last executing test programs:

1m58.574398492s ago: executing program 2 (id=6312):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004"], 0x122}}, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
r3 = socket(0x10, 0x1, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x100043d4, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000002c0)=0x1)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'sit0\x00', <r6=>0x0})
sendmsg$inet6(r3, &(0x7f00000005c0)={&(0x7f0000000200)={0xa, 0x4e24, 0x401, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000680)="8c21279bfd725d0987a4298d43d137e75457f4051bae7bcbfece701e969a2a6f2c2e3dc11def97738c2218a680b1fd99b4655a2c9af74ea89c98dd5eaa1a266f445360bf38d0352851ce5ef462d707802b093b6fce9f3a051ce41711d112b9b535c987dca866788a38e8c401", 0x6c}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="480000f70000000029000000390000003c0601f6000000002001000000000000000000000000000200000000000000000000ffff64010101fc00"/72], 0x48}, 0x4)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
getpeername$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
r9 = accept$packet(r3, 0x0, &(0x7f00000003c0))
connect$packet(r9, &(0x7f0000000400)={0x11, 0x8, r6, 0x1, 0x1}, 0x14)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r8, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r8, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4)
recvmmsg(r8, &(0x7f0000006740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/185, 0xb9}, 0x8001}], 0x1, 0x45833af92e4b39bd, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000030500000000fcffffff00000000", @ANYRES32=r5, @ANYBLOB="00000000000000001800128008000100767469000c000280080005006401010008000a00", @ANYRES32=r7, @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

1m58.299910875s ago: executing program 2 (id=6313):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000005940)=[{{&(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="405910a61da44c2eb0748ff7fac145a395c6c5640ccaf21527dc1ff4ec1d6e92010b9f4e8e9f1f51da2b34d2d6159550ef78a67f77cb1e1715b23d5b98939ff3260a462032ff62d07011d0992c16", 0x4e}, {&(0x7f0000000e40)="1e638dd1", 0x4}], 0x2, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb22}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000f80)="7e63f3beefbdc31f1f661645a46fe5d593171c43b075c979f6da487d6e0619ca9cd32b5712b1637efc5fe02ac0a1c54857e6c83917b6e300a03f95fc5f38708f2ddbfe4b42d603f6ee3aebe2d5b01667b3a47e961cbea075426b694d085e96dd4b3c5241c4316133435a0da1b967", 0x6e}], 0x1, &(0x7f0000001040)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001100)="2cf2e68db75a26a00232b4118650351b5f63204a01ba526c2fc3c82676492577feaa19605d35cb3ad14d11ceb21e0069ac07a906d75b9dc1d18ae000d544900ce5913410fd3c9bdfc6c07a104531e56e07d02027a089785e3b1af62d413a6c4b482a163cba258849ee592ba48a6d2cc4eb6c1aa8c943df6415c95929070ffe4e9a81fa24ec46fed1fbd92c5a5f34b582bcbc021f0e31ccc81bad025dd2b116e92d9c3812c10d9261713c6ca75fdbe4ffd01a21fcc437dbdfe486bc2d0db9854f7ee3c353d9053db30bcfb9d3fa73dcab1aee88b28555dee0f4cc1fd0149c2e", 0xdf}, {&(0x7f0000001200)="d73e2fc2780b90a9e743d75fe29b6e93829efa10be3e3524fc8af111a8e09dbe92ea8b58de7c86ba1dea9043ada4c8c2b5e6edc8d9c2739cbbb509b01ed28f7c32de59972260cd974686435ed92e558e356407a5b1415a54d5d9cd2d4901130a720b9f5833683f1b225fa0379465bb5eca4cd0cef1801ace6f033a410065016a43739ac41abd1001e39988d8125e58f605e8028faa1ccdc12c8d99501d3103cfc168f3f8647956986d287940fa", 0xad}, {&(0x7f00000012c0)="1a7b20924c7ebac4fb9e13ecd6fd375f52e7d0140ec1a9446fc65ce3c292d64c152c8d0a541d79acf51041de41eb38dd06dcd2db93fd62a58bb570a395d98914b95a1ed9", 0x44}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f0000001340)="552e0d575c7b9ca8a0932188a60bebe2536e23498bba441810f39bbe401b67c281b2ab3ee93430f676f4b8b747ed27ce43c00cdb39582bf00dacb4efedfeffe4422ece708a39d867a0dcab2f8f753ad66fe244b4a829d5941df08c8ee3f3a2359baba381bb66206eee3f5011783e7c901032a8cc1b29bd65aaa97c6d02bed810ad71238d9719d4d4f3d63d06c2ac9d1d70ba2834e2d3b30dd97a4688fcaba39ae5f2d250b21367fc09bc010844f21fb3c8c595f4b14b2af84832042c", 0xbc}, {&(0x7f0000001400)="01305ea098a5a0e8dff6c032f6fe472c24fcb2b47721", 0x16}, {&(0x7f0000003700)="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", 0x1000}], 0x7, &(0x7f00000014c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6e}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @empty}}}], 0xb8}}, {{&(0x7f0000001580)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000004800)=[{&(0x7f00000015c0)="8796b1c4a0e8c0381408270d632126690bfcb449e61bcd46b71a2acca13a05a37ed745e5abcf6c34160624a58af0be7c94cfcbec266d54fa1b601b7f970de84e30e0ad3b78501b6bdac6a36bc77ef0837f0306cfdb887e109e317414cb99d265e6a755c84bd7be05369d1135fce4712ab2ec40f1141c3efac2cd84785fa9db6cea63704f317a21c320cd3e177d2d4545f40de617", 0x94}, {&(0x7f0000001680)="9f5e5d14e32105dced7d00249bd6edd855c3706cdffe654e2122eeec74dfa90f29d483d89dc15d28cf3c529633ca8c2fac5429de2a939b29b50a730748b64e58b13c73d4dfae9cca35d68f5e", 0x4c}, {&(0x7f0000004700)="82eb85a096eac73a189656cb600ae361b6199edfd63e1f20e3c5d6d2a6474c036326d7380fe0bcf0a031a5d21537437e7bc980b6167d3cc07ea92dec0e34311cfb552d759722b579182a41f767cd849b5f7795820d97c4b68c57cc68fe94ee86af1bf7c7c8cb3286de0010b8b97c0a9c4b83c2d5d3d4128474556a7a539a04c2b07225c17cb4fa66fc96fe1f01abf15577e8dcc8769b8bca019302b4d2a723a73a8bbec3e587da1ae4b280e05b9cc9ba95c1c2757e94cdfb0bd4774a5d5fc291e934ce9a2a59f8602c3d9762dac6c8fe613859a07f67bb3649b818cf6fe5814e1c492800461da212931943a392c9dd1db57a", 0xf2}], 0x3, &(0x7f0000004840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2380}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}], 0xe8}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f0000004a40)="36f638ed7f", 0x5}, {&(0x7f0000004b40)="b42443", 0x3}], 0x2}}], 0x6, 0x4000c50)

1m58.255238118s ago: executing program 2 (id=6315):
syz_mount_image$fuse(0x0, 0x0, 0x2000080, 0x0, 0xfd, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000200)={0x20, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4})
r5 = fanotify_init(0x2, 0x101000)
dup3(r5, r5, 0x80000)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
socket(0x1e, 0x2, 0x0)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0)
syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)

1m54.839459499s ago: executing program 2 (id=6325):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r1, 0x0, r0, 0x0, 0x46)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xd7)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100001002bbd7000f4dbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000008000200"], 0x38}}, 0x40)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x200000d0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000001480))
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, <r7=>0x0}, 0xfffffeef)
write$FUSE_INIT(r6, &(0x7f0000002300)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x8695c3813a9bd78d}}, 0x50)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x3fb, 0x0, 0xc000, 0xffb, 0x0, 0xee00, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m52.950023947s ago: executing program 2 (id=6331):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r2 = dup(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
cachestat(r4, &(0x7f00000000c0)={0x4, 0x8000000000000001}, &(0x7f0000000100), 0x0)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0)
write$sequencer(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0293"], 0x9)
ioctl$SNDCTL_SEQ_SYNC(r8, 0x5101)
read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0xffffff0a)

1m52.527766227s ago: executing program 2 (id=6335):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
close(r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="7c010000190001000000000010000000e00000010000000000000000000000000000000000000000000000000000000100000000ffffffff0a00800000000000", @ANYRES32=0x0, @ANYRES32], 0x17c}}, 0x4000080)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800})
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

1m52.145064236s ago: executing program 32 (id=6335):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, 0x0, 0x0)
accept4(r1, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r2, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040)
close(r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="7c010000190001000000000010000000e00000010000000000000000000000000000000000000000000000000000000100000000ffffffff0a00800000000000", @ANYRES32=0x0, @ANYRES32], 0x17c}}, 0x4000080)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x9e1, 0x0, 0x0, 0x1, 0x2, 0x800})
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0xe, 0x0, 0x0, 0x7, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e24, 0xfffffffd, @private1, 0x8598}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x81}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0xfffff800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}}]}, 0x70}, 0x1, 0x400000000000000}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000001e40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x100, 0x0, 0x6, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

11.497677149s ago: executing program 4 (id=6666):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
setgid(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000000c000000140003800400020008000200ff7f000004000100180001801400020076657468305f746f5f626f6e64"], 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4a69b136", @ANYRES16=r1, @ANYBLOB="10062dbd7000fddbdf2503000000140002006272696467655f736c6176655f310000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000200)="6690baf80c66b85457c28466efbafc0c66b8aa75000066ef0f01cb0f0926dde4ce26660ff48900200f20e06635004000000f22e00f08ba420066b8ff6f00000f01d1", 0x42}], 0x1, 0x2, &(0x7f0000000180)=[@flags={0x3, 0x20002}, @dstype3={0x7, 0xd}], 0x2)
syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xa4, 0x37, 0x31, 0x40, 0x413c, 0x8193, 0xfb23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x1, 0x1ca0c6c036c843ff, 0x2, [{{0x9, 0x4, 0xee, 0x1, 0x0, 0x99, 0xf0, 0x68, 0x7}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x23})

8.514255151s ago: executing program 4 (id=6675):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000780), 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="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", 0xff}], 0x2)

8.148163259s ago: executing program 4 (id=6676):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, 0x0, 0x0)
sendmsg(r2, 0x0, 0x44084)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x80)

7.854763688s ago: executing program 1 (id=6677):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x80000001, <r1=>0xffffffffffffffff, 'id0\x00'})
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000080)={0x69939c87, 0x10000, 0x2, r1, 0x6})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="700000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000010004000128008000100677265003400028004001200080004000200000006000f000100000005000800b00000000400120005000a0001000000050013"], 0x70}, 0x1, 0xba01, 0x0, 0x10004}, 0x0)

7.59210319s ago: executing program 1 (id=6679):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904000000"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000340), 0xc91, 0x10000)
sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x30, 0x8810}, 0x40040)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0xc00443, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x448082, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)

6.943976822s ago: executing program 4 (id=6683):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7c0, 0x1125, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x16, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x4, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x5, {0x5, 0x1, "a7ea31"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1})
ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r5, 0x0, &(0x7f0000000440)="1ba3d25000dee4dacc82bd13c2a72192a067bcd9a902906e6f07ce096d023792c2158f3b043d21cdf9c19c29507f7e3ae64597327e1af9fb7080623dfb49fbccfccfb09951f020be52edfdd4013f27dc0121255e35bf8c56354f3d5576a96d0237f0a6cb972a24e756fadce7471d2e97f5b3a39daf628ae73a07018035209d4d408d5e12366d1452836f4a48724a717e1b77135716086efc0b16a7fdfeecd5cf82d84dc7e864976b5d84732d47bd8757bf3a77f9a15d851028dad9ca2f082779eeb978864b7c84694f7c7f71e384ba529ae2a29dff32a853d9adc55916ec45900f01f715b090e689142506bc9d42a847fcefc2f42b192359a4465d8812cbe2c384499c8dd6c54856a9a1b89ed860936c3133998db1e78f78086da1a5b7049aef5db5cafe2cff29dcce27c1341dd548f045e9356ced389fa5e8771ce102313474bf5b6f2a66ee2f43ece9ad41ae8171205b5798f5ded0b6a58247f1ea84db051fe492d57b462c015ba302d4ffe6977a0c0bb69c7efc3b5733443225c172a32198255ec737176ffe29c29208e5e03c61843999e01d6e6371e4082ec84100c1b328b5d2e4f4fa7f77415f4acb581ff5e84dd268d94608a7f7bafba8e9edd8f5bd36ce1187ba5c9427b533e09cd99b674cfc1e353477ab75399d3055fb9376678a074fdb7d99a77e238fbba13d5edfffb94dd8b47f547b177a42b2bc53057a7d5af1ae1aa21cb278c970d2f2dedad2746e0866cf738002208d5bb387baf4c36b017eeefa9edc86b2c5e6106f043e3df7b104c17808aef80b24171bbd29f20823b26525727c21cff856b30fe53049e95b72692702832eed29e1c9ee595922dc2cc38dc32ea799d4c3ab82283f5ab491a56da587a06c7f7ed79a7162720c42011d2a3d219af2a1bc1d0851f4e15c7641f0dd08ddbd904651106b6eaa24cf032edc085e53ea33310e8e21c3d10503c981289eb549db311ab486d6ad909c9f42018cf8203e793370712d8f4db5d890310b068cb3ea71af371ce77b61bd3461d2f939b48d8a7d476be4bfc7bc0c7b9e6ddde7e5a57f623294a2157a2fa6629f3c4ab5cf3b26257b67b91283d8c725e99bc202d4192c2514437a3789f24bacbd0ee2faee5cc2df56befd868addd733f99d797dbd9c6091979d0f2e059e93d5c91a2a8388c005b98eb83fde94383d217ac734b06bae55e766a73af351fbf96c6e4214cc1ef6b3c48f59f4367f8a6ba6f832826f98f4c05cbc5980633cb3f0c9e512b82b95cb5b529f997ea7b3689923a62917490d70265707dfda5bc3f1c811c35ea775659c644ce7f6358154585757667e84a0fc64b5ebdf1202c433a40bc3f088a4874882471f567747b6e279b0659c85da7c9903d7dbf830acc861d380db9a02d52c9eb211b2a8c6a71a113ef4c51a420f5abdee266a9bb5cf56a3cfebd5bd9f2e91109a7863572d141957da7972babe323303a1a3ff6c840fb1cc7e80b113c2907f39a22bb4df71d8a1edbcd2e78558752ff70d91f65601343624ba33d2c76f0403850c77de2a3e1c32bec040d134a91ae3d06074850d09d0b92147f49027f5458fa219c9f7041920046424edd84741b783d585c62644917a81913312259bbb9d83ed86ef5f39420b464a4c23f40823096a2f5644630097a4a2bfcf26c316ae4dcaaf33e2a278d6d7300fd2d7f85aacba1adf8d9fe77bd420174b42b1b17942aa482dc0925d85b4d5ad475be46677812d122ccf22b49ed44ee12744ebbca79da304b9bb9dc97cb44eb51a56b5dc51dbf2b3357c6fa1f8fad71289bb63c3c8481e18b910d8599ca944f11975d5ee9e3ec7cc465976a97e0cb4eac6e77718b4bc4b2a54411bd770ddb29ffe825610e21ec91d322314daecfc595303aaf133ba7f9129bd818bd9623bc1fcf23136d140a557eaa8046faa72cc5497616423df0d7f5ee91ff686f0edc71b5391e96cde2ce9f71aa8cf3fdd3b7f50a9f6afd0aae62a3ca6df97641ce54118045f68670bc314395a1f4e1786fd497011e5de21ec0f32a6922a350fd31c3f7639dbfcf1a08a4a5fb979051b484ab3ca292b083f463b6f78d81193512f416f0aa0a2b6e9a9e3fcb2433dee1d4eb6051711613725c97830acc2dd8821c24d1c7c024ac06892e6bfe7b174df12a4a8560f12a7e267783bf951585099c957982d7c2b6ae013c9424de81b7c6efcb86c9f6e77952438c57743c50f4f8d78cc20c5c29664774d139e8e38e42d2b1c13071da613737f5df012b84a68d044d5bda193176a92f76f0c75c9d94e17e3ec278e319164ccdd06f3706f3667842068c6d786e6ab71dad7de9d3fb2628bc2f6f275fd78e8d2129a7fa1bd6831bdd4841f4f13203e66c89655035c5933b3708eba1e1a773cbf923b2e7bc818bf66972c42c51a7c2fd225af5595291676f29fba1ddcedf99881d08d1895d0da02d242fd1f616ab72e4d19e18687f2f24e5ed7b995c1bbf19cd4b4db8465807f9fca2c4d5790c24b625e852c2ded829adc1922ec2159f2bf3bd170837e41338997e457828b7b80871ee57edac224f51330e5ef80452cb845c76e1c918c0ced9516db0fcc816c414db5d3798ab047a455f2de724217a16fa6e9db5033f5b14293f29fcbf599c756d2c06a285caecc056b7fe53fe5ceb879a6a025f5bb385493e1935ff03d89d0d322aad9a2cca431373c7cc1facae6d38c71ad93e8f38b9be96a07a4a69a66cf289c776a28227d9d6adb9b54d2af701ba86724e857fb51d4948616b53f49f0f6df166a6df5647cd3d2b2c1c3d5419f0f19b1dd94f504bdd4f413366d7890a8e5f8408b81edafb9018deb83d11220389eb214aedd1dc3c7b0c399d1e5c2f49fd7d9c051053cc09e999fda9fede1b24ba001d331407f713b609314c51129f50861d02c9b38c2100ec9a0ed029cffa0cc3f45aab22724c416319dce24c4361fc2b43759e77e57c67589be30d304f85e83878453aeedf84303e1f467337aff3490331d71f1aa44e219b499f308d1b2709df0d76879a2d1a097a81d5dbb19ae977efc34a5108138befe853daf5e015ca8a9283f4ab8cf126743e8f7478b0a3ac7eaab9523d524e1fb921ad4cd9733c1b9a183753b0ff6c8193536e8d3abe02a8f51033312f91c5863711aaee39efaa166d8228743e24873e8d5eb0a3936e22b9c1926f6c522b86bd3a2fd87569ef8636a05a55ee1129d1c6d51776abea85755316f4cbff07a767473c7240af64d42737d12b94f157fe4406a3b66b15e40371a2477651c30a656f0d5076577090764cc46d2f55a68ad6cc5daa6dea3a2bf459a1f0137f673f7cb08ab4c0823ec2cfc7dcce07ea6d32d9b59dc2cf5095efaff524fee45d3e6b134192530857bd0815566218e83f35943622ec3244d3e30d75f543dec1e77f64df87d93c58dbb4e43ab99f3c33741fc132d13c5cbeb1b548a6dcedd14eb75f51d3159c3afe83eea25fd4c51695a527ffe2558d6add5aec66d63285a81f85635a5385276e53aa168b8ebc5f848caa9d437efd790b805fc41428e382a37ab44321d8415181a0d2786fb31ac116fa597a3590bacf66e8c678efa4493ca3a2d41d54c3bbf9a0bbb5206137a07c64d17b4e4d9d272c5485baa21ab8c8c6473f2cfb9827548bd3e0e1872221678ba339116fac59b5baeaafb78ad7780f4752cca36e5ea9b1c7fdc33ca2674d265d3beb44ba551158fd05c0fa1f5d1eff11ca4b93ef7d8695cf876cbcfa94cdcb29df0f019042731a55486c39a40e2aa4b6f825eb08e9205733c8cc43a41cdd7ff207d32c82a1d72bc93c5635ce0127aca5ca8fa90287a6af3884e8a1bee5883cb5164983f24e216755ca4a35071642531dd8487cc43294308728b46c8b79820d4c64b5861cfd877d9ea1f03985c81668244f57c6fba5670aed516f6b45a439e36e25376f6fd0130ec58001254b29035f997bc05c86dc83a063f114359ffc1bbfe354daf6951cc1455f4d0f38efde63d0a58ca8129ae003236e4e0f73f481c4df36486fb36b202f55d1ea848474f544db391e02a5739b2306ffeab315216a6dbebfa1a8aab498307086df746f2727eca03d41f7ea5c61bc58956f46706ee38456d03d6f3cebedb19d4985e272a10e067002a030c21bf5a1706acbafdcda2a5aff11d64ddc75dfb57e0191b3067fa8767f7015874a6c0f6261e089ce84f89dd9047aada4fcdbec4d4471f7e57e816eeaad3ba97387ff058fc3ca6e22073d1c7cb46bf6078e00fa557062cbfc977a017ec5ec0e4c24eaec7550a9e78db51db081b5a457b367983e7693579c1314a3fc7127c4bcec96c142f5af49b413efc7ab0dd8662f10f84c7932010b414c009c763ea167f2da4e50f8a1f8a3b2f725b47e9ac3652237455619dd8c3efe9dc3982d654782a10cb2d5337170e782bd0cf4281015f223777cdb0445f27de8a13c04c5b39a525285c60f78443a21329494d05ed859151ebd4627f988e8ad2b29f88b27bc4a9e0f6a6ad513324d613a6779a4c27582134bc1907e65bb6c6b0a832ab45229a241de79bc3b1f917d7bc4de556dcccec3ab5b6a419f7d686f77a183ede2178ceadeb631946a62820ccbdeb4e0035f2a047c3abb13ca622fe51c26a7c61567c133bc91e10077214189492f1fa0b4478170ddbf3aded6c2184e9cf02d4bb6455d27703400b5ef4eedbf28404dc20a3c29264e1e30ded4e2aa4b7993f92b0619fe1ba0be9bd52ae0a9b929bfadd77a1e737b061d78e73be876309a93ec7cfdcad6bf02bcf932eabd14badd9e59d367d210d37cba107c82e8424700e8a7f835f787a981b2800e595ea4b9e3821e4138208596ef3d592ae2d0cda387207b8473443f7de5bd2158262b1ce726ac9f2e8a4006e292fdb2c58af4691427f5beec7ef9adaea015e1353ba16cab471e2fa4951200d953ea893e446b90284cf033f58d5a6d0c05a335c6a35bc5fddece11f2d1666e6d283df32d722bffcb82be5165ee09cf3cb4ad0cc7097be28aa0bc0371e06056d30a0a6e56e02caf432afc259f592ac6f19654f996de3923f8d85b8525d99f49c7c51520eca22c835fb71dcecf30e4d954dfb1962fe464b674a99b9b264782de6a11b83caccf80510c85265717d8e8d45f79524253d3b149102818490a3d7f708b16c624816161507c56e0b30dcfe8f9e5806950d1bf78878c0b14d86f9333dfedd892bacc778b5fbffb3f82bab766c1fd89b97bba2384c961567e563ff30e07a4a02cf27761f3a74bd5b460374bff9789939fa088090c754096d4f2b3148f0f9fd22792cc397193ea93e85a346a48ac533be9b088b69895b16ad195045455a3821ac2f96db02c347328f8b6ad1a8db10c7c8298c830a4695105fa380628639bd288764d7b3cc4d84d9523d6b7d40a02a8b183b6a976819a2b17f951936c17fe724cf096891436989baa6c49774d667a188e06b99b4f24394f3e6bfdc22e5af9559f8ad560920449c2ab4151a09e08c68afc02c8a3de1119aa3ba4c71b6f5a59b20eb4211915ec0fd61045640f4f8a96f0bf277c03c05f2088cc94b2bd39f90f37f3c13825c469c4012ff44fee89915f809c6477e5ad2144796f99070cc92ad1d80b02a0b79299b5640532fb43fad9cd1a61995fed3486be84ea3f97d8096cc31443a40c23704b4376394edd28aa9c3891525225ec1ade2b876cb2398264ffef9b8085049359743c2cd1d656084893d3993f3c1b1f98dd035b2fb82730ed117043fa2f4823cca9c89146c4d6a70fd6024be879ab791ca9701f6bc4c86bd9d4e366833ac1fb0506a9e71b4bfedeedd924042", 0x1000, 0x8})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0xb0, r3, 0x300, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x16, 0x34, @random="ce984455eba9bcb9bf88fb7841bfa7dddf6d"}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}], @NL80211_ATTR_KEYS={0x70, 0x51, 0x0, 0x1, [{0x4}, {0x68, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bfbf05f6f7b2294be22f29fbaa"}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "21df89c9fe131dd69a07f0e762"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4c040}, 0xc0)

6.816500183s ago: executing program 0 (id=6685):
r0 = socket$inet6_sctp(0xa, 0x4, 0x84)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x1, 0x1, 0x4, {0xa, 0x4e24, 0x5, @mcast2, 0x80000007}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031600590214000000002f1eafbcf706e1050000006558000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x48804)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}], 0x1c)

6.591916297s ago: executing program 0 (id=6686):
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0xfffffffd)
r2 = socket$inet(0xa, 0x801, 0x84)
listen(r2, 0xfffffffd)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0xb, 0x4)
listen(r0, 0x8)
r3 = socket$inet(0xa, 0x801, 0x84)
listen(r3, 0x7)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff0806000108000602000000000000000000000000000000000000ac141400"], 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
listen(r4, 0x8)
r5 = socket$inet(0xa, 0x801, 0x84)
listen(r5, 0x1)
r6 = socket$netlink(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

6.541957489s ago: executing program 0 (id=6687):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x2})
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="82820130297024f9de15ada1d80102d7abd344ff6afc32e65ff9683081c6db79adb8150a12821b1cb19061af2a49e373e30084ff4fdbab1a4a67c706732612463ff071b7ee7c727858082d744ceb6ed5c8789073d054b333fbc0700e7dd84adf774afdf785c2d138129e1a909c0a17ef06ec8b84", 0x74}], 0x1)

6.458276765s ago: executing program 0 (id=6688):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c)
r6 = socket(0x2, 0x3, 0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x8, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001200010a"], 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2512000000080003", @ANYRES32=r10, @ANYBLOB="040081000a000600080211000001000006001a01040000000600"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="16000000", @ANYRES16=r9, @ANYBLOB="040027bd7000fedbdf25440000000400bf000400bf000a001800030303030303000008006b000d00000008006b0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x51)
syz_usb_connect(0x2, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b6c12300cd0608012cb7010203010902700001078200000904e20401a4684d7c550791db326a75c08876fbcd6087551d6499baa1f0f5f20a5cd621b93e26b861d411ad3d194404300ce6356f8598ca8c403c28087ec67815a07685214ca2513a6507a67c0253ed3f49eda802ab8119f3ee593bb40a09050000100032fd03"], &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x1, 0x7f, 0x81, 0x10, 0x8}, 0x110, &(0x7f00000003c0)={0x5, 0xf, 0x110, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "519843b199086dca8ad4fdd1cad4adf8"}, @ptm_cap={0x3}, @generic={0xf4, 0x10, 0xa, "3ff0613bbd35cf5e218ccd6620e9abf8e4ff8019b6d16a30ab71e01b782a5c10dc6b1e5ce9a2dfe31fab7cdb40e53c0513d9460ffab56e339b4f732097774706971f9b9a6248f75818c29a98853ecd01765af50af29a91a2bdfdc457efe067aae31e0ac9414f48c411afee0a03af700262f426eee89632fe025e11a2322b33742189b948a5133834fd95b0523505f4ef44133721f40c9fa623e3a9614146ce83862a57b9aa29b5629ba8445f8c9b7daa1b25fa1ef9bc15fc997c775a3407560d6d4f6a8f0693c3200a0445004c44c6c6c1982f09965ca0f2f069ac0e44bf897a06435897e13579561c1d047b8798e2ecf2"}]}, 0xa, [{0xbb, &(0x7f0000000500)=@string={0xbb, 0x3, "cedda1329a5772ef2126a75bef44c5ca9afd052b6219bf324e9f18796a7e420cde6852148e9d67b3b4f5a145e0de10e2d797e7894f771451a6e96a4929c37519a0bab69ef774662b965f369efa6d4f0c8730dffcc5ff38f33581b45da5bdc7e7ba09bfcf5a86f730e4745ebd7955120121d6c725a6fcc8aa6f34635ba3a7e70625411f156b2a2cb6477e107313e3bd8ca1ad4f55b876087b4e2e4fc69cd45b8db43ce6a05c028764c4688093c8fc27761566a95aa52ea1ce23"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x73}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x12, &(0x7f0000000700)=@string={0x12, 0x3, "ab7bca2298e71700279fd58699b08e32"}}, {0x43, &(0x7f0000000740)=@string={0x43, 0x3, "41a26df59c934becd7b43a35664ce0457da4419302deb52376bce01c276738fdb2b6504a8c569f707b8cbda16e794546caef6a5e76757a9b4c52f9633244829766"}}, {0x2e, &(0x7f00000007c0)=@string={0x2e, 0x3, "69255f6bd9499d07efd2772bc1c4613f2be9c6b2e36b4fa7653ef0ff94300173a765943f8b509d8ba8569f32"}}, {0x33, &(0x7f0000000800)=@string={0x33, 0x3, "8d250846d626ef4432f014e4f478744bc042ad93b7e39ed159d886db53bf444586ca26d1befb55506632ca21c41f6ec952"}}]})

5.496260264s ago: executing program 3 (id=6690):
syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x48, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x7)
syz_open_procfs(0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16, @ANYRES32], 0x44}}, 0x4000010)

5.261057788s ago: executing program 1 (id=6691):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r4, &(0x7f0000000400)={0x8, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000019080)={0x1, [0x0]}, &(0x7f00000190c0)=0x8)
lseek(r3, 0x0, 0x4)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e20005e8d545bfe264878000000000000000000e100000000000000000000000000000000000000c7dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000100000001"], 0x110)
r6 = syz_usb_connect$uac1(0x6, 0xf0, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x0, 0x80, 0x4b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x3, 0x3, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x10, 0x0, 0x20, 0x81}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x1, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x9, "2c190809a204998a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0xc5, "3974dd7c0d59dc736c"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5487, 0xff, "84"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x56, 0x1, 0x8, {0x7, 0x25, 0x1, 0x80, 0xc, 0xf65}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x81, 0x5, "8d", "f57328"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x1, 0x3d, {0x7, 0x25, 0x1, 0x1, 0x9, 0x8001}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x64, 0x5, 0xe, 0xff, 0xf9}, 0x37, &(0x7f0000000040)={0x5, 0xf, 0x37, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0x0, 0x9, [0xc000, 0xff0f, 0xc0, 0xc000, 0xf, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x7f, 0x3, 0xc5ad, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_ep_write(r6, 0x9, 0x42, &(0x7f0000000240)="29446e3697ce7f8ed96a588cb4ad0f16d6eae6b3aad9ea46336f07f8122f28ff59566d791b459567c9d80a9b9016e1e249f95b79f49d9f4a86d6b149b5bac5789164")
io_destroy(0x0)
io_destroy(0x0)

5.211039317s ago: executing program 4 (id=6692):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r4, &(0x7f0000000400)={0x8, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)
ftruncate(r3, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000019080)={0x1, [0x0]}, &(0x7f00000190c0)=0x8)
lseek(r3, 0x0, 0x4)
r5 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e20005e8d545bfe264878000000000000000000e100000000000000000000000000000000000000c7dd00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000100000001"], 0x110)
r6 = syz_usb_connect$uac1(0x6, 0xf0, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xde, 0x3, 0x1, 0x0, 0x80, 0x4b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0xa}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x100, 0x5, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x1ff, 0x3, 0x3, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x4, 0x10, 0x0, 0x20, 0x81}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x301, 0x1, 0x2, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x3, 0x3, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0x7, 0x9, "2c190809a204998a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x4, 0x2, 0xc5, "3974dd7c0d59dc736c"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x5, 0x5487, 0xff, "84"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x56, 0x1, 0x8, {0x7, 0x25, 0x1, 0x80, 0xc, 0xf65}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x1, 0x81, 0x5, "8d", "f57328"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x80, 0x1, 0x3d, {0x7, 0x25, 0x1, 0x1, 0x9, 0x8001}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x64, 0x5, 0xe, 0xff, 0xf9}, 0x37, &(0x7f0000000040)={0x5, 0xf, 0x37, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x8, 0x0, 0x9, [0xc000, 0xff0f, 0xc0, 0xc000, 0xf, 0x30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x7f, 0x3, 0xc5ad, 0x6}]}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x340a}}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_ep_write(r6, 0x9, 0x42, &(0x7f0000000240)="29446e3697ce7f8ed96a588cb4ad0f16d6eae6b3aad9ea46336f07f8122f28ff59566d791b459567c9d80a9b9016e1e249f95b79f49d9f4a86d6b149b5bac5789164")
io_setup(0xa, &(0x7f0000000080)=<r7=>0x0)
io_destroy(r7)

4.272029983s ago: executing program 3 (id=6693):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, 0x0, 0x0)
sendmsg(r2, 0x0, 0x44084)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x80)

3.341530585s ago: executing program 0 (id=6694):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r2, 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044010)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r4=>0x0})
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r7, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r5, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50)
creat(&(0x7f0000000180)='./file0/file0\x00', 0x408)
syz_fuse_handle_req(r5, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x2, {{0xffffffffffffffff, 0x0, 0x0, 0x10000000000, 0xfffffffb, 0x0, {0x0, 0x7fff, 0x6, 0xffff, 0x4, 0x0, 0x0, 0x2, 0xfffffffd, 0x8000, 0x0, 0x0, r8, 0xfffffffd}}}}, 0x0, 0x0})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000a801"], 0x1c8}}, 0x0)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80)
fcntl$dupfd(r0, 0x0, r0)
r9 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890)
pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)

2.89464886s ago: executing program 3 (id=6695):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x0, 0x814, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3d}}}}}, 0x20}, 0x1, 0x0, 0x2000000, 0x90}, 0x20000000)

2.768173626s ago: executing program 3 (id=6696):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0x300}], 0x1, 0x0, 0x0, 0x0)

2.516064217s ago: executing program 5 (id=6698):
pipe2$9p(0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff0180c200000308060001080006040002aaaaaaaaaabbac1414bbaaaaaaaaaafbac"], 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x5ea, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14)

2.335910001s ago: executing program 3 (id=6699):
syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100, 0xffffffff}, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000006c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x3, '\x00', @p_u8=&(0x7f0000000280)=0x3}})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
syz_open_dev$usbfs(0x0, 0x75, 0x40082)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000380)={<r5=>0x0, @in6={{0xa, 0x4e22, 0x5, @empty, 0xf}}, 0xfffffff7, 0x200, 0x0, 0x126, 0xbc0}, &(0x7f0000000480)=0x98)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000004c0)={<r6=>r5, 0x2, 0x2, 0x44, 0x4, 0x9}, &(0x7f0000000500)=0x14)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000680)={r6, 0xfc000000}, 0x8)
syz_open_dev$media(0x0, 0x2, 0x60c580)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r9, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000540)={r5, 0xc1e}, &(0x7f00000005c0)=0x8)
bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8)

2.192203452s ago: executing program 5 (id=6700):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r1, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14)

2.080959019s ago: executing program 5 (id=6701):
r0 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x2, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008044)

1.888212631s ago: executing program 5 (id=6702):
r0 = socket$netlink(0x10, 0x3, 0x0)
io_setup(0x2, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000040801"], 0x14}, 0x1, 0x0, 0x0, 0x4c800}, 0x4008044) (fail_nth: 1)

1.484132885s ago: executing program 5 (id=6703):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8880)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@flushpolicy={0x94, 0x1d, 0x200, 0x70bd26, 0x25dfdbfb, "", [@tmpl={0x84, 0x5, [{{@in=@empty, 0x4d3, 0x2b}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x3501, 0x2, 0x1, 0x4, 0x6, 0x1ff, 0xff}, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4d5, 0x3c}, 0xa, @in=@remote, 0x0, 0x4, 0x0, 0x2, 0x3, 0x0, 0xe823}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x48014}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0088ca"], 0xfdef)
r6 = dup(r3)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = socket$kcm(0x29, 0x2, 0x0)
r9 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg(r8, &(0x7f000000d3c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000200)="c212a8aca5", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="114847", 0x3}], 0x1}}], 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
get_mempolicy(0x0, 0x0, 0x8001, &(0x7f0000717000/0x4000)=nil, 0x4)
r10 = dup3(r9, r8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r10, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r10}, './file0\x00'})

1.470148182s ago: executing program 3 (id=6704):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c)
r6 = socket(0x2, 0x3, 0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x8, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001200010a"], 0x14}, 0x1, 0x0, 0x0, 0x20000840}, 0x20008000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2512000000080003", @ANYRES32=r10, @ANYBLOB="040081000a000600080211000001000006001a01040000000600"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)
r11 = socket(0x10, 0x3, 0x0)
write(r11, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="16000000", @ANYRES16=r9, @ANYBLOB="040027bd7000fedbdf25440000000400bf000400bf000a001800030303030303000008006b000d00000008006b0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x51)
syz_usb_connect(0x2, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12011001b6c12300cd0608012cb7010203010902700001078200000904e20401a4684d7c550791db326a75c08876fbcd6087551d6499baa1f0f5f20a5cd621b93e26b861d411ad3d194404300ce6356f8598ca8c403c28087ec67815a07685214ca2513a6507a67c0253ed3f49eda802ab8119f3ee593bb40a09050000100032fd03"], &(0x7f0000000840)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x300, 0x1, 0x7f, 0x81, 0x10, 0x8}, 0x110, &(0x7f00000003c0)={0x5, 0xf, 0x110, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "519843b199086dca8ad4fdd1cad4adf8"}, @ptm_cap={0x3}, @generic={0xf4, 0x10, 0xa, "3ff0613bbd35cf5e218ccd6620e9abf8e4ff8019b6d16a30ab71e01b782a5c10dc6b1e5ce9a2dfe31fab7cdb40e53c0513d9460ffab56e339b4f732097774706971f9b9a6248f75818c29a98853ecd01765af50af29a91a2bdfdc457efe067aae31e0ac9414f48c411afee0a03af700262f426eee89632fe025e11a2322b33742189b948a5133834fd95b0523505f4ef44133721f40c9fa623e3a9614146ce83862a57b9aa29b5629ba8445f8c9b7daa1b25fa1ef9bc15fc997c775a3407560d6d4f6a8f0693c3200a0445004c44c6c6c1982f09965ca0f2f069ac0e44bf897a06435897e13579561c1d047b8798e2ecf2"}]}, 0xa, [{0xbb, &(0x7f0000000500)=@string={0xbb, 0x3, "cedda1329a5772ef2126a75bef44c5ca9afd052b6219bf324e9f18796a7e420cde6852148e9d67b3b4f5a145e0de10e2d797e7894f771451a6e96a4929c37519a0bab69ef774662b965f369efa6d4f0c8730dffcc5ff38f33581b45da5bdc7e7ba09bfcf5a86f730e4745ebd7955120121d6c725a6fcc8aa6f34635ba3a7e70625411f156b2a2cb6477e107313e3bd8ca1ad4f55b876087b4e2e4fc69cd45b8db43ce6a05c028764c4688093c8fc27761566a95aa52ea1ce23"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x73}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x12, &(0x7f0000000700)=@string={0x12, 0x3, "ab7bca2298e71700279fd58699b08e32"}}, {0x43, &(0x7f0000000740)=@string={0x43, 0x3, "41a26df59c934becd7b43a35664ce0457da4419302deb52376bce01c276738fdb2b6504a8c569f707b8cbda16e794546caef6a5e76757a9b4c52f9633244829766"}}, {0x2e, &(0x7f00000007c0)=@string={0x2e, 0x3, "69255f6bd9499d07efd2772bc1c4613f2be9c6b2e36b4fa7653ef0ff94300173a765943f8b509d8ba8569f32"}}, {0x33, &(0x7f0000000800)=@string={0x33, 0x3, "8d250846d626ef4432f014e4f478744bc042ad93b7e39ed159d886db53bf444586ca26d1befb55506632ca21c41f6ec952"}}]})

760.557824ms ago: executing program 4 (id=6705):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, 0x0, 0x0)
sendmsg(r2, 0x0, 0x44084)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80)

686.725679ms ago: executing program 1 (id=6706):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4000)

520.45985ms ago: executing program 1 (id=6707):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff}) (async, rerun: 32)
r1 = epoll_create1(0x0) (async, rerun: 32)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) (async)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x8}) (async, rerun: 64)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x7fff, @loopback}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) (async)
sendto$inet6(r3, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000002a00)=[{{&(0x7f0000000280)=@rc={0x1f, @none}, 0x80, 0x0, 0x0, &(0x7f0000000300)=""/89, 0x59}, 0x379f}], 0x1, 0x2020, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x20, 0x0, 0x77, 0xfffff038}]}, 0x10) (async)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="fb2101000000"], 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xfffffffffffffea8, &(0x7f0000000000)=ANY=[])

404.110505ms ago: executing program 5 (id=6708):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
sendmmsg$inet(r0, 0x0, 0x0, 0xc0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

379.648217ms ago: executing program 1 (id=6709):
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x64010100}}}, 0x90)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="010300000000fcdbdf25050000000e0001006e657464597673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x402800, 0x0)
ioctl$KVM_SET_TSC_KHZ(r6, 0xaea2, 0x100000000)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xaece, 0x0)
preadv(r7, &(0x7f0000000540)=[{&(0x7f0000001dc0)=""/4100, 0x1012}], 0x100000000000004d, 0x8, 0x400000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = gettid()
fcntl$setownex(r10, 0xf, &(0x7f00000000c0)={0x2, r11})
sendmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r12=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r12, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)

0s ago: executing program 0 (id=6710):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4eb}, 0x20)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x3, 0x9fd, 0x84, 0x91, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r1)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, 0x0, 0x0, 0x4}, 0x20)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001500)={{{@in=@private, @in6=@private1}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in=@empty}}, &(0x7f0000001600)=0xe8)
lstat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680))
syz_open_dev$sndpcmc(&(0x7f0000001700), 0x2, 0x800000)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000040))
lstat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780))
setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2)
getgroups(0x6, &(0x7f0000001800)=[0xffffffffffffffff, 0x0, 0xee00, 0xee01, 0xee01, 0x0])
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
syz_clone(0x4140900, &(0x7f00000019c0)="ce9a955c94171b5104822014bfb4f026390b46dd668162fe5c18a631b70bc8642d78346782d3255e96144889a779d26c6690fa928126e9f9ea23d09f261570c7011f68aeba0d97c2e9f3fbf9285e96b1c67045173ab6f9292aeba4fcd77f2e290e603ad2f8938780180c4afd197e4713db6bd6c7794fe0a4c875a0401aeeac132348007dbab7040bdea1daeeee39905479edaecd6cc3cefe0ee4456ca3cac2d2388c8fef123037decb8f415e967261cd71d38d", 0xb3, &(0x7f0000001a80), &(0x7f0000001ac0), &(0x7f0000001b00)="3eab7bae57c93a4821a308ecc729124115fd9375e9a6ec0c2753676e6dba2a7ce5588da62c41ddac9df4363745468b8f523979d5c353942a38909c0d522d0ca8ffe4df2b52a295e3dfb1fa756dfec212728b9b4ce7f94cc5826c66908b03491c9025ffe2aebf873d5b9362ab844a28801269e4b41cb4e86e91ae3a7b7fbd2b4a2eddae5db5cd4e54b0f279595b2a32deb680972e35bf62e5acf1ef1c5f6e488d715cb7e82047aefa42fbf375584f68ebe47a7d50919b288c4a650db083cd583583ea9416af9806dcfacc4e16b05ad945f008ff7cb4ea8fef9136330ba8c656125ef0f8c25671299007e06480c79e0bf8e96d339e4ee17854ae9eea00a36b54")
sendmmsg$unix(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x884}}], 0x1, 0x80cc)
socket$nl_route(0x10, 0x3, 0x0)
syz_pidfd_open(0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x4, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5f8, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

kernel console output (not intermixed with test programs):

0]  _copy_from_user+0x2d/0xb0
[ 1468.621174][T27690]  __sys_bpf+0x1ed/0x860
[ 1468.621203][T27690]  ? __pfx___sys_bpf+0x10/0x10
[ 1468.621225][T27690]  ? handle_softirqs+0x717/0x870
[ 1468.621277][T27690]  __x64_sys_bpf+0x7c/0x90
[ 1468.621299][T27690]  do_syscall_64+0xfa/0x3b0
[ 1468.621318][T27690]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.621337][T27690]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1468.621356][T27690]  ? clear_bhb_loop+0x60/0xb0
[ 1468.621379][T27690]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1468.621398][T27690] RIP: 0033:0x7f4a5558e929
[ 1468.621415][T27690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1468.621432][T27690] RSP: 002b:00007f4a564b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1468.621453][T27690] RAX: ffffffffffffffda RBX: 00007f4a557b5fa0 RCX: 00007f4a5558e929
[ 1468.621467][T27690] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000001
[ 1468.621481][T27690] RBP: 00007f4a564b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1468.621494][T27690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1468.621504][T27690] R13: 0000000000000001 R14: 00007f4a557b5fa0 R15: 00007f4a558dfa28
[ 1468.621534][T27690]  </TASK>
[ 1469.027659][ T5835] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1469.042349][ T5835] usb 6-1: USB disconnect, device number 3
[ 1469.051766][ T5835] usblp0: removed
[ 1469.848970][   T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1470.039340][T26178] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1470.124163][T26178] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1470.156188][   T10] usb 2-1: config 0 has no interfaces?
[ 1470.186672][T26178] usb 5-1: can't read configurations, error -71
[ 1470.282786][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1470.355376][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1470.427506][   T10] usb 2-1: Product: syz
[ 1470.434564][T25287] usb 1-1: USB disconnect, device number 4
[ 1470.472043][   T10] usb 2-1: Manufacturer: syz
[ 1470.476888][   T10] usb 2-1: SerialNumber: syz
[ 1470.499662][   T10] usb 2-1: config 0 descriptor??
[ 1470.780346][T27707] pimreg: entered allmulticast mode
[ 1470.790730][T27707] pimreg: left allmulticast mode
[ 1470.942370][ T3611] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1471.112197][ T3611] usb 1-1: Using ep0 maxpacket: 32
[ 1471.120171][ T3611] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1471.128950][ T3611] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1471.311474][T27732] FAULT_INJECTION: forcing a failure.
[ 1471.311474][T27732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1471.360161][T27732] CPU: 0 UID: 0 PID: 27732 Comm: syz.5.6420 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1471.360183][T27732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1471.360190][T27732] Call Trace:
[ 1471.360194][T27732]  <TASK>
[ 1471.360200][T27732]  dump_stack_lvl+0x189/0x250
[ 1471.360221][T27732]  ? __pfx____ratelimit+0x10/0x10
[ 1471.360240][T27732]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1471.360256][T27732]  ? __pfx__printk+0x10/0x10
[ 1471.360269][T27732]  ? __might_fault+0xb0/0x130
[ 1471.360284][T27732]  should_fail_ex+0x414/0x560
[ 1471.360300][T27732]  _copy_from_user+0x2d/0xb0
[ 1471.360315][T27732]  ___sys_sendmsg+0x158/0x2a0
[ 1471.360330][T27732]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1471.360360][T27732]  ? __fget_files+0x2a/0x420
[ 1471.360371][T27732]  ? __fget_files+0x3a0/0x420
[ 1471.360388][T27732]  __x64_sys_sendmsg+0x19b/0x260
[ 1471.360403][T27732]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1471.360421][T27732]  ? __pfx_ksys_write+0x10/0x10
[ 1471.360430][T27732]  ? rcu_is_watching+0x15/0xb0
[ 1471.360449][T27732]  ? do_syscall_64+0xbe/0x3b0
[ 1471.360460][T27732]  do_syscall_64+0xfa/0x3b0
[ 1471.360469][T27732]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1471.360490][T27732]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.360500][T27732]  ? clear_bhb_loop+0x60/0xb0
[ 1471.360513][T27732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1471.360523][T27732] RIP: 0033:0x7f5b66b8e929
[ 1471.360533][T27732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1471.360543][T27732] RSP: 002b:00007f5b649f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1471.360556][T27732] RAX: ffffffffffffffda RBX: 00007f5b66db6080 RCX: 00007f5b66b8e929
[ 1471.360563][T27732] RDX: 0000000020008080 RSI: 0000200000000280 RDI: 0000000000000003
[ 1471.360570][T27732] RBP: 00007f5b649f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1471.360577][T27732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1471.360583][T27732] R13: 0000000000000000 R14: 00007f5b66db6080 R15: 00007f5b66edfa28
[ 1471.360598][T27732]  </TASK>
[ 1471.568405][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1471.591502][T27720] fuse: Bad value for 'fd'
[ 1471.653463][ T3611] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1471.724892][T27736] usb usb8: usbfs: process 27736 (syz.4.6421) did not claim interface 0 before use
[ 1471.741349][ T3611] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1471.928850][ T3611] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1471.940219][ T3611] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1471.953083][ T3611] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1471.987158][ T3611] usb 1-1: Product: syz
[ 1471.998031][T27741] FAULT_INJECTION: forcing a failure.
[ 1471.998031][T27741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1472.024672][ T3611] usb 1-1: Manufacturer: syz
[ 1472.051068][ T3611] usb 1-1: SerialNumber: syz
[ 1472.075033][ T3611] usb 1-1: config 0 descriptor??
[ 1472.097307][T27741] CPU: 1 UID: 0 PID: 27741 Comm: syz.5.6422 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1472.097341][T27741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1472.097352][T27741] Call Trace:
[ 1472.097361][T27741]  <TASK>
[ 1472.097370][T27741]  dump_stack_lvl+0x189/0x250
[ 1472.097416][T27741]  ? __pfx____ratelimit+0x10/0x10
[ 1472.097444][T27741]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1472.097473][T27741]  ? __pfx__printk+0x10/0x10
[ 1472.097506][T27741]  should_fail_ex+0x414/0x560
[ 1472.097537][T27741]  _copy_to_user+0x31/0xb0
[ 1472.097559][T27741]  simple_read_from_buffer+0xe1/0x170
[ 1472.097585][T27741]  proc_fail_nth_read+0x1df/0x250
[ 1472.097611][T27741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1472.097637][T27741]  ? rw_verify_area+0x258/0x650
[ 1472.097663][T27741]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1472.097686][T27741]  vfs_read+0x1fd/0x980
[ 1472.097720][T27741]  ? __pfx___mutex_lock+0x10/0x10
[ 1472.097737][T27741]  ? __pfx_vfs_read+0x10/0x10
[ 1472.097764][T27741]  ? __fget_files+0x2a/0x420
[ 1472.097789][T27741]  ? __fget_files+0x3a0/0x420
[ 1472.097809][T27741]  ? __fget_files+0x2a/0x420
[ 1472.097836][T27741]  ksys_read+0x145/0x250
[ 1472.097850][T27741]  ? __fget_files+0x3a0/0x420
[ 1472.097870][T27741]  ? __pfx_ksys_read+0x10/0x10
[ 1472.097903][T27741]  ? do_syscall_64+0xbe/0x3b0
[ 1472.097924][T27741]  do_syscall_64+0xfa/0x3b0
[ 1472.097940][T27741]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1472.097968][T27741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1472.097986][T27741]  ? clear_bhb_loop+0x60/0xb0
[ 1472.098008][T27741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1472.098026][T27741] RIP: 0033:0x7f5b66b8d33c
[ 1472.098044][T27741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1472.098062][T27741] RSP: 002b:00007f5b6791a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1472.098083][T27741] RAX: ffffffffffffffda RBX: 00007f5b66db5fa0 RCX: 00007f5b66b8d33c
[ 1472.098098][T27741] RDX: 000000000000000f RSI: 00007f5b6791a0a0 RDI: 0000000000000003
[ 1472.098111][T27741] RBP: 00007f5b6791a090 R08: 0000000000000000 R09: 0000000000000000
[ 1472.098124][T27741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1472.098136][T27741] R13: 0000000000000000 R14: 00007f5b66db5fa0 R15: 00007f5b66edfa28
[ 1472.098165][T27741]  </TASK>
[ 1472.457261][ T3611] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1472.476349][ T3611] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1472.489119][ T3611] usb 1-1: USB disconnect, device number 5
[ 1472.498029][ T3611] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[ 1472.982022][  T977] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[ 1472.982580][ T3611] usb 2-1: USB disconnect, device number 102
[ 1473.369131][  T977] usb 6-1: config 8 has an invalid interface number: 80 but max is 0
[ 1473.381716][  T977] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1473.450816][  T977] usb 6-1: config 8 has no interface number 0
[ 1473.470233][  T977] usb 6-1: config 8 interface 80 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14
[ 1473.498362][  T977] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 1473.509027][T27769] FAULT_INJECTION: forcing a failure.
[ 1473.509027][T27769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1473.571936][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1473.645469][T27769] CPU: 0 UID: 0 PID: 27769 Comm: syz.3.6428 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1473.645498][T27769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1473.645511][T27769] Call Trace:
[ 1473.645519][T27769]  <TASK>
[ 1473.645528][T27769]  dump_stack_lvl+0x189/0x250
[ 1473.645563][T27769]  ? __pfx____ratelimit+0x10/0x10
[ 1473.645593][T27769]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1473.645622][T27769]  ? __pfx__printk+0x10/0x10
[ 1473.645656][T27769]  should_fail_ex+0x414/0x560
[ 1473.645686][T27769]  _copy_to_user+0x31/0xb0
[ 1473.645709][T27769]  simple_read_from_buffer+0xe1/0x170
[ 1473.645734][T27769]  proc_fail_nth_read+0x1df/0x250
[ 1473.645783][T27769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1473.645840][T27769]  ? rw_verify_area+0x258/0x650
[ 1473.645869][T27769]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1473.645893][T27769]  vfs_read+0x1fd/0x980
[ 1473.645927][T27769]  ? __pfx___mutex_lock+0x10/0x10
[ 1473.645947][T27769]  ? __pfx_vfs_read+0x10/0x10
[ 1473.645977][T27769]  ? __fget_files+0x2a/0x420
[ 1473.646002][T27769]  ? __fget_files+0x3a0/0x420
[ 1473.646022][T27769]  ? __fget_files+0x2a/0x420
[ 1473.646050][T27769]  ksys_read+0x145/0x250
[ 1473.646069][T27769]  ? __pfx_ksys_read+0x10/0x10
[ 1473.646102][T27769]  ? do_syscall_64+0xbe/0x3b0
[ 1473.646124][T27769]  do_syscall_64+0xfa/0x3b0
[ 1473.646141][T27769]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1473.646169][T27769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.646188][T27769]  ? clear_bhb_loop+0x60/0xb0
[ 1473.646218][T27769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1473.646236][T27769] RIP: 0033:0x7f4a5558d33c
[ 1473.646254][T27769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1473.646271][T27769] RSP: 002b:00007f4a56493030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1473.646292][T27769] RAX: ffffffffffffffda RBX: 00007f4a557b6080 RCX: 00007f4a5558d33c
[ 1473.646307][T27769] RDX: 000000000000000f RSI: 00007f4a564930a0 RDI: 0000000000000004
[ 1473.646320][T27769] RBP: 00007f4a56493090 R08: 0000000000000000 R09: 0000000000000000
[ 1473.646333][T27769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1473.646346][T27769] R13: 0000000000000001 R14: 00007f4a557b6080 R15: 00007f4a558dfa28
[ 1473.646376][T27769]  </TASK>
[ 1474.019516][  T977] usb 6-1: NFC: intf ffff888020f0c000 id ffffffff8eb52ac0
[ 1474.542032][ T5905] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1474.713559][ T5905] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.725977][ T5905] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1474.756552][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1474.786583][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1474.880750][ T5905] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1474.991011][ T5905] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1475.090622][T27778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1475.101173][T27778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1476.342595][ T5905] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[ 1476.494376][ T5905] usb 4-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config
[ 1476.505035][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1476.521678][T26178] usb 6-1: USB disconnect, device number 4
[ 1476.534146][T27808] FAULT_INJECTION: forcing a failure.
[ 1476.534146][T27808] name failslab, interval 1, probability 0, space 0, times 0
[ 1476.563692][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1476.587871][T27808] CPU: 0 UID: 0 PID: 27808 Comm: syz.0.6435 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1476.587898][T27808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1476.587909][T27808] Call Trace:
[ 1476.587918][T27808]  <TASK>
[ 1476.587926][T27808]  dump_stack_lvl+0x189/0x250
[ 1476.587958][T27808]  ? __pfx____ratelimit+0x10/0x10
[ 1476.587984][T27808]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1476.588011][T27808]  ? __pfx__printk+0x10/0x10
[ 1476.588037][T27808]  ? __pfx___might_resched+0x10/0x10
[ 1476.588063][T27808]  ? fs_reclaim_acquire+0x7d/0x100
[ 1476.588089][T27808]  should_fail_ex+0x414/0x560
[ 1476.588118][T27808]  should_failslab+0xa8/0x100
[ 1476.588140][T27808]  __kmalloc_noprof+0xcb/0x4f0
[ 1476.588155][T27808]  ? kfree+0x4d/0x440
[ 1476.588179][T27808]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1476.588209][T27808]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1476.588234][T27808]  ? tomoyo_domain+0xd9/0x130
[ 1476.588264][T27808]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1476.588287][T27808]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1476.588313][T27808]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1476.588349][T27808]  ? __lock_acquire+0xab9/0xd20
[ 1476.588394][T27808]  ? __fget_files+0x2a/0x420
[ 1476.588416][T27808]  ? __fget_files+0x2a/0x420
[ 1476.588433][T27808]  ? __fget_files+0x3a0/0x420
[ 1476.588452][T27808]  ? __fget_files+0x2a/0x420
[ 1476.588475][T27808]  security_file_ioctl+0xcb/0x2d0
[ 1476.588498][T27808]  __se_sys_ioctl+0x47/0x170
[ 1476.588523][T27808]  do_syscall_64+0xfa/0x3b0
[ 1476.588539][T27808]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1476.588565][T27808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.588580][T27808]  ? clear_bhb_loop+0x60/0xb0
[ 1476.588600][T27808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1476.588619][T27808] RIP: 0033:0x7fd1f818e929
[ 1476.588636][T27808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1476.588661][T27808] RSP: 002b:00007fd1f90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1476.588681][T27808] RAX: ffffffffffffffda RBX: 00007fd1f83b5fa0 RCX: 00007fd1f818e929
[ 1476.588695][T27808] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000003
[ 1476.588708][T27808] RBP: 00007fd1f90ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1476.588721][T27808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1476.588733][T27808] R13: 0000000000000000 R14: 00007fd1f83b5fa0 R15: 00007fd1f84dfa28
[ 1476.588761][T27808]  </TASK>
[ 1476.588824][T27808] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1476.650557][ T5905] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1476.910001][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1476.918590][ T5905] usb 4-1: Product: syz
[ 1476.929742][ T5905] usb 4-1: Manufacturer: syz
[ 1476.936407][ T5905] usb 4-1: SerialNumber: syz
[ 1476.976954][ T5905] usb 4-1: config 0 descriptor??
[ 1476.989900][T27801] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1476.998457][ T5905] usb 4-1: ucan: probing device on interface #0
[ 1477.030196][ T5905] usb 4-1: ucan: invalid EP count (1)
[ 1477.041483][ T5905] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1477.161984][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1477.228955][T27818] FAULT_INJECTION: forcing a failure.
[ 1477.228955][T27818] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1477.260275][T27818] CPU: 1 UID: 0 PID: 27818 Comm: syz.4.6438 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1477.260305][T27818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1477.260318][T27818] Call Trace:
[ 1477.260326][T27818]  <TASK>
[ 1477.260335][T27818]  dump_stack_lvl+0x189/0x250
[ 1477.260370][T27818]  ? __pfx____ratelimit+0x10/0x10
[ 1477.260398][T27818]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1477.260427][T27818]  ? __pfx__printk+0x10/0x10
[ 1477.260448][T27818]  ? __might_fault+0xb0/0x130
[ 1477.260478][T27818]  should_fail_ex+0x414/0x560
[ 1477.260508][T27818]  _copy_from_user+0x2d/0xb0
[ 1477.260529][T27818]  ___sys_sendmsg+0x158/0x2a0
[ 1477.260557][T27818]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1477.260614][T27818]  ? __fget_files+0x2a/0x420
[ 1477.260635][T27818]  ? __fget_files+0x3a0/0x420
[ 1477.260666][T27818]  __x64_sys_sendmsg+0x19b/0x260
[ 1477.260694][T27818]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1477.260728][T27818]  ? __pfx_ksys_write+0x10/0x10
[ 1477.260752][T27818]  ? do_syscall_64+0xbe/0x3b0
[ 1477.260774][T27818]  do_syscall_64+0xfa/0x3b0
[ 1477.260790][T27818]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1477.260818][T27818]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.260838][T27818]  ? clear_bhb_loop+0x60/0xb0
[ 1477.260868][T27818]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.260887][T27818] RIP: 0033:0x7fc84bb8e929
[ 1477.260904][T27818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1477.260922][T27818] RSP: 002b:00007fc84caa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1477.260943][T27818] RAX: ffffffffffffffda RBX: 00007fc84bdb5fa0 RCX: 00007fc84bb8e929
[ 1477.260958][T27818] RDX: 0000000000000080 RSI: 0000200000000540 RDI: 0000000000000003
[ 1477.260971][T27818] RBP: 00007fc84caa7090 R08: 0000000000000000 R09: 0000000000000000
[ 1477.260984][T27818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1477.260996][T27818] R13: 0000000000000000 R14: 00007fc84bdb5fa0 R15: 00007fc84bedfa28
[ 1477.261026][T27818]  </TASK>
[ 1477.372040][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1477.640494][T27801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1477.688759][T27828] FAULT_INJECTION: forcing a failure.
[ 1477.688759][T27828] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1477.705003][T27801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1477.725483][T27828] CPU: 1 UID: 0 PID: 27828 Comm: syz.0.6441 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1477.725513][T27828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1477.725525][T27828] Call Trace:
[ 1477.725533][T27828]  <TASK>
[ 1477.725542][T27828]  dump_stack_lvl+0x189/0x250
[ 1477.725585][T27828]  ? __pfx____ratelimit+0x10/0x10
[ 1477.725614][T27828]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1477.725643][T27828]  ? __pfx__printk+0x10/0x10
[ 1477.725664][T27828]  ? __might_fault+0xb0/0x130
[ 1477.725694][T27828]  should_fail_ex+0x414/0x560
[ 1477.725724][T27828]  _copy_from_user+0x2d/0xb0
[ 1477.725746][T27828]  sg_write+0x390/0xea0
[ 1477.725777][T27828]  ? aa_file_perm+0x11f/0xed0
[ 1477.725809][T27828]  ? __pfx_sg_write+0x10/0x10
[ 1477.725871][T27828]  ? bpf_lsm_file_permission+0x9/0x20
[ 1477.725898][T27828]  ? security_file_permission+0x75/0x290
[ 1477.725921][T27828]  ? rw_verify_area+0x258/0x650
[ 1477.725954][T27828]  vfs_writev+0x4b6/0x960
[ 1477.725980][T27828]  ? __pfx_sg_write+0x10/0x10
[ 1477.726012][T27828]  ? __pfx_vfs_writev+0x10/0x10
[ 1477.726049][T27828]  ? __fget_files+0x2a/0x420
[ 1477.726076][T27828]  ? __fget_files+0x3a0/0x420
[ 1477.726096][T27828]  ? __fget_files+0x2a/0x420
[ 1477.726127][T27828]  do_writev+0x14d/0x2d0
[ 1477.726153][T27828]  ? __pfx_do_writev+0x10/0x10
[ 1477.726173][T27828]  ? rcu_is_watching+0x15/0xb0
[ 1477.726208][T27828]  ? do_syscall_64+0xbe/0x3b0
[ 1477.726231][T27828]  do_syscall_64+0xfa/0x3b0
[ 1477.726248][T27828]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1477.726275][T27828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.726295][T27828]  ? clear_bhb_loop+0x60/0xb0
[ 1477.726320][T27828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1477.726338][T27828] RIP: 0033:0x7fd1f818e929
[ 1477.726356][T27828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1477.726374][T27828] RSP: 002b:00007fd1f90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1477.726395][T27828] RAX: ffffffffffffffda RBX: 00007fd1f83b5fa0 RCX: 00007fd1f818e929
[ 1477.726411][T27828] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000003
[ 1477.726424][T27828] RBP: 00007fd1f90ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1477.726437][T27828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1477.726450][T27828] R13: 0000000000000000 R14: 00007fd1f83b5fa0 R15: 00007fd1f84dfa28
[ 1477.726479][T27828]  </TASK>
[ 1478.033045][   T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1478.042174][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1478.053730][   T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1478.067609][  T977] usb 2-1: USB disconnect, device number 103
[ 1478.174444][   T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1478.252038][ T5905] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1478.252137][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1478.336890][   T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1478.349014][   T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1478.357684][   T10] usb 6-1: Product: syz
[ 1478.371378][   T10] usb 6-1: Manufacturer: syz
[ 1478.412147][ T5905] usb 5-1: Using ep0 maxpacket: 8
[ 1478.464527][ T5905] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1478.473882][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1478.514909][   T10] usb 6-1: SerialNumber: syz
[ 1478.532955][ T5905] usb 5-1: config 0 descriptor??
[ 1478.533073][   T10] usb 6-1: config 0 descriptor??
[ 1478.573505][T26178] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1478.579502][   T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1478.621790][   T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1478.762051][T26178] usb 2-1: Using ep0 maxpacket: 32
[ 1478.868068][T26178] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8
[ 1479.046351][T26178] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1479.055246][ T3611] usb 6-1: USB disconnect, device number 5
[ 1479.055355][    C0] ldusb 6-1:0.0: usb_submit_urb failed (-19)
[ 1479.062491][T27811] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[ 1479.091204][ T3611] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1479.101339][T26178] usb 2-1: Product: syz
[ 1479.116454][T26178] usb 2-1: Manufacturer: syz
[ 1479.121137][T26178] usb 2-1: SerialNumber: syz
[ 1479.167142][T26178] usb 2-1: config 0 descriptor??
[ 1479.414916][T26178] empeg 2-1:0.0: empeg converter detected
[ 1479.424028][T26178] usb 2-1: active config #0 != 1 ??
[ 1479.458948][ T5905] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[ 1479.469358][ T5905] asix 5-1:0.0: probe with driver asix failed with error -32
[ 1479.627672][ T3611] usb 4-1: USB disconnect, device number 20
[ 1481.338130][   T10] usb 5-1: USB disconnect, device number 20
[ 1481.428884][T27888] fuse: Unknown parameter 'r�otmode'
[ 1481.572079][T22437] Bluetooth: hci2: command 0x0406 tx timeout
[ 1481.776818][T27897] FAULT_INJECTION: forcing a failure.
[ 1481.776818][T27897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1481.829929][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.6453 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1481.829959][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1481.829972][T27897] Call Trace:
[ 1481.829980][T27897]  <TASK>
[ 1481.829989][T27897]  dump_stack_lvl+0x189/0x250
[ 1481.830024][T27897]  ? __pfx____ratelimit+0x10/0x10
[ 1481.830053][T27897]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1481.830082][T27897]  ? __pfx__printk+0x10/0x10
[ 1481.830116][T27897]  should_fail_ex+0x414/0x560
[ 1481.830145][T27897]  _copy_to_user+0x31/0xb0
[ 1481.830168][T27897]  simple_read_from_buffer+0xe1/0x170
[ 1481.830194][T27897]  proc_fail_nth_read+0x1df/0x250
[ 1481.830222][T27897]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1481.830248][T27897]  ? rw_verify_area+0x258/0x650
[ 1481.830276][T27897]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1481.830301][T27897]  vfs_read+0x1fd/0x980
[ 1481.830336][T27897]  ? __pfx___mutex_lock+0x10/0x10
[ 1481.830355][T27897]  ? __pfx_vfs_read+0x10/0x10
[ 1481.830392][T27897]  ? __fget_files+0x2a/0x420
[ 1481.830422][T27897]  ? __fget_files+0x3a0/0x420
[ 1481.830442][T27897]  ? __fget_files+0x2a/0x420
[ 1481.830473][T27897]  ksys_read+0x145/0x250
[ 1481.830493][T27897]  ? __pfx_ksys_read+0x10/0x10
[ 1481.830520][T27897]  ? rcu_is_watching+0x15/0xb0
[ 1481.830555][T27897]  ? do_syscall_64+0xbe/0x3b0
[ 1481.830578][T27897]  do_syscall_64+0xfa/0x3b0
[ 1481.830594][T27897]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1481.830622][T27897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.830642][T27897]  ? clear_bhb_loop+0x60/0xb0
[ 1481.830666][T27897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1481.830685][T27897] RIP: 0033:0x7fc84bb8d33c
[ 1481.830703][T27897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1481.830722][T27897] RSP: 002b:00007fc84caa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1481.830743][T27897] RAX: ffffffffffffffda RBX: 00007fc84bdb5fa0 RCX: 00007fc84bb8d33c
[ 1481.830758][T27897] RDX: 000000000000000f RSI: 00007fc84caa70a0 RDI: 0000000000000003
[ 1481.830771][T27897] RBP: 00007fc84caa7090 R08: 0000000000000000 R09: 0000000000000000
[ 1481.830784][T27897] R10: 00002000000022c0 R11: 0000000000000246 R12: 0000000000000001
[ 1481.830796][T27897] R13: 0000000000000000 R14: 00007fc84bdb5fa0 R15: 00007fc84bedfa28
[ 1481.830827][T27897]  </TASK>
[ 1482.172569][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1482.464021][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1482.552290][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1482.561507][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1482.642103][   T10] usb 1-1: Product: syz
[ 1482.646324][   T10] usb 1-1: Manufacturer: syz
[ 1482.706451][   T10] usb 1-1: SerialNumber: syz
[ 1482.954346][   T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1483.036363][   T10] usb 1-1: USB disconnect, device number 6
[ 1483.042558][T12594] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1483.092962][   T10] usblp0: removed
[ 1483.128557][  T977] usb 2-1: USB disconnect, device number 104
[ 1483.224796][T12594] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1483.294433][T12594] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1483.434814][T12594] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1483.465911][T12594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1483.610532][T12594] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1483.721999][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1483.732182][  T977] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1483.807612][T27906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1483.833832][T27906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1484.003586][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 1484.040608][   T10] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1484.055277][T12594] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1484.067076][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1484.103350][   T10] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1484.115757][  T977] usb 2-1: config 0 has no interfaces?
[ 1484.162381][  T977] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1484.171686][  T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1484.195332][  T977] usb 2-1: Product: syz
[ 1484.199728][   T10] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1484.225462][  T977] usb 2-1: Manufacturer: syz
[ 1484.247766][  T977] usb 2-1: SerialNumber: syz
[ 1484.271315][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1484.290223][  T977] usb 2-1: config 0 descriptor??
[ 1484.316621][   T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1484.380073][   T10] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1484.414955][   T10] usb 6-1: Product: syz
[ 1484.430975][   T10] usb 6-1: Manufacturer: syz
[ 1484.489177][   T10] usb 6-1: SerialNumber: syz
[ 1484.515426][   T10] usb 6-1: config 0 descriptor??
[ 1484.550414][   T10] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1484.587306][T27915] pimreg: entered allmulticast mode
[ 1484.597076][T27915] pimreg: left allmulticast mode
[ 1484.625058][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1484.632454][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1484.882166][   T10] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1484.924518][   T10] usb 6-1: USB disconnect, device number 6
[ 1484.950733][   T10] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1485.618637][T27937] FAULT_INJECTION: forcing a failure.
[ 1485.618637][T27937] name failslab, interval 1, probability 0, space 0, times 0
[ 1485.676378][T27937] CPU: 1 UID: 0 PID: 27937 Comm: syz.0.6462 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1485.676408][T27937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1485.676420][T27937] Call Trace:
[ 1485.676428][T27937]  <TASK>
[ 1485.676436][T27937]  dump_stack_lvl+0x189/0x250
[ 1485.676469][T27937]  ? __pfx____ratelimit+0x10/0x10
[ 1485.676499][T27937]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1485.676528][T27937]  ? __pfx__printk+0x10/0x10
[ 1485.676553][T27937]  ? __pfx___might_resched+0x10/0x10
[ 1485.676584][T27937]  ? fs_reclaim_acquire+0x7d/0x100
[ 1485.676612][T27937]  should_fail_ex+0x414/0x560
[ 1485.676642][T27937]  should_failslab+0xa8/0x100
[ 1485.676666][T27937]  __kmalloc_noprof+0xcb/0x4f0
[ 1485.676684][T27937]  ? tomoyo_encode+0x28b/0x550
[ 1485.676716][T27937]  tomoyo_encode+0x28b/0x550
[ 1485.676750][T27937]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1485.676786][T27937]  ? tomoyo_domain+0xd9/0x130
[ 1485.676819][T27937]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1485.676842][T27937]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1485.676868][T27937]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1485.676910][T27937]  ? __lock_acquire+0xab9/0xd20
[ 1485.676957][T27937]  ? __fget_files+0x2a/0x420
[ 1485.676982][T27937]  ? __fget_files+0x2a/0x420
[ 1485.677002][T27937]  ? __fget_files+0x3a0/0x420
[ 1485.677022][T27937]  ? __fget_files+0x2a/0x420
[ 1485.677047][T27937]  security_file_ioctl+0xcb/0x2d0
[ 1485.677071][T27937]  __se_sys_ioctl+0x47/0x170
[ 1485.677102][T27937]  do_syscall_64+0xfa/0x3b0
[ 1485.677120][T27937]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1485.677147][T27937]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.677167][T27937]  ? clear_bhb_loop+0x60/0xb0
[ 1485.677191][T27937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1485.677210][T27937] RIP: 0033:0x7fd1f818e929
[ 1485.677228][T27937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1485.677246][T27937] RSP: 002b:00007fd1f90ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1485.677267][T27937] RAX: ffffffffffffffda RBX: 00007fd1f83b5fa0 RCX: 00007fd1f818e929
[ 1485.677282][T27937] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003
[ 1485.677295][T27937] RBP: 00007fd1f90ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1485.677308][T27937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1485.677320][T27937] R13: 0000000000000000 R14: 00007fd1f83b5fa0 R15: 00007fd1f84dfa28
[ 1485.677353][T27937]  </TASK>
[ 1485.679690][T27937] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1486.623961][ T5905] usb 5-1: USB disconnect, device number 21
[ 1486.712005][ T3611] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1487.027592][ T3611] usb 6-1: config 0 has no interfaces?
[ 1487.311984][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1487.471989][   T10] usb 5-1: Using ep0 maxpacket: 32
[ 1487.490899][   T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1487.505877][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1487.534196][ T3611] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1487.538986][T12594] usb 2-1: USB disconnect, device number 105
[ 1487.563173][   T10] usb 5-1: config 0 descriptor??
[ 1487.666888][ T3611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1487.706061][ T3611] usb 6-1: Product: syz
[ 1487.751367][ T3611] usb 6-1: Manufacturer: syz
[ 1487.770974][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1487.814246][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1487.844719][ T3611] usb 6-1: SerialNumber: syz
[ 1487.848721][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1487.866830][   T10] usb 5-1: media controller created
[ 1487.901420][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1487.955807][ T3611] usb 6-1: config 0 descriptor??
[ 1488.234610][T27950] pimreg: entered allmulticast mode
[ 1488.246280][T27950] pimreg: left allmulticast mode
[ 1488.262125][ T3611] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1488.410332][T27996] veth1_to_hsr: entered allmulticast mode
[ 1488.427070][T27996] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[ 1488.546223][ T3611] usb 4-1: Using ep0 maxpacket: 32
[ 1488.563473][ T3611] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 1488.572151][ T3611] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1488.605037][ T3611] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1488.660068][ T3611] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1488.726908][ T3611] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1488.737677][ T3611] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1488.747685][ T3611] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1488.757340][ T3611] usb 4-1: Product: syz
[ 1488.766873][ T3611] usb 4-1: Manufacturer: syz
[ 1488.775550][ T3611] usb 4-1: SerialNumber: syz
[ 1488.791286][ T3611] usb 4-1: config 0 descriptor??
[ 1488.815421][ T3611] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1488.833452][ T3611] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1489.127736][ T5905] usb 4-1: USB disconnect, device number 21
[ 1489.133836][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[ 1489.142247][T27985] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[ 1489.186237][ T5905] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 1489.758541][T12594] usb 6-1: USB disconnect, device number 7
[ 1489.930511][   T10] az6027: usb out operation failed. (-71)
[ 1489.963320][   T10] az6027: usb out operation failed. (-71)
[ 1489.987993][   T10] stb0899_attach: Driver disabled by Kconfig
[ 1490.025152][   T10] az6027: no front-end attached
[ 1490.025152][   T10] 
[ 1490.050457][   T10] az6027: usb out operation failed. (-71)
[ 1490.080668][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1490.490889][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input67
[ 1490.582391][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[ 1490.745870][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1490.879422][   T10] usb 5-1: USB disconnect, device number 22
[ 1490.972218][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 1491.267278][ T5905] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1491.288637][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1491.350964][ T5905] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1491.452571][ T5835] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1491.569723][ T5905] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1491.614647][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1491.684036][ T5905] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1491.723142][ T5835] usb 6-1: config 0 has no interfaces?
[ 1491.800879][ T5905] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1491.837206][ T6938] udevd[6938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1491.883177][T28021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1491.893697][T28021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1491.981141][ T5835] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1491.999624][ T5835] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1492.009584][ T5835] usb 6-1: Product: syz
[ 1492.017261][ T5835] usb 6-1: Manufacturer: syz
[ 1492.024924][ T5835] usb 6-1: SerialNumber: syz
[ 1492.050927][ T5835] usb 6-1: config 0 descriptor??
[ 1492.319692][T28035] pimreg: entered allmulticast mode
[ 1492.327519][T28035] pimreg: left allmulticast mode
[ 1492.482119][ T5905] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1492.703363][ T5905] usb 1-1: Using ep0 maxpacket: 32
[ 1492.717234][ T5905] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[ 1492.729674][ T5905] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1492.752394][ T5905] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1492.795869][ T5905] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1492.855014][ T5905] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1492.876093][ T5905] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1492.886826][ T5905] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1492.900354][ T5905] usb 1-1: Product: syz
[ 1492.912703][ T5905] usb 1-1: Manufacturer: syz
[ 1492.917790][ T5905] usb 1-1: SerialNumber: syz
[ 1492.957582][ T5905] usb 1-1: config 0 descriptor??
[ 1492.993746][ T5905] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1493.007301][ T5905] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1493.355489][T28059] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[ 1493.356801][   T10] usb 1-1: USB disconnect, device number 7
[ 1493.362626][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[ 1493.394269][   T10] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[ 1493.451901][  T977] usb 4-1: USB disconnect, device number 22
[ 1494.119227][T28084] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6491'.
[ 1494.215786][ T5835] usb 6-1: USB disconnect, device number 8
[ 1494.245907][T28087] bridge1: the hash_elasticity option has been deprecated and is always 16
[ 1494.492022][ T5905] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1494.702575][ T5905] usb 4-1: device descriptor read/64, error -71
[ 1494.974328][ T5835] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1494.982111][ T5905] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1495.122154][ T5905] usb 4-1: device descriptor read/64, error -71
[ 1495.155097][ T5835] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1495.195904][ T5835] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1495.254993][ T5905] usb usb4-port1: attempt power cycle
[ 1495.301591][ T5835] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1495.355306][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1495.412102][  T977] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[ 1495.441191][ T5835] usb 5-1: config 0 descriptor??
[ 1495.652875][  T977] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1495.679946][ T5905] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1495.736605][  T977] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1495.872365][ T5905] usb 4-1: device descriptor read/8, error -71
[ 1495.887825][  T977] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1495.919713][  T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1496.228782][  T977] usb 6-1: usb_control_msg returned -32
[ 1496.235284][  T977] usbtmc 6-1:16.0: can't read capabilities
[ 1496.241576][ T5905] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1496.307836][ T5905] usb 4-1: device descriptor read/8, error -71
[ 1496.363035][T12594] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1496.425272][ T5905] usb usb4-port1: unable to enumerate USB device
[ 1496.522438][T12594] usb 1-1: Using ep0 maxpacket: 16
[ 1496.553376][T12594] usb 1-1: config 2 has an invalid interface number: 140 but max is 1
[ 1496.561779][T12594] usb 1-1: config 2 has an invalid interface number: 97 but max is 1
[ 1496.579577][T28124] FAULT_INJECTION: forcing a failure.
[ 1496.579577][T28124] name failslab, interval 1, probability 0, space 0, times 0
[ 1496.599542][T28124] CPU: 1 UID: 0 PID: 28124 Comm: syz.5.6496 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1496.599572][T28124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1496.599584][T28124] Call Trace:
[ 1496.599593][T28124]  <TASK>
[ 1496.599603][T28124]  dump_stack_lvl+0x189/0x250
[ 1496.599638][T28124]  ? __pfx____ratelimit+0x10/0x10
[ 1496.599667][T28124]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1496.599697][T28124]  ? __pfx__printk+0x10/0x10
[ 1496.599718][T28124]  ? __pfx___might_resched+0x10/0x10
[ 1496.599747][T28124]  ? fs_reclaim_acquire+0x7d/0x100
[ 1496.599776][T28124]  should_fail_ex+0x414/0x560
[ 1496.599806][T28124]  should_failslab+0xa8/0x100
[ 1496.599830][T28124]  __kmalloc_noprof+0xcb/0x4f0
[ 1496.599849][T28124]  ? tomoyo_encode+0x28b/0x550
[ 1496.599881][T28124]  tomoyo_encode+0x28b/0x550
[ 1496.599921][T28124]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1496.599959][T28124]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1496.599984][T28124]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1496.600010][T28124]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1496.600051][T28124]  ? __lock_acquire+0xab9/0xd20
[ 1496.600098][T28124]  ? __fget_files+0x2a/0x420
[ 1496.600123][T28124]  ? __fget_files+0x2a/0x420
[ 1496.600144][T28124]  ? __fget_files+0x3a0/0x420
[ 1496.600164][T28124]  ? __fget_files+0x2a/0x420
[ 1496.600190][T28124]  security_file_ioctl+0xcb/0x2d0
[ 1496.600214][T28124]  __se_sys_ioctl+0x47/0x170
[ 1496.600249][T28124]  do_syscall_64+0xfa/0x3b0
[ 1496.600266][T28124]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1496.600294][T28124]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.600313][T28124]  ? clear_bhb_loop+0x60/0xb0
[ 1496.600337][T28124]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1496.600356][T28124] RIP: 0033:0x7f5b66b8e929
[ 1496.600375][T28124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1496.600392][T28124] RSP: 002b:00007f5b649f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1496.600413][T28124] RAX: ffffffffffffffda RBX: 00007f5b66db6080 RCX: 00007f5b66b8e929
[ 1496.600428][T28124] RDX: 0000200000000040 RSI: 00000000c0105b08 RDI: 0000000000000004
[ 1496.600441][T28124] RBP: 00007f5b649f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1496.600454][T28124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1496.600466][T28124] R13: 0000000000000000 R14: 00007f5b66db6080 R15: 00007f5b66edfa28
[ 1496.600498][T28124]  </TASK>
[ 1496.600691][T28124] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1496.603281][T28123] (unnamed net_device) (uninitialized): option ad_select: invalid value (34)
[ 1496.625972][T28124] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32
[ 1496.659437][T12594] usb 1-1: config 2 has no interface number 0
[ 1496.973098][ T5835] usb 6-1: USB disconnect, device number 9
[ 1497.176019][T12594] usb 1-1: config 2 has no interface number 1
[ 1497.216688][T12594] usb 1-1: config 2 interface 140 altsetting 111 endpoint 0xA has invalid maxpacket 1015, setting to 64
[ 1497.237894][T12594] usb 1-1: config 2 interface 140 altsetting 111 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1497.249477][T12594] usb 1-1: config 2 interface 140 altsetting 111 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1497.261805][T12594] usb 1-1: config 2 interface 97 altsetting 7 has a duplicate endpoint with address 0x5, skipping
[ 1497.279751][T12594] usb 1-1: config 2 interface 97 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[ 1497.376795][T12594] usb 1-1: config 2 interface 140 has no altsetting 0
[ 1497.397234][T12594] usb 1-1: config 2 interface 97 has no altsetting 0
[ 1497.536505][T12594] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=8a.f4
[ 1497.551958][T12594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1497.636222][T12594] usb 1-1: Product: syz
[ 1497.661998][T25287] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1497.722378][T12594] usb 1-1: Manufacturer: syz
[ 1497.764431][T12594] usb 1-1: SerialNumber: syz
[ 1497.848107][T25287] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1497.958949][T25287] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1498.252646][T12594] usb 1-1: USB disconnect, device number 8
[ 1498.258575][T25287] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1498.362287][T25287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.483089][ T5835] usb 5-1: USB disconnect, device number 23
[ 1498.541110][T25287] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1498.633088][T26178] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1498.804894][T25287] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1498.824838][T26178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1498.846550][T26178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1498.887346][T26178] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1498.925027][T26178] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.957605][T26178] usb 6-1: config 0 descriptor??
[ 1498.967586][T28139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.004816][T28139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.423814][T26178] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0
[ 1499.443201][T26178] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[ 1499.625584][T26178] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE
[ 1500.333426][T26178] cp2112 0003:10C4:EA90.0020: error reading lock byte: -71
[ 1500.358914][T26178] usb 6-1: USB disconnect, device number 10
[ 1500.952596][T26178] usb 4-1: USB disconnect, device number 27
[ 1501.184350][ T5835] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1501.344929][ T5835] usb 1-1: device descriptor read/64, error -71
[ 1501.661947][ T5835] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1501.802252][ T5835] usb 1-1: device descriptor read/64, error -71
[ 1501.947400][ T5835] usb usb1-port1: attempt power cycle
[ 1502.228823][T28190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6514'.
[ 1502.257296][T28192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6515'.
[ 1502.386587][ T5835] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1502.442904][ T5835] usb 1-1: device descriptor read/8, error -71
[ 1502.813737][ T5835] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1502.871064][ T5835] usb 1-1: device descriptor read/8, error -71
[ 1502.982316][ T5835] usb usb1-port1: unable to enumerate USB device
[ 1503.051961][T26178] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1503.208224][T26178] usb 6-1: not running at top speed; connect to a high speed hub
[ 1503.237870][T26178] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1503.248236][T26178] usb 6-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[ 1503.266397][T26178] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.279289][T26178] usb 6-1: Product: syz
[ 1503.296471][T26178] usb 6-1: Manufacturer: syz
[ 1503.321458][T26178] usb 6-1: SerialNumber: syz
[ 1503.580773][T26178] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input68
[ 1503.608763][ T5189] bcm5974 6-1:1.0: could not read from device
[ 1503.621493][T26178] usb 6-1: USB disconnect, device number 11
[ 1503.629656][ T5189] bcm5974 6-1:1.0: could not read from device
[ 1504.462031][T26178] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1504.572100][T12594] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1504.710579][T26178] usb 1-1: Using ep0 maxpacket: 32
[ 1504.739489][T26178] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1504.751967][T26178] usb 1-1: config 0 has no interface number 0
[ 1504.786826][T26178] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1504.799698][T28226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6524'.
[ 1504.810215][T26178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1504.850710][T26178] usb 1-1: Product: syz
[ 1504.876622][T26178] usb 1-1: Manufacturer: syz
[ 1504.881273][T26178] usb 1-1: SerialNumber: syz
[ 1504.911550][T12594] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1504.911973][T26178] usb 1-1: config 0 descriptor??
[ 1504.983222][T12594] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1504.994848][T26178] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1505.166115][T12594] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1505.181995][T12594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.195719][T12594] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1505.281036][T26178] usb 1-1: selecting invalid altsetting 1
[ 1505.322492][T26178] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1505.426369][T28218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1505.435414][T28218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1505.483096][T12594] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1505.576143][T26178] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1505.611177][T26178] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1505.776994][T26178] usb 1-1: media controller created
[ 1506.153142][T26178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1507.086119][T28237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1507.097786][T26178] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1507.102535][T28237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1507.105809][T26178] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1507.165350][T26178] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1507.242422][T22437] Bluetooth: hci0: command 0x0406 tx timeout
[ 1507.315850][T26178] usb 1-1: USB disconnect, device number 13
[ 1507.322171][T12594] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1507.483047][T28242] FAULT_INJECTION: forcing a failure.
[ 1507.483047][T28242] name fail_iommufd, interval 1, probability 0, space 0, times 1
[ 1507.530081][T28242] CPU: 1 UID: 0 PID: 28242 Comm: syz.5.6528 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1507.530099][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1507.530107][T28242] Call Trace:
[ 1507.530112][T28242]  <TASK>
[ 1507.530118][T28242]  dump_stack_lvl+0x189/0x250
[ 1507.530139][T28242]  ? __pfx____ratelimit+0x10/0x10
[ 1507.530155][T28242]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1507.530171][T28242]  ? __pfx__printk+0x10/0x10
[ 1507.530190][T28242]  should_fail_ex+0x414/0x560
[ 1507.530206][T28242]  iommufd_get_object+0x78/0x4b0
[ 1507.530224][T28242]  ? __pfx_iommufd_get_object+0x10/0x10
[ 1507.530238][T28242]  ? __might_fault+0xb0/0x130
[ 1507.530254][T28242]  iommufd_ioas_option+0xb5/0x3a0
[ 1507.530268][T28242]  ? iommufd_option+0xb6/0x1a0
[ 1507.530284][T28242]  iommufd_option+0xbe/0x1a0
[ 1507.530301][T28242]  iommufd_fops_ioctl+0x449/0x520
[ 1507.530318][T28242]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 1507.530340][T28242]  ? __fget_files+0x3a0/0x420
[ 1507.530351][T28242]  ? __fget_files+0x2a/0x420
[ 1507.530364][T28242]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1507.530379][T28242]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 1507.530395][T28242]  __se_sys_ioctl+0xf9/0x170
[ 1507.530412][T28242]  do_syscall_64+0xfa/0x3b0
[ 1507.530421][T28242]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1507.530436][T28242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.530446][T28242]  ? clear_bhb_loop+0x60/0xb0
[ 1507.530459][T28242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1507.530469][T28242] RIP: 0033:0x7f5b66b8e929
[ 1507.530480][T28242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1507.530489][T28242] RSP: 002b:00007f5b6791a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1507.530501][T28242] RAX: ffffffffffffffda RBX: 00007f5b66db5fa0 RCX: 00007f5b66b8e929
[ 1507.530509][T28242] RDX: 0000200000000580 RSI: 0000000000003b87 RDI: 0000000000000003
[ 1507.530516][T28242] RBP: 00007f5b6791a090 R08: 0000000000000000 R09: 0000000000000000
[ 1507.530523][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1507.530529][T28242] R13: 0000000000000000 R14: 00007f5b66db5fa0 R15: 00007f5b66edfa28
[ 1507.530545][T28242]  </TASK>
[ 1507.921969][T26178] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1507.951174][T28166] Set syz1 is full, maxelem 65536 reached
[ 1508.072009][T26178] usb 1-1: Using ep0 maxpacket: 32
[ 1508.079177][T26178] usb 1-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.112566][T26178] usb 1-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[ 1508.156175][T26178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1508.215886][T26178] quatech2 1-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[ 1508.304764][ T5835] usb 4-1: USB disconnect, device number 28
[ 1508.923397][ T5835] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1509.062156][ T5835] usb 2-1: device descriptor read/64, error -71
[ 1509.301990][ T5835] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1509.452056][ T5835] usb 2-1: device descriptor read/64, error -71
[ 1509.567503][ T5835] usb usb2-port1: attempt power cycle
[ 1509.912223][ T5835] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1509.937342][ T5835] usb 2-1: device descriptor read/8, error -71
[ 1510.138923][T28273] fuse: Bad value for 'fd'
[ 1510.277040][ T5835] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1510.334321][ T5835] usb 2-1: device descriptor read/8, error -71
[ 1510.619622][ T5835] usb usb2-port1: unable to enumerate USB device
[ 1510.641939][T12594] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1510.872491][T26178] usb 1-1: qt2_attach - failed to power on unit: -71
[ 1510.907249][T26178] quatech2 1-1:24.0: probe with driver quatech2 failed with error -71
[ 1510.981989][T12594] usb 6-1: Using ep0 maxpacket: 8
[ 1510.992219][T26178] usb 1-1: USB disconnect, device number 14
[ 1511.002450][T12594] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 1511.041268][T12594] usb 6-1: config 179 has no interface number 0
[ 1511.066493][T12594] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1511.078037][T12594] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1511.092475][T12594] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1511.105025][T12594] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1511.122657][T12594] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1511.137510][T12594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1511.377923][T28297] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 1511.441981][T26178] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1511.592410][T26178] usb 1-1: Using ep0 maxpacket: 16
[ 1511.606880][T26178] usb 1-1: config 0 has an invalid interface number: 215 but max is 0
[ 1511.615606][T26178] usb 1-1: config 0 has no interface number 0
[ 1511.627801][T26178] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=ea.9f
[ 1511.634339][T12594] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input69
[ 1511.663297][T26178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1511.722055][T26178] usb 1-1: Product: syz
[ 1511.742148][T26178] usb 1-1: Manufacturer: syz
[ 1511.775721][T26178] usb 1-1: SerialNumber: syz
[ 1511.797491][T26178] usb 1-1: config 0 descriptor??
[ 1511.827660][   T30] audit: type=1326 audit(1749924272.564:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1511.859187][T26178] vmk80xx 1-1:0.215: driver 'vmk80xx' failed to auto-configure device.
[ 1512.328239][ T5953] usb 1-1: USB disconnect, device number 15
[ 1512.561111][   T30] audit: type=1326 audit(1749924272.564:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1512.756851][   T30] audit: type=1326 audit(1749924272.564:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1512.992271][T12594] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1513.042113][   T30] audit: type=1326 audit(1749924272.564:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1513.233872][   T30] audit: type=1326 audit(1749924272.574:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1513.286098][T12594] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.322264][   T30] audit: type=1326 audit(1749924272.574:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28292 comm="syz.5.6539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b66b8e929 code=0x7ffc0000
[ 1513.355161][T12594] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1513.402777][ T3611] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1513.494794][T12594] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1513.578706][T12594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1513.640538][ T3611] usb 5-1: config index 0 descriptor too short (expected 8192, got 36)
[ 1513.682890][ T3611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1513.727062][T12594] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1513.781902][ T3611] usb 5-1: config 0 has no interfaces?
[ 1513.867220][ T3611] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1513.890042][T12594] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1513.931083][T28310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1513.942295][T28310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1514.040075][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1514.495713][ T3611] usb 5-1: config 0 descriptor??
[ 1514.719185][ T3611] usb 5-1: string descriptor 0 read error: -71
[ 1514.760451][ T3611] usb 5-1: USB disconnect, device number 24
[ 1514.782117][ T5953] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1514.983599][T28312] delete_channel: no stack
[ 1515.094222][ T5953] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1515.119406][ T5953] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1515.130604][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1515.191978][ T5953] usb 1-1: SerialNumber: syz
[ 1515.287692][ T3611] usb 2-1: USB disconnect, device number 110
[ 1515.409547][ T5905] usb 6-1: USB disconnect, device number 13
[ 1515.409586][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1515.423851][ T5905] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1515.424147][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[ 1515.891399][ T5953] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[ 1516.308298][T25287] usb 1-1: USB disconnect, device number 16
[ 1516.328599][T25287] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[ 1517.661999][ T5905] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1517.890356][ T5905] usb 5-1: config 0 has no interfaces?
[ 1517.927053][ T5905] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1517.941351][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.046847][ T5905] usb 5-1: Product: syz
[ 1518.072015][ T5905] usb 5-1: Manufacturer: syz
[ 1518.076686][ T5905] usb 5-1: SerialNumber: syz
[ 1518.180943][ T5905] usb 5-1: config 0 descriptor??
[ 1518.349154][T28363] loop4: detected capacity change from 0 to 524255232
[ 1518.452227][T28363] netlink: 'syz.5.6554': attribute type 21 has an invalid length.
[ 1518.460197][T28363] netlink: 'syz.5.6554': attribute type 6 has an invalid length.
[ 1518.509120][T28363] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6554'.
[ 1519.032099][ T5953] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1519.284092][ T5953] usb 1-1: Using ep0 maxpacket: 16
[ 1519.291825][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1519.322181][ T5905] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1519.498486][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1519.516752][ T5905] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1519.525663][ T5953] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1519.572219][ T5905] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1519.631941][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1519.675664][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.744841][ T5905] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1519.754828][ T5953] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 1519.772070][ T3611] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1519.789912][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1519.876793][ T5905] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1519.889214][ T6938] udevd[6938]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1519.913066][ T5953] usb 1-1: config 0 descriptor??
[ 1519.952887][T28377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1519.965068][T28377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1520.028648][ T3611] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1520.051553][ T3611] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1520.073249][ T3611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.111781][ T3611] usb 6-1: Product: syz
[ 1520.120633][ T3611] usb 6-1: Manufacturer: syz
[ 1520.131443][ T3611] usb 6-1: SerialNumber: syz
[ 1520.376912][ T3611] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1520.410458][ T3611] usb 6-1: USB disconnect, device number 14
[ 1520.451565][ T3611] usblp0: removed
[ 1520.589967][ T5953] hid (null): unknown global tag 0xc
[ 1520.612067][ T5953] hid (null): unknown global tag 0xd
[ 1520.656942][ T5953] hid-multitouch 0003:0457:07DA.0021: unknown main item tag 0x2
[ 1520.709128][ T5953] hid-multitouch 0003:0457:07DA.0021: unknown global tag 0xc
[ 1520.762361][ T5953] hid-multitouch 0003:0457:07DA.0021: item 0 2 1 12 parsing failed
[ 1520.906216][ T5953] hid-multitouch 0003:0457:07DA.0021: probe with driver hid-multitouch failed with error -22
[ 1520.938382][ T3611] usb 5-1: USB disconnect, device number 25
[ 1521.072009][ T5953] usb 1-1: USB disconnect, device number 17
[ 1521.395377][ T3611] usb 5-1: new full-speed USB device number 26 using dummy_hcd
[ 1521.565527][ T3611] usb 5-1: not running at top speed; connect to a high speed hub
[ 1521.614764][ T3611] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1521.631054][ T3611] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1521.650650][ T3611] usb 5-1: config 1 has no interface number 1
[ 1521.704024][ T3611] usb 5-1: too many endpoints for config 1 interface 2 altsetting 165: 129, using maximum allowed: 30
[ 1521.759546][ T3611] usb 5-1: config 1 interface 2 altsetting 165 endpoint 0x82 has an invalid bInterval 129, changing to 4
[ 1521.843642][ T3611] usb 5-1: config 1 interface 2 altsetting 165 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1521.957327][ T3611] usb 5-1: config 1 interface 2 altsetting 165 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1521.990403][ T3611] usb 5-1: config 1 interface 2 has no altsetting 0
[ 1522.039287][ T3611] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1522.049621][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1522.084783][ T3611] usb 5-1: Product: ӿ
[ 1522.099405][ T3611] usb 5-1: Manufacturer: Љ
[ 1522.107136][ T3611] usb 5-1: SerialNumber: ࠉ
[ 1522.476380][T26178] usb 2-1: USB disconnect, device number 111
[ 1522.486251][ T3611] usb 5-1: USB disconnect, device number 26
[ 1524.010660][T28302] Set syz1 is full, maxelem 65536 reached
[ 1524.027319][T28438] FAULT_INJECTION: forcing a failure.
[ 1524.027319][T28438] name failslab, interval 1, probability 0, space 0, times 0
[ 1524.078759][T28438] CPU: 1 UID: 0 PID: 28438 Comm: syz.1.6570 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1524.078778][T28438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1524.078785][T28438] Call Trace:
[ 1524.078790][T28438]  <TASK>
[ 1524.078795][T28438]  dump_stack_lvl+0x189/0x250
[ 1524.078816][T28438]  ? __pfx____ratelimit+0x10/0x10
[ 1524.078833][T28438]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1524.078849][T28438]  ? __pfx__printk+0x10/0x10
[ 1524.078863][T28438]  ? __pfx___might_resched+0x10/0x10
[ 1524.078879][T28438]  ? fs_reclaim_acquire+0x7d/0x100
[ 1524.078894][T28438]  should_fail_ex+0x414/0x560
[ 1524.078910][T28438]  should_failslab+0xa8/0x100
[ 1524.078923][T28438]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1524.078933][T28438]  ? rtnl_newlink+0xed/0x1c70
[ 1524.078944][T28438]  ? __lock_acquire+0xab9/0xd20
[ 1524.078960][T28438]  rtnl_newlink+0xed/0x1c70
[ 1524.078977][T28438]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1524.078987][T28438]  ? is_bpf_text_address+0x26/0x2b0
[ 1524.079007][T28438]  ? __lock_acquire+0xab9/0xd20
[ 1524.079029][T28438]  ? __lock_acquire+0xab9/0xd20
[ 1524.079056][T28438]  ? is_bpf_text_address+0x26/0x2b0
[ 1524.079074][T28438]  ? is_bpf_text_address+0x292/0x2b0
[ 1524.079088][T28438]  ? is_bpf_text_address+0x26/0x2b0
[ 1524.079105][T28438]  ? kernel_text_address+0xa5/0xe0
[ 1524.079125][T28438]  ? __lock_acquire+0xab9/0xd20
[ 1524.079151][T28438]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1524.079161][T28438]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1524.079173][T28438]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1524.079183][T28438]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1524.079202][T28438]  netlink_rcv_skb+0x205/0x470
[ 1524.079215][T28438]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1524.079227][T28438]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1524.079244][T28438]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1524.079256][T28438]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1524.079276][T28438]  netlink_unicast+0x758/0x8d0
[ 1524.079292][T28438]  netlink_sendmsg+0x805/0xb30
[ 1524.079309][T28438]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1524.079322][T28438]  ? aa_sock_msg_perm+0x94/0x160
[ 1524.079338][T28438]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1524.079351][T28438]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1524.079364][T28438]  __sock_sendmsg+0x21c/0x270
[ 1524.079382][T28438]  ____sys_sendmsg+0x505/0x830
[ 1524.079398][T28438]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1524.079415][T28438]  ? import_iovec+0x74/0xa0
[ 1524.079427][T28438]  ___sys_sendmsg+0x21f/0x2a0
[ 1524.079441][T28438]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1524.079472][T28438]  ? __fget_files+0x2a/0x420
[ 1524.079483][T28438]  ? __fget_files+0x3a0/0x420
[ 1524.079500][T28438]  __x64_sys_sendmsg+0x19b/0x260
[ 1524.079514][T28438]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1524.079532][T28438]  ? __pfx_ksys_write+0x10/0x10
[ 1524.079540][T28438]  ? rcu_is_watching+0x15/0xb0
[ 1524.079559][T28438]  ? do_syscall_64+0xbe/0x3b0
[ 1524.079570][T28438]  do_syscall_64+0xfa/0x3b0
[ 1524.079578][T28438]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1524.079593][T28438]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.079603][T28438]  ? clear_bhb_loop+0x60/0xb0
[ 1524.079616][T28438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1524.079626][T28438] RIP: 0033:0x7fad2638e929
[ 1524.079636][T28438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1524.079645][T28438] RSP: 002b:00007fad27123038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1524.079657][T28438] RAX: ffffffffffffffda RBX: 00007fad265b5fa0 RCX: 00007fad2638e929
[ 1524.079665][T28438] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003
[ 1524.079672][T28438] RBP: 00007fad27123090 R08: 0000000000000000 R09: 0000000000000000
[ 1524.079679][T28438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1524.079685][T28438] R13: 0000000000000000 R14: 00007fad265b5fa0 R15: 00007fad266dfa28
[ 1524.079700][T28438]  </TASK>
[ 1524.572103][   T30] audit: type=1326 audit(1749924285.324:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.596350][   T30] audit: type=1326 audit(1749924285.324:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.619363][   T30] audit: type=1326 audit(1749924285.324:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.642438][   T30] audit: type=1326 audit(1749924285.324:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.665802][   T30] audit: type=1326 audit(1749924285.324:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.691064][   T30] audit: type=1326 audit(1749924285.324:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.714500][   T30] audit: type=1326 audit(1749924285.324:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.737462][   T30] audit: type=1326 audit(1749924285.324:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.760485][   T30] audit: type=1326 audit(1749924285.324:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1524.785100][   T30] audit: type=1326 audit(1749924285.324:6177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28443 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f818e929 code=0x7ffc0000
[ 1525.012285][T12594] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[ 1525.031792][T28459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6576'.
[ 1525.132239][ T3611] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1525.162229][T12594] usb 1-1: device descriptor read/64, error -71
[ 1525.228771][T28462] syzkaller1: tun_chr_ioctl cmd 35111
[ 1525.303917][ T3611] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1525.320191][ T3611] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1525.332272][ T3611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1525.340428][ T3611] usb 5-1: Product: syz
[ 1525.344767][ T3611] usb 5-1: Manufacturer: syz
[ 1525.350488][ T3611] usb 5-1: SerialNumber: syz
[ 1525.432056][T12594] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[ 1525.563344][T12594] usb 1-1: device descriptor read/64, error -71
[ 1525.589521][ T3611] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1525.623398][ T3611] usb 5-1: USB disconnect, device number 27
[ 1525.642244][ T3611] usblp0: removed
[ 1525.672469][T12594] usb usb1-port1: attempt power cycle
[ 1526.032489][T12594] usb 1-1: new low-speed USB device number 20 using dummy_hcd
[ 1526.066174][ T3611] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1526.075621][T12594] usb 1-1: device descriptor read/8, error -71
[ 1526.242240][ T3611] usb 4-1: Using ep0 maxpacket: 32
[ 1526.263936][ T3611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1526.277932][ T3611] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1526.287541][ T3611] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1526.297717][ T3611] usb 4-1: Product: syz
[ 1526.303413][ T3611] usb 4-1: Manufacturer: syz
[ 1526.309106][ T3611] usb 4-1: SerialNumber: syz
[ 1526.324038][ T3611] usb 4-1: config 0 descriptor??
[ 1526.330523][T28471] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1526.341211][ T3611] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1526.341984][T12594] usb 1-1: new low-speed USB device number 21 using dummy_hcd
[ 1526.347257][ T3611] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1526.385789][T12594] usb 1-1: device descriptor read/8, error -71
[ 1526.492000][ T5953] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1526.502367][T12594] usb usb1-port1: unable to enumerate USB device
[ 1526.641971][ T5953] usb 2-1: Using ep0 maxpacket: 16
[ 1526.666899][T28478] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6582'.
[ 1526.679393][ T5953] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1526.690986][ T5953] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1526.700974][ T5953] usb 2-1: can't read configurations, error -71
[ 1527.281083][ T3611] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1527.373090][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1527.406855][ T3611] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1527.482782][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1527.513860][T12594] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1527.582076][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1527.845103][ T5905] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1527.872549][ T5953] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1528.073652][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1528.108353][ T3611] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1528.404178][ T5953] usb 2-1: Using ep0 maxpacket: 16
[ 1528.419923][T28493] FAULT_INJECTION: forcing a failure.
[ 1528.419923][T28493] name failslab, interval 1, probability 0, space 0, times 0
[ 1528.443045][ T5953] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 238, changing to 11
[ 1528.454986][T28493] CPU: 1 UID: 0 PID: 28493 Comm: syz.4.6587 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1528.455013][T28493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1528.455025][T28493] Call Trace:
[ 1528.455034][T28493]  <TASK>
[ 1528.455042][T28493]  dump_stack_lvl+0x189/0x250
[ 1528.455075][T28493]  ? __pfx____ratelimit+0x10/0x10
[ 1528.455102][T28493]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1528.455130][T28493]  ? __pfx__printk+0x10/0x10
[ 1528.455154][T28493]  ? __pfx_snprintf+0x10/0x10
[ 1528.455182][T28493]  should_fail_ex+0x414/0x560
[ 1528.455210][T28493]  should_failslab+0xa8/0x100
[ 1528.455233][T28493]  __kmalloc_noprof+0xcb/0x4f0
[ 1528.455253][T28493]  ? aa_label_asxprint+0x70/0x130
[ 1528.455278][T28493]  aa_label_asxprint+0x70/0x130
[ 1528.455301][T28493]  apparmor_lsmprop_to_secctx+0x9d/0x170
[ 1528.455330][T28493]  security_lsmprop_to_secctx+0x96/0x2c0
[ 1528.455358][T28493]  audit_log_task_context+0xff/0x240
[ 1528.455383][T28493]  ? __pfx_audit_log_task_context+0x10/0x10
[ 1528.455405][T28493]  ? __pfx_audit_log_format+0x10/0x10
[ 1528.455427][T28493]  ? audit_log_start+0x6bf/0x870
[ 1528.455453][T28493]  audit_log_task+0x190/0x3c0
[ 1528.455474][T28493]  ? __pfx_audit_log_task+0x10/0x10
[ 1528.455493][T28493]  ? __pfx_migrate_enable+0x10/0x10
[ 1528.455518][T28493]  audit_seccomp+0x86/0x190
[ 1528.455541][T28493]  __seccomp_filter+0x9aa/0x1a40
[ 1528.455587][T28493]  ? __pfx___seccomp_filter+0x10/0x10
[ 1528.455617][T28493]  ? __might_fault+0xb0/0x130
[ 1528.455637][T28493]  ? security_getselfattr+0x514/0x550
[ 1528.455663][T28493]  ? __fget_files+0x3a0/0x420
[ 1528.455699][T28493]  ? __secure_computing+0xe2/0x2a0
[ 1528.455730][T28493]  syscall_trace_enter+0xaa/0x160
[ 1528.455759][T28493]  do_syscall_64+0xd3/0x3b0
[ 1528.455776][T28493]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1528.455806][T28493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1528.455825][T28493]  ? clear_bhb_loop+0x60/0xb0
[ 1528.455847][T28493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1528.455864][T28493] RIP: 0033:0x7fc84bb8d33c
[ 1528.455883][T28493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1528.455902][T28493] RSP: 002b:00007fc84caa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1528.455923][T28493] RAX: ffffffffffffffda RBX: 00007fc84bdb5fa0 RCX: 00007fc84bb8d33c
[ 1528.455938][T28493] RDX: 000000000000000f RSI: 00007fc84caa70a0 RDI: 0000000000000003
[ 1528.455951][T28493] RBP: 00007fc84caa7090 R08: 0000000000000000 R09: 0000000000000000
[ 1528.455965][T28493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1528.455977][T28493] R13: 0000000000000000 R14: 00007fc84bdb5fa0 R15: 00007fc84bedfa28
[ 1528.456006][T28493]  </TASK>
[ 1528.457749][ T5953] usb 2-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1528.492073][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1528.497308][ T5953] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1528.533758][ T3611] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1528.535553][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1528.624994][T28471] raw-gadget.1 gadget.3: failed to queue resume event
[ 1528.825780][ T5953] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[ 1528.838690][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1528.938633][T25287] raw-gadget.1 gadget.3: failed to queue suspend event
[ 1529.001682][ T5953] usb 2-1: config 0 descriptor??
[ 1529.114250][T28471] raw-gadget.1 gadget.3: failed to queue disconnect event
[ 1529.201044][ T5905] usb 4-1: USB disconnect, device number 29
[ 1529.371950][T25287] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1529.483198][ T5953] hid-alps 0003:044E:120B.0022: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.1-1/input0
[ 1529.582143][T25287] usb 5-1: Using ep0 maxpacket: 8
[ 1529.614459][T25287] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 1529.622134][ T5905] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1529.650666][T25287] usb 5-1: config 179 has no interface number 0
[ 1529.667408][T25287] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1529.751329][T25287] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1529.788880][T25287] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1529.792444][T26647] usb 2-1: USB disconnect, device number 113
[ 1529.861974][ T5905] usb 4-1: device descriptor read/64, error -71
[ 1529.876127][T25287] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1529.971899][T25287] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1530.012024][T25287] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1530.040895][T28502] fuse: Bad value for 'fd'
[ 1530.046900][T25287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1530.126198][T28499] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1530.147213][ T5905] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1530.319297][ T5905] usb 4-1: device descriptor read/64, error -71
[ 1530.433133][ T5905] usb usb4-port1: attempt power cycle
[ 1530.443839][T25287] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input71
[ 1530.772427][ T5905] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1530.814232][T26178] usb 5-1: USB disconnect, device number 28
[ 1530.814352][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1530.828922][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1530.843520][T26178] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1530.858696][ T5905] usb 4-1: device descriptor read/8, error -71
[ 1531.132780][ T5905] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1531.180734][ T5905] usb 4-1: device descriptor read/8, error -71
[ 1531.301384][ T5905] usb usb4-port1: unable to enumerate USB device
[ 1531.751993][T25287] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1532.048135][T25287] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1532.089456][T25287] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1532.098675][T25287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1532.106910][T25287] usb 1-1: Product: syz
[ 1532.111183][T25287] usb 1-1: Manufacturer: syz
[ 1532.172755][T25287] usb 1-1: SerialNumber: syz
[ 1532.192229][ T5905] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1532.304936][T28532] vivid-002: disconnect
[ 1532.361975][ T5905] usb 5-1: Using ep0 maxpacket: 8
[ 1532.369308][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1532.382794][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1532.435983][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1532.486945][T25287] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1532.499318][T28531] vivid-002: reconnect
[ 1532.532538][T25287] usb 1-1: USB disconnect, device number 22
[ 1532.568340][T25287] usblp0: removed
[ 1532.569001][ T5905] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[ 1532.581703][ T5905] usb 5-1: New USB device strings: Mfr=7, Product=0, SerialNumber=0
[ 1532.590702][ T5905] usb 5-1: Manufacturer: syz
[ 1532.636438][ T5905] usb 5-1: config 0 descriptor??
[ 1532.727603][T28537] ip6t_srh: unknown srh match flags  5040
[ 1532.839666][   T30] kauditd_printk_skb: 58 callbacks suppressed
[ 1532.839685][   T30] audit: type=1326 audit(1749924293.594:6235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1532.896848][   T30] audit: type=1326 audit(1749924293.634:6236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1532.945185][   T30] audit: type=1326 audit(1749924293.634:6237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.052024][   T30] audit: type=1326 audit(1749924293.634:6238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.135642][   T30] audit: type=1326 audit(1749924293.654:6239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.170482][   T30] audit: type=1326 audit(1749924293.654:6240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.193714][   T30] audit: type=1326 audit(1749924293.654:6241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.218020][   T30] audit: type=1326 audit(1749924293.654:6242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.297989][   T30] audit: type=1326 audit(1749924293.654:6243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.349143][T28548] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[ 1533.385792][   T30] audit: type=1326 audit(1749924293.654:6244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28538 comm="syz.1.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fad2638e929 code=0x7ffc0000
[ 1533.960903][T28556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1533.968538][T28556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1534.247185][T28564] netlink: 308 bytes leftover after parsing attributes in process `syz.1.6610'.
[ 1534.366888][T28556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1534.388158][T28556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1534.459747][T28487] Set syz1 is full, maxelem 65536 reached
[ 1534.585598][T28556] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.594686][T28556] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.649499][T28556] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.680166][T28556] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.950512][ T5905] usbhid 5-1:0.0: can't add hid device: -71
[ 1534.957815][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1534.982414][ T5905] usb 5-1: USB disconnect, device number 29
[ 1535.078112][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6615'.
[ 1535.980827][T28591] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6617'.
[ 1536.582128][T26178] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1536.767307][T26178] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1536.792141][T26178] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1536.866204][T26178] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1536.907003][T26178] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1536.915828][T26178] usb 6-1: Manufacturer: syz
[ 1536.922498][T26178] usb 6-1: config 0 descriptor??
[ 1536.991918][T26178] rc_core: IR keymap rc-hauppauge not found
[ 1537.071454][T26178] Registered IR keymap rc-empty
[ 1537.116623][T28612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6625'.
[ 1537.136624][T26178] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1537.182405][T28597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1537.199732][T26178] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input72
[ 1537.216913][T28597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1537.352217][  T977] usb 5-1: new full-speed USB device number 30 using dummy_hcd
[ 1537.364498][ T3611] usb 6-1: USB disconnect, device number 15
[ 1537.487184][T28609] Set syz1 is full, maxelem 65536 reached
[ 1537.562542][  T977] usb 5-1: device descriptor read/64, error -71
[ 1537.635783][T26178] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1537.762301][ T5953] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1537.831989][  T977] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[ 1537.871974][T26178] usb 1-1: config 0 has no interfaces?
[ 1537.886735][T26178] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1537.902220][ T5953] usb 4-1: device descriptor read/64, error -71
[ 1537.963241][T26178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1537.972131][  T977] usb 5-1: device descriptor read/64, error -71
[ 1537.992277][T26178] usb 1-1: Product: syz
[ 1538.017137][T26178] usb 1-1: Manufacturer: syz
[ 1538.095049][T26178] usb 1-1: SerialNumber: syz
[ 1538.109263][  T977] usb usb5-port1: attempt power cycle
[ 1538.141724][T26178] usb 1-1: config 0 descriptor??
[ 1538.157903][ T5953] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1538.166563][T28624] input: syz1 as /devices/virtual/input/input73
[ 1538.313396][ T5953] usb 4-1: device descriptor read/64, error -71
[ 1538.452266][ T5953] usb usb4-port1: attempt power cycle
[ 1538.461984][  T977] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[ 1538.481351][T28618] pimreg: left allmulticast mode
[ 1538.513223][  T977] usb 5-1: device descriptor read/8, error -71
[ 1538.752659][  T977] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[ 1538.777386][T28640] program syz.1.6633 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1538.804554][  T977] usb 5-1: device descriptor read/8, error -71
[ 1538.824046][ T5953] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1538.865135][ T5953] usb 4-1: device descriptor read/8, error -71
[ 1538.957204][T28644] netlink: 'syz.1.6633': attribute type 10 has an invalid length.
[ 1538.965582][  T977] usb usb5-port1: unable to enumerate USB device
[ 1538.982839][T28644] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[ 1539.008031][T28644] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[ 1539.020991][T28644] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[ 1539.050943][T28642] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[ 1539.057500][T28642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1539.069992][T28642] vhci_hcd vhci_hcd.0: Device attached
[ 1539.106011][ T5953] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1539.132654][ T5953] usb 4-1: device descriptor read/8, error -71
[ 1539.290474][ T5953] usb usb4-port1: unable to enumerate USB device
[ 1539.343714][T26647] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1539.351493][T26178] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[ 1539.375523][T28640] syz.1.6633 (28640): drop_caches: 2
[ 1539.384592][T28640] syz.1.6633 (28640): drop_caches: 2
[ 1539.527057][T26647] usb 6-1: config index 0 descriptor too short (expected 24929, got 18)
[ 1539.547646][T26647] usb 6-1: config 97 has too many interfaces: 97, using maximum allowed: 32
[ 1539.562158][T26647] usb 6-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config
[ 1539.572619][T26647] usb 6-1: config 97 has 0 interfaces, different from the descriptor's value: 97
[ 1539.584082][T26647] usb 6-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5
[ 1539.593339][T26647] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1539.813958][T28646] usb 43-1: recv xbuf, 0
[ 1539.814718][T26647] usb 6-1: string descriptor 0 read error: -71
[ 1539.826197][ T8976] vhci_hcd: stop threads
[ 1539.835852][ T8976] vhci_hcd: release socket
[ 1539.840671][T26647] usb 6-1: USB disconnect, device number 16
[ 1539.850556][ T8976] vhci_hcd: disconnect device
[ 1539.894435][T26178] vhci_hcd: vhci_device speed not set
[ 1540.333407][T28655] Set syz1 is full, maxelem 65536 reached
[ 1540.580103][T26647] usb 1-1: USB disconnect, device number 23
[ 1540.683601][T28663] FAULT_INJECTION: forcing a failure.
[ 1540.683601][T28663] name failslab, interval 1, probability 0, space 0, times 0
[ 1540.722280][T28663] CPU: 0 UID: 0 PID: 28663 Comm: syz.0.6642 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1540.722309][T28663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1540.722320][T28663] Call Trace:
[ 1540.722328][T28663]  <TASK>
[ 1540.722336][T28663]  dump_stack_lvl+0x189/0x250
[ 1540.722377][T28663]  ? __pfx____ratelimit+0x10/0x10
[ 1540.722404][T28663]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1540.722431][T28663]  ? __pfx__printk+0x10/0x10
[ 1540.722460][T28663]  ? __pfx___might_resched+0x10/0x10
[ 1540.722486][T28663]  ? fs_reclaim_acquire+0x7d/0x100
[ 1540.722514][T28663]  should_fail_ex+0x414/0x560
[ 1540.722543][T28663]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1540.722561][T28663]  should_failslab+0xa8/0x100
[ 1540.722583][T28663]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1540.722600][T28663]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[ 1540.722628][T28663]  ? alloc_inode+0x6a/0x1b0
[ 1540.722644][T28663]  ? start_creating+0x2a3/0x3c0
[ 1540.722675][T28663]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[ 1540.722692][T28663]  alloc_inode+0x6a/0x1b0
[ 1540.722713][T28663]  new_inode+0x22/0x170
[ 1540.722733][T28663]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1540.722764][T28663]  debugfs_create_dir+0xfb/0x420
[ 1540.722795][T28663]  ieee80211_debugfs_recreate_netdev+0x1a6/0x1460
[ 1540.722832][T28663]  ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10
[ 1540.722858][T28663]  ? ieee80211_mgd_setup_link+0x534/0x780
[ 1540.722895][T28663]  ieee80211_if_change_type+0x156/0x990
[ 1540.722932][T28663]  ieee80211_change_iface+0xd5/0x510
[ 1540.722963][T28663]  cfg80211_change_iface+0x792/0xef0
[ 1540.722996][T28663]  nl80211_set_interface+0x773/0xaa0
[ 1540.723034][T28663]  ? __pfx_nl80211_set_interface+0x10/0x10
[ 1540.723064][T28663]  ? nl80211_pre_doit+0x4fb/0x930
[ 1540.723096][T28663]  genl_family_rcv_msg_doit+0x212/0x300
[ 1540.723132][T28663]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1540.723174][T28663]  ? bpf_lsm_capable+0x9/0x20
[ 1540.723191][T28663]  ? security_capable+0x7e/0x2e0
[ 1540.723220][T28663]  genl_rcv_msg+0x60e/0x790
[ 1540.723255][T28663]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1540.723278][T28663]  ? ref_tracker_free+0x63a/0x7d0
[ 1540.723300][T28663]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 1540.723321][T28663]  ? __pfx_nl80211_set_interface+0x10/0x10
[ 1540.723344][T28663]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 1540.723378][T28663]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1540.723416][T28663]  netlink_rcv_skb+0x205/0x470
[ 1540.723440][T28663]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1540.723471][T28663]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1540.723513][T28663]  ? down_read+0x1ad/0x2e0
[ 1540.723537][T28663]  genl_rcv+0x28/0x40
[ 1540.723563][T28663]  netlink_unicast+0x758/0x8d0
[ 1540.723596][T28663]  netlink_sendmsg+0x805/0xb30
[ 1540.723630][T28663]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1540.723658][T28663]  ? aa_sock_msg_perm+0x94/0x160
[ 1540.723686][T28663]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1540.723711][T28663]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1540.723735][T28663]  __sock_sendmsg+0x21c/0x270
[ 1540.723769][T28663]  ____sys_sendmsg+0x505/0x830
[ 1540.723801][T28663]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1540.723837][T28663]  ? import_iovec+0x74/0xa0
[ 1540.723861][T28663]  ___sys_sendmsg+0x21f/0x2a0
[ 1540.723889][T28663]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1540.723955][T28663]  ? __fget_files+0x2a/0x420
[ 1540.723976][T28663]  ? __fget_files+0x3a0/0x420
[ 1540.724010][T28663]  __x64_sys_sendmsg+0x19b/0x260
[ 1540.724039][T28663]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1540.724075][T28663]  ? __pfx_ksys_write+0x10/0x10
[ 1540.724092][T28663]  ? rcu_is_watching+0x15/0xb0
[ 1540.724127][T28663]  ? do_syscall_64+0xbe/0x3b0
[ 1540.724150][T28663]  do_syscall_64+0xfa/0x3b0
[ 1540.724167][T28663]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1540.724194][T28663]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1540.724214][T28663]  ? clear_bhb_loop+0x60/0xb0
[ 1540.724237][T28663]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1540.724254][T28663] RIP: 0033:0x7fd1f818e929
[ 1540.724271][T28663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1540.724289][T28663] RSP: 002b:00007fd1f90ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1540.724311][T28663] RAX: ffffffffffffffda RBX: 00007fd1f83b5fa0 RCX: 00007fd1f818e929
[ 1540.724326][T28663] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1540.724339][T28663] RBP: 00007fd1f90ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1540.724352][T28663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1540.724370][T28663] R13: 0000000000000000 R14: 00007fd1f83b5fa0 R15: 00007fd1f84dfa28
[ 1540.724403][T28663]  </TASK>
[ 1540.727755][T28663] debugfs: out of free dentries, can not create directory 'netdev:wlan0'
[ 1541.292069][T26647] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1541.322265][T26178] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1541.340608][ T5953] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1541.472784][T26647] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1541.486219][T26178] usb 5-1: Using ep0 maxpacket: 16
[ 1541.493642][T26178] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[ 1541.503145][T26178] usb 5-1: config 0 has no interface number 0
[ 1541.509376][T26178] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1541.522052][T26647] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1541.523792][ T5953] usb 4-1: not running at top speed; connect to a high speed hub
[ 1541.541463][ T5953] usb 4-1: config 1 has an invalid interface number: 3 but max is 2
[ 1541.548229][T26647] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1541.550530][ T5953] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1541.558994][T26178] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1541.579931][T26647] usb 6-1: config 1 has no interface number 0
[ 1541.586701][T26647] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[ 1541.604111][T26178] usb 5-1: config 0 interface 41 has no altsetting 0
[ 1541.616889][ T5953] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1541.621890][T26647] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1541.630729][ T5953] usb 4-1: config 1 has no interface number 1
[ 1541.655219][T26178] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1541.661911][ T5953] usb 4-1: too many endpoints for config 1 interface 3 altsetting 24: 93, using maximum allowed: 30
[ 1541.671902][T26178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.686046][T26178] usb 5-1: Product: syz
[ 1541.701893][ T5953] usb 4-1: config 1 interface 3 altsetting 24 has 0 endpoint descriptors, different from the interface descriptor's value: 93
[ 1541.704094][T26647] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1541.725229][T26178] usb 5-1: Manufacturer: syz
[ 1541.729943][T26178] usb 5-1: SerialNumber: syz
[ 1541.736943][T26647] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.745419][T26647] usb 6-1: Product: syz
[ 1541.749988][T26647] usb 6-1: Manufacturer: syz
[ 1541.754992][T26647] usb 6-1: SerialNumber: syz
[ 1541.763187][T26178] usb 5-1: config 0 descriptor??
[ 1541.764920][ T5953] usb 4-1: config 1 interface 3 has no altsetting 0
[ 1541.768991][T28670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1541.789188][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1541.789641][T26647] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1541.806206][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.809804][T28670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1541.837312][ T5953] usb 4-1: Product: ⠉
[ 1541.841534][ T5953] usb 4-1: Manufacturer: и
[ 1541.846869][T26647] cdc_ncm 6-1:1.1: bind() failure
[ 1541.857231][ T5953] usb 4-1: SerialNumber: ꘍锱厰耕跌ె砍靮캤鷧윯䯣ੑᘐᢢ༬庄쁍릭劇啾챡ꝗ脷Ž踦얋郩䩾传﷉㥕虭븏锼眹䶳틲螖윸ᨴꝐ垃횪΋ᆄ땈彷粮砋ꖲ輎뉮춋㏓䒎桖Ỗ叁덒⊼ꩃ렆墨뽔㖄
[ 1541.880596][  T977] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1542.058793][T28670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1542.066193][  T977] usb 1-1: Using ep0 maxpacket: 32
[ 1542.073676][T28670] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1542.080992][  T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1542.096942][  T977] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[ 1542.108160][T25287] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 1542.116574][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1542.120777][T28660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.124823][  T977] usb 1-1: Product: syz
[ 1542.134288][T28660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.148432][  T977] usb 1-1: Manufacturer: syz
[ 1542.157563][  T977] usb 1-1: SerialNumber: syz
[ 1542.170553][  T977] usb 1-1: config 0 descriptor??
[ 1542.186693][  T977] xr_serial 1-1:0.0: failed to claim sibling interface: -16
[ 1542.197376][  T977] xr_serial 1-1:0.0: probe with driver xr_serial failed with error -16
[ 1542.262139][T25287] usb 2-1: device descriptor read/64, error -71
[ 1542.454317][  T977] usb 1-1: USB disconnect, device number 24
[ 1542.499168][T28670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1542.508946][T25287] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[ 1542.512999][T28670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1542.651959][T25287] usb 2-1: device descriptor read/64, error -71
[ 1542.762751][T25287] usb usb2-port1: attempt power cycle
[ 1543.101969][T25287] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[ 1543.142639][T25287] usb 2-1: device descriptor read/8, error -71
[ 1543.392184][T25287] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[ 1543.420704][T25287] usb 2-1: device descriptor read/8, error -71
[ 1543.538816][T25287] usb usb2-port1: unable to enumerate USB device
[ 1543.607106][T26178] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[ 1543.627754][T26178] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[ 1543.648202][T26178] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[ 1543.665876][T26178] usb 5-1: USB disconnect, device number 34
[ 1543.732475][T25287] usb 6-1: USB disconnect, device number 17
[ 1545.190063][T28710] binder: 28708:28710 unknown command 1077961494
[ 1545.197206][T28710] binder: 28708:28710 ioctl c0306201 200000000100 returned -22
[ 1545.218833][T28709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6657'.
[ 1545.632823][T28714] usb usb8: usbfs: process 28714 (syz.5.6659) did not claim interface 0 before use
[ 1545.788402][T28717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6659'.
[ 1546.074501][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1546.080873][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1546.399886][ T5953] usb 4-1: 0:2 : does not exist
[ 1546.602256][ T5953] usb 4-1: USB disconnect, device number 38
[ 1546.747437][ T6938] udevd[6938]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1547.054149][T25287] usb 6-1: new full-speed USB device number 18 using dummy_hcd
[ 1547.146402][T28732] netlink: 'syz.4.6666': attribute type 2 has an invalid length.
[ 1547.213750][T25287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1547.232720][T25287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1547.261044][T25287] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1547.286288][T25287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.310892][T25287] usb 6-1: config 0 descriptor??
[ 1547.740977][T25287] hid-thrustmaster 0003:044F:B65D.0023: unknown main item tag 0x0
[ 1547.810437][ T5953] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 1547.865922][T25287] hid-thrustmaster 0003:044F:B65D.0023: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.5-1/input0
[ 1547.933894][T25287] hid-thrustmaster 0003:044F:B65D.0023: Wrong number of endpoints?
[ 1547.963795][    C0] hid-thrustmaster 0003:044F:B65D.0023: Unknown packet type 0x0, unable to proceed further with wheel init
[ 1547.991972][ T5953] usb 2-1: device descriptor read/64, error -71
[ 1548.102155][T25889] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 1548.181516][T28726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1548.250191][T28726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1548.279306][ T5953] usb 2-1: new full-speed USB device number 119 using dummy_hcd
[ 1548.297652][T25889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1548.316498][T25889] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1548.357064][T25889] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1548.373750][T25889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1548.378769][   T10] usb 6-1: USB disconnect, device number 18
[ 1548.381772][T25889] usb 4-1: Product: syz
[ 1548.398821][T25889] usb 4-1: Manufacturer: syz
[ 1548.408793][T25889] usb 4-1: SerialNumber: syz
[ 1548.432050][ T5953] usb 2-1: device descriptor read/64, error -71
[ 1548.563666][T28752] usb usb8: usbfs: process 28752 (syz.0.6671) did not claim interface 0 before use
[ 1548.579389][T25889] usb 4-1: config 0 descriptor??
[ 1548.592418][ T5953] usb usb2-port1: attempt power cycle
[ 1548.593178][T28744] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1548.619855][T25889] usb 4-1: ucan: probing device on interface #0
[ 1548.650522][T25889] usb 4-1: ucan: invalid EP count (1)
[ 1548.693532][T25889] usb 4-1: ucan: probe failed; try to update the device firmware
[ 1549.072095][T26647] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1549.341973][ T5953] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[ 1549.433516][ T5953] usb 2-1: device descriptor read/8, error -71
[ 1549.564410][T26647] usb 1-1: Using ep0 maxpacket: 32
[ 1549.577775][T26647] usb 1-1: config 0 has an invalid descriptor of length 175, skipping remainder of the config
[ 1549.593871][T26647] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1549.690757][T26647] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[ 1549.732124][ T5953] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[ 1549.739438][T26647] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1549.757800][ T5953] usb 2-1: device descriptor read/8, error -71
[ 1549.769629][T26647] usb 1-1: config 0 descriptor??
[ 1549.803157][T26647] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1549.872422][ T5953] usb usb2-port1: unable to enumerate USB device
[ 1549.994000][T25889] usb 1-1: USB disconnect, device number 25
[ 1550.022027][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1550.162044][   T10] usb 6-1: device descriptor read/64, error -71
[ 1550.402048][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1550.649136][   T10] usb 6-1: device descriptor read/64, error -71
[ 1550.755992][T28767] netlink: 'syz.0.6678': attribute type 1 has an invalid length.
[ 1550.762466][   T10] usb usb6-port1: attempt power cycle
[ 1550.829715][T28770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6677'.
[ 1550.887094][T28767] bond2: entered promiscuous mode
[ 1550.894805][T28767] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1551.088005][T28775] FAULT_INJECTION: forcing a failure.
[ 1551.088005][T28775] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1551.142005][T28775] CPU: 0 UID: 0 PID: 28775 Comm: syz.0.6680 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1551.142033][T28775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1551.142045][T28775] Call Trace:
[ 1551.142054][T28775]  <TASK>
[ 1551.142063][T28775]  dump_stack_lvl+0x189/0x250
[ 1551.142098][T28775]  ? __pfx____ratelimit+0x10/0x10
[ 1551.142126][T28775]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1551.142155][T28775]  ? __pfx__printk+0x10/0x10
[ 1551.142188][T28775]  should_fail_ex+0x414/0x560
[ 1551.142219][T28775]  _copy_to_user+0x31/0xb0
[ 1551.142244][T28775]  simple_read_from_buffer+0xe1/0x170
[ 1551.142269][T28775]  proc_fail_nth_read+0x1df/0x250
[ 1551.142297][T28775]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1551.142323][T28775]  ? rw_verify_area+0x258/0x650
[ 1551.142350][T28775]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1551.142374][T28775]  vfs_read+0x1fd/0x980
[ 1551.142409][T28775]  ? __pfx___mutex_lock+0x10/0x10
[ 1551.142428][T28775]  ? __pfx_vfs_read+0x10/0x10
[ 1551.142457][T28775]  ? __fget_files+0x2a/0x420
[ 1551.142484][T28775]  ? __fget_files+0x3a0/0x420
[ 1551.142503][T28775]  ? __fget_files+0x2a/0x420
[ 1551.142534][T28775]  ksys_read+0x145/0x250
[ 1551.142549][T28775]  ? __fget_files+0x2a/0x420
[ 1551.142571][T28775]  ? __pfx_ksys_read+0x10/0x10
[ 1551.142605][T28775]  ? do_syscall_64+0xbe/0x3b0
[ 1551.142631][T28775]  do_syscall_64+0xfa/0x3b0
[ 1551.142650][T28775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.142669][T28775]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1551.142688][T28775]  ? clear_bhb_loop+0x60/0xb0
[ 1551.142712][T28775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1551.142731][T28775] RIP: 0033:0x7fd1f818d33c
[ 1551.142747][T28775] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1551.142764][T28775] RSP: 002b:00007fd1f90ae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1551.142785][T28775] RAX: ffffffffffffffda RBX: 00007fd1f83b5fa0 RCX: 00007fd1f818d33c
[ 1551.142800][T28775] RDX: 000000000000000f RSI: 00007fd1f90ae0a0 RDI: 0000000000000004
[ 1551.142813][T28775] RBP: 00007fd1f90ae090 R08: 0000000000000000 R09: 0000000000000000
[ 1551.142825][T28775] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001
[ 1551.142838][T28775] R13: 0000000000000000 R14: 00007fd1f83b5fa0 R15: 00007fd1f84dfa28
[ 1551.142866][T28775]  </TASK>
[ 1551.311940][T25889] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[ 1551.351022][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1551.429855][ T5953] usb 4-1: USB disconnect, device number 39
[ 1551.452597][   T10] usb 6-1: device descriptor read/8, error -71
[ 1551.555355][T28778] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6681'.
[ 1551.638746][T25889] usb 2-1: Using ep0 maxpacket: 8
[ 1551.655569][T25889] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17
[ 1551.671062][T25889] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[ 1551.685741][T25889] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[ 1551.691955][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 1551.712103][T25889] usb 2-1: Product: syz
[ 1551.716463][T25889] usb 2-1: Manufacturer: syz
[ 1551.721090][T25889] usb 2-1: SerialNumber: syz
[ 1551.723370][   T10] usb 6-1: device descriptor read/8, error -71
[ 1551.735555][T25889] usb 2-1: config 0 descriptor??
[ 1551.852501][   T10] usb usb6-port1: unable to enumerate USB device
[ 1551.861998][T26178] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 1551.958092][T25889] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1551.972179][ T5953] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1552.071940][T26178] usb 5-1: Using ep0 maxpacket: 32
[ 1552.078970][T26178] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1552.091685][T26178] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1552.108369][T26178] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1552.129497][T26178] usb 5-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[ 1552.132179][ T5953] usb 4-1: Using ep0 maxpacket: 32
[ 1552.140044][T26178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1552.161006][ T5953] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1552.166058][T26178] usb 5-1: config 0 descriptor??
[ 1552.178249][ T5953] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1552.189128][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1552.206048][ T5953] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1552.220644][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1552.234281][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.244179][ T5953] usb 4-1: Product: syz
[ 1552.248400][ T5953] usb 4-1: Manufacturer: syz
[ 1552.253234][ T5953] usb 4-1: SerialNumber: syz
[ 1552.442256][T26647] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[ 1552.465816][T28786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1552.475692][T28786] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1552.497417][ T5953] usb 4-1: 0:2 : does not exist
[ 1552.514622][ T5953] usb 4-1: USB disconnect, device number 40
[ 1552.554332][T27035] udevd[27035]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1552.572047][T26647] usb 1-1: device descriptor read/64, error -71
[ 1552.587978][T26178] vrc2 0003:07C0:1125.0024: fixing up VRC-2 report descriptor
[ 1552.607622][T26178] input: HID 07c0:1125 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:07C0:1125.0024/input/input74
[ 1552.689123][T26178] vrc2 0003:07C0:1125.0024: input,hidraw0: USB HID v0.00 Joystick [HID 07c0:1125] on usb-dummy_hcd.4-1/input0
[ 1552.784783][T25889] gspca_sunplus: reg_w_riv err -71
[ 1552.812620][T25889] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1552.821444][T26647] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 1552.843766][ T5905] usb 5-1: USB disconnect, device number 35
[ 1552.852856][T25889] usb 2-1: USB disconnect, device number 122
[ 1552.971961][T26647] usb 1-1: device descriptor read/64, error -71
[ 1553.082779][T26647] usb usb1-port1: attempt power cycle
[ 1553.242139][ T5953] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[ 1553.282248][T25889] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1553.395676][ T5953] usb 6-1: config 0 has an invalid interface number: 62 but max is 0
[ 1553.404675][ T5953] usb 6-1: config 0 has no interface number 0
[ 1553.411066][ T5953] usb 6-1: config 0 interface 62 has no altsetting 0
[ 1553.418137][ T5953] usb 6-1: New USB device found, idVendor=12d1, idProduct=1417, bcdDevice= 0.00
[ 1553.435034][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.476126][T26647] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 1553.562370][T25889] usb 4-1: Using ep0 maxpacket: 16
[ 1553.573183][ T5953] usb 6-1: config 0 descriptor??
[ 1553.592916][T26647] usb 1-1: device descriptor read/8, error -71
[ 1553.660525][T25889] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1553.750668][T25889] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1553.758548][T25889] usb 4-1: can't read configurations, error -71
[ 1553.981231][T26647] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[ 1554.013786][T26647] usb 1-1: device descriptor read/8, error -71
[ 1554.135460][T26647] usb usb1-port1: unable to enumerate USB device
[ 1555.585756][T28820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6694'.
[ 1555.938613][ T5953] usb 6-1: string descriptor 0 read error: -71
[ 1555.951741][ T5953] usb-storage 6-1:0.62: USB Mass Storage device detected
[ 1556.068483][ T5953] usb 6-1: USB disconnect, device number 23
[ 1556.715427][T28841] FAULT_INJECTION: forcing a failure.
[ 1556.715427][T28841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1556.729149][T28841] CPU: 0 UID: 0 PID: 28841 Comm: syz.5.6702 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1556.729178][T28841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1556.729190][T28841] Call Trace:
[ 1556.729198][T28841]  <TASK>
[ 1556.729207][T28841]  dump_stack_lvl+0x189/0x250
[ 1556.729242][T28841]  ? __pfx____ratelimit+0x10/0x10
[ 1556.729272][T28841]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1556.729301][T28841]  ? __pfx__printk+0x10/0x10
[ 1556.729322][T28841]  ? __might_fault+0xb0/0x130
[ 1556.729352][T28841]  should_fail_ex+0x414/0x560
[ 1556.729381][T28841]  _copy_from_user+0x2d/0xb0
[ 1556.729401][T28841]  ___sys_sendmsg+0x158/0x2a0
[ 1556.729430][T28841]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1556.729491][T28841]  ? __fget_files+0x2a/0x420
[ 1556.729512][T28841]  ? __fget_files+0x3a0/0x420
[ 1556.729541][T28841]  __x64_sys_sendmsg+0x19b/0x260
[ 1556.729568][T28841]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1556.729603][T28841]  ? __pfx_ksys_write+0x10/0x10
[ 1556.729620][T28841]  ? rcu_is_watching+0x15/0xb0
[ 1556.729655][T28841]  ? do_syscall_64+0xbe/0x3b0
[ 1556.729678][T28841]  do_syscall_64+0xfa/0x3b0
[ 1556.729695][T28841]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1556.729722][T28841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1556.729742][T28841]  ? clear_bhb_loop+0x60/0xb0
[ 1556.729766][T28841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1556.729785][T28841] RIP: 0033:0x7f5b66b8e929
[ 1556.729802][T28841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1556.729819][T28841] RSP: 002b:00007f5b6791a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1556.729841][T28841] RAX: ffffffffffffffda RBX: 00007f5b66db5fa0 RCX: 00007f5b66b8e929
[ 1556.729856][T28841] RDX: 0000000004008044 RSI: 0000200000000100 RDI: 0000000000000003
[ 1556.729869][T28841] RBP: 00007f5b6791a090 R08: 0000000000000000 R09: 0000000000000000
[ 1556.729882][T28841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1556.729894][T28841] R13: 0000000000000000 R14: 00007f5b66db5fa0 R15: 00007f5b66edfa28
[ 1556.729924][T28841]  </TASK>
[ 1557.371942][ T5953] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[ 1557.562245][ T5953] usb 4-1: device descriptor read/64, error -71
[ 1557.926631][ T5953] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[ 1558.082035][ T5953] usb 4-1: device descriptor read/64, error -71
[ 1558.192946][ T5953] usb usb4-port1: attempt power cycle
[ 1558.372605][T22437] Bluetooth: hci1: command 0x0406 tx timeout
[ 1558.602223][ T5953] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[ 1558.685277][ T5953] usb 4-1: device descriptor read/8, error -71
[ 1558.820182][T28865] 
[ 1558.822538][T28865] =====================================================
[ 1558.829463][T28865] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1558.836916][T28865] 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 Not tainted
[ 1558.844010][T28865] -----------------------------------------------------
[ 1558.850941][T28865] syz.1.6709/28865 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1558.858658][T28865] ffffffff8de0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[ 1558.867346][T28865] 
[ 1558.867346][T28865] and this task is already holding:
[ 1558.874695][T28865] ffff8880280e8220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 1558.883407][T28865] which would create a new lock dependency:
[ 1558.889295][T28865]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[ 1558.896883][T28865] 
[ 1558.896883][T28865] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1558.906324][T28865]  (&client->buffer_lock){..-.}-{3:3}
[ 1558.906354][T28865] 
[ 1558.906354][T28865] ... which became SOFTIRQ-irq-safe at:
[ 1558.919401][T28865]   lock_acquire+0x120/0x360
[ 1558.924002][T28865]   _raw_spin_lock+0x2e/0x40
[ 1558.928596][T28865]   evdev_pass_values+0xb9/0xbd0
[ 1558.933535][T28865]   evdev_events+0x1e6/0x340
[ 1558.938120][T28865]   input_pass_values+0x285/0x890
[ 1558.943137][T28865]   input_event_dispose+0x3e5/0x6b0
[ 1558.948341][T28865]   input_event+0x8c/0xc0
[ 1558.952676][T28865]   hidinput_hid_event+0x132c/0x1c90
[ 1558.957958][T28865]   hid_process_event+0x4be/0x620
[ 1558.962980][T28865]   hid_report_raw_event+0xe91/0x16d0
[ 1558.968344][T28865]   hid_input_report+0x43e/0x520
[ 1558.973278][T28865]   hid_irq_in+0x47e/0x6d0
[ 1558.977699][T28865]   __usb_hcd_giveback_urb+0x41a/0x690
[ 1558.983152][T28865]   dummy_timer+0x862/0x4550
[ 1558.987739][T28865]   __hrtimer_run_queues+0x52c/0xc60
[ 1558.993028][T28865]   hrtimer_run_softirq+0x187/0x2b0
[ 1558.998218][T28865]   handle_softirqs+0x286/0x870
[ 1559.003074][T28865]   __irq_exit_rcu+0xca/0x1f0
[ 1559.007775][T28865]   irq_exit_rcu+0x9/0x30
[ 1559.012106][T28865]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1559.017835][T28865]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1559.023899][T28865]   finish_task_switch+0x26b/0x950
[ 1559.029010][T28865]   __schedule+0x16fd/0x4d00
[ 1559.033598][T28865]   schedule+0x165/0x360
[ 1559.037847][T28865]   worker_thread+0xa82/0xda0
[ 1559.042517][T28865]   kthread+0x70e/0x8a0
[ 1559.046667][T28865]   ret_from_fork+0x3fc/0x770
[ 1559.051351][T28865]   ret_from_fork_asm+0x1a/0x30
[ 1559.056196][T28865] 
[ 1559.056196][T28865] to a SOFTIRQ-irq-unsafe lock:
[ 1559.063210][T28865]  (tasklist_lock){.+.+}-{3:3}
[ 1559.063240][T28865] 
[ 1559.063240][T28865] ... which became SOFTIRQ-irq-unsafe at:
[ 1559.075858][T28865] ...
[ 1559.075867][T28865]   lock_acquire+0x120/0x360
[ 1559.083025][T28865]   _raw_read_lock+0x36/0x50
[ 1559.087624][T28865]   __do_wait+0xde/0x740
[ 1559.091867][T28865]   do_wait+0x1f8/0x520
[ 1559.096020][T28865]   kernel_wait+0xab/0x170
[ 1559.100434][T28865]   call_usermodehelper_exec_work+0xbe/0x230
[ 1559.106417][T28865]   process_scheduled_works+0xae1/0x17b0
[ 1559.112051][T28865]   worker_thread+0x8a0/0xda0
[ 1559.116721][T28865]   kthread+0x70e/0x8a0
[ 1559.120873][T28865]   ret_from_fork+0x3fc/0x770
[ 1559.125548][T28865]   ret_from_fork_asm+0x1a/0x30
[ 1559.130416][T28865] 
[ 1559.130416][T28865] other info that might help us debug this:
[ 1559.130416][T28865] 
[ 1559.140668][T28865] Chain exists of:
[ 1559.140668][T28865]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[ 1559.140668][T28865] 
[ 1559.153903][T28865]  Possible interrupt unsafe locking scenario:
[ 1559.153903][T28865] 
[ 1559.162217][T28865]        CPU0                    CPU1
[ 1559.167585][T28865]        ----                    ----
[ 1559.172944][T28865]   lock(tasklist_lock);
[ 1559.177185][T28865]                                local_irq_disable();
[ 1559.183931][T28865]                                lock(&client->buffer_lock);
[ 1559.191385][T28865]                                lock(&f_owner->lock);
[ 1559.198235][T28865]   <Interrupt>
[ 1559.201715][T28865]     lock(&client->buffer_lock);
[ 1559.206738][T28865] 
[ 1559.206738][T28865]  *** DEADLOCK ***
[ 1559.206738][T28865] 
[ 1559.214878][T28865] 2 locks held by syz.1.6709/28865:
[ 1559.220066][T28865]  #0: ffff88807cb869c0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x187/0x5a0
[ 1559.228608][T28865]  #1: ffff8880280e8220 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[ 1559.237759][T28865] 
[ 1559.237759][T28865] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1559.248162][T28865]   -> (&client->buffer_lock){..-.}-{3:3} {
[ 1559.254158][T28865]      IN-SOFTIRQ-W at:
[ 1559.258305][T28865]                         lock_acquire+0x120/0x360
[ 1559.264813][T28865]                         _raw_spin_lock+0x2e/0x40
[ 1559.271348][T28865]                         evdev_pass_values+0xb9/0xbd0
[ 1559.278205][T28865]                         evdev_events+0x1e6/0x340
[ 1559.284709][T28865]                         input_pass_values+0x285/0x890
[ 1559.291644][T28865]                         input_event_dispose+0x3e5/0x6b0
[ 1559.298758][T28865]                         input_event+0x8c/0xc0
[ 1559.305005][T28865]                         hidinput_hid_event+0x132c/0x1c90
[ 1559.312199][T28865]                         hid_process_event+0x4be/0x620
[ 1559.319134][T28865]                         hid_report_raw_event+0xe91/0x16d0
[ 1559.326432][T28865]                         hid_input_report+0x43e/0x520
[ 1559.333375][T28865]                         hid_irq_in+0x47e/0x6d0
[ 1559.339712][T28865]                         __usb_hcd_giveback_urb+0x41a/0x690
[ 1559.347081][T28865]                         dummy_timer+0x862/0x4550
[ 1559.353613][T28865]                         __hrtimer_run_queues+0x52c/0xc60
[ 1559.360813][T28865]                         hrtimer_run_softirq+0x187/0x2b0
[ 1559.368180][T28865]                         handle_softirqs+0x286/0x870
[ 1559.374961][T28865]                         __irq_exit_rcu+0xca/0x1f0
[ 1559.381567][T28865]                         irq_exit_rcu+0x9/0x30
[ 1559.387823][T28865]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1559.395461][T28865]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1559.403439][T28865]                         finish_task_switch+0x26b/0x950
[ 1559.410464][T28865]                         __schedule+0x16fd/0x4d00
[ 1559.416965][T28865]                         schedule+0x165/0x360
[ 1559.423118][T28865]                         worker_thread+0xa82/0xda0
[ 1559.429749][T28865]                         kthread+0x70e/0x8a0
[ 1559.435810][T28865]                         ret_from_fork+0x3fc/0x770
[ 1559.442402][T28865]                         ret_from_fork_asm+0x1a/0x30
[ 1559.449160][T28865]      INITIAL USE at:
[ 1559.453222][T28865]                        lock_acquire+0x120/0x360
[ 1559.459642][T28865]                        _raw_spin_lock+0x2e/0x40
[ 1559.466059][T28865]                        evdev_handle_get_val+0x70/0x9f0
[ 1559.473078][T28865]                        evdev_ioctl_handler+0x1202/0x1f10
[ 1559.480358][T28865]                        __se_sys_ioctl+0xf9/0x170
[ 1559.486862][T28865]                        do_syscall_64+0xfa/0x3b0
[ 1559.493286][T28865]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.501114][T28865]    }
[ 1559.503791][T28865]    ... key      at: [<ffffffff99e044a0>] evdev_open.__key.25+0x0/0x20
[ 1559.512129][T28865]  -> (&new->fa_lock){....}-{3:3} {
[ 1559.517347][T28865]     INITIAL USE at:
[ 1559.521322][T28865]                      lock_acquire+0x120/0x360
[ 1559.527565][T28865]                      _raw_write_lock_irq+0xa2/0xf0
[ 1559.534246][T28865]                      fasync_remove_entry+0xf1/0x1c0
[ 1559.541006][T28865]                      sock_fasync+0x85/0xf0
[ 1559.546986][T28865]                      __fput+0x89f/0xa70
[ 1559.552768][T28865]                      task_work_run+0x1d1/0x260
[ 1559.559098][T28865]                      do_exit+0x6ad/0x22e0
[ 1559.564990][T28865]                      do_group_exit+0x21c/0x2d0
[ 1559.571312][T28865]                      get_signal+0x1286/0x1340
[ 1559.577565][T28865]                      arch_do_signal_or_restart+0x9a/0x750
[ 1559.584863][T28865]                      exit_to_user_mode_loop+0x75/0x110
[ 1559.591891][T28865]                      do_syscall_64+0x2bd/0x3b0
[ 1559.598212][T28865]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.605840][T28865]     INITIAL READ USE at:
[ 1559.610252][T28865]                           lock_acquire+0x120/0x360
[ 1559.617013][T28865]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1559.624473][T28865]                           kill_fasync+0x199/0x4d0
[ 1559.631060][T28865]                           sock_wake_async+0x137/0x160
[ 1559.637989][T28865]                           sk_wake_async+0x184/0x280
[ 1559.644749][T28865]                           unix_release_sock+0x6d4/0xc60
[ 1559.651861][T28865]                           unix_release+0x92/0xd0
[ 1559.658359][T28865]                           sock_close+0xc3/0x240
[ 1559.664777][T28865]                           __fput+0x44c/0xa70
[ 1559.670935][T28865]                           task_work_run+0x1d1/0x260
[ 1559.677700][T28865]                           get_signal+0x11ed/0x1340
[ 1559.684395][T28865]                           arch_do_signal_or_restart+0x9a/0x750
[ 1559.692126][T28865]                           exit_to_user_mode_loop+0x75/0x110
[ 1559.699592][T28865]                           do_syscall_64+0x2bd/0x3b0
[ 1559.706347][T28865]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.714404][T28865]   }
[ 1559.716983][T28865]   ... key      at: [<ffffffff99af5420>] fasync_insert_entry.__key+0x0/0x20
[ 1559.725744][T28865]   ... acquired at:
[ 1559.729648][T28865]    lock_acquire+0x120/0x360
[ 1559.734347][T28865]    _raw_read_lock_irqsave+0xaf/0x100
[ 1559.739819][T28865]    kill_fasync+0x199/0x4d0
[ 1559.744412][T28865]    evdev_pass_values+0x627/0xbd0
[ 1559.749627][T28865]    evdev_events+0x1e6/0x340
[ 1559.754310][T28865]    input_pass_values+0x285/0x890
[ 1559.759420][T28865]    input_event_dispose+0x330/0x6b0
[ 1559.764709][T28865]    input_inject_event+0x1fe/0x320
[ 1559.769928][T28865]    evdev_write+0x2fc/0x480
[ 1559.774515][T28865]    vfs_write+0x27b/0xa90
[ 1559.778935][T28865]    ksys_write+0x145/0x250
[ 1559.783428][T28865]    do_syscall_64+0xfa/0x3b0
[ 1559.788112][T28865]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.794176][T28865] 
[ 1559.796492][T28865] -> (&f_owner->lock){....}-{3:3} {
[ 1559.801709][T28865]    INITIAL USE at:
[ 1559.805608][T28865]                    lock_acquire+0x120/0x360
[ 1559.811678][T28865]                    _raw_write_lock_irq+0xa2/0xf0
[ 1559.818186][T28865]                    __f_setown+0x67/0x370
[ 1559.823990][T28865]                    fcntl_dirnotify+0x3d6/0x690
[ 1559.830314][T28865]                    do_fcntl+0x6d0/0x1910
[ 1559.836118][T28865]                    __se_sys_fcntl+0xc8/0x150
[ 1559.842271][T28865]                    do_syscall_64+0xfa/0x3b0
[ 1559.848330][T28865]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.855782][T28865]    INITIAL READ USE at:
[ 1559.860104][T28865]                         lock_acquire+0x120/0x360
[ 1559.866609][T28865]                         _raw_read_lock_irqsave+0xaf/0x100
[ 1559.873895][T28865]                         send_sigio+0x38/0x370
[ 1559.880134][T28865]                         dnotify_handle_event+0x169/0x440
[ 1559.887323][T28865]                         fsnotify+0x1814/0x1a80
[ 1559.893644][T28865]                         vfs_create+0x39b/0x400
[ 1559.899971][T28865]                         do_mknodat+0x3c6/0x4d0
[ 1559.906296][T28865]                         __x64_sys_mknodat+0xa7/0xc0
[ 1559.913060][T28865]                         do_syscall_64+0xfa/0x3b0
[ 1559.919556][T28865]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1559.927451][T28865]  }
[ 1559.929946][T28865]  ... key      at: [<ffffffff99af5400>] file_f_owner_allocate.__key+0x0/0x20
[ 1559.938803][T28865]  ... acquired at:
[ 1559.942598][T28865]    lock_acquire+0x120/0x360
[ 1559.947275][T28865]    _raw_read_lock_irqsave+0xaf/0x100
[ 1559.952821][T28865]    send_sigio+0x38/0x370
[ 1559.957240][T28865]    kill_fasync+0x24d/0x4d0
[ 1559.961831][T28865]    sock_wake_async+0x137/0x160
[ 1559.966771][T28865]    sk_wake_async+0x184/0x280
[ 1559.971551][T28865]    unix_release_sock+0x6d4/0xc60
[ 1559.976663][T28865]    unix_release+0x92/0xd0
[ 1559.981169][T28865]    sock_close+0xc3/0x240
[ 1559.985598][T28865]    __fput+0x44c/0xa70
[ 1559.989752][T28865]    task_work_run+0x1d1/0x260
[ 1559.994547][T28865]    get_signal+0x11ed/0x1340
[ 1559.999223][T28865]    arch_do_signal_or_restart+0x9a/0x750
[ 1560.004941][T28865]    exit_to_user_mode_loop+0x75/0x110
[ 1560.010398][T28865]    do_syscall_64+0x2bd/0x3b0
[ 1560.015155][T28865]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.021223][T28865] 
[ 1560.023539][T28865] 
[ 1560.023539][T28865] the dependencies between the lock to be acquired
[ 1560.023549][T28865]  and SOFTIRQ-irq-unsafe lock:
[ 1560.037049][T28865] -> (tasklist_lock){.+.+}-{3:3} {
[ 1560.042174][T28865]    HARDIRQ-ON-R at:
[ 1560.046148][T28865]                     lock_acquire+0x120/0x360
[ 1560.052304][T28865]                     _raw_read_lock+0x36/0x50
[ 1560.058457][T28865]                     __do_wait+0xde/0x740
[ 1560.064263][T28865]                     do_wait+0x1f8/0x520
[ 1560.069982][T28865]                     kernel_wait+0xab/0x170
[ 1560.075958][T28865]                     call_usermodehelper_exec_work+0xbe/0x230
[ 1560.083505][T28865]                     process_scheduled_works+0xae1/0x17b0
[ 1560.090705][T28865]                     worker_thread+0x8a0/0xda0
[ 1560.096937][T28865]                     kthread+0x70e/0x8a0
[ 1560.102653][T28865]                     ret_from_fork+0x3fc/0x770
[ 1560.109680][T28865]                     ret_from_fork_asm+0x1a/0x30
[ 1560.116096][T28865]    SOFTIRQ-ON-R at:
[ 1560.120071][T28865]                     lock_acquire+0x120/0x360
[ 1560.126223][T28865]                     _raw_read_lock+0x36/0x50
[ 1560.132376][T28865]                     __do_wait+0xde/0x740
[ 1560.138178][T28865]                     do_wait+0x1f8/0x520
[ 1560.143893][T28865]                     kernel_wait+0xab/0x170
[ 1560.149872][T28865]                     call_usermodehelper_exec_work+0xbe/0x230
[ 1560.157417][T28865]                     process_scheduled_works+0xae1/0x17b0
[ 1560.164621][T28865]                     worker_thread+0x8a0/0xda0
[ 1560.170853][T28865]                     kthread+0x70e/0x8a0
[ 1560.176571][T28865]                     ret_from_fork+0x3fc/0x770
[ 1560.182811][T28865]                     ret_from_fork_asm+0x1a/0x30
[ 1560.189223][T28865]    INITIAL USE at:
[ 1560.193111][T28865]                    lock_acquire+0x120/0x360
[ 1560.199180][T28865]                    _raw_write_lock_irq+0xa2/0xf0
[ 1560.205685][T28865]                    copy_process+0x224f/0x3c00
[ 1560.211919][T28865]                    kernel_clone+0x21e/0x870
[ 1560.217983][T28865]                    user_mode_thread+0xdd/0x140
[ 1560.224305][T28865]                    rest_init+0x23/0x300
[ 1560.230027][T28865]                    start_kernel+0x47d/0x500
[ 1560.236089][T28865]                    x86_64_start_reservations+0x24/0x30
[ 1560.243108][T28865]                    x86_64_start_kernel+0x143/0x1c0
[ 1560.249782][T28865]                    common_startup_64+0x13e/0x147
[ 1560.256283][T28865]    INITIAL READ USE at:
[ 1560.260607][T28865]                         lock_acquire+0x120/0x360
[ 1560.267105][T28865]                         _raw_read_lock+0x36/0x50
[ 1560.273606][T28865]                         __do_wait+0xde/0x740
[ 1560.279757][T28865]                         do_wait+0x1f8/0x520
[ 1560.285820][T28865]                         kernel_wait+0xab/0x170
[ 1560.292143][T28865]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1560.300036][T28865]                         process_scheduled_works+0xae1/0x17b0
[ 1560.307590][T28865]                         worker_thread+0x8a0/0xda0
[ 1560.314173][T28865]                         kthread+0x70e/0x8a0
[ 1560.320238][T28865]                         ret_from_fork+0x3fc/0x770
[ 1560.326827][T28865]                         ret_from_fork_asm+0x1a/0x30
[ 1560.333587][T28865]  }
[ 1560.336073][T28865]  ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 1560.343793][T28865]  ... acquired at:
[ 1560.347590][T28865]    lock_acquire+0x120/0x360
[ 1560.352264][T28865]    _raw_read_lock+0x36/0x50
[ 1560.356938][T28865]    send_sigurg+0x12b/0x420
[ 1560.361532][T28865]    sk_send_sigurg+0x6c/0x2e0
[ 1560.366295][T28865]    queue_oob+0x490/0x5a0
[ 1560.370712][T28865]    unix_stream_sendmsg+0xaf9/0xc90
[ 1560.375996][T28865]    __sock_sendmsg+0x21c/0x270
[ 1560.380847][T28865]    ____sys_sendmsg+0x505/0x830
[ 1560.385782][T28865]    ___sys_sendmsg+0x21f/0x2a0
[ 1560.390628][T28865]    __x64_sys_sendmsg+0x19b/0x260
[ 1560.395742][T28865]    do_syscall_64+0xfa/0x3b0
[ 1560.400411][T28865]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.406475][T28865] 
[ 1560.408788][T28865] 
[ 1560.408788][T28865] stack backtrace:
[ 1560.414671][T28865] CPU: 1 UID: 0 PID: 28865 Comm: syz.1.6709 Not tainted 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(full) 
[ 1560.414692][T28865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1560.414704][T28865] Call Trace:
[ 1560.414713][T28865]  <TASK>
[ 1560.414721][T28865]  dump_stack_lvl+0x189/0x250
[ 1560.414748][T28865]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1560.414773][T28865]  ? __pfx__printk+0x10/0x10
[ 1560.414794][T28865]  validate_chain+0x1f05/0x2140
[ 1560.414817][T28865]  __lock_acquire+0xab9/0xd20
[ 1560.414841][T28865]  ? send_sigurg+0x12b/0x420
[ 1560.414861][T28865]  lock_acquire+0x120/0x360
[ 1560.414882][T28865]  ? send_sigurg+0x12b/0x420
[ 1560.414903][T28865]  ? _raw_read_lock_irqsave+0xbb/0x100
[ 1560.414928][T28865]  _raw_read_lock+0x36/0x50
[ 1560.414949][T28865]  ? send_sigurg+0x12b/0x420
[ 1560.414969][T28865]  send_sigurg+0x12b/0x420
[ 1560.414990][T28865]  sk_send_sigurg+0x6c/0x2e0
[ 1560.415015][T28865]  queue_oob+0x490/0x5a0
[ 1560.415038][T28865]  ? __pfx_queue_oob+0x10/0x10
[ 1560.415057][T28865]  ? rcu_is_watching+0x15/0xb0
[ 1560.415081][T28865]  ? __pfx___might_resched+0x10/0x10
[ 1560.415104][T28865]  ? trace_sched_exit_tp+0x38/0x120
[ 1560.415124][T28865]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 1560.415149][T28865]  unix_stream_sendmsg+0xaf9/0xc90
[ 1560.415170][T28865]  ? aa_sk_perm+0x81e/0x950
[ 1560.415189][T28865]  ? preempt_schedule_common+0x83/0xd0
[ 1560.415212][T28865]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 1560.415233][T28865]  ? aa_sock_msg_perm+0x94/0x160
[ 1560.415253][T28865]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1560.415273][T28865]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[ 1560.415292][T28865]  __sock_sendmsg+0x21c/0x270
[ 1560.415317][T28865]  ____sys_sendmsg+0x505/0x830
[ 1560.415338][T28865]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1560.415360][T28865]  ? import_iovec+0x74/0xa0
[ 1560.415377][T28865]  ___sys_sendmsg+0x21f/0x2a0
[ 1560.415397][T28865]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1560.415429][T28865]  ? __fget_files+0x2a/0x420
[ 1560.415446][T28865]  ? __fget_files+0x3a0/0x420
[ 1560.415466][T28865]  __x64_sys_sendmsg+0x19b/0x260
[ 1560.415487][T28865]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1560.415510][T28865]  ? rcu_is_watching+0x15/0xb0
[ 1560.415535][T28865]  ? do_syscall_64+0xbe/0x3b0
[ 1560.415551][T28865]  do_syscall_64+0xfa/0x3b0
[ 1560.415565][T28865]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1560.415587][T28865]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.415604][T28865]  ? clear_bhb_loop+0x60/0xb0
[ 1560.415622][T28865]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1560.415638][T28865] RIP: 0033:0x7fad2638e929
[ 1560.415654][T28865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1560.415675][T28865] RSP: 002b:00007fad241f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1560.415692][T28865] RAX: ffffffffffffffda RBX: 00007fad265b6080 RCX: 00007fad2638e929
[ 1560.415705][T28865] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 000000000000000c
[ 1560.415717][T28865] RBP: 00007fad26410b39 R08: 0000000000000000 R09: 0000000000000000
[ 1560.415727][T28865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1560.415738][T28865] R13: 0000000000000000 R14: 00007fad265b6080 R15: 00007fad266dfa28
[ 1560.415754][T28865]  </TASK>
[ 1560.813761][ T5953] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[ 1560.964098][ T5953] usb 4-1: device descriptor read/8, error -71
[ 1561.073041][ T5953] usb usb4-port1: unable to enumerate USB device