, 0x117, 0x4, 0x7f30}], 0x18, 0x880}], 0x1, 0x4080041)
recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x54000}], 0x1}, 0x10000}], 0x1, 0x102, 0x0)

8.459445016s ago: executing program 3 (id=527):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x15, 0x3b, 0x12, 0x0, 0x4, 0xe80, 0x5, 0x40}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
socket(0x10, 0x80002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(r7, 0x4004ae8b, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x800000004, &(0x7f0000000080)={<r9=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @loopback, 0x23}, {0xa, 0x4e24, 0xce, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, r9, 0x7ffffff7}}, 0x48)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8580f83288e0aaaaaaaaaa1c08004515001c00670000020290780a010102ffffffff11819078ac1414b7"], 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0x2d, 0x4e, 0x3a, 0x2f]}}}, 0x4e}]})

8.386966303s ago: executing program 2 (id=528):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = dup(r0)
io_setup(0x19, &(0x7f00000009c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000500))
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400008008060103000000000000000000000008050001000700b6258b9598f56617c0253501000700000005000100070000000500010007000000050001000700000005"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

8.348194031s ago: executing program 1 (id=529):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x28, 0x15, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
fgetxattr(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4e3260d65722e657874"], 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000580)={0x0, 0x6}, &(0x7f00000005c0)=0x8)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00')
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x5e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x10}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)

8.296188305s ago: executing program 0 (id=530):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x5)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000005380)={0x2020}, 0x2020)

6.285937252s ago: executing program 1 (id=531):
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10)
listen(0xffffffffffffffff, 0x0)
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)
r1 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

3.471450819s ago: executing program 1 (id=532):
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00001d00ea519c730105000001090224000100000000090400000103000000092105000001220500090581"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x6, 0x4, 0xdd, 0xa, 0x808}, 0x50)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x181002, 0x0)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0x0, 0x0, 0xabf, 0x6, 0x1, "88314b422dfa8a4e95f8f4d57672e2b08f8164"})
syz_usb_connect$uac1(0x5, 0xc1, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x3, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xcb18, 0x1}, [@processing_unit={0x7, 0x24, 0x7, 0x6, 0x3, 0xe}, @selector_unit={0xa, 0x24, 0x5, 0x6, 0x5, "a047d63ae8"}, @processing_unit={0xd, 0x24, 0x7, 0x6, 0x2, 0x1, "18961318e86a"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x203, 0x4, 0xe7, 0x100, 0x3, 0x7e}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0xbc, "f8de", "0b99"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0xfffa, 0xff, 0x5, "bd8265"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x7f, 0x4, "821a9839a2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x7f, 0x5, {0x7, 0x25, 0x1, 0x80, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0xe, 0x3, {0x7, 0x25, 0x1, 0x2, 0x0, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6, 0x96, 0xe, 0x20, 0x2}, 0x10, &(0x7f0000000080)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xa051ecc61a4a6b48, 0x8a, 0x0, 0x3, 0x0, 0x2}]}, 0x2, [{0xdf, &(0x7f0000000400)=@string={0xdf, 0x3, "f1876340852a6234e139bcdd09271a24c066d4fbd2123bda56f7a56ba7ee9edc00002eb902661cf0a0dbcfec9fbc59b5e566570fc6944a474dfbd7ea8f39c276e7a0579eb592523ff9e78c483010c50578e02aacba78da0cd9cfb034389ae2dd10255d60107d18950d747f095682b85765fb7141dbbd75dfc4b3131f8a467723d7521bb82745fcc50c70ff89f2883a8ad4063b89c32d12c3d18d4f5f5f0075a4e00e587a494971ec1cf1c40aec67980d639fc42872c3ad3f05e80ee07c292f31587b7749d03ee773b12a6f4f1985492f37b3f7379e4b71067bf3bf6685"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3c01}}]})

3.423160254s ago: executing program 0 (id=533):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0xeeef0000, 0x8f, &(0x7f0000000180)=""/143}, {0x5000, 0x7e, &(0x7f0000000640)=""/126}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_ivalue=0xb})
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/147, 0x93}], 0x7, &(0x7f0000000080)}, 0x40000122)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3.415507441s ago: executing program 4 (id=534):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/56, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x2, 0x0, [{0xeeef0000, 0x8f, &(0x7f0000000180)=""/143}, {0x5000, 0x7e, &(0x7f0000000640)=""/126}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_ivalue=0xb})
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/165, 0xa5}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000780)=""/177, 0xb1}, {&(0x7f0000000840)=""/191, 0xbf}, {&(0x7f0000000900)=""/80, 0x50}, {&(0x7f0000000980)=""/220, 0xdc}, {&(0x7f0000000a80)=""/147, 0x93}], 0x7, &(0x7f0000000080)}, 0x40000122)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

3.270092828s ago: executing program 2 (id=535):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={<r1=>0x0})
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000380)={r1, 0x1, r2, 0x0, 0x80000})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x92)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x15b1, 0xd081, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.268636851s ago: executing program 3 (id=536):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = dup(r0)
io_setup(0x19, &(0x7f00000009c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}])
ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee5, 0x1000, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020)
open(&(0x7f0000000280)='.\x00', 0x2000, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400008008060103000000000000000000000008050001000700b6258b9598f56617c0253501000700000005000100070000000500010007000000050001000700000005"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)

1.631958673s ago: executing program 2 (id=537):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002780), 0x2800, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
r2 = socket(0x2, 0x80805, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
ioctl$NS_GET_PARENT(r3, 0x8004b708, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0)
ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000300))
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000340)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0xfff}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000001c0)="90", 0x1}], 0x1}}], 0x1, 0x24008041)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
r9 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000001540)=@assoc_value={r10, 0x2}, 0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000040)={r10, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x2, 0x2}, &(0x7f0000000180)=0x90)

153.156568ms ago: executing program 2 (id=538):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, 0x0)
r1 = dup(r0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="8400000010000104fc05", @ANYRES32=0x0, @ANYBLOB="0315000000000000540012800c0001006d6163766c616e0044000280280005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300010000000600020000000000080001001000000008000500", @ANYRES32=r2], 0x84}, 0x1, 0x0, 0x0, 0x24008059}, 0x0)

119.651336ms ago: executing program 3 (id=539):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [], 0xa, "b524be350e7611b133a163b4ab1b040000000000fdffffff00000000200080ca925f71ffff1122765bc8e7157e278f87ee19f333b4d628c5ac4b44c07bd2708ff2c7bd51d4f9c36c027fd192db335bca10551a4b61635dbeda79e3eac5dcba174008edb66e7c6b16ea5612e2b90233374eac86caf07aad4598836160adf8caff54a1cef9907a9c2595598201db3dcd9820394b9dbc463818139cafb3322f0271602083b8d908ce6a9d80476c34eb660f79198c1ad63552c072b96e5b1ec80cc080d4e7cfb812d05e15e41ae812d8f2063307ccaf73b8059d9436020947a3"}, 0xe9)
write$UHID_INPUT(r0, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000480)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}})

0s ago: executing program 3 (id=540):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
pwritev2(r1, 0x0, 0x0, 0xffffffff, 0x0, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r7, 0x4)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xfe5f}, {&(0x7f0000000840)="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", 0x113}, {&(0x7f00000003c0)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0bea0", 0xbf}], 0x3}, 0x8001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001580)={r2, r3, 0x25, 0x2, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @remote, @mcast2}}}}, 0x0)

kernel console output (not intermixed with test programs):

962231][ T5807] Bluetooth: hci3: command tx timeout
[   91.984341][ T5799] team0: Port device team_slave_1 added
[   91.986059][ T5803] team0: Port device team_slave_1 added
[   91.987809][ T5810] team0: Port device team_slave_1 added
[   92.043138][ T5807] Bluetooth: hci4: command tx timeout
[   92.314327][ T5812] team0: Port device team_slave_0 added
[   92.624436][ T5806] team0: Port device team_slave_0 added
[   92.874606][ T5812] team0: Port device team_slave_1 added
[   92.876293][ T5806] team0: Port device team_slave_1 added
[   92.877446][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.877454][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.877467][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.879728][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.879741][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.879773][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   92.881175][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0
[   92.881187][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   92.881210][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.053734][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.053746][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.053760][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.054773][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.054783][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.054796][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.055706][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.055714][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.055727][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.233167][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.233183][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.233195][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.234322][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0
[   93.234335][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.234358][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   93.240368][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.240378][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.240390][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.243236][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1
[   93.243249][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   93.243274][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   93.780731][ T5799] hsr_slave_0: entered promiscuous mode
[   93.781732][ T5799] hsr_slave_1: entered promiscuous mode
[   93.792913][ T5803] hsr_slave_0: entered promiscuous mode
[   93.794252][ T5803] hsr_slave_1: entered promiscuous mode
[   93.795319][ T5803] debugfs: 'hsr0' already exists in 'hsr'
[   93.795435][ T5803] Cannot create hsr debugfs directory
[   93.867571][ T5810] hsr_slave_0: entered promiscuous mode
[   93.868415][ T5810] hsr_slave_1: entered promiscuous mode
[   93.868998][ T5810] debugfs: 'hsr0' already exists in 'hsr'
[   93.869015][ T5810] Cannot create hsr debugfs directory
[   93.883293][ T5807] Bluetooth: hci0: command tx timeout
[   93.963502][ T5800] Bluetooth: hci1: command tx timeout
[   93.963605][ T5807] Bluetooth: hci2: command tx timeout
[   94.044476][ T5807] Bluetooth: hci3: command tx timeout
[   94.122233][ T5807] Bluetooth: hci4: command tx timeout
[   94.130709][ T5812] hsr_slave_0: entered promiscuous mode
[   94.131539][ T5812] hsr_slave_1: entered promiscuous mode
[   94.134112][ T5812] debugfs: 'hsr0' already exists in 'hsr'
[   94.134138][ T5812] Cannot create hsr debugfs directory
[   94.338430][ T5806] hsr_slave_0: entered promiscuous mode
[   94.339296][ T5806] hsr_slave_1: entered promiscuous mode
[   94.339883][ T5806] debugfs: 'hsr0' already exists in 'hsr'
[   94.339904][ T5806] Cannot create hsr debugfs directory
[   95.874877][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   95.920451][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   95.959707][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   95.962392][ T5807] Bluetooth: hci0: command tx timeout
[   96.007575][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   96.042765][ T5800] Bluetooth: hci1: command tx timeout
[   96.042809][ T5807] Bluetooth: hci2: command tx timeout
[   96.115628][ T5810] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.122037][ T5807] Bluetooth: hci3: command tx timeout
[   96.157726][ T5810] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.179218][ T5810] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.204321][ T5807] Bluetooth: hci4: command tx timeout
[   96.229713][ T5810] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.327965][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   96.362609][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   96.386159][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   96.436518][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   96.571681][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   96.622232][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   96.660295][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   96.693281][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   96.807979][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.835450][ T5806] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   96.881735][ T5806] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   96.917459][ T5806] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   96.963917][ T5806] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   97.029731][ T5799] 8021q: adding VLAN 0 to HW filter on device team0
[   97.063953][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.064096][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.070553][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.111550][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.117283][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.182190][ T5810] 8021q: adding VLAN 0 to HW filter on device team0
[   97.220765][ T1433] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.220887][ T1433] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.227945][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.265255][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.265360][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.327881][ T5812] 8021q: adding VLAN 0 to HW filter on device team0
[   97.346392][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.360375][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.360501][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.408406][ T1433] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.408624][ T1433] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.476688][ T5803] 8021q: adding VLAN 0 to HW filter on device team0
[   97.517230][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.523249][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.523389][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.582399][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.582536][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.670745][ T5806] 8021q: adding VLAN 0 to HW filter on device team0
[   97.727898][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.729264][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.786167][   T73] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.786370][   T73] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.899615][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.051276][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.149916][ T5799] veth0_vlan: entered promiscuous mode
[   98.209294][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.216455][ T5799] veth1_vlan: entered promiscuous mode
[   98.376936][ T5799] veth0_macvtap: entered promiscuous mode
[   98.418724][ T5799] veth1_macvtap: entered promiscuous mode
[   98.520471][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.555787][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.557708][ T5812] veth0_vlan: entered promiscuous mode
[   98.601078][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.625279][ T5812] veth1_vlan: entered promiscuous mode
[   98.628331][   T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   98.635028][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.639246][   T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.647772][   T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.678131][ T3596] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.955427][ T5803] veth0_vlan: entered promiscuous mode
[   98.988378][ T5812] veth0_macvtap: entered promiscuous mode
[   98.991295][ T5810] veth0_vlan: entered promiscuous mode
[   99.015500][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.015527][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.050695][ T5812] veth1_macvtap: entered promiscuous mode
[   99.072108][ T5803] veth1_vlan: entered promiscuous mode
[   99.106502][ T5810] veth1_vlan: entered promiscuous mode
[   99.121650][ T5806] veth0_vlan: entered promiscuous mode
[   99.134630][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.134646][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.157939][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.163547][ T5806] veth1_vlan: entered promiscuous mode
[   99.180790][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.220074][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.241473][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.254022][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.272371][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.277310][ T5803] veth0_macvtap: entered promiscuous mode
[   99.331747][ T5810] veth0_macvtap: entered promiscuous mode
[   99.353237][ T5803] veth1_macvtap: entered promiscuous mode
[   99.396782][ T5810] veth1_macvtap: entered promiscuous mode
[   99.521625][ T5806] veth0_macvtap: entered promiscuous mode
[   99.540528][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.606979][ T5806] veth1_macvtap: entered promiscuous mode
[   99.626309][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.643533][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.664011][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.664030][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.700576][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.739198][   T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.754201][   T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.795592][   T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.805745][   T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.828522][   T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.833291][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.849368][   T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.857932][   T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.862343][   T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.862418][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.862432][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.870572][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.009270][   T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.022617][   T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.042220][  T993] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  100.064184][   T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.143503][   T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.212342][  T993] usb 2-1: Using ep0 maxpacket: 8
[  100.234947][  T993] usb 2-1: config 0 has an invalid interface number: 86 but max is 0
[  100.234975][  T993] usb 2-1: config 0 has no interface number 0
[  100.253002][  T993] usb 2-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=ff.80
[  100.253029][  T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.253048][  T993] usb 2-1: Product: syz
[  100.253061][  T993] usb 2-1: Manufacturer: syz
[  100.253074][  T993] usb 2-1: SerialNumber: syz
[  100.270215][  T993] usb 2-1: config 0 descriptor??
[  100.330958][  T993] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state.
[  100.331294][  T993] dvb-usb: bulk message failed: -22 (3/0)
[  100.426836][  T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.438581][  T993] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T)
[  100.438685][  T993] usb 2-1: media controller created
[  100.465205][ T5923] input: syz1 as /devices/virtual/input/input5
[  100.465334][ T5923] input: failed to attach handler leds to device input5, error: -6
[  100.510013][   T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.510030][   T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.543158][  T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.666972][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.666992][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.672931][  T993] dvb-usb: bulk message failed: -22 (6/0)
[  100.673057][  T993] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T'
[  100.707917][  T993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6
[  100.716770][  T993] dvb-usb: schedule remote query interval to 150 msecs.
[  100.716827][  T993] dvb-usb: bulk message failed: -22 (3/0)
[  100.740719][  T993] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected.
[  100.812819][  T993] usb 2-1: USB disconnect, device number 2
[  100.821010][   T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.821030][   T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.173845][ T1466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.173867][ T1466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.176222][ T5931] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  101.287054][  T993] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected.
[  101.463152][ T1433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.463171][ T1433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.774936][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.774956][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.092139][   T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  105.248317][   T31] usb 5-1: Using ep0 maxpacket: 8
[  105.261410][   T31] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  105.261438][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.261457][   T31] usb 5-1: Product: syz
[  105.261470][   T31] usb 5-1: Manufacturer: syz
[  105.261483][   T31] usb 5-1: SerialNumber: syz
[  105.536614][   T31] usb 5-1: config 0 descriptor??
[  105.547689][   T31] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  105.595711][   T31] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7
[  106.015016][   T31] usb 5-1: USB disconnect, device number 2
[  108.511436][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  109.926132][    C1] vkms_vblank_simulate: vblank timer overrun
[  112.171924][ T5872] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  112.381957][ T5872] usb 5-1: Using ep0 maxpacket: 8
[  112.387576][ T5872] usb 5-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  112.387604][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.387623][ T5872] usb 5-1: Product: syz
[  112.387637][ T5872] usb 5-1: Manufacturer: syz
[  112.387650][ T5872] usb 5-1: SerialNumber: syz
[  112.402663][ T5872] usb 5-1: config 0 descriptor??
[  112.446952][ T5872] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  112.449081][ T5872] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  112.584488][ T6013] tmpfs: Bad value for 'mpol'
[  113.857467][ T5872] usb 5-1: USB disconnect, device number 3
[  114.541529][    C0] vkms_vblank_simulate: vblank timer overrun
[  114.543262][ T5872] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  114.725047][ T5872] usb 5-1: not running at top speed; connect to a high speed hub
[  114.726599][ T5872] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.726629][ T5872] usb 5-1: config 1 interface 0 has no altsetting 0
[  114.750393][ T5872] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  114.750423][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.750442][ T5872] usb 5-1: Product: syz
[  114.750454][ T5872] usb 5-1: Manufacturer: Ꝡᘢⶭ
[  114.750467][ T5872] usb 5-1: SerialNumber: syz
[  114.797087][ T6041] syz.1.36 uses obsolete (PF_INET,SOCK_PACKET)
[  114.889275][ T6040] dummy0: entered promiscuous mode
[  115.239275][    C0] vkms_vblank_simulate: vblank timer overrun
[  115.283302][ T5872] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 5 proto 1 vid 0x0525 pid 0xA4A8
[  115.303935][ T5872] usb 5-1: USB disconnect, device number 4
[  115.420934][ T6050] tmpfs: Bad value for 'mpol'
[  116.107901][    C0] vkms_vblank_simulate: vblank timer overrun
[  116.139226][ T5872] usblp0: removed
[  116.411983][   T49] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  116.565220][   T49] usb 2-1: unable to get BOS descriptor or descriptor too short
[  116.569042][   T49] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.569075][   T49] usb 2-1: config 1 interface 0 has no altsetting 0
[  116.579260][    C0] vkms_vblank_simulate: vblank timer overrun
[  116.625558][   T49] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  116.625587][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.625605][   T49] usb 2-1: Product: syz
[  116.625619][   T49] usb 2-1: Manufacturer: syz
[  116.625632][   T49] usb 2-1: SerialNumber: syz
[  117.150204][    C0] vkms_vblank_simulate: vblank timer overrun
[  117.391307][   T49] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input9
[  117.446282][ T5153] bcm5974 2-1:1.0: could not read from device
[  117.450572][   T49] usb 2-1: USB disconnect, device number 3
[  119.164335][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.263278][ T6080] process 'syz.3.45' launched './file0' with NULL argv: empty string added
[  119.312990][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.317996][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  120.174846][ T5872] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  120.174871][ T5872] usb 1-1: config 0 has no interface number 0
[  120.174918][ T5872] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  120.174948][ T5872] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9
[  120.174973][ T5872] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024
[  120.175012][ T5872] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  120.175032][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.197856][ T5872] usb 1-1: config 0 descriptor??
[  120.356431][ T5872] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input10
[  120.900281][ T6095] tmpfs: Bad value for 'mpol'
[  121.839303][  T993] usb 1-1: USB disconnect, device number 2
[  121.839370][    C0] usbtouchscreen 1-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -19
[  124.782886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  126.533052][ T6141] IPv6: sit1: Disabled Multicast RS
[  128.355574][ T6168] FAULT_INJECTION: forcing a failure.
[  128.355574][ T6168] name failslab, interval 1, probability 0, space 0, times 1
[  128.355618][ T6168] CPU: 0 UID: 0 PID: 6168 Comm: syz.1.70 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  128.355640][ T6168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  128.355657][ T6168] Call Trace:
[  128.355668][ T6168]  <TASK>
[  128.355676][ T6168]  dump_stack_lvl+0x189/0x250
[  128.355706][ T6168]  ? __pfx____ratelimit+0x10/0x10
[  128.355733][ T6168]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.355755][ T6168]  ? __pfx__printk+0x10/0x10
[  128.355786][ T6168]  ? __pfx___might_resched+0x10/0x10
[  128.355821][ T6168]  should_fail_ex+0x46c/0x600
[  128.355851][ T6168]  should_failslab+0xa8/0x100
[  128.355875][ T6168]  __kmalloc_noprof+0xcc/0x7d0
[  128.355894][ T6168]  ? kvm_arch_vcpu_ioctl+0x961/0x2b40
[  128.355918][ T6168]  kvm_arch_vcpu_ioctl+0x961/0x2b40
[  128.355935][ T6168]  ? __lock_acquire+0xab9/0xd20
[  128.355960][ T6168]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  128.355982][ T6168]  ? __lock_acquire+0xab9/0xd20
[  128.356022][ T6168]  ? is_bpf_text_address+0x26/0x2b0
[  128.356049][ T6168]  ? is_bpf_text_address+0x292/0x2b0
[  128.356069][ T6168]  ? is_bpf_text_address+0x26/0x2b0
[  128.356090][ T6168]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  128.356113][ T6168]  ? kernel_text_address+0xa5/0xe0
[  128.356138][ T6168]  ? __kernel_text_address+0xd/0x40
[  128.356159][ T6168]  ? unwind_get_return_address+0x4d/0x90
[  128.356178][ T6168]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  128.356204][ T6168]  ? arch_stack_walk+0xfc/0x150
[  128.356237][ T6168]  ? stack_trace_save+0x9c/0xe0
[  128.356263][ T6168]  ? stack_depot_save_flags+0x40/0x860
[  128.356291][ T6168]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  128.356313][ T6168]  ? kasan_save_track+0x4f/0x80
[  128.356328][ T6168]  ? kasan_save_track+0x3e/0x80
[  128.356343][ T6168]  ? __kasan_save_free_info+0x46/0x50
[  128.356364][ T6168]  ? __kasan_slab_free+0x5c/0x80
[  128.356381][ T6168]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  128.356401][ T6168]  ? security_file_ioctl+0xcb/0x2d0
[  128.356421][ T6168]  ? __se_sys_ioctl+0x47/0x170
[  128.356443][ T6168]  ? do_syscall_64+0xfa/0xfa0
[  128.356468][ T6168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.356509][ T6168]  ? __lock_acquire+0xab9/0xd20
[  128.356537][ T6168]  ? do_raw_spin_lock+0x121/0x290
[  128.356573][ T6168]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  128.356600][ T6168]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.356627][ T6168]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.356653][ T6168]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.356689][ T6168]  ? _mutex_lock_killable+0x154/0x1d0
[  128.356711][ T6168]  ? kvm_vcpu_ioctl+0x231/0xe90
[  128.356736][ T6168]  kvm_vcpu_ioctl+0x750/0xe90
[  128.356765][ T6168]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  128.356794][ T6168]  ? __asan_memset+0x22/0x50
[  128.356830][ T6168]  ? smack_file_ioctl+0x305/0x340
[  128.356853][ T6168]  ? __pfx_smack_file_ioctl+0x10/0x10
[  128.356884][ T6168]  ? __fget_files+0x3a6/0x420
[  128.356903][ T6168]  ? __fget_files+0x2a/0x420
[  128.356926][ T6168]  ? bpf_lsm_file_ioctl+0x9/0x20
[  128.356948][ T6168]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  128.356970][ T6168]  __se_sys_ioctl+0xff/0x170
[  128.356996][ T6168]  do_syscall_64+0xfa/0xfa0
[  128.357021][ T6168]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.357046][ T6168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.357064][ T6168]  ? clear_bhb_loop+0x60/0xb0
[  128.357087][ T6168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.357105][ T6168] RIP: 0033:0x7f9bab4ceec9
[  128.357125][ T6168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  128.357140][ T6168] RSP: 002b:00007f9ba972e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  128.357167][ T6168] RAX: ffffffffffffffda RBX: 00007f9bab725fa0 RCX: 00007f9bab4ceec9
[  128.357181][ T6168] RDX: 000020000001a000 RSI: 000000009000aecf RDI: 0000000000000005
[  128.357198][ T6168] RBP: 00007f9ba972e090 R08: 0000000000000000 R09: 0000000000000000
[  128.357209][ T6168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  128.357220][ T6168] R13: 00007f9bab726038 R14: 00007f9bab725fa0 R15: 00007ffd49db3978
[  128.357254][ T6168]  </TASK>
[  130.917582][   T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  131.545784][   T31] usb 1-1: device descriptor read/all, error -71
[  132.284333][ T6218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[  132.337960][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[  132.375830][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.376162][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.378690][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.381814][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.382086][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.382463][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'.
[  132.382679][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.382952][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.383184][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  132.854783][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  132.854877][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  134.321872][  T993] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.458781][   T49] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  134.472704][  T993] usb 5-1: no configurations
[  134.472716][  T993] usb 5-1: can't read configurations, error -22
[  134.623056][  T993] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.628309][   T49] usb 1-1: Using ep0 maxpacket: 16
[  134.646768][   T49] usb 1-1: config 8 has an invalid interface number: 131 but max is 0
[  134.646794][   T49] usb 1-1: config 8 has no interface number 0
[  134.646843][   T49] usb 1-1: config 8 interface 131 altsetting 8 bulk endpoint 0x5 has invalid maxpacket 16
[  134.646867][   T49] usb 1-1: config 8 interface 131 has no altsetting 0
[  134.650392][   T49] usb 1-1: New USB device found, idVendor=0742, idProduct=19c6, bcdDevice=3f.90
[  134.650426][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.650443][   T49] usb 1-1: Product: syz
[  134.650456][   T49] usb 1-1: Manufacturer: syz
[  134.650469][   T49] usb 1-1: SerialNumber: syz
[  134.755498][ T6230] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  134.822809][  T993] usb 5-1: no configurations
[  134.822827][  T993] usb 5-1: can't read configurations, error -22
[  134.824248][  T993] usb usb5-port1: attempt power cycle
[  135.101977][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  135.211963][  T993] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  135.235981][  T993] usb 5-1: no configurations
[  135.235995][  T993] usb 5-1: can't read configurations, error -22
[  135.284004][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.284036][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.284071][   T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  135.284091][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.297550][   T10] usb 3-1: config 0 descriptor??
[  135.403832][  T993] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  135.424849][  T993] usb 5-1: no configurations
[  135.424867][  T993] usb 5-1: can't read configurations, error -22
[  135.428197][  T993] usb usb5-port1: unable to enumerate USB device
[  135.915140][   T10] usb 3-1: language id specifier not provided by device, defaulting to English
[  136.125466][   T10] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71
[  136.125527][   T10] uclogic 0003:256C:006D.0001: failed probing parameters: -71
[  136.125633][   T10] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71
[  136.209650][   T49] usb 1-1: USB disconnect, device number 5
[  136.213586][   T10] usb 3-1: USB disconnect, device number 2
[  139.884603][ T6264] tmpfs: Bad value for 'mpol'
[  141.932224][ T6274] program syz.0.100 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  141.939282][ T5807] Bluetooth: hci2: unexpected cc 0x203c length: 9 > 1
[  144.074711][   T49] IPVS: starting estimator thread 0...
[  144.080014][ T6294] Zero length message leads to an empty skb
[  144.183781][ T6295] IPVS: using max 14 ests per chain, 33600 per kthread
[  144.567230][  T990] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  144.749103][  T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  144.749133][  T990] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  144.749154][  T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  144.755787][  T990] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  144.755813][  T990] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  144.755831][  T990] usb 1-1: Manufacturer: syz
[  144.769260][  T990] usb 1-1: config 0 descriptor??
[  144.811296][  T990] smsusb:smsusb_probe: board id=9, interface number 0
[  144.813092][  T990] smsusb:smsusb_probe: Device initialized with return code -19
[  145.013011][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.042434][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.186269][  T990] usb 1-1: USB disconnect, device number 6
[  145.341924][   T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  145.491873][   T31] usb 2-1: Using ep0 maxpacket: 8
[  145.495089][   T31] usb 2-1: config 1 has an invalid interface number: 44 but max is 0
[  145.495113][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.495130][   T31] usb 2-1: config 1 has no interface number 0
[  145.495177][   T31] usb 2-1: config 1 interface 44 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  145.495202][   T31] usb 2-1: config 1 interface 44 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  145.495226][   T31] usb 2-1: config 1 interface 44 has no altsetting 0
[  145.499080][   T31] usb 2-1: New USB device found, idVendor=05ef, idProduct=8884, bcdDevice=a3.c1
[  145.499106][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.499124][   T31] usb 2-1: Product: syz
[  145.499137][   T31] usb 2-1: Manufacturer: syz
[  145.499150][   T31] usb 2-1: SerialNumber: syz
[  145.838976][ T5921] usb 2-1: USB disconnect, device number 4
[  145.983532][   T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  146.104674][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.145428][   T31] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  146.145458][   T31] usb 4-1: config 0 interface 0 has no altsetting 0
[  146.970666][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.002763][   T31] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  147.002792][   T31] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  147.002811][   T31] usb 4-1: Product: syz
[  147.002824][   T31] usb 4-1: Manufacturer: syz
[  147.002843][   T31] usb 4-1: SerialNumber: syz
[  147.058359][   T31] usb 4-1: config 0 descriptor??
[  147.111936][   T49] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  147.120023][   T31] usb 4-1: selecting invalid altsetting 0
[  147.271886][   T49] usb 3-1: Using ep0 maxpacket: 16
[  147.279996][   T49] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 22784, setting to 64
[  147.280028][   T49] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  147.280050][   T49] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8A has invalid maxpacket 44525, setting to 1024
[  147.280074][   T49] usb 3-1: config 0 interface 0 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024
[  147.280095][   T49] usb 3-1: config 0 interface 0 has no altsetting 0
[  147.530973][   T49] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  147.531003][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.531021][   T49] usb 3-1: Product: syz
[  147.531035][   T49] usb 3-1: Manufacturer: syz
[  147.531048][   T49] usb 3-1: SerialNumber: syz
[  147.683302][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.135365][   T49] usb 3-1: config 0 descriptor??
[  148.172565][ T6319] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  148.197445][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.519134][   T49] usb 3-1: Can not set alternate setting to 1, error: -71
[  148.519199][   T49] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71
[  148.552082][   T49] usb 3-1: USB disconnect, device number 3
[  148.817121][   T49] usb 4-1: USB disconnect, device number 2
[  149.231126][ T6345] program syz.1.123 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  149.252286][ T5807] Bluetooth: hci0: unexpected cc 0x203c length: 9 > 1
[  149.390570][ T6347] dummy0: entered promiscuous mode
[  149.742918][   T37] audit: type=1326 audit(1760324882.844:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.742972][   T37] audit: type=1326 audit(1760324882.844:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743015][   T37] audit: type=1326 audit(1760324882.844:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743057][   T37] audit: type=1326 audit(1760324882.844:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743098][   T37] audit: type=1326 audit(1760324882.854:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743139][   T37] audit: type=1326 audit(1760324882.854:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743180][   T37] audit: type=1326 audit(1760324882.854:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743222][   T37] audit: type=1326 audit(1760324882.854:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743264][   T37] audit: type=1326 audit(1760324882.854:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  149.743305][   T37] audit: type=1326 audit(1760324882.854:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6351 comm="syz.4.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230d1deec9 code=0x7ffc0000
[  150.442897][ T5871] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  150.606537][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.606568][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.606606][ T5871] usb 3-1: New USB device found, idVendor=0457, idProduct=ffff, bcdDevice= 0.00
[  150.606628][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.625635][ T5871] usb 3-1: config 0 descriptor??
[  151.096332][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.843278][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[  151.868250][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  151.916086][ T5871] usb 3-1: USB disconnect, device number 4
[  152.201304][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.336063][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.469248][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.912748][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.828940][ T5807] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  153.829347][ T5807] Bluetooth: hci3: Injecting HCI hardware error event
[  153.831021][ T5807] Bluetooth: hci3: hardware error 0x00
[  154.186116][ T6396] program syz.3.137 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.204734][ T5800] Bluetooth: hci1: unexpected cc 0x203c length: 9 > 1
[  155.220563][ T6400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  155.423065][ T6404] bond1: option fail_over_mac: invalid value (4)
[  155.516213][ T6404] bond1 (unregistering): Released all slaves
[  155.532100][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  156.018668][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  156.020545][   T10] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.020575][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  156.045771][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  156.045800][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.045823][   T10] usb 1-1: Product: syz
[  156.045837][   T10] usb 1-1: Manufacturer: syz
[  156.045857][   T10] usb 1-1: SerialNumber: syz
[  156.187536][ T5807] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  156.911062][ T6417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.142'.
[  157.631147][   T10] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input11
[  157.645128][ T5153] bcm5974 1-1:1.0: could not read from device
[  157.664759][   T10] usb 1-1: USB disconnect, device number 7
[  157.752065][ T6430] FAULT_INJECTION: forcing a failure.
[  157.752065][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  157.752098][ T6430] CPU: 0 UID: 0 PID: 6430 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  157.752120][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  157.752132][ T6430] Call Trace:
[  157.752139][ T6430]  <TASK>
[  157.752148][ T6430]  dump_stack_lvl+0x189/0x250
[  157.752175][ T6430]  ? __pfx____ratelimit+0x10/0x10
[  157.752202][ T6430]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.752224][ T6430]  ? __pfx__printk+0x10/0x10
[  157.752261][ T6430]  should_fail_ex+0x46c/0x600
[  157.752292][ T6430]  _copy_to_user+0x31/0xb0
[  157.752315][ T6430]  simple_read_from_buffer+0xe1/0x170
[  157.752340][ T6430]  proc_fail_nth_read+0x1b6/0x220
[  157.752369][ T6430]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.752397][ T6430]  ? rw_verify_area+0x2ac/0x4e0
[  157.752422][ T6430]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  157.752448][ T6430]  vfs_read+0x206/0xa30
[  157.752485][ T6430]  ? __pfx_vfs_read+0x10/0x10
[  157.752507][ T6430]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  157.752541][ T6430]  ? mutex_lock_nested+0x154/0x1d0
[  157.752561][ T6430]  ? fdget_pos+0x253/0x320
[  157.752591][ T6430]  ksys_read+0x14b/0x260
[  157.752620][ T6430]  ? __pfx_ksys_read+0x10/0x10
[  157.752651][ T6430]  ? do_syscall_64+0xbe/0xfa0
[  157.752680][ T6430]  do_syscall_64+0xfa/0xfa0
[  157.752704][ T6430]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.752730][ T6430]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.752749][ T6430]  ? clear_bhb_loop+0x60/0xb0
[  157.752772][ T6430]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.752790][ T6430] RIP: 0033:0x7f230d1dd8dc
[  157.752806][ T6430] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  157.752822][ T6430] RSP: 002b:00007f230b446030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  157.752842][ T6430] RAX: ffffffffffffffda RBX: 00007f230d435fa0 RCX: 00007f230d1dd8dc
[  157.752856][ T6430] RDX: 000000000000000f RSI: 00007f230b4460a0 RDI: 0000000000000003
[  157.752867][ T6430] RBP: 00007f230b446090 R08: 0000000000000000 R09: 0000000000000000
[  157.752879][ T6430] R10: 969edffe39095fd4 R11: 0000000000000246 R12: 0000000000000001
[  157.752890][ T6430] R13: 00007f230d436038 R14: 00007f230d435fa0 R15: 00007ffc99576648
[  157.752924][ T6430]  </TASK>
[  158.127854][ T6434] loop8: detected capacity change from 0 to 8
[  158.152065][ T6434] Dev loop8: unable to read RDB block 8
[  158.152119][ T6434]  loop8: unable to read partition table
[  158.152358][ T6434] loop8: partition table beyond EOD, truncated
[  158.152404][ T6434] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  158.793482][   T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  158.799127][    C0] vkms_vblank_simulate: vblank timer overrun
[  158.941926][   T31] usb 3-1: Using ep0 maxpacket: 32
[  158.944466][   T31] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  158.944489][   T31] usb 3-1: config 0 has no interface number 0
[  158.944535][   T31] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  158.944563][   T31] usb 3-1: config 0 interface 196 has no altsetting 0
[  158.949850][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  158.949877][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.949896][   T31] usb 3-1: Product: syz
[  158.949910][   T31] usb 3-1: Manufacturer: syz
[  158.949923][   T31] usb 3-1: SerialNumber: syz
[  159.037355][   T31] usb 3-1: config 0 descriptor??
[  159.038159][ T6436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  159.852289][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.739514][    C0] vkms_vblank_simulate: vblank timer overrun
[  160.753366][   T31] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[  160.896833][   T31] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  160.927668][    C0] vkms_vblank_simulate: vblank timer overrun
[  161.204611][ T5871] usb 3-1: USB disconnect, device number 5
[  165.432400][ T5871] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  166.496696][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'.
[  170.795555][ T6505] dummy0: entered promiscuous mode
[  170.831282][ T6505] Bluetooth: MGMT ver 1.23
[  171.002051][  T993] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  171.169826][  T993] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  171.169856][  T993] usb 4-1: config 0 interface 0 has no altsetting 0
[  171.182339][ T6518] FAULT_INJECTION: forcing a failure.
[  171.182339][ T6518] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  171.182371][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.4.172 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  171.182391][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  171.182403][ T6518] Call Trace:
[  171.182410][ T6518]  <TASK>
[  171.182418][ T6518]  dump_stack_lvl+0x189/0x250
[  171.182444][ T6518]  ? __pfx____ratelimit+0x10/0x10
[  171.182471][ T6518]  ? __pfx_dump_stack_lvl+0x10/0x10
[  171.182492][ T6518]  ? __pfx__printk+0x10/0x10
[  171.182516][ T6518]  ? fs_reclaim_acquire+0x7d/0x100
[  171.182545][ T6518]  should_fail_ex+0x46c/0x600
[  171.182573][ T6518]  prepare_alloc_pages+0x213/0x670
[  171.182602][ T6518]  __alloc_frozen_pages_noprof+0x123/0x370
[  171.182629][ T6518]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  171.182661][ T6518]  ? policy_nodemask+0x27c/0x720
[  171.182688][ T6518]  alloc_pages_mpol+0xd1/0x380
[  171.182713][ T6518]  alloc_pages_noprof+0xcf/0x1e0
[  171.182737][ T6518]  __pmd_alloc+0x3a/0x530
[  171.182762][ T6518]  handle_mm_fault+0x21bc/0x3400
[  171.182781][ T6518]  ? mt_find+0x15c/0x5e0
[  171.182797][ T6518]  ? __pfx_mt_find+0x10/0x10
[  171.182817][ T6518]  ? handle_mm_fault+0xdb/0x3400
[  171.182843][ T6518]  ? __pfx_handle_mm_fault+0x10/0x10
[  171.182883][ T6518]  ? lock_mm_and_find_vma+0x9c/0x300
[  171.182908][ T6518]  do_user_addr_fault+0x764/0x1380
[  171.182951][ T6518]  exc_page_fault+0x82/0x100
[  171.182979][ T6518]  asm_exc_page_fault+0x26/0x30
[  171.182995][ T6518] RIP: 0010:rep_movs_alternative+0x30/0x90
[  171.183016][ T6518] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  171.183030][ T6518] RSP: 0018:ffffc900062df838 EFLAGS: 00050246
[  171.183047][ T6518] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008
[  171.183059][ T6518] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc900062dfc7c
[  171.183071][ T6518] RBP: ffffc900062dfe10 R08: ffffc900062dfc83 R09: 1ffff92000c5bf90
[  171.183084][ T6518] R10: dffffc0000000000 R11: fffff52000c5bf91 R12: 0000000000000008
[  171.183097][ T6518] R13: 0000000000000001 R14: ffffc900062dfc7c R15: 0000200000000040
[  171.183129][ T6518]  _copy_from_user+0x7a/0xb0
[  171.183149][ T6518]  do_sys_poll+0x23d/0xed0
[  171.183176][ T6518]  ? is_bpf_text_address+0x26/0x2b0
[  171.183204][ T6518]  ? __pfx_do_sys_poll+0x10/0x10
[  171.183235][ T6518]  ? __lock_acquire+0xab9/0xd20
[  171.183331][ T6518]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[  171.183387][ T6518]  ? __pfx_timespec64_add_safe+0x10/0x10
[  171.183418][ T6518]  __se_sys_poll+0x128/0x320
[  171.183438][ T6518]  ? __pfx___se_sys_poll+0x10/0x10
[  171.183460][ T6518]  ? do_syscall_64+0xbe/0xfa0
[  171.183489][ T6518]  do_syscall_64+0xfa/0xfa0
[  171.183513][ T6518]  ? lockdep_hardirqs_on+0x9c/0x150
[  171.183537][ T6518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.183554][ T6518]  ? clear_bhb_loop+0x60/0xb0
[  171.183576][ T6518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.183593][ T6518] RIP: 0033:0x7f230d1deec9
[  171.183608][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.183622][ T6518] RSP: 002b:00007f230b446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  171.183639][ T6518] RAX: ffffffffffffffda RBX: 00007f230d435fa0 RCX: 00007f230d1deec9
[  171.183655][ T6518] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000200000000040
[  171.183667][ T6518] RBP: 00007f230b446090 R08: 0000000000000000 R09: 0000000000000000
[  171.183678][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.183688][ T6518] R13: 00007f230d436038 R14: 00007f230d435fa0 R15: 00007ffc99576648
[  171.183722][ T6518]  </TASK>
[  172.512000][  T993] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  172.512028][  T993] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  172.512045][  T993] usb 4-1: Product: syz
[  172.566424][  T993] usb 4-1: config 0 descriptor??
[  172.569075][  T993] usb 4-1: can't set config #0, error -71
[  172.585947][  T993] usb 4-1: USB disconnect, device number 3
[  172.728582][ T6524] capability: warning: `syz.4.175' uses deprecated v2 capabilities in a way that may be insecure
[  173.591890][ T5871] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  173.743197][ T5871] usb 5-1: Using ep0 maxpacket: 16
[  173.745929][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  173.745953][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  173.749069][ T5871] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  173.749094][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.749112][ T5871] usb 5-1: Product: syz
[  173.749125][ T5871] usb 5-1: Manufacturer: syz
[  173.749139][ T5871] usb 5-1: SerialNumber: syz
[  175.039225][ T5871] usb 5-1: 0:2 : does not exist
[  175.081088][ T5871] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  175.139635][ T5871] usb 5-1: USB disconnect, device number 9
[  176.546447][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.794552][ T6558] FAULT_INJECTION: forcing a failure.
[  177.794552][ T6558] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  177.794584][ T6558] CPU: 1 UID: 0 PID: 6558 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  177.794606][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  177.794618][ T6558] Call Trace:
[  177.794625][ T6558]  <TASK>
[  177.794633][ T6558]  dump_stack_lvl+0x189/0x250
[  177.794661][ T6558]  ? __pfx____ratelimit+0x10/0x10
[  177.794687][ T6558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  177.794710][ T6558]  ? __pfx__printk+0x10/0x10
[  177.794751][ T6558]  should_fail_ex+0x46c/0x600
[  177.794782][ T6558]  _copy_to_user+0x31/0xb0
[  177.794804][ T6558]  kvm_arch_vcpu_ioctl+0x9c6/0x2b40
[  177.794822][ T6558]  ? __lock_acquire+0xab9/0xd20
[  177.794848][ T6558]  ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10
[  177.794871][ T6558]  ? __lock_acquire+0xab9/0xd20
[  177.794913][ T6558]  ? is_bpf_text_address+0x26/0x2b0
[  177.794941][ T6558]  ? is_bpf_text_address+0x292/0x2b0
[  177.794961][ T6558]  ? is_bpf_text_address+0x26/0x2b0
[  177.794983][ T6558]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  177.795005][ T6558]  ? kernel_text_address+0xa5/0xe0
[  177.795031][ T6558]  ? __kernel_text_address+0xd/0x40
[  177.795053][ T6558]  ? unwind_get_return_address+0x4d/0x90
[  177.795073][ T6558]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  177.795098][ T6558]  ? arch_stack_walk+0xfc/0x150
[  177.795131][ T6558]  ? stack_trace_save+0x9c/0xe0
[  177.795159][ T6558]  ? stack_depot_save_flags+0x40/0x860
[  177.795188][ T6558]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  177.795210][ T6558]  ? kasan_save_track+0x4f/0x80
[  177.795226][ T6558]  ? kasan_save_track+0x3e/0x80
[  177.795241][ T6558]  ? __kasan_save_free_info+0x46/0x50
[  177.795262][ T6558]  ? __kasan_slab_free+0x5c/0x80
[  177.795280][ T6558]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  177.795300][ T6558]  ? security_file_ioctl+0xcb/0x2d0
[  177.795320][ T6558]  ? __se_sys_ioctl+0x47/0x170
[  177.795342][ T6558]  ? do_syscall_64+0xfa/0xfa0
[  177.795367][ T6558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.795409][ T6558]  ? __lock_acquire+0xab9/0xd20
[  177.795438][ T6558]  ? do_raw_spin_lock+0x121/0x290
[  177.795474][ T6558]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  177.795502][ T6558]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.795529][ T6558]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  177.795556][ T6558]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  177.795594][ T6558]  ? _mutex_lock_killable+0x154/0x1d0
[  177.795616][ T6558]  ? kvm_vcpu_ioctl+0x231/0xe90
[  177.795641][ T6558]  kvm_vcpu_ioctl+0x750/0xe90
[  177.795671][ T6558]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  177.795701][ T6558]  ? __asan_memset+0x22/0x50
[  177.795726][ T6558]  ? smack_file_ioctl+0x305/0x340
[  177.795754][ T6558]  ? __pfx_smack_file_ioctl+0x10/0x10
[  177.795786][ T6558]  ? __fget_files+0x3a6/0x420
[  177.795805][ T6558]  ? __fget_files+0x2a/0x420
[  177.795829][ T6558]  ? bpf_lsm_file_ioctl+0x9/0x20
[  177.795852][ T6558]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  177.795874][ T6558]  __se_sys_ioctl+0xff/0x170
[  177.795902][ T6558]  do_syscall_64+0xfa/0xfa0
[  177.795923][ T6558]  ? lockdep_hardirqs_on+0x9c/0x150
[  177.795948][ T6558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.795967][ T6558]  ? clear_bhb_loop+0x60/0xb0
[  177.795990][ T6558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  177.796008][ T6558] RIP: 0033:0x7f65e9b8eec9
[  177.796025][ T6558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  177.796040][ T6558] RSP: 002b:00007f65e7dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.796060][ T6558] RAX: ffffffffffffffda RBX: 00007f65e9de5fa0 RCX: 00007f65e9b8eec9
[  177.796074][ T6558] RDX: 000020000001a000 RSI: 000000009000aecf RDI: 0000000000000005
[  177.796087][ T6558] RBP: 00007f65e7dee090 R08: 0000000000000000 R09: 0000000000000000
[  177.796099][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.796110][ T6558] R13: 00007f65e9de6038 R14: 00007f65e9de5fa0 R15: 00007ffc31519708
[  177.796144][ T6558]  </TASK>
[  178.231238][ T6563] loop8: detected capacity change from 0 to 8
[  178.278431][ T5924] Dev loop8: unable to read RDB block 8
[  178.278468][ T5924]  loop8: unable to read partition table
[  178.278728][ T5924] loop8: partition table beyond EOD, truncated
[  178.293706][ T6563] Dev loop8: unable to read RDB block 8
[  178.293748][ T6563]  loop8: unable to read partition table
[  178.293969][ T6563] loop8: partition table beyond EOD, truncated
[  178.293994][ T6563] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  178.494430][ T6565] loop8: detected capacity change from 0 to 8
[  178.510920][ T6565] Dev loop8: unable to read RDB block 8
[  178.510972][ T6565]  loop8: unable to read partition table
[  178.511208][ T6565] loop8: partition table beyond EOD, truncated
[  178.511237][ T6565] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  179.294306][ T5921] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  179.651876][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  179.655834][ T5921] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.655880][ T5921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  179.655904][ T5921] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  179.659030][ T5921] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.659057][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.659075][ T5921] usb 1-1: Product: ࠌ
[  179.659089][ T5921] usb 1-1: Manufacturer: 옼ጦ嵙릋樜弙쒣Ꭲ䅧쑠刪씐즷푁溞蕎⋜쇮豗쬿䈱ࡵ忉쓈乧턼Ѳ씝炕쁔Ⲧ풬갨颇ᛮꨋ触搬퍧㛬鏤ᔍ鏔棋螮핽밌ࠀ厬꧝牦₍檑迹 ꘉᅓ쇑咻ꐳ鰋⯳㎭쒾㨋ஃຼ襇㸚댩퇵㗘圯飅ꄮࠖ⅑轔䗸ꎶ⎣ᴩ泤팘銅怀॓
[  179.659117][ T5921] usb 1-1: SerialNumber: Ⰱ
[  179.930111][  T993] IPVS: starting estimator thread 0...
[  180.012122][ T6582] IPVS: using max 8 ests per chain, 19200 per kthread
[  180.089258][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.089860][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.109363][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.109894][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.145805][ T5921] cdc_ncm 1-1:1.0: bind() failure
[  180.163773][ T5921] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  180.163821][ T5921] cdc_ncm 1-1:1.1: bind() failure
[  180.184433][ T5921] usb 1-1: USB disconnect, device number 8
[  180.666961][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  184.174636][    C0] vkms_vblank_simulate: vblank timer overrun
[  184.211808][   T31] usb 2-1: device descriptor read/all, error -71
[  184.672222][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.156055][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.336312][    C0] vkms_vblank_simulate: vblank timer overrun
[  185.484378][   T37] kauditd_printk_skb: 22 callbacks suppressed
[  185.484396][   T37] audit: type=1326 audit(1760324918.604:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.484442][   T37] audit: type=1326 audit(1760324918.604:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.492302][   T37] audit: type=1326 audit(1760324918.624:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.492352][   T37] audit: type=1326 audit(1760324918.624:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.492389][   T37] audit: type=1326 audit(1760324918.624:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.523521][   T37] audit: type=1326 audit(1760324918.654:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.523572][   T37] audit: type=1326 audit(1760324918.654:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.523611][   T37] audit: type=1326 audit(1760324918.654:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.523650][   T37] audit: type=1326 audit(1760324918.654:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  185.523699][   T37] audit: type=1326 audit(1760324918.654:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6619 comm="syz.0.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  186.095599][ T6631] FAULT_INJECTION: forcing a failure.
[  186.095599][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.095644][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  186.095665][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  186.095677][ T6631] Call Trace:
[  186.095684][ T6631]  <TASK>
[  186.095692][ T6631]  dump_stack_lvl+0x189/0x250
[  186.095728][ T6631]  ? __pfx____ratelimit+0x10/0x10
[  186.095755][ T6631]  ? __pfx_dump_stack_lvl+0x10/0x10
[  186.095776][ T6631]  ? __pfx__printk+0x10/0x10
[  186.095816][ T6631]  should_fail_ex+0x46c/0x600
[  186.095846][ T6631]  _copy_to_user+0x31/0xb0
[  186.095868][ T6631]  simple_read_from_buffer+0xe1/0x170
[  186.095900][ T6631]  proc_fail_nth_read+0x1b6/0x220
[  186.095929][ T6631]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  186.095957][ T6631]  ? rw_verify_area+0x2ac/0x4e0
[  186.095983][ T6631]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  186.096009][ T6631]  vfs_read+0x206/0xa30
[  186.096045][ T6631]  ? __pfx_vfs_read+0x10/0x10
[  186.096067][ T6631]  ? try_to_take_rt_mutex+0x7fd/0xac0
[  186.096102][ T6631]  ? mutex_lock_nested+0x154/0x1d0
[  186.096122][ T6631]  ? fdget_pos+0x253/0x320
[  186.096152][ T6631]  ksys_read+0x14b/0x260
[  186.096181][ T6631]  ? __pfx_ksys_read+0x10/0x10
[  186.096211][ T6631]  ? do_syscall_64+0xbe/0xfa0
[  186.096242][ T6631]  do_syscall_64+0xfa/0xfa0
[  186.096266][ T6631]  ? lockdep_hardirqs_on+0x9c/0x150
[  186.096292][ T6631]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.096310][ T6631]  ? clear_bhb_loop+0x60/0xb0
[  186.096333][ T6631]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  186.096351][ T6631] RIP: 0033:0x7f0f294fd8dc
[  186.096374][ T6631] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  186.096388][ T6631] RSP: 002b:00007f0f2775e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  186.096407][ T6631] RAX: ffffffffffffffda RBX: 00007f0f29755fa0 RCX: 00007f0f294fd8dc
[  186.096420][ T6631] RDX: 000000000000000f RSI: 00007f0f2775e0a0 RDI: 0000000000000004
[  186.096431][ T6631] RBP: 00007f0f2775e090 R08: 0000000000000000 R09: 0000000000000000
[  186.096441][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  186.096452][ T6631] R13: 00007f0f29756038 R14: 00007f0f29755fa0 R15: 00007ffe849d03b8
[  186.096482][ T6631]  </TASK>
[  186.211914][ T5947] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  186.386736][ T5947] usb 5-1: Using ep0 maxpacket: 16
[  186.389123][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  186.389152][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.389190][ T5947] usb 5-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  186.389209][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.454063][ T5947] usb 5-1: config 0 descriptor??
[  187.787558][ T5947] uclogic 0003:5543:0781.0002: item fetching failed at offset 4/5
[  187.804632][ T5947] uclogic 0003:5543:0781.0002: parse failed
[  187.804781][ T5947] uclogic 0003:5543:0781.0002: probe with driver uclogic failed with error -22
[  189.060908][   T10] usb 5-1: USB disconnect, device number 10
[  189.165129][ T5947] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  189.372085][ T5947] usb 2-1: Using ep0 maxpacket: 32
[  189.396081][ T5947] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[  189.518816][ T6657] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  189.656467][ T5807] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  189.660351][ T5807] Bluetooth: hci2: Injecting HCI hardware error event
[  189.688864][ T5807] Bluetooth: hci2: hardware error 0x00
[  189.802207][ T5947] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  189.802237][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.802255][ T5947] usb 2-1: Product: syz
[  189.802268][ T5947] usb 2-1: Manufacturer: syz
[  189.802280][ T5947] usb 2-1: SerialNumber: syz
[  189.996063][ T5947] usb 2-1: config 0 descriptor??
[  190.008607][ T6652] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  190.048028][ T5947] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  191.169055][ T6674] program syz.0.212 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.196210][ T5800] Bluetooth: hci2: unexpected cc 0x203c length: 9 > 1
[  191.196241][ T5800] Bluetooth: hci2: unexpected event for opcode 0x203c
[  191.328979][ T6678] dummy0: entered promiscuous mode
[  191.601944][   T31] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  191.731862][   T31] usb 5-1: device descriptor read/64, error -71
[  192.193032][ T5788] usb 2-1: USB disconnect, device number 7
[  192.216185][   T31] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  192.822844][   T31] usb 5-1: device descriptor read/64, error -71
[  192.902340][ T6693] netlink: 'syz.3.217': attribute type 4 has an invalid length.
[  193.059866][   T31] usb usb5-port1: attempt power cycle
[  193.062145][ T6700] netlink: 'syz.3.217': attribute type 4 has an invalid length.
[  193.162409][ T5807] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  193.401991][   T31] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  193.422826][   T31] usb 5-1: device descriptor read/8, error -71
[  193.561460][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.589093][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.682358][   T31] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  193.702594][   T31] usb 5-1: device descriptor read/8, error -71
[  193.812318][   T31] usb usb5-port1: unable to enumerate USB device
[  194.843743][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  194.843815][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  194.941079][   T37] kauditd_printk_skb: 13 callbacks suppressed
[  194.941096][   T37] audit: type=1326 audit(1760324928.064:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  194.941421][   T37] audit: type=1326 audit(1760324928.064:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.032244][    C1] vkms_vblank_simulate: vblank timer overrun
[  195.186679][   T37] audit: type=1326 audit(1760324928.314:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.186731][   T37] audit: type=1326 audit(1760324928.314:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.186773][   T37] audit: type=1326 audit(1760324928.314:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.186813][   T37] audit: type=1326 audit(1760324928.314:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.186854][   T37] audit: type=1326 audit(1760324928.314:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.186895][   T37] audit: type=1326 audit(1760324928.314:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.209035][    C1] vkms_vblank_simulate: vblank timer overrun
[  195.272143][   T37] audit: type=1326 audit(1760324928.404:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.277281][   T37] audit: type=1326 audit(1760324928.404:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6723 comm="syz.3.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  195.748392][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.013704][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.062467][ T6735] tmpfs: Bad value for 'mpol'
[  196.068785][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.244563][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.700103][    C1] vkms_vblank_simulate: vblank timer overrun
[  196.731124][    C1] vkms_vblank_simulate: vblank timer overrun
[  197.346795][    C1] vkms_vblank_simulate: vblank timer overrun
[  197.552245][    C1] vkms_vblank_simulate: vblank timer overrun
[  199.321956][ T5807] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  199.322193][ T5807] Bluetooth: hci1: Injecting HCI hardware error event
[  199.324710][ T5807] Bluetooth: hci1: hardware error 0x00
[  204.568541][ T6786] program syz.4.242 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.988300][ T6794] program syz.2.244 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.013958][ T5800] Bluetooth: hci4: unexpected cc 0x203c length: 9 > 1
[  205.252561][ T5807] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  205.308136][   T37] kauditd_printk_skb: 13 callbacks suppressed
[  205.308154][   T37] audit: type=1326 audit(1760324938.434:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.365797][   T37] audit: type=1326 audit(1760324938.494:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.365848][   T37] audit: type=1326 audit(1760324938.494:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.365966][   T37] audit: type=1326 audit(1760324938.494:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.366838][   T37] audit: type=1326 audit(1760324938.494:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.367108][   T37] audit: type=1326 audit(1760324938.494:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.367356][   T37] audit: type=1326 audit(1760324938.494:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.378427][   T37] audit: type=1326 audit(1760324938.504:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.379747][   T37] audit: type=1326 audit(1760324938.504:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  205.387343][   T37] audit: type=1326 audit(1760324938.514:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6800 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  206.491924][ T5788] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  207.684947][ T5788] usb 4-1: unable to get BOS descriptor or descriptor too short
[  207.685716][ T5788] usb 4-1: not running at top speed; connect to a high speed hub
[  207.691573][ T5788] usb 4-1: config 1 has an invalid descriptor of length 211, skipping remainder of the config
[  207.691599][ T5788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  207.691649][ T5788] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  207.743639][ T5788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  207.743666][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.743685][ T5788] usb 4-1: Product: syz
[  207.743698][ T5788] usb 4-1: Manufacturer: syz
[  207.743711][ T5788] usb 4-1: SerialNumber: syz
[  208.083005][ T6824] tipc: Started in network mode
[  208.083096][ T6824] tipc: Node identity ac14140f, cluster identity 4711
[  208.115015][ T6824] tipc: New replicast peer: 255.255.255.255
[  208.192303][ T6824] tipc: Enabled bearer <udp:syz2>, priority 10
[  208.333321][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'.
[  208.334306][ T6826] tipc: Disabling bearer <udp:syz2>
[  209.035945][ T5788] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found
[  209.035991][ T5788] cdc_ncm 4-1:1.0: bind() failure
[  209.063012][ T5788] usb 4-1: USB disconnect, device number 4
[  209.401882][ T5807] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  209.402136][ T5807] Bluetooth: hci4: Injecting HCI hardware error event
[  209.408580][ T5800] Bluetooth: hci4: hardware error 0x00
[  209.448760][ T6838] program syz.3.257 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  210.862069][   T37] kauditd_printk_skb: 15 callbacks suppressed
[  210.862086][   T37] audit: type=1326 audit(1760324943.984:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.862131][   T37] audit: type=1326 audit(1760324943.994:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.864627][   T37] audit: type=1326 audit(1760324943.994:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.864676][   T37] audit: type=1326 audit(1760324943.994:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.864717][   T37] audit: type=1326 audit(1760324943.994:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.867146][   T37] audit: type=1326 audit(1760324943.994:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.867202][   T37] audit: type=1326 audit(1760324943.994:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.867244][   T37] audit: type=1326 audit(1760324943.994:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.877132][   T37] audit: type=1326 audit(1760324944.004:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  210.877190][   T37] audit: type=1326 audit(1760324944.004:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6854 comm="syz.3.263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  211.641928][ T5800] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  211.721995][ T5800] Bluetooth: hci0: command 0x0406 tx timeout
[  212.716333][ T6870] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  215.254198][ T6897] program syz.4.276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  215.995686][  T990] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  216.859480][  T990] usb 4-1: config 0 has no interfaces?
[  216.871432][  T990] usb 4-1: string descriptor 0 read error: -22
[  216.871618][  T990] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  216.871639][  T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.931913][  T990] usb 4-1: config 0 descriptor??
[  217.147977][ T5947] usb 4-1: USB disconnect, device number 5
[  218.009679][ T6936] program syz.1.291 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.021625][ T5117] Bluetooth: hci0: unexpected cc 0x203c length: 9 > 1
[  218.021655][ T5117] Bluetooth: hci0: unexpected event for opcode 0x203c
[  218.183512][ T6934] program syz.4.290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  219.758027][ T6957] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  220.542767][ T5947] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  220.698748][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short
[  220.712377][ T5947] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.712407][ T5947] usb 5-1: config 1 interface 0 has no altsetting 0
[  220.745565][ T5947] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  220.745593][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.745611][ T5947] usb 5-1: Product: syz
[  220.745625][ T5947] usb 5-1: Manufacturer: syz
[  220.745639][ T5947] usb 5-1: SerialNumber: syz
[  221.804058][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12
[  221.822361][ T5947] usb 5-1: USB disconnect, device number 15
[  222.054818][ T6980] program syz.2.303 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.292823][ T6986] program syz.2.305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.379235][   T37] kauditd_printk_skb: 16 callbacks suppressed
[  222.379252][   T37] audit: type=1326 audit(1760324955.504:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.379450][   T37] audit: type=1326 audit(1760324955.504:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.440928][   T37] audit: type=1326 audit(1760324955.564:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.441046][   T37] audit: type=1326 audit(1760324955.564:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.441270][   T37] audit: type=1326 audit(1760324955.564:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.441638][   T37] audit: type=1326 audit(1760324955.564:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.531510][   T37] audit: type=1326 audit(1760324955.564:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.531650][   T37] audit: type=1326 audit(1760324955.654:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.590804][   T37] audit: type=1326 audit(1760324955.714:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  222.591383][   T37] audit: type=1326 audit(1760324955.714:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6988 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  225.511176][ T7025] program syz.1.317 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.464751][   T37] kauditd_printk_skb: 44 callbacks suppressed
[  227.464769][   T37] audit: type=1326 audit(1760324960.584:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.464815][   T37] audit: type=1326 audit(1760324960.594:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.514273][   T37] audit: type=1326 audit(1760324960.644:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.514330][   T37] audit: type=1326 audit(1760324960.644:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.514370][   T37] audit: type=1326 audit(1760324960.644:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.514415][   T37] audit: type=1326 audit(1760324960.644:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.514455][   T37] audit: type=1326 audit(1760324960.644:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.521873][   T37] audit: type=1326 audit(1760324960.644:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.521925][   T37] audit: type=1326 audit(1760324960.644:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.523396][   T37] audit: type=1326 audit(1760324960.654:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7041 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bab4ceec9 code=0x7ffc0000
[  227.536476][ T5117] Bluetooth: hci0: unexpected event for opcode 0x080b
[  227.783003][    C1] vkms_vblank_simulate: vblank timer overrun
[  228.723601][    C1] vkms_vblank_simulate: vblank timer overrun
[  228.884417][    C1] vkms_vblank_simulate: vblank timer overrun
[  229.072825][    C1] vkms_vblank_simulate: vblank timer overrun
[  229.153641][    C1] vkms_vblank_simulate: vblank timer overrun
[  229.621172][    C1] vkms_vblank_simulate: vblank timer overrun
[  230.047857][    C1] vkms_vblank_simulate: vblank timer overrun
[  230.161328][ T7070] program syz.0.329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  231.446253][    C1] vkms_vblank_simulate: vblank timer overrun
[  231.601929][ T5117] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  231.602195][ T5117] Bluetooth: hci0: Injecting HCI hardware error event
[  231.605105][ T5117] Bluetooth: hci0: hardware error 0x00
[  232.614247][    C1] vkms_vblank_simulate: vblank timer overrun
[  234.101865][ T5871] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  234.121929][ T5117] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  234.292993][ T5871] usb 4-1: unable to get BOS descriptor or descriptor too short
[  234.294504][ T5871] usb 4-1: config 250 has an invalid interface number: 19 but max is 0
[  234.294527][ T5871] usb 4-1: config 250 has no interface number 0
[  234.294573][ T5871] usb 4-1: config 250 interface 19 altsetting 3 has an endpoint descriptor with address 0xC8, changing to 0x88
[  234.294598][ T5871] usb 4-1: config 250 interface 19 altsetting 3 endpoint 0x88 has invalid maxpacket 53036, setting to 1024
[  234.294621][ T5871] usb 4-1: config 250 interface 19 altsetting 3 bulk endpoint 0x88 has invalid maxpacket 1024
[  234.294644][ T5871] usb 4-1: config 250 interface 19 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  234.294667][ T5871] usb 4-1: config 250 interface 19 has no altsetting 0
[  234.314302][ T5871] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=c3.27
[  234.314330][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.314347][ T5871] usb 4-1: Product: syz
[  234.314360][ T5871] usb 4-1: Manufacturer: syz
[  234.314373][ T5871] usb 4-1: SerialNumber: syz
[  234.355298][ T7094] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.634836][ T7094] C: renamed from team_slave_0 (while UP)
[  234.738833][ T7094] netlink: 'syz.3.336': attribute type 3 has an invalid length.
[  234.738855][ T7094] netlink: 152 bytes leftover after parsing attributes in process `syz.3.336'.
[  234.739755][ T7094] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  234.851889][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  234.930055][ T5871] usb 4-1: USB disconnect, device number 6
[  235.031860][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.031917][   T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  235.031938][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.045934][   T10] usb 5-1: config 0 descriptor??
[  235.104905][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  235.464570][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  235.482757][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  235.486191][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  235.487193][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  235.488925][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  235.490522][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  235.498546][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  235.500864][   T10] pwc: recv_control_msg error -32 req 02 val 2100
[  235.501692][   T10] pwc: recv_control_msg error -32 req 04 val 1500
[  235.714725][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  235.715075][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  235.715406][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  235.715723][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  235.716232][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  235.716553][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  235.720331][   T10] pwc: Registered as video103.
[  235.725635][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13
[  235.729524][   T10] usb 5-1: USB disconnect, device number 16
[  235.741853][ T5871] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  236.104543][ T7115] tmpfs: Bad value for 'mpol'
[  236.914214][ T5871] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  236.914244][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0
[  236.918219][ T5871] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  236.918246][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  236.918266][ T5871] usb 3-1: Product: syz
[  236.918279][ T5871] usb 3-1: Manufacturer: syz
[  236.918293][ T5871] usb 3-1: SerialNumber: syz
[  236.948262][ T5871] usb 3-1: config 0 descriptor??
[  237.614702][ T5871] usb 3-1: can't set config #0, error -71
[  237.635266][ T5871] usb 3-1: USB disconnect, device number 6
[  237.678709][ T5858] udevd[5858]: setting owner of /dev/bus/usb/003/006 to uid=0, gid=0 failed: No such file or directory
[  240.230679][ T7136] No control pipe specified
[  240.751956][   T37] kauditd_printk_skb: 25 callbacks suppressed
[  240.751973][   T37] audit: type=1326 audit(1760324973.874:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.756668][   T37] audit: type=1326 audit(1760324973.884:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836409][   T37] audit: type=1326 audit(1760324973.964:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836462][   T37] audit: type=1326 audit(1760324973.964:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836505][   T37] audit: type=1326 audit(1760324973.964:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836547][   T37] audit: type=1326 audit(1760324973.964:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836589][   T37] audit: type=1326 audit(1760324973.964:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836631][   T37] audit: type=1326 audit(1760324973.964:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836674][   T37] audit: type=1326 audit(1760324973.964:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  240.836714][   T37] audit: type=1326 audit(1760324973.964:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f294feec9 code=0x7ffc0000
[  245.694370][ T7193] tmpfs: Bad value for 'mpol'
[  245.951796][ T5921] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  246.361054][ T7201] FAULT_INJECTION: forcing a failure.
[  246.361054][ T7201] name failslab, interval 1, probability 0, space 0, times 0
[  246.361087][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  246.361106][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  246.361116][ T7201] Call Trace:
[  246.361123][ T7201]  <TASK>
[  246.361140][ T7201]  dump_stack_lvl+0x189/0x250
[  246.361167][ T7201]  ? __pfx____ratelimit+0x10/0x10
[  246.361194][ T7201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.361216][ T7201]  ? __pfx__printk+0x10/0x10
[  246.361245][ T7201]  ? __pfx___might_resched+0x10/0x10
[  246.361272][ T7201]  should_fail_ex+0x46c/0x600
[  246.361302][ T7201]  should_failslab+0xa8/0x100
[  246.361325][ T7201]  __kmalloc_noprof+0xcc/0x7d0
[  246.361346][ T7201]  ? kfree+0x51/0x950
[  246.361369][ T7201]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  246.361400][ T7201]  tomoyo_realpath_from_path+0xe3/0x5d0
[  246.361428][ T7201]  ? tomoyo_domain+0xda/0x130
[  246.361459][ T7201]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  246.361482][ T7201]  tomoyo_path_number_perm+0x1e8/0x5a0
[  246.361506][ T7201]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  246.361533][ T7201]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  246.361559][ T7201]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.361618][ T7201]  ? __fget_files+0x2a/0x420
[  246.361643][ T7201]  ? __fget_files+0x3a6/0x420
[  246.361661][ T7201]  ? __fget_files+0x2a/0x420
[  246.361684][ T7201]  security_file_ioctl+0xcb/0x2d0
[  246.361706][ T7201]  __se_sys_ioctl+0x47/0x170
[  246.361729][ T7201]  do_syscall_64+0xfa/0xfa0
[  246.361753][ T7201]  ? lockdep_hardirqs_on+0x9c/0x150
[  246.361776][ T7201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.361793][ T7201]  ? clear_bhb_loop+0x60/0xb0
[  246.361815][ T7201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.361831][ T7201] RIP: 0033:0x7f65e9b8eec9
[  246.361847][ T7201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.361862][ T7201] RSP: 002b:00007f65e7dee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  246.361882][ T7201] RAX: ffffffffffffffda RBX: 00007f65e9de5fa0 RCX: 00007f65e9b8eec9
[  246.361897][ T7201] RDX: 0000200000000380 RSI: 0000000000003b86 RDI: 0000000000000003
[  246.361909][ T7201] RBP: 00007f65e7dee090 R08: 0000000000000000 R09: 0000000000000000
[  246.361920][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.361931][ T7201] R13: 00007f65e9de6038 R14: 00007f65e9de5fa0 R15: 00007ffc31519708
[  246.361966][ T7201]  </TASK>
[  246.371501][ T7201] ERROR: Out of memory at tomoyo_realpath_from_path.
[  248.081887][ T5788] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  248.304109][ T5788] usb 5-1: config 0 has an invalid interface number: 36 but max is 0
[  248.304135][ T5788] usb 5-1: config 0 has no interface number 0
[  248.309689][ T5788] usb 5-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72
[  248.309716][ T5788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.309734][ T5788] usb 5-1: Product: syz
[  248.309748][ T5788] usb 5-1: Manufacturer: syz
[  248.309762][ T5788] usb 5-1: SerialNumber: syz
[  248.361216][ T5788] usb 5-1: config 0 descriptor??
[  248.372797][ T5788] gspca_main: spca505-2.14.0 probing 0733:0430
[  249.444670][ T5788] gspca_spca505: reg write: error -110
[  249.446399][ T5788] spca505 5-1:0.36: probe with driver spca505 failed with error -5
[  249.741934][   T10] usb 5-1: USB disconnect, device number 17
[  252.159205][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  252.326584][   T10] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  252.326602][   T10] usb 5-1: config 0 has no interface number 0
[  252.326631][   T10] usb 5-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d
[  252.326642][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.365691][   T10] usb 5-1: config 0 descriptor??
[  252.384510][   T10] gspca_main: spca501-2.14.0 probing 0733:0401
[  252.917459][   T10] gspca_spca501: reg write: error -110
[  252.917475][   T10] spca501 5-1:0.255: Reg write failed for 0x00,0xaa,0x00
[  252.917566][   T10] spca501 5-1:0.255: probe with driver spca501 failed with error -22
[  253.041945][ T5921] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  253.224464][ T5921] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  253.224494][ T5921] usb 2-1: config 0 interface 0 has no altsetting 0
[  253.229106][ T5921] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.229132][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  253.229150][ T5921] usb 2-1: Product: syz
[  253.229164][ T5921] usb 2-1: Manufacturer: syz
[  253.229177][ T5921] usb 2-1: SerialNumber: syz
[  253.238642][ T5921] usb 2-1: config 0 descriptor??
[  253.251241][ T5921] usb 2-1: selecting invalid altsetting 0
[  253.837232][ T7277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.837823][ T7277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.254884][   T10] usb 5-1: USB disconnect, device number 18
[  255.409833][ T5886] usb 2-1: USB disconnect, device number 8
[  255.617469][ T7290] capability: warning: `syz.1.390' uses 32-bit capabilities (legacy support in use)
[  255.726279][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  255.726348][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  261.515695][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.403'.
[  261.845793][ T7342] loop8: detected capacity change from 0 to 8
[  261.851182][ T5924] Dev loop8: unable to read RDB block 8
[  261.851224][ T5924]  loop8: unable to read partition table
[  261.851539][ T5924] loop8: partition table beyond EOD, truncated
[  261.916933][ T7343] ptm ptm4: ldisc open failed (-12), clearing slot 4
[  261.957471][ T7342] Dev loop8: unable to read RDB block 8
[  261.957526][ T7342]  loop8: unable to read partition table
[  261.960277][ T7342] loop8: partition table beyond EOD, truncated
[  261.960351][ T7342] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  262.382782][ T5886] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  262.534406][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  262.534435][ T5886] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  262.534458][ T5886] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  262.536078][ T5886] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  262.536104][ T5886] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  262.536122][ T5886] usb 2-1: Manufacturer: syz
[  262.589769][ T7357] FAULT_INJECTION: forcing a failure.
[  262.589769][ T7357] name failslab, interval 1, probability 0, space 0, times 0
[  262.589802][ T7357] CPU: 0 UID: 0 PID: 7357 Comm: syz.4.411 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  262.589822][ T7357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  262.589833][ T7357] Call Trace:
[  262.589840][ T7357]  <TASK>
[  262.589848][ T7357]  dump_stack_lvl+0x189/0x250
[  262.589875][ T7357]  ? __pfx____ratelimit+0x10/0x10
[  262.589900][ T7357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  262.589921][ T7357]  ? __pfx__printk+0x10/0x10
[  262.589949][ T7357]  ? __pfx___might_resched+0x10/0x10
[  262.589974][ T7357]  ? fs_reclaim_acquire+0x7d/0x100
[  262.589999][ T7357]  should_fail_ex+0x46c/0x600
[  262.590026][ T7357]  ? alloc_inode+0x6a/0x1b0
[  262.590042][ T7357]  should_failslab+0xa8/0x100
[  262.590064][ T7357]  ? alloc_inode+0x6a/0x1b0
[  262.590079][ T7357]  kmem_cache_alloc_lru_noprof+0x74/0x6b0
[  262.590105][ T7357]  ? simple_start_creating+0x166/0x1e0
[  262.590132][ T7357]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  262.590150][ T7357]  alloc_inode+0x6a/0x1b0
[  262.590170][ T7357]  new_inode+0x22/0x170
[  262.590194][ T7357]  debugfs_create_dir+0xfb/0x420
[  262.590218][ T7357]  ? kvm_create_vm_debugfs+0x126/0x900
[  262.590243][ T7357]  kvm_create_vm_debugfs+0x1e3/0x900
[  262.590267][ T7357]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  262.590291][ T7357]  ? __pfx_kvm_create_vm_debugfs+0x10/0x10
[  262.590318][ T7357]  ? __rt_spin_lock_init+0x3e/0x50
[  262.590348][ T7357]  kvm_dev_ioctl+0x1243/0x1620
[  262.590379][ T7357]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  262.590397][ T7357]  ? __fget_files+0x3a6/0x420
[  262.590473][ T7357]  ? bpf_lsm_file_ioctl+0x9/0x20
[  262.590496][ T7357]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  262.590516][ T7357]  __se_sys_ioctl+0xff/0x170
[  262.590541][ T7357]  do_syscall_64+0xfa/0xfa0
[  262.590563][ T7357]  ? lockdep_hardirqs_on+0x9c/0x150
[  262.590587][ T7357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.590606][ T7357]  ? clear_bhb_loop+0x60/0xb0
[  262.590628][ T7357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.590645][ T7357] RIP: 0033:0x7f230d1deec9
[  262.590661][ T7357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.590675][ T7357] RSP: 002b:00007f230b446038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  262.590692][ T7357] RAX: ffffffffffffffda RBX: 00007f230d435fa0 RCX: 00007f230d1deec9
[  262.590704][ T7357] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[  262.590715][ T7357] RBP: 00007f230b446090 R08: 0000000000000000 R09: 0000000000000000
[  262.590727][ T7357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  262.590737][ T7357] R13: 00007f230d436038 R14: 00007f230d435fa0 R15: 00007ffc99576648
[  262.590770][ T7357]  </TASK>
[  262.590777][ T7357] debugfs: out of free dentries, can not create directory '7357-5'
[  262.730021][ T7350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'.
[  262.801851][ T5788] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  262.903624][ T5886] usb 2-1: config 0 descriptor??
[  262.909160][ T5886] smsusb:smsusb_probe: board id=9, interface number 0
[  262.923953][ T5886] smsusb:smsusb_probe: Device initialized with return code -19
[  262.954915][ T5788] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  262.954945][ T5788] usb 4-1: config 0 interface 0 has no altsetting 0
[  262.965337][ T5788] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  262.965365][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  262.965383][ T5788] usb 4-1: Product: syz
[  262.965404][ T5788] usb 4-1: Manufacturer: syz
[  262.965416][ T5788] usb 4-1: SerialNumber: syz
[  262.998456][ T5788] usb 4-1: config 0 descriptor??
[  263.029086][ T5788] usb 4-1: selecting invalid altsetting 0
[  263.303723][   T37] kauditd_printk_skb: 41 callbacks suppressed
[  263.303740][   T37] audit: type=1326 audit(1760324996.434:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.342836][   T37] audit: type=1326 audit(1760324996.434:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.342888][   T37] audit: type=1326 audit(1760324996.474:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.342931][   T37] audit: type=1326 audit(1760324996.474:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.342972][   T37] audit: type=1326 audit(1760324996.474:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.343515][   T37] audit: type=1326 audit(1760324996.474:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.343793][   T37] audit: type=1326 audit(1760324996.474:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.344821][   T37] audit: type=1326 audit(1760324996.474:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.345275][   T37] audit: type=1326 audit(1760324996.474:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  263.362727][   T37] audit: type=1326 audit(1760324996.474:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.2.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6545c6eec9 code=0x7ffc0000
[  264.574024][ T5921] usb 4-1: USB disconnect, device number 7
[  264.747259][ T7377] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  264.930012][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'.
[  265.005924][ T7388] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  265.251407][   T10] usb 2-1: USB disconnect, device number 9
[  265.651899][ T5886] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  265.801883][ T5886] usb 3-1: Using ep0 maxpacket: 8
[  265.819315][ T5886] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  265.819342][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.819360][ T5886] usb 3-1: Product: syz
[  265.819373][ T5886] usb 3-1: Manufacturer: syz
[  265.819386][ T5886] usb 3-1: SerialNumber: syz
[  265.851881][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  265.895786][ T5886] usb 3-1: config 0 descriptor??
[  266.016127][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.016184][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[  266.016207][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.088118][   T10] usb 2-1: config 0 descriptor??
[  266.147015][ T5886] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  266.171266][   T10] pwc: Philips PCA646VC USB webcam detected.
[  266.335153][   T10] pwc: send_video_command error -71
[  266.335170][   T10] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  266.335290][   T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  266.355159][   T10] usb 2-1: USB disconnect, device number 10
[  266.563804][ T5886] usb write operation failed. (-71)
[  266.569728][ T5886] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  266.570457][ T5886] dvbdev: DVB: registering new adapter (Terratec H7)
[  266.570507][ T5886] usb 3-1: media controller created
[  266.612389][ T5886] usb read operation failed. (-71)
[  266.612967][ T5886] usb write operation failed. (-71)
[  267.952487][ T5886] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  268.072319][ T5886] usb 3-1: USB disconnect, device number 8
[  268.608087][ T5871] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  268.768921][ T5871] usb 2-1: unable to get BOS descriptor or descriptor too short
[  268.779908][ T5871] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.779941][ T5871] usb 2-1: config 1 interface 0 has no altsetting 0
[  268.802018][ T5871] usb 2-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  268.802036][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.802046][ T5871] usb 2-1: Product: syz
[  268.802053][ T5871] usb 2-1: Manufacturer: syz
[  268.802060][ T5871] usb 2-1: SerialNumber: syz
[  269.221906][ T5947] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  269.628840][ T5947] usb 5-1: Using ep0 maxpacket: 16
[  269.644508][ T5871] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14
[  269.773551][ T5153] bcm5974 2-1:1.0: could not read from device
[  270.312299][ T5947] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 22784, setting to 64
[  270.312332][ T5947] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  270.312354][ T5947] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8A has invalid maxpacket 44525, setting to 1024
[  270.312377][ T5947] usb 5-1: config 0 interface 0 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 1024
[  270.312399][ T5947] usb 5-1: config 0 interface 0 has no altsetting 0
[  270.356136][ T5153] bcm5974 2-1:1.0: could not read from device
[  270.375848][ T5871] usb 2-1: USB disconnect, device number 11
[  271.722453][ T5947] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  271.722494][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.722512][ T5947] usb 5-1: Product: syz
[  271.722525][ T5947] usb 5-1: Manufacturer: syz
[  271.722538][ T5947] usb 5-1: SerialNumber: syz
[  271.737898][ T5947] usb 5-1: config 0 descriptor??
[  271.743091][ T7426] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  272.043631][ T5947] usb 5-1: Can not set alternate setting to 1, error: -71
[  272.043666][ T5947] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71
[  272.143277][ T5947] usb 5-1: USB disconnect, device number 19
[  273.921362][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  275.674553][   T10] usb 3-1: config 0 has an invalid interface number: 36 but max is 0
[  275.674579][   T10] usb 3-1: config 0 has no interface number 0
[  275.677735][   T10] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72
[  275.677763][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.677782][   T10] usb 3-1: Product: syz
[  275.677797][   T10] usb 3-1: Manufacturer: syz
[  275.677810][   T10] usb 3-1: SerialNumber: syz
[  275.804380][   T10] usb 3-1: config 0 descriptor??
[  275.827315][   T10] usb 3-1: can't set config #0, error -71
[  275.837973][   T10] usb 3-1: USB disconnect, device number 9
[  276.006004][ T7477] netlink: 44 bytes leftover after parsing attributes in process `syz.1.446'.
[  276.292212][ T5947] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  276.987467][ T5947] usb 5-1: unable to get BOS descriptor or descriptor too short
[  276.992441][ T5947] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.992473][ T5947] usb 5-1: config 1 interface 0 has no altsetting 0
[  277.003640][ T5947] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  277.003664][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.003673][ T5947] usb 5-1: Product: syz
[  277.003680][ T5947] usb 5-1: Manufacturer: syz
[  277.003687][ T5947] usb 5-1: SerialNumber: syz
[  277.008523][ T5921] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  277.161896][ T5921] usb 2-1: Using ep0 maxpacket: 16
[  277.166390][ T5921] usb 2-1: config 4 has an invalid interface number: 51 but max is 0
[  277.166414][ T5921] usb 2-1: config 4 has no interface number 0
[  277.166452][ T5921] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  277.166504][ T5921] usb 2-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  277.166516][ T5921] usb 2-1: config 4 interface 51 has no altsetting 0
[  277.169991][ T5921] usb 2-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  277.170050][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.170066][ T5921] usb 2-1: Product: syz
[  277.170074][ T5921] usb 2-1: Manufacturer: syz
[  277.170081][ T5921] usb 2-1: SerialNumber: syz
[  277.459365][ T7477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  277.459493][ T7477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  277.498677][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15
[  277.513211][ T5153] bcm5974 5-1:1.0: could not read from device
[  277.575316][ T5153] bcm5974 5-1:1.0: could not read from device
[  277.587300][ T5947] usb 5-1: USB disconnect, device number 20
[  277.615136][ T7491] FAULT_INJECTION: forcing a failure.
[  277.615136][ T7491] name failslab, interval 1, probability 0, space 0, times 0
[  277.615170][ T7491] CPU: 0 UID: 0 PID: 7491 Comm: syz.3.449 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  277.615192][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  277.615203][ T7491] Call Trace:
[  277.615210][ T7491]  <TASK>
[  277.615219][ T7491]  dump_stack_lvl+0x189/0x250
[  277.615240][ T7491]  ? __pfx____ratelimit+0x10/0x10
[  277.615256][ T7491]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.615268][ T7491]  ? __pfx__printk+0x10/0x10
[  277.615288][ T7491]  ? __pfx___might_resched+0x10/0x10
[  277.615317][ T7491]  should_fail_ex+0x46c/0x600
[  277.615346][ T7491]  should_failslab+0xa8/0x100
[  277.615369][ T7491]  __kmalloc_cache_noprof+0x6f/0x6c0
[  277.615389][ T7491]  ? raw_ioctl+0x19e2/0x3ba0
[  277.615413][ T7491]  raw_ioctl+0x19e2/0x3ba0
[  277.615432][ T7491]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  277.615447][ T7491]  ? do_vfs_ioctl+0xbeb/0x1440
[  277.615469][ T7491]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  277.615491][ T7491]  ? __pfx_raw_ioctl+0x10/0x10
[  277.615514][ T7491]  ? smack_log+0xef/0x3f0
[  277.615543][ T7491]  ? __pfx_smack_log+0x10/0x10
[  277.615569][ T7491]  ? smk_access+0x14c/0x4e0
[  277.615604][ T7491]  ? __fget_files+0x3a6/0x420
[  277.615614][ T7491]  ? __fget_files+0x2a/0x420
[  277.615633][ T7491]  ? bpf_lsm_file_ioctl+0x9/0x20
[  277.615655][ T7491]  ? __pfx_raw_ioctl+0x10/0x10
[  277.615680][ T7491]  __se_sys_ioctl+0xff/0x170
[  277.615708][ T7491]  do_syscall_64+0xfa/0xfa0
[  277.615732][ T7491]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.615750][ T7491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.615760][ T7491]  ? clear_bhb_loop+0x60/0xb0
[  277.615772][ T7491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.615782][ T7491] RIP: 0033:0x7f0f294feacb
[  277.615794][ T7491] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  277.615810][ T7491] RSP: 002b:00007f0f2775bf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  277.615837][ T7491] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0f294feacb
[  277.615850][ T7491] RDX: 00007f0f2775cfe0 RSI: 0000000041015500 RDI: 0000000000000004
[  277.615862][ T7491] RBP: 00007f0f2775cfe0 R08: 0000000000000000 R09: 00332e6364755f79
[  277.615875][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  277.615886][ T7491] R13: 00007f0f2775bfb0 R14: 00002000000000c0 R15: 00007f0f29880320
[  277.615914][ T7491]  </TASK>
[  277.663505][ T7477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  277.666444][ T7477] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  277.701214][ T5921] cdc_eem 2-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.1-1, CDC EEM Device, 5e:fe:32:40:27:1d
[  277.877541][ T5921] usb 2-1: USB disconnect, device number 12
[  277.880771][ T5921] cdc_eem 2-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.1-1, CDC EEM Device
[  278.174559][ T7489] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'.
[  280.851895][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  281.401780][ T5871] usb 3-1: Using ep0 maxpacket: 16
[  281.404317][ T5871] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid maxpacket 22784, setting to 64
[  281.404348][ T5871] usb 3-1: config 0 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  281.404367][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0
[  281.408179][ T5871] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  281.408205][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.408224][ T5871] usb 3-1: Product: syz
[  281.408238][ T5871] usb 3-1: Manufacturer: syz
[  281.408251][ T5871] usb 3-1: SerialNumber: syz
[  282.332688][ T5871] usb 3-1: config 0 descriptor??
[  282.402214][ T5921] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  282.782737][ T5871] usb 3-1: Can not set alternate setting to 1, error: -71
[  282.782783][ T5871] synaptics_usb 3-1:0.0: probe with driver synaptics_usb failed with error -71
[  283.065522][ T5871] usb 3-1: USB disconnect, device number 10
[  283.374411][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.374437][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.375938][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  283.375964][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  283.375983][ T5921] usb 5-1: SerialNumber: syz
[  283.681012][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'.
[  283.721950][   T37] kauditd_printk_skb: 23 callbacks suppressed
[  283.721968][   T37] audit: type=1326 audit(1760325016.844:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.722247][   T37] audit: type=1326 audit(1760325016.854:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.725498][   T37] audit: type=1326 audit(1760325016.854:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.725766][   T37] audit: type=1326 audit(1760325016.854:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.726036][   T37] audit: type=1326 audit(1760325016.854:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.726604][   T37] audit: type=1326 audit(1760325016.854:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.726875][   T37] audit: type=1326 audit(1760325016.854:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.727172][   T37] audit: type=1326 audit(1760325016.854:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.727709][   T37] audit: type=1326 audit(1760325016.854:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  283.728181][   T37] audit: type=1326 audit(1760325016.854:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7558 comm="syz.0.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65e9b8eec9 code=0x7ffc0000
[  284.667562][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[  284.668020][ T5921] usb 5-1: can't set config #1, error -32
[  284.806509][ T5921] usb 5-1: USB disconnect, device number 21
[  286.393359][ T7572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  286.393885][ T7572] block device autoloading is deprecated and will be removed.
[  295.128823][ T7640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'.
[  296.914237][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.492'.
[  297.079162][ T7678] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  297.801868][ T5872] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  297.851915][  T990] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  297.954638][ T5872] usb 3-1: Using ep0 maxpacket: 16
[  297.957225][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  297.957255][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  297.957276][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0
[  297.957309][ T5872] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  297.957330][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.028234][ T5872] usb 3-1: config 0 descriptor??
[  298.044396][  T990] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  298.044426][  T990] usb 2-1: config 0 interface 0 has no altsetting 0
[  298.047763][  T990] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  298.047791][  T990] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  298.047811][  T990] usb 2-1: Product: syz
[  298.047825][  T990] usb 2-1: Manufacturer: syz
[  298.047839][  T990] usb 2-1: SerialNumber: syz
[  298.140566][  T990] usb 2-1: config 0 descriptor??
[  298.198045][  T990] usb 2-1: selecting invalid altsetting 0
[  299.937313][ T5872] usbhid 3-1:0.0: can't add hid device: -71
[  299.937453][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  299.983301][ T5872] usb 3-1: USB disconnect, device number 11
[  300.196067][ T5947] usb 2-1: USB disconnect, device number 13
[  311.543381][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'.
[  311.589914][ T7784] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  313.513844][ T7811] loop8: detected capacity change from 0 to 8
[  313.517856][ T7813] Dev loop8: unable to read RDB block 8
[  313.517910][ T7813]  loop8: unable to read partition table
[  313.518170][ T7813] loop8: partition table beyond EOD, truncated
[  313.722134][ T7811] Dev loop8: unable to read RDB block 8
[  313.722187][ T7811]  loop8: unable to read partition table
[  313.722470][ T7811] loop8: partition table beyond EOD, truncated
[  313.722502][ T7811] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  315.003225][ T7829] tmpfs: Bad value for 'mpol'
[  317.175752][ T1319] ieee802154 phy0 wpan0: encryption failed: -22
[  317.175840][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  320.652048][ T5851] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  320.901882][ T5851] usb 2-1: Using ep0 maxpacket: 16
[  320.903078][ T5851] usb 2-1: too many configurations: 156, using maximum allowed: 8
[  320.906700][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -61
[  320.906736][ T5851] usb 2-1: can't read configurations, error -61
[  321.062294][ T5851] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  321.254645][ T5851] usb 2-1: Using ep0 maxpacket: 16
[  322.128872][ T5851] usb 2-1: too many configurations: 156, using maximum allowed: 8
[  322.498048][ T5851] usb 2-1: unable to read config index 0 descriptor/start: -71
[  322.498087][ T5851] usb 2-1: can't read configurations, error -71
[  322.524634][ T5851] usb usb2-port1: attempt power cycle
[  322.538973][ T5851] ==================================================================
[  322.539001][ T5851] BUG: KASAN: slab-use-after-free in rtlock_slowlock_locked+0x3793/0x4010
[  322.539039][ T5851] Read of size 8 at addr ffff8880299ea8f0 by task kworker/1:3/5851
[  322.539055][ T5851] 
[  322.539066][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  322.539089][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  322.539104][ T5851] Workqueue: usb_hub_wq hub_event
[  322.539129][ T5851] Call Trace:
[  322.539137][ T5851]  <TASK>
[  322.539145][ T5851]  dump_stack_lvl+0x189/0x250
[  322.539170][ T5851]  ? __kasan_check_byte+0x12/0x40
[  322.539193][ T5851]  ? __pfx_dump_stack_lvl+0[  322.539193][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.539215][ T5851]  ? lock_release+0x4b/0x3e0
[  322.539238][ T5851]  ? __virt_addr_valid+0x4a5/0x5c0
[  322.539263][ T5851]  print_report+0xca/0x240
[  322.539289][ T5851]  ? rtlock_slowlock_locked+0x3793/0x4010
[  322.539314][ T5851]  kasan_report+0x118/0x150
[  322.539336][ T5851]  ? rtlock_slowlock_locked+0x3793/0x4010
[  322.539364][ T5851]  rtlock_slowlock_locked+0x3793/0x4010
[  322.539389][ T5851]  ? unwind_next_frame+0xa5/0x2390
[  322.539414][ T5851]  ? __lock_acquire+0xab9/0xd20
[  322.539437][ T5851]  ? rtlock_slowlock_locked+0x286/0x4010
[  322.539459][ T5851]  ? do_raw_spin_lock+0x121/0x290
[  322.539489][ T5851]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  322.539520][ T5851]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  322.539548][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.539576][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.539611][ T5851]  rt_spin_lock+0x158/0x3e0
[  322.539636][ T5851]  ? __pfx_rt_spin_lock+0x10/0x10
[  322.539657][ T5851]  ? rt_mutex_slowunlock+0x493/0x8a0
[  322.539683][ T5851]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  322.539707][ T5851]  raw_queue_event+0x39/0x2e0
[  322.539728][ T5851]  gadget_disconnect+0x51/0xc0
[  322.539746][ T5851]  set_link_state+0xc0a/0x1220
[  322.539770][ T5851]  dummy_hub_control+0x9ac/0x1760
[  322.539794][ T5851]  usb_hcd_submit_urb+0xde9/0x1a80
[  322.539827][ T5851]  usb_start_wait_urb+0x114/0x4c0
[  322.539856][ T5851]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  322.539894][ T5851]  usb_control_msg+0x232/0x3e0
[  322.539924][ T5851]  hub_event+0x2cd1/0x4a20
[  322.539968][ T5851]  ? __pfx_hub_event+0x10/0x10
[  322.539993][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.540025][ T5851]  ? _raw_spin_unlock_irq+0x23/0x50
[  322.540051][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.540079][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.540107][ T5851]  process_scheduled_works+0xae1/0x17b0
[  322.540149][ T5851]  ? __pfx_process_scheduled_works+0x10/0x10
[  322.540185][ T5851]  worker_thread+0x8a0/0xda0
[  322.540214][ T5851]  kthread+0x711/0x8a0
[  322.540234][ T5851]  ? __pfx_worker_thread+0x10/0x10
[  322.540249][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.540265][ T5851]  ? rt_spin_unlock+0x150/0x200
[  322.540288][ T5851]  ? rt_spin_unlock+0x161/0x200
[  322.540308][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.540327][ T5851]  ret_from_fork+0x4bc/0x870
[  322.540355][ T5851]  ? __pfx_ret_from_fork+0x10/0x10
[  322.540384][ T5851]  ? __switch_to_asm+0x39/0x70
[  322.540406][ T5851]  ? __switch_to_asm+0x33/0x70
[  322.540427][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.540447][ T5851]  ret_from_fork_asm+0x1a/0x30
[  322.540479][ T5851]  </TASK>
[  322.540486][ T5851] 
[  322.540498][ T5851] Allocated by task 7849:
[  322.540507][ T5851]  kasan_save_track+0x3e/0x80
[  322.540522][ T5851]  __kasan_kmalloc+0x93/0xb0
[  322.540537][ T5851]  __kmalloc_cache_noprof+0x1ef/0x6c0
[  322.540553][ T5851]  raw_open+0x8d/0x530
[  322.540574][ T5851]  misc_open+0x2de/0x350
[  322.540588][ T5851]  chrdev_open+0x4cf/0x5e0
[  322.540606][ T5851]  do_dentry_open+0x9b1/0x1350
[  322.540624][ T5851]  vfs_open+0x3b/0x350
[  322.540649][ T5851]  path_openat+0x2ef1/0x3840
[  322.540672][ T5851]  do_filp_open+0x1fa/0x410
[  322.540692][ T5851]  do_sys_openat2+0x121/0x1c0
[  322.540710][ T5851]  __x64_sys_openat+0x138/0x170
[  322.540730][ T5851]  do_syscall_64+0xfa/0xfa0
[  322.540753][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.540771][ T5851] 
[  322.540775][ T5851] Freed by task 7849:
[  322.540784][ T5851]  kasan_save_track+0x3e/0x80
[  322.540798][ T5851]  __kasan_save_free_info+0x46/0x50
[  322.540824][ T5851]  __kasan_slab_free+0x5c/0x80
[  322.540839][ T5851]  kfree+0x197/0x950
[  322.540862][ T5851]  raw_release+0x191/0x260
[  322.540886][ T5851]  __fput+0x45b/0xa80
[  322.540906][ T5851]  task_work_run+0x1d4/0x260
[  322.540926][ T5851]  do_exit+0x6b5/0x2300
[  322.540944][ T5851]  do_group_exit+0x21c/0x2d0
[  322.540963][ T5851]  get_signal+0x125d/0x1310
[  322.540995][ T5851]  arch_do_signal_or_restart+0xa0/0x790
[  322.541018][ T5851]  exit_to_user_mode_loop+0x72/0x130
[  322.541033][ T5851]  do_syscall_64+0x2bd/0xfa0
[  322.541057][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.541074][ T5851] 
[  322.541078][ T5851] The buggy address belongs to the object at ffff8880299ea000
[  322.541078][ T5851]  which belongs to the cache kmalloc-4k of size 4096
[  322.541095][ T5851] The buggy address is located 2288 bytes inside of
[  322.541095][ T5851]  freed 4096-byte region [ffff8880299ea000, ffff8880299eb000)
[  322.541115][ T5851] 
[  322.541120][ T5851] The buggy address belongs to the physical page:
[  322.541139][ T5851] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x299e8
[  322.541157][ T5851] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  322.541173][ T5851] anon flags: 0x80000000000040(head|node=0|zone=1)
[  322.541195][ T5851] page_type: f5(slab)
[  322.541212][ T5851] raw: 0080000000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  322.541229][ T5851] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  322.541247][ T5851] head: 0080000000000040 ffff88813ff27140 0000000000000000 dead000000000001
[  322.541264][ T5851] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  322.541281][ T5851] head: 0080000000000003 ffffea0000a67a01 00000000ffffffff 00000000ffffffff
[  322.541297][ T5851] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  322.541306][ T5851] page dumped because: kasan: bad access detected
[  322.541320][ T5851] page_owner tracks the page as allocated
[  322.541326][ T5851] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 12, tgid 12 (kworker/u8:0), ts 266457715815, free_ts 266375054521
[  322.541359][ T5851]  post_alloc_hook+0x240/0x2a0
[  322.541376][ T5851]  get_page_from_freelist+0x28c0/0x2960
[  322.541396][ T5851]  __alloc_frozen_pages_noprof+0x181/0x370
[  322.541416][ T5851]  alloc_pages_mpol+0xd1/0x380
[  322.541435][ T5851]  allocate_slab+0x96/0x3a0
[  322.541457][ T5851]  ___slab_alloc+0xb12/0x13f0
[  322.541474][ T5851]  __slab_alloc+0xc6/0x1f0
[  322.541493][ T5851]  __kmalloc_node_track_caller_noprof+0x2a8/0x7e0
[  322.541509][ T5851]  kmalloc_reserve+0x136/0x290
[  322.541531][ T5851]  __alloc_skb+0x142/0x2d0
[  322.541552][ T5851]  nsim_dev_trap_report_work+0x29f/0xbc0
[  322.541572][ T5851]  process_scheduled_works+0xae1/0x17b0
[  322.541595][ T5851]  worker_thread+0x8a0/0xda0
[  322.541609][ T5851]  kthread+0x711/0x8a0
[  322.541627][ T5851]  ret_from_fork+0x4bc/0x870
[  322.541650][ T5851]  ret_from_fork_asm+0x1a/0x30
[  322.541675][ T5851] page last free pid 5940 tgid 5940 stack trace:
[  322.541684][ T5851]  __free_frozen_pages+0xfb6/0x1140
[  322.541701][ T5851]  __put_partials+0x149/0x170
[  322.541719][ T5851]  __slab_free+0x29e/0x370
[  322.541739][ T5851]  qlist_free_all+0x97/0x140
[  322.541759][ T5851]  kasan_quarantine_reduce+0x148/0x160
[  322.541782][ T5851]  __kasan_slab_alloc+0x22/0x80
[  322.541796][ T5851]  kmem_cache_alloc_node_noprof+0x23b/0x6e0
[  322.541822][ T5851]  __alloc_skb+0x112/0x2d0
[  322.541844][ T5851]  netlink_sendmsg+0x5c6/0xb30
[  322.541875][ T5851]  __sock_sendmsg+0x21c/0x270
[  322.541894][ T5851]  ____sys_sendmsg+0x508/0x820
[  322.541909][ T5851]  ___sys_sendmsg+0x21f/0x2a0
[  322.541923][ T5851]  __x64_sys_sendmsg+0x1a1/0x260
[  322.541938][ T5851]  do_syscall_64+0xfa/0xfa0
[  322.541962][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  322.541988][ T5851] 
[  322.541992][ T5851] Memory state around the buggy address:
[  322.542003][ T5851]  ffff8880299ea780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.542018][ T5851]  ffff8880299ea800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.542031][ T5851] >ffff8880299ea880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.542041][ T5851]                                                              ^
[  322.542053][ T5851]  ffff8880299ea900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.542067][ T5851]  ffff8880299ea980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  322.542077][ T5851] ==================================================================
[  322.619507][ T5851] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  322.619531][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  322.619554][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  322.619568][ T5851] Workqueue: usb_hub_wq hub_event
[  322.619592][ T5851] Call Trace:
[  322.619601][ T5851]  <TASK>
[  322.619609][ T5851]  dump_stack_lvl+0x99/0x250
[  322.619635][ T5851]  ? __asan_memcpy+0x40/0x70
[  322.619661][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  322.619682][ T5851]  ? __pfx__printk+0x10/0x10
[  322.619711][ T5851]  vpanic+0x237/0x6d0
[  322.619729][ T5851]  ? __pfx_vpanic+0x10/0x10
[  322.619745][ T5851]  ? preempt_schedule+0xae/0xc0
[  322.619770][ T5851]  ? __pfx_preempt_schedule+0x10/0x10
[  322.619799][ T5851]  panic+0xb9/0xc0
[  322.619815][ T5851]  ? __pfx_panic+0x10/0x10
[  322.619833][ T5851]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  322.619871][ T5851]  ? rtlock_slowlock_locked+0x3793/0x4010
[  322.619895][ T5851]  check_panic_on_warn+0x89/0xb0
[  322.619917][ T5851]  ? rtlock_slowlock_locked+0x3793/0x4010
[  322.619940][ T5851]  end_report+0x78/0x160
[  322.619968][ T5851]  kasan_report+0x129/0x150
[  322.619988][ T5851]  ? rtlock_slowlock_locked+0x3793/0x4010
[  322.620016][ T5851]  rtlock_slowlock_locked+0x3793/0x4010
[  322.620040][ T5851]  ? unwind_next_frame+0xa5/0x2390
[  322.620066][ T5851]  ? __lock_acquire+0xab9/0xd20
[  322.620089][ T5851]  ? rtlock_slowlock_locked+0x286/0x4010
[  322.620112][ T5851]  ? do_raw_spin_lock+0x121/0x290
[  322.620140][ T5851]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  322.620176][ T5851]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  322.620204][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  322.620230][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  322.620261][ T5851]  rt_spin_lock+0x158/0x3e0
[  322.620286][ T5851]  ? __pfx_rt_spin_lock+0x10/0x10
[  322.620310][ T5851]  ? rt_mutex_slowunlock+0x493/0x8a0
[  322.620346][ T5851]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  322.620374][ T5851]  raw_queue_event+0x39/0x2e0
[  322.620395][ T5851]  gadget_disconnect+0x51/0xc0
[  322.620412][ T5851]  set_link_state+0xc0a/0x1220
[  322.620436][ T5851]  dummy_hub_control+0x9ac/0x1760
[  322.620468][ T5851]  usb_hcd_submit_urb+0xde9/0x1a80
[  322.620496][ T5851]  usb_start_wait_urb+0x114/0x4c0
[  322.620615][ T5851]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  322.620651][ T5851]  usb_control_msg+0x232/0x3e0
[  322.620688][ T5851]  hub_event+0x2cd1/0x4a20
[  322.620732][ T5851]  ? __pfx_hub_event+0x10/0x10
[  322.620750][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.620781][ T5851]  ? _raw_spin_unlock_irq+0x23/0x50
[  322.620806][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.620839][ T5851]  ? process_scheduled_works+0x9ef/0x17b0
[  322.620865][ T5851]  process_scheduled_works+0xae1/0x17b0
[  322.620907][ T5851]  ? __pfx_process_scheduled_works+0x10/0x10
[  322.620941][ T5851]  worker_thread+0x8a0/0xda0
[  322.620971][ T5851]  kthread+0x711/0x8a0
[  322.621001][ T5851]  ? __pfx_worker_thread+0x10/0x10
[  322.621024][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.621049][ T5851]  ? rt_spin_unlock+0x150/0x200
[  322.621083][ T5851]  ? rt_spin_unlock+0x161/0x200
[  322.621105][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.621134][ T5851]  ret_from_fork+0x4bc/0x870
[  322.621161][ T5851]  ? __pfx_ret_from_fork+0x10/0x10
[  322.621197][ T5851]  ? __switch_to_asm+0x39/0x70
[  322.621225][ T5851]  ? __switch_to_asm+0x33/0x70
[  322.621251][ T5851]  ? __pfx_kthread+0x10/0x10
[  322.621272][ T5851]  ret_from_fork_asm+0x1a/0x30
[  322.621304][ T5851]  </TASK>
[  322.621456][ T5851] Kernel Offset: disabled