last executing test programs:

8.845568502s ago: executing program 2 (id=7915):
r0 = socket$inet(0x2, 0x1, 0x8001)
sched_setscheduler(0x0, 0x5, &(0x7f0000000100)=0x5)
ptrace(0x10, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0)
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000006c0)={&(0x7f00000003c0)=[{0x8, 0x5000, 0x0, 0x0}, {0x205, 0x1001, 0x0, 0x0}], 0x2})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0xfffffffe, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc0"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1], 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0xfffd, 0x318, 0x1, 0x24}, 0x9c)

7.722005311s ago: executing program 4 (id=7916):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_fuse_handle_req(r1, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0xfffffffffffffee7}]}}]}, 0x34}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe6, 0x52, 0x9, 0x20, 0x2639, 0x2, 0xb6d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x5b, 0x0, 0xaa, 0xef, 0x36, 0x7}}]}}]}}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000004c0)={0x10003, 0x1, 0xffff1000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
write(r0, &(0x7f0000000180)="738f0ebe84b0947383a45c43d5663be3ea3a21d0d18c1c94231b2b967a18e2b39568c71730f18765c17f2eb4fa312ac55eb59756f85cdcd253ee291c0b87f1343db69a6dc9b796df3bf56ab18e3d07a624a8a8", 0x53)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x4d0a41)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x33, 0x2, 0x1, "0b69e8e1dd2f1ae97ee8589301d94ff3a8f41910b2eafa4496ba216bc11e00", 0x384c4150})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc00c64b5, &(0x7f0000000100)={&(0x7f0000000040)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000180)={r9, 0x0, 0x0, 0x1, 0x361, 0x101, 0x8c6, 0x4, 0x10000, 0x80000000, 0xd, 0x8})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)

6.972425265s ago: executing program 1 (id=7918):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
r3 = openat$drirender128(0xffffff9c, &(0x7f00000003c0), 0x201, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40186417, &(0x7f0000000440)={0x7, 0x6, 0x1000000, 0x7, 0xc, 0x200})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x1ff, 0xa})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1700000008000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="5d0ab7c0fb239ce8473f67d51b3cc42716f335daf0aa2ef6339c691f88e1a1ec0a", @ANYRES64=0x0], 0x20)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000300))
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7})
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b)
ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000480))
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000400)={r8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x7, 0x3, 0x5})
dup(r2)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

6.971430272s ago: executing program 3 (id=7919):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x1c8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x14c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x44, 0x1, [@m_mirred={0x40, 0x5, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xf4, 0x1, [@m_ctinfo={0xf0, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xc1, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc6682f28a25"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x600}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

6.804485801s ago: executing program 0 (id=7920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x143940, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket(0xa, 0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f00000002c0)={0x5, {0x20, 0x2, 0x4, 0xbd, 0xfffffffffffffff9}})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$pptp(0x18, 0x1, 0x2)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000500))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x6c8500, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800b27fce64068ec14c00000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
listen(r6, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00')
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000080000800800000000000000003000000200000000000000000000000067d119ba2cabee6aeea2bc442bb2c879ab8ea1f51776e74b85c449fd823c7683076c65db65e87dcc36c5d9b78af4c811bdfc1e212ce4bd85c2ef82887563437c862ae66c4d3dd642529ef0ff12f69122873fdbe25500545eada9f2e0671e102dfe8e26d60d4bc92b"])
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x42, 0x40, 0x0, 0x1}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r9, 0xc00}, 0x38)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000140)=[0x81, 0x2], &(0x7f0000000180)=[0x6, 0x101, 0x205, 0x1], 0x45, 0x4, 0x3, &(0x7f00000001c0)=[0x7, 0x80, 0x8, 0xd5fd], &(0x7f0000000240)=[0x3905, 0xe30, 0x15, 0x8]})

6.737709517s ago: executing program 3 (id=7921):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x60a44, 0x0)
read$sequencer(r2, &(0x7f0000000200)=""/117, 0x75)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x14, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000011000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
r6 = openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0x5, 0x0, 0x0, <r7=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0x7, r7, 0x0, 0x10001, 0x0, 0x0, 0x13c29, 0xb4800})
bpf$PROG_LOAD(0x5, 0x0, 0xfdf8)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1, 0x4)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

6.717861648s ago: executing program 1 (id=7923):
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sched_getattr(0x0, &(0x7f0000000140)={0x38}, 0x38, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010004b0400000000fdffffff7a000000", @ANYRES32=0x0, @ANYBLOB="0005000044000000140012800a00010069706f6962000000040002800a000100aa79aaaaaa000000"], 0x40}}, 0x4)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003aa000/0x4000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
r5 = openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x11)
ioctl$SNDCTL_SEQ_NRMIDIS(r5, 0xc0045103, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)

6.608395029s ago: executing program 4 (id=7924):
syz_usb_connect(0x6, 0x7c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x901, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x7, 0x1, 'lp\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}}, 0x8010)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80)
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, 0x0)
munmap(&(0x7f0000398000/0x1000)=nil, 0x1000)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0xf6, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x6, 0x20, 0xd2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x9}, [@feature_unit={0xb, 0x24, 0x6, 0x6, 0x4, 0x2, [0x9, 0x9], 0x16}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0x6, "aac677a2a2"}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x5, 0x1, "d8d3ad3f"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x70, 0x2, 0x12, 0x7, "8f34", "bf"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x93e1, 0x7, 0x4, "a0f1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x2, 0xa1, 0x2, {0x7, 0x25, 0x1, 0x80, 0xa5, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xfb, 0x7, "3d56a2a714"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xfa, 0x1, 0x3, 0x81, "029831"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xc8, 0x8, 0x2, "79e59712ee2c3476"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x10, 0x3, "bbaff2e44447e71b"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x56, 0x3, 0x7e, 0x4, "", "dba4d7"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3, 0x10, "14", "e6"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x9, 0x2, {0x7, 0x25, 0x1, 0x80, 0x81, 0x34}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x64, 0x4, 0x1, 0xff, 0x8}, 0x34, &(0x7f0000000040)={0x5, 0xf, 0x34, 0x3, [@generic={0x21, 0x10, 0x3, "e1dd04884754ec001d33736b0fa6e453e1de7141d975e8b98459bdc70ad0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x82, 0x7, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x814}}, {0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "a3ccde54af7947474b9b9c7f26c4bcb22afeb9bf9d4b8bf8676413d0d1488b293e75b19d4712fcf6ec5b62f4ec7ee81b6367b039254b11f996a0f140d5ead9557740396e0571e39bf1d6ed86b1c056ef2f119ac597ece4dc00a08d43624682794ba98245506ad692745488876c2d0fd1a095c04d7b25de57b81a1f5c154f88c166198e7cfa23744f33041d5466c4402b3cac47eb87b15fa50de55c4eab34af7f4f22388d00760e07fe7961e7d067c9ed19f71362ba7511fdfb0a5a58a44a9373d2e24a9dc7ec835da8b172cbd4536781f26e13b2cf64d6b6ff1f254a087694b6f980715116584b24cc408b8f118309b277129e2055a81a"}}, {0xb1, &(0x7f0000000580)=ANY=[@ANYBLOB="b1030bcd5a9f4a9f997261265230fb3c3feb667781a1bf4fdf2803de1a0ffa7a997d4a69cc4eef81a060d4a8daabd4757ef1b9e6a99b8cbedb6fc74726e9d0bdd5d3559d80804c4fa8bb7ccb6d5a4b7d79e4d0c4703b3f2ca5e11f7e567aaddf0221fc9404f4a1328f8066cbf9630af735009d0770f95aca8caf07dc2686845898cf6e879a9f6bffd6d0ce676712871939912f8c8d0bab794ad3b0cdba82965baae4ec74159fe50266f9aaef556980fb9be369c20e84153ce02653275607d4"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x437}}]})

5.784465424s ago: executing program 3 (id=7925):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20048000)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb9, 0x2, 0x1, 0x237}, &(0x7f0000000340)=<r6=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, 0x0, 0x0, 0x4)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x40010)
syz_io_uring_submit(r6, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r4, 0x0})
io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x0)
r10 = dup(r9)
write$6lowpan_enable(r10, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'})
read$FUSE(r10, &(0x7f0000000700)={0x2020}, 0xeffd)

5.492376812s ago: executing program 1 (id=7926):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x322c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0xfffffffffffffffd]}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = landlock_create_ruleset(&(0x7f0000000040)={0x8802, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$KVM_CREATE_VM(r4, 0x402c5829, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x6a, 0x3, 0x24000000, 0x61)
timer_create(0xfffffffc, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6)
sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r7, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x49}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40000)
r8 = socket$inet6(0xa, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$dupfd(r8, 0x406, r8)
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

5.42523312s ago: executing program 0 (id=7927):
r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe)
pipe2$watch_queue(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x1d)
r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xcf)
r4 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)={0x1, 0x0, @b}, 0x48, r3)
keyctl$KEYCTL_WATCH_KEY(0x20, r4, r1, 0xcb)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f0000000040)={0x2a, 0x3, 0x0, {0x1, 0xfffffebb, 0x0, '/dev/sg#\x00'}}, 0x2a)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r13=>0x0)
io_submit(r13, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r12, 0x0}])
ioctl$KVM_GET_CLOCK(r12, 0x8030ae7c, &(0x7f0000000140))
syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'})
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0)

5.288530501s ago: executing program 2 (id=7928):
memfd_create(0x0, 0x18)
r0 = gettid()
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141)
r3 = dup(r2)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff000008"], 0x44}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0xffffffffffffff18}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r6, 0xae80, 0x0)
pipe(&(0x7f0000000140))
socket$inet6_tcp(0xa, 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r7 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r7, 0x40088a01, &(0x7f0000000000)=0x100)

4.922108234s ago: executing program 0 (id=7929):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000fd90000071183b00000000007e050000000000009500000000000026"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0)
writev(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0xd, 0x2, {0x2, 0x0, 0x6, 0x3, 0x8}, 0x4})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, r3, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="50a245d5cde0", @void, {@ipv6={0x86dd, @generic={0x5, 0x6, "cb87b4", 0x8, 0x2b, 0xff, @empty, @mcast2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x0, 0x48, 0x4}]}}}}}, 0x0)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_complete(r7)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

4.921815647s ago: executing program 4 (id=7930):
syz_open_dev$vcsu(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x10, 0x3, 0x40000)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$inet6(r4, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x50000, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x0)

4.82606474s ago: executing program 2 (id=7931):
r0 = getpid()
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
writev(r1, &(0x7f0000000c40)=[{&(0x7f00000003c0)='^', 0x1}, {0x0}], 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x40000000, &(0x7f0000006680))
r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r2, 0x13)
syz_pidfd_open(r0, 0x0)
capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000140)={0xe2, 0x10001, 0x1, 0x1000, 0x6, 0x8881})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="61d9010000000000180012800800010073697400fffd0280080002000a01010008001f000700000000002800a424000000000a00", @ANYRES32=0x0, @ANYBLOB="0000030067656e65766530000000000000000000"], 0x40}}, 0x4080)
read$alg(r5, &(0x7f0000000240)=""/4096, 0xfffffdef)

3.304508572s ago: executing program 2 (id=7932):
r0 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1', [], 0xa, "c54a87fc474f6866"}, 0x13)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904"], 0x0)

3.180615945s ago: executing program 3 (id=7933):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000000000100000001800018014000200776c616e3100000000000000000000000800070000000011080008"], 0x3c}}, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0x88ad, 0x0, 0x2, 0x40001333}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
r7 = syz_io_uring_setup(0xa2e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x4000, 0x10000}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_register$IORING_UNREGISTER_NAPI(r7, 0x1c, 0x0, 0x1)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r9 = openat$vicodec1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r9, 0xc054561d, &(0x7f0000000300)={0x5, "69592436c86c8001000000ff0f001e4e0f00", 0x1, 0x100, 0xffffbb71, 0x800, 0x1, 0x3, 0x7f, 0x6})
syz_open_procfs(0x0, 0x0)

2.994204276s ago: executing program 0 (id=7934):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_fuse_handle_req(r1, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x6)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000017c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xe}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0xfffffffffffffee7}]}}]}, 0x34}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xe6, 0x52, 0x9, 0x20, 0x2639, 0x2, 0xb6d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xda, 0x5b, 0x0, 0xaa, 0xef, 0x36, 0x7}}]}}]}}, 0x0)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000004c0)={0x10003, 0x1, 0xffff1000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
write(r0, &(0x7f0000000180)="738f0ebe84b0947383a45c43d5663be3ea3a21d0d18c1c94231b2b967a18e2b39568c71730f18765c17f2eb4fa312ac55eb59756f85cdcd253ee291c0b87f1343db69a6dc9b796df3bf56ab18e3d07a624a8a8", 0x53)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x81, 0x4d0a41)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x33, 0x2, 0x1, "0b69e8e1dd2f1ae97ee8589301d94ff3a8f41910b2eafa4496ba216bc11e00", 0x384c4150})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc00c64b5, &(0x7f0000000100)={&(0x7f0000000040)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f0000000180)={r9, 0x0, 0x0, 0x1, 0x361, 0x101, 0x8c6, 0x4, 0x10000, 0x80000000, 0xd, 0x8})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)

2.630571555s ago: executing program 4 (id=7935):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0)

2.441672069s ago: executing program 4 (id=7936):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000060a010400000000000000000a0000010900010073797a31000000001c0004801800018008000100666962000c00028008000240000000010900020073797a3200000000140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
getsockopt$MRT(r0, 0x0, 0xce, 0xffffffffffffffff, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="24020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x224}}, 0x4004)
socket$nl_xfrm(0x10, 0x3, 0x6)
dup(r2)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x100076, 0x101b01)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x8, 0x470201)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522)
ioctl$USBDEVFS_BULK(r4, 0x5523, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x5, 0xcbf, 0x9, @mcast2, @private1, 0x80, 0x8048, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0xfe, 0xff, 0x4038a0c, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x0, 0x7, 0x8}})
r6 = syz_open_dev$usbfs(&(0x7f0000000200), 0x6, 0x101343)
r7 = socket(0x11, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000002c0)=0x1d1f, 0x4)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gre0\x00', <r9=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
bind$packet(r7, &(0x7f0000000180)={0x11, 0xf8, r9}, 0x14)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b00000080b1a3d2061fd7fdfe4b88945431f48597e36e039b1c599db6e466749c2d4c83a61f63017d2900ffffca88faca00"/99], 0xdd12}, {&(0x7f00000008c0)=ANY=[@ANYBLOB="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"/428], 0x1ac}], 0x2}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})

2.236784516s ago: executing program 1 (id=7937):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x1e4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x168, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x64, 0x1, [@m_mirred={0x60, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0x11, 0x6, "d527360c37d81b077c369a3b45"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0xf0, 0x1, [@m_ctinfo={0xec, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0xbd, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffdc60fbea174f1aa7372acb7f356da638e68d8cc0dfa35b1ef1879e8526f439300c841829ae601a7811d02b21fcc5aaa7951b03466f8a1800a4b912630d3eb9f282786ef340f4e3cb08280f71f4ee2941ec13001a2c7884372e6ba0fb2f0aaa4766f88f4e7f768d299cf02a379f46bdc66"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x402}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.236406432s ago: executing program 3 (id=7938):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x9}, 0x14)
madvise(&(0x7f0000571000/0x1000)=nil, 0x1000, 0x0)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
read$FUSE(r0, &(0x7f0000000180)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, r3, {0x80000}}, 0x18)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2.065223285s ago: executing program 1 (id=7939):
syz_usb_connect(0x6, 0x7c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x30}}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0xb, 0x901, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_COMPAT_NAME={0x7, 0x1, 'lp\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}}, 0x8010)
r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
timer_create(0x1, &(0x7f0000000400)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80)
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
munmap(&(0x7f0000398000/0x1000)=nil, 0x1000)
io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000500)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x64, 0x4, 0x1, 0xff, 0x8}, 0x34, &(0x7f0000000040)={0x5, 0xf, 0x34, 0x3, [@generic={0x21, 0x10, 0x3, "e1dd04884754ec001d33736b0fa6e453e1de7141d975e8b98459bdc70ad0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x82, 0x7, 0x1, 0x6}, @ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x814}}, {0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "a3ccde54af7947474b9b9c7f26c4bcb22afeb9bf9d4b8bf8676413d0d1488b293e75b19d4712fcf6ec5b62f4ec7ee81b6367b039254b11f996a0f140d5ead9557740396e0571e39bf1d6ed86b1c056ef2f119ac597ece4dc00a08d43624682794ba98245506ad692745488876c2d0fd1a095c04d7b25de57b81a1f5c154f88c166198e7cfa23744f33041d5466c4402b3cac47eb87b15fa50de55c4eab34af7f4f22388d00760e07fe7961e7d067c9ed19f71362ba7511fdfb0a5a58a44a9373d2e24a9dc7ec835da8b172cbd4536781f26e13b2cf64d6b6ff1f254a087694b6f980715116584b24cc408b8f118309b277129e2055a81a"}}, {0xb1, &(0x7f0000000580)=ANY=[@ANYBLOB="b1030bcd5a9f4a9f997261265230fb3c3feb667781a1bf4fdf2803de1a0ffa7a997d4a69cc4eef81a060d4a8daabd4757ef1b9e6a99b8cbedb6fc74726e9d0bdd5d3559d80804c4fa8bb7ccb6d5a4b7d79e4d0c4703b3f2ca5e11f7e567aaddf0221fc9404f4a1328f8066cbf9630af735009d0770f95aca8caf07dc2686845898cf6e879a9f6bffd6d0ce676712871939912f8c8d0bab794ad3b0cdba82965baae4ec74159fe50266f9aaef556980fb9be369c20e84153ce02653275607d4"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x437}}]})

1.975698297s ago: executing program 2 (id=7940):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000180)={{{0x1}}, 0x0, 0x8, 0x0})
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x87, 0x2a, 0xa6, 0x20, 0x110a, 0x1150, 0xb8e5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xfc, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0x49, 0x7a, 0x2, 0xd3, 0xed, 0xb0, 0x6, [], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x5, 0x2, 0x40, 0xa, 0xc, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
readv(r2, &(0x7f0000000a40)=[{&(0x7f0000000380)=""/68, 0x44}], 0x1)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, 0x0)

1.920298526s ago: executing program 3 (id=7941):
lstat64(0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x22020600)
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_mr_vif\x00')
pread64(r2, &(0x7f00000002c0)=""/78, 0x34, 0x3)
sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac000000080001400100000f08000240000000030900010073797a30"], 0xcc}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x44, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000100)=ANY=[@ANYRES64=<r3=>r1], 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket(0x1, 0x2, 0x0)
syz_usb_control_io(r0, &(0x7f0000000500)={0x18, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3], &(0x7f0000000c80)={0x0, 0x3, 0x82, @string={0x82, 0x3, "e90d7ea0c40eace85190ebd28e0968331e6aac2b6dd0931824954a152dd1935a09bb9819380a1c6c8131c82c5d478f1011f45da1c9e497dfc2e8eef653d1dfddf9799a5696cbbfe89ca10c5f8e8341ca556d8e710a9205b0900de3e1738e8da4227f7eb385e6170d369ab32d8b6b5cbc77de0468e7011ee723088e4c5b12fd30"}}, &(0x7f0000000580)={0x0, 0xf, 0x140, {0x5, 0xf, 0x140, 0x6, [@generic={0xe1, 0x10, 0x4, "51cbb6e5325f285820566182833df6c3f698c00a8212f17c6cb63933ba731c7efbcc0fa608e2e49372171b6d5b6224b2aa41e513dbc7b10dad325861ba6722f2380e2378e189987cb979aa5443bc4be6a795a8e9a0ecb4a7bfd6d51268d1366bca431f54a5f2551998459ba7a908171bb1e1edc0b13d902cbab4b1e36fc284fc9c6ae84ee06de253684180a0cc6eb4b75f2775e919a59e035f364afc640c103146fcbe00bc895c651561fc5f41ca76293de88239d75cbba4943c81a96f003aaaf0bdf0c7bf8dd4dc90ead220c26d4614daf6d4d219d75ca67074c55c1db7"}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x1, 0xf00, 0x3, [0xff000f]}, @ext_cap={0xfffffffffffffe4c, 0x10, 0x2, 0xc, 0x8, 0x9, 0x8001}, @ptm_cap={0x3}, @ptm_cap, @generic={0x2c, 0x10, 0xb, "27dcc86e3fa3129bef6a97a39b8865cc5c60f2ef3e7ac92d440ad8034a44f19a2cf0358dc42ab30dea"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x4, 0x4, 0x0, "8df8a270", "98589736"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x80, 0x2, 0x3, 0xd, 0x88, 0x3}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000700)={0x20, 0x7, 0x4c, "8f13b85ae7d110321b1fd11a0df338349798cb33e7a39276219e50642a43e6feee10e1b118b9c59d2dc0a4708855c9337e267d8716eeb5e827150f63b8256a2c7cf68c07a41ac22953216732"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000180)={0x20, 0x0, 0x8, {0xc0, 0x41, [0x0]}}, &(0x7f0000000880)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f00000008c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000900)={0x40, 0xb, 0x2, "9b20"}, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x4}, &(0x7f0000000980)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f00000009c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a00)={0x40, 0x19, 0x2}, &(0x7f0000000a40)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000a80)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x9}})
bind$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000dc0)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "27893ce60adde72a", "be07f2c0d0f47c2909b3f965b11848ce", "5239bf4d", "10fc405425abce7b"}, 0x28)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f02a, 0x17})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r6 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040202fe056402040c5c0009", 0x1f, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r9=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00028006"], 0x24}}, 0x0)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0xc, @mcast2, 0x9}, 0x1c)

1.169759601s ago: executing program 1 (id=7942):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in=@dev={0xac, 0x14, 0x14, 0x14}, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x49, 0xa, 0x0, 0x0, 0x11}, {0x9, 0x3, 0x400000000, 0x800000, 0x9, 0x0, 0x0, 0x100024}, {0x0, 0x4, 0x0, 0x4}, 0x0, 0x6e6bbf, 0x1, 0x0, 0x5, 0x3}, {{@in6=@private0, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0xfffffffc, 0x0, 0x3, 0x4, 0xfffffffc, 0x6, 0x400}}, 0xe4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300008000fbdbdf251c00000028000180140002006c6f00000000000000000000b837ddcb2fac1ed2cce59c4d9d0000000008000300020000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40006)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4)
r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x20200, 0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
lseek(r7, 0x24, 0x0)
openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, 0x0)
lseek(r7, 0x7fff, 0x0)
preadv(r6, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/32, 0x20}, {0x0}], 0x2, 0x3d5df650, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0xec}}, 0xc000)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc01cf509, &(0x7f0000000080)={r6, 0x4037, 0x5, 0xffffffffffffffff})

1.16862174s ago: executing program 0 (id=7952):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x8, @remote}, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xc3ff, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001000011000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfdf8)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)

567.498955ms ago: executing program 4 (id=7943):
syz_usb_connect(0x0, 0x211, &(0x7f0000000200)=ANY=[@ANYBLOB="120100007b960840070a6400aaad010203010902ff0101000000000904370005b4c82d0009050a"], 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

212.854334ms ago: executing program 0 (id=7944):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'none'}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000)
r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000)
preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb)
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')

0s ago: executing program 2 (id=7945):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'lock', ' ', 'none'}, 0xa)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x400c010)
connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000)
r7 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000)
preadv(r7, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb)
ioctl$VIDIOC_LOG_STATUS(r7, 0x5646, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa4a2}]}, 0x5c}}, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')

kernel console output (not intermixed with test programs):

00000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2429.783942][T16457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2429.783974][T16457]  </TASK>
[ 2430.014470][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2430.093341][T16375] lowmem_reserve[]: 0 2497 2499 2499 2499
[ 2430.146491][T16375] Node 0 DMA32 free:933872kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25940kB inactive_anon:0kB active_file:87332kB inactive_file:161412kB unevictable:1536kB writepending:648kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:55764kB local_pcp:12104kB free_cma:0kB
[ 2430.206051][T16375] lowmem_reserve[]: 0 0 1 1 1
[ 2430.211388][T16375] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[ 2430.240424][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2430.247297][T16375] lowmem_reserve[]: 0 0 0 0 0
[ 2430.252543][T16375] Node 1 Normal free:3900836kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14588kB local_pcp:6252kB free_cma:0kB
[ 2430.283937][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2430.295180][T16375] lowmem_reserve[]: 0 0 0 0 0
[ 2430.358403][T16375] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[ 2430.445336][T16375] Node 0 DMA32: 1100*4kB (ME) 1210*8kB (ME) 795*16kB (UME) 208*32kB (UME) 116*64kB (UME) 35*128kB (ME) 45*256kB (UME) 20*512kB (UME) 13*1024kB (UME) 4*2048kB (M) 201*4096kB (UM) = 911920kB
[ 2430.493834][T16375] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 2430.596578][T16375] Node 1 Normal: 144*4kB (UME) 13*8kB (UME) 15*16kB (UME) 258*32kB (UME) 94*64kB (UME) 35*128kB (UME) 15*256kB (UME) 15*512kB (UME) 13*1024kB (UM) 7*2048kB (UME) 938*4096kB (M) = 3900888kB
[ 2430.765858][T16375] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2431.029562][T16375] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 2431.052346][T16375] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2431.102498][T16375] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2431.116637][T16375] 64042 total pagecache pages
[ 2431.121477][T16375] 0 pages in swap cache
[ 2431.130878][T16375] Free swap  = 124504kB
[ 2431.135890][T16375] Total swap = 124996kB
[ 2431.143441][T16375] 2097051 pages RAM
[ 2431.154742][T16375] 0 pages HighMem/MovableOnly
[ 2431.161014][T16375] 425672 pages reserved
[ 2431.196648][T16375] 0 pages cma reserved
[ 2431.786809][T16503] FAULT_INJECTION: forcing a failure.
[ 2431.786809][T16503] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2431.807451][T16503] CPU: 0 UID: 0 PID: 16503 Comm: syz.3.7624 Not tainted syzkaller #0 PREEMPT(full) 
[ 2431.807483][T16503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2431.807497][T16503] Call Trace:
[ 2431.807506][T16503]  <TASK>
[ 2431.807517][T16503]  dump_stack_lvl+0x189/0x250
[ 2431.807547][T16503]  ? __pfx____ratelimit+0x10/0x10
[ 2431.807571][T16503]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2431.807597][T16503]  ? __pfx__printk+0x10/0x10
[ 2431.807626][T16503]  ? __might_fault+0xb0/0x130
[ 2431.807668][T16503]  should_fail_ex+0x414/0x560
[ 2431.807704][T16503]  _copy_to_iter+0x404/0x1790
[ 2431.807732][T16503]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 2431.807766][T16503]  ? __pfx__copy_to_iter+0x10/0x10
[ 2431.807794][T16503]  ? __asan_memcpy+0x40/0x70
[ 2431.807820][T16503]  ? seq_write+0xd8/0x140
[ 2431.807856][T16503]  seq_read_iter+0xbeb/0xe10
[ 2431.807904][T16503]  seq_read+0x369/0x480
[ 2431.807952][T16503]  ? __pfx_seq_read+0x10/0x10
[ 2431.807977][T16503]  ? __debugfs_file_get+0x5dd/0x710
[ 2431.808019][T16503]  ? __pfx___debugfs_file_get+0x10/0x10
[ 2431.808054][T16503]  full_proxy_read+0x124/0x1f0
[ 2431.808078][T16503]  ? __pfx_full_proxy_read+0x10/0x10
[ 2431.808103][T16503]  vfs_read+0x200/0xa30
[ 2431.808129][T16503]  ? fdget_pos+0x247/0x320
[ 2431.808161][T16503]  ? __pfx___mutex_lock+0x10/0x10
[ 2431.808185][T16503]  ? __pfx_vfs_read+0x10/0x10
[ 2431.808215][T16503]  ? __fget_files+0x2a/0x420
[ 2431.808239][T16503]  ? __fget_files+0x3a0/0x420
[ 2431.808256][T16503]  ? __fget_files+0x2a/0x420
[ 2431.808286][T16503]  ksys_read+0x145/0x250
[ 2431.808317][T16503]  ? __pfx_ksys_read+0x10/0x10
[ 2431.808349][T16503]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2431.808376][T16503]  __do_fast_syscall_32+0xb6/0x2b0
[ 2431.808401][T16503]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2431.808429][T16503]  do_fast_syscall_32+0x34/0x80
[ 2431.808453][T16503]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2431.808489][T16503] RIP: 0023:0xf701e539
[ 2431.808508][T16503] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2431.808526][T16503] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2431.808547][T16503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800034c0
[ 2431.808562][T16503] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000
[ 2431.808574][T16503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2431.808586][T16503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2431.808597][T16503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2431.808627][T16503]  </TASK>
[ 2432.521413][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7625'.
[ 2432.767723][T16523] FAULT_INJECTION: forcing a failure.
[ 2432.767723][T16523] name failslab, interval 1, probability 0, space 0, times 0
[ 2432.781077][T16523] CPU: 1 UID: 0 PID: 16523 Comm: syz.0.7630 Not tainted syzkaller #0 PREEMPT(full) 
[ 2432.781116][T16523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2432.781130][T16523] Call Trace:
[ 2432.781140][T16523]  <TASK>
[ 2432.781149][T16523]  dump_stack_lvl+0x189/0x250
[ 2432.781181][T16523]  ? __pfx____ratelimit+0x10/0x10
[ 2432.781203][T16523]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2432.781228][T16523]  ? __pfx__printk+0x10/0x10
[ 2432.781258][T16523]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 2432.781291][T16523]  should_fail_ex+0x414/0x560
[ 2432.781328][T16523]  should_failslab+0xa8/0x100
[ 2432.781361][T16523]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2432.781391][T16523]  ? tipc_group_create_member+0x60/0x540
[ 2432.781421][T16523]  tipc_group_create_member+0x60/0x540
[ 2432.781449][T16523]  ? tipc_nametbl_build_group+0x1e3/0x4d0
[ 2432.781479][T16523]  tipc_nametbl_build_group+0x2f0/0x4d0
[ 2432.781506][T16523]  ? tipc_nametbl_build_group+0x2e/0x4d0
[ 2432.781542][T16523]  tipc_sk_join+0x397/0x6b0
[ 2432.781563][T16523]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2432.781589][T16523]  ? __pfx_tipc_sk_join+0x10/0x10
[ 2432.781622][T16523]  tipc_setsockopt+0x735/0x970
[ 2432.781661][T16523]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 2432.781695][T16523]  ? aa_sock_opt_perm+0xff/0x1b0
[ 2432.781721][T16523]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 2432.781744][T16523]  ? __pfx_tipc_setsockopt+0x10/0x10
[ 2432.781777][T16523]  do_sock_setsockopt+0x179/0x1b0
[ 2432.781808][T16523]  __ia32_sys_setsockopt+0x13f/0x1b0
[ 2432.781841][T16523]  __do_fast_syscall_32+0xb6/0x2b0
[ 2432.781867][T16523]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2432.781894][T16523]  do_fast_syscall_32+0x34/0x80
[ 2432.781918][T16523]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2432.781944][T16523] RIP: 0023:0xf7f85539
[ 2432.781962][T16523] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2432.781981][T16523] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 2432.782003][T16523] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000010f
[ 2432.782017][T16523] RDX: 0000000000000087 RSI: 0000000080000100 RDI: 0000000000000010
[ 2432.782031][T16523] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2432.782044][T16523] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2432.782056][T16523] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2432.782087][T16523]  </TASK>
[ 2433.390697][T16525] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7631'.
[ 2433.414695][T16525] 0ªX¹¦À: renamed from caif0
[ 2433.442582][T16525] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[ 2433.587315][T15923] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[ 2433.766848][ T7266] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 2433.816097][T15923] usb 4-1: device descriptor read/64, error -71
[ 2433.937356][ T7266] usb 1-1: Using ep0 maxpacket: 32
[ 2433.956128][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2433.968142][ T7266] usb 1-1: config 0 has no interface number 0
[ 2433.975893][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2434.001107][ T7266] usb 1-1: config 0 has no interface number 0
[ 2434.087557][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2434.095793][ T7266] usb 1-1: config 0 has no interface number 0
[ 2434.105306][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2434.203345][T15923] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[ 2434.246715][ T7266] usb 1-1: config 0 has no interface number 0
[ 2434.265523][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2434.331912][ T7266] usb 1-1: config 0 has no interface number 0
[ 2434.357277][T15923] usb 4-1: device descriptor read/64, error -71
[ 2434.359039][ T7266] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[ 2434.392351][ T7266] usb 1-1: config 0 has no interface number 0
[ 2434.408352][ T7266] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[ 2434.418249][ T7266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2434.436450][ T7266] usb 1-1: Product: syz
[ 2434.495130][ T7266] usb 1-1: Manufacturer: syz
[ 2434.495470][T15923] usb usb4-port1: attempt power cycle
[ 2434.507790][ T7266] usb 1-1: SerialNumber: syz
[ 2434.555949][ T7266] usb 1-1: config 0 descriptor??
[ 2434.756673][ T7261] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 2434.908106][T15923] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[ 2434.937811][T15923] usb 4-1: device descriptor read/8, error -71
[ 2435.006559][ T7261] usb 3-1: Using ep0 maxpacket: 16
[ 2435.019027][ T7266] mdc800 1-1:0.109: probe fails -> wrong Number of Configuration
[ 2435.052414][ T7261] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 2435.069354][ T7261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2435.093095][ T7266] usb 1-1: USB disconnect, device number 83
[ 2435.108745][ T7261] usb 3-1: Product: syz
[ 2435.113073][ T7261] usb 3-1: Manufacturer: syz
[ 2435.141023][ T7261] usb 3-1: SerialNumber: syz
[ 2435.176322][ T7261] usb 3-1: config 0 descriptor??
[ 2435.186676][T15923] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[ 2435.200349][ T7261] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[ 2435.217725][T15923] usb 4-1: device descriptor read/8, error -71
[ 2435.239049][ T7261] usb 3-1: Detected FT-X
[ 2435.330026][T15923] usb usb4-port1: unable to enumerate USB device
[ 2435.398324][T16569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2435.447018][T16569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2435.463227][ T7261] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[ 2435.494367][ T7261] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 2435.507153][ T7261] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[ 2435.531772][ T7261] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 2435.571655][ T7261] usb 3-1: USB disconnect, device number 89
[ 2435.664750][ T7261] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 2435.701521][ T7261] ftdi_sio 3-1:0.0: device disconnected
[ 2436.046723][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 2436.046740][   T30] audit: type=1800 audit(1758420344.562:3572): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7646" name="nullb0" dev="devtmpfs" ino=5972 res=0 errno=0
[ 2437.073023][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7649'.
[ 2437.792531][   T30] audit: type=1326 audit(1758420346.172:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16646 comm="syz.4.7650" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f77539 code=0x0
[ 2438.832274][T16677] bond_slave_0: entered promiscuous mode
[ 2438.838043][T16677] bond_slave_1: entered promiscuous mode
[ 2438.845936][T16677] macvlan2: entered promiscuous mode
[ 2438.864101][T16677] bond0: entered promiscuous mode
[ 2438.884459][T16677] macvlan2: entered allmulticast mode
[ 2439.007040][T16677] bond0: entered allmulticast mode
[ 2439.015096][T16677] bond_slave_0: entered allmulticast mode
[ 2439.033299][T16677] bond_slave_1: entered allmulticast mode
[ 2439.066630][ T7261] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 2439.085582][T16677] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 2439.118842][T16677] bond0: left allmulticast mode
[ 2439.124003][T16677] bond_slave_0: left allmulticast mode
[ 2439.132570][T16677] bond_slave_1: left allmulticast mode
[ 2439.138847][T16677] bond0: left promiscuous mode
[ 2439.144363][T16677] bond_slave_0: left promiscuous mode
[ 2439.149924][T16677] bond_slave_1: left promiscuous mode
[ 2439.250221][ T7261] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2439.276860][ T7261] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[ 2439.285098][ T7261] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[ 2439.411492][ T7261] usb 2-1: config 63 has no interface number 0
[ 2439.425119][ T7261] usb 2-1: config 63 interface 66 has no altsetting 0
[ 2439.445676][ T7261] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[ 2439.459663][ T7261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2439.484594][ T7261] usb 2-1: Product: syz
[ 2439.494634][ T7261] usb 2-1: Manufacturer: syz
[ 2439.508666][ T7261] usb 2-1: SerialNumber: syz
[ 2439.687653][T16695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7658'.
[ 2439.763125][ T7261] usb 2-1: Found UVC 0.07 device syz (174f:8a31)
[ 2439.770061][ T7261] usb 2-1: No valid video chain found.
[ 2439.827038][ T7261] usb 2-1: USB disconnect, device number 116
[ 2440.316572][ T7266] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[ 2440.466807][ T7266] usb 3-1: device descriptor read/64, error -71
[ 2440.646537][ T7261] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2440.726534][ T7266] usb 3-1: new low-speed USB device number 91 using dummy_hcd
[ 2440.830348][ T7261] usb 2-1: Using ep0 maxpacket: 16
[ 2440.860341][ T7261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2440.886566][ T7266] usb 3-1: device descriptor read/64, error -71
[ 2440.895401][ T7261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2441.074354][ T7266] usb usb3-port1: attempt power cycle
[ 2441.080647][ T7261] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2441.141037][ T7261] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2441.173433][ T7261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2441.208011][ T7261] usb 2-1: config 0 descriptor??
[ 2441.477457][ T7266] usb 3-1: new low-speed USB device number 92 using dummy_hcd
[ 2441.497843][ T7266] usb 3-1: device descriptor read/8, error -71
[ 2441.642726][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2441.706448][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2441.713758][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2441.736578][ T7266] usb 3-1: new low-speed USB device number 93 using dummy_hcd
[ 2441.782113][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2441.791759][ T7266] usb 3-1: device descriptor read/8, error -71
[ 2441.846540][T16720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2441.858304][T16720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2441.876436][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2441.947947][T16757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7669'.
[ 2441.975733][ T7266] usb usb3-port1: unable to enumerate USB device
[ 2442.083499][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2442.136970][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2442.159963][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2442.336425][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2442.352770][ T7261] microsoft 0003:045E:07DA.004A: unknown main item tag 0x0
[ 2442.596571][ T7261] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.004A/input/input100
[ 2442.648660][ T7261] microsoft 0003:045E:07DA.004A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 2442.708629][T16782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7674'.
[ 2442.757778][ T7261] usb 2-1: USB disconnect, device number 117
[ 2442.916072][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7675'.
[ 2442.957770][T16794] FAULT_INJECTION: forcing a failure.
[ 2442.957770][T16794] name failslab, interval 1, probability 0, space 0, times 0
[ 2442.997274][T16794] CPU: 0 UID: 0 PID: 16794 Comm: syz.0.7675 Not tainted syzkaller #0 PREEMPT(full) 
[ 2442.997304][T16794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2442.997317][T16794] Call Trace:
[ 2442.997326][T16794]  <TASK>
[ 2442.997334][T16794]  dump_stack_lvl+0x189/0x250
[ 2442.997366][T16794]  ? __pfx____ratelimit+0x10/0x10
[ 2442.997389][T16794]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2442.997414][T16794]  ? __pfx__printk+0x10/0x10
[ 2442.997449][T16794]  ? __pfx___might_resched+0x10/0x10
[ 2442.997467][T16794]  ? fs_reclaim_acquire+0x7d/0x100
[ 2442.997492][T16794]  should_fail_ex+0x414/0x560
[ 2442.997528][T16794]  should_failslab+0xa8/0x100
[ 2442.997560][T16794]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 2442.997588][T16794]  ? getname_flags+0xb8/0x540
[ 2442.997612][T16794]  getname_flags+0xb8/0x540
[ 2442.997630][T16794]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[ 2442.997658][T16794]  __ia32_sys_symlink+0x5c/0x90
[ 2442.997688][T16794]  __do_fast_syscall_32+0xb6/0x2b0
[ 2442.997713][T16794]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2442.997739][T16794]  do_fast_syscall_32+0x34/0x80
[ 2442.997764][T16794]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2442.997790][T16794] RIP: 0023:0xf7f85539
[ 2442.997808][T16794] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2442.997827][T16794] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000053
[ 2442.997850][T16794] RAX: ffffffffffffffda RBX: 0000000080000340 RCX: 0000000080000680
[ 2442.997866][T16794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2442.997879][T16794] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2442.997891][T16794] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2442.997914][T16794] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2442.997944][T16794]  </TASK>
[ 2443.194683][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2443.238020][T16783] fido_id[16783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 2443.248925][T16806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7676'.
[ 2443.477659][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7677'.
[ 2444.265326][T16840] fuse: Bad value for 'fd'
[ 2444.368590][T16837] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2444.375802][T16837] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2444.424394][T16837] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2444.430874][T16837] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2444.521033][T16837] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2444.527619][T16837] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2444.586569][T16837] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2444.593030][T16837] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2444.679559][   T30] audit: type=1800 audit(1758420353.212:3574): pid=16847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7683" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 2444.782679][T16839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7681'.
[ 2444.800485][T16837] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 2444.806988][T16837] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 2445.820791][T16888] netlink: 'syz.0.7688': attribute type 5 has an invalid length.
[ 2446.622825][T16904] fuse: blksize only supported for fuseblk
[ 2446.640118][T16903] fuse: blksize only supported for fuseblk
[ 2446.780742][T16892] delete_channel: no stack
[ 2447.236685][T15906] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 2447.459243][T15906] usb 2-1: config 0 has no interfaces?
[ 2447.552652][T15906] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2447.694119][T15906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2447.724163][T15906] usb 2-1: config 0 descriptor??
[ 2447.955014][T16916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2447.998911][T16916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2448.012112][T16916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2448.049950][T16937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7699'.
[ 2448.054209][T16916] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2448.059348][T16938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7699'.
[ 2448.099555][T15906] usb 2-1: USB disconnect, device number 118
[ 2448.516827][ T7261] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2448.586867][ T3685] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2448.679098][ T7261] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2448.701568][ T7261] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2448.720365][ T7261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2448.747503][ T7261] usb 5-1: config 0 descriptor??
[ 2448.758941][ T3685] usb 2-1: Using ep0 maxpacket: 16
[ 2448.759766][ T7261] pwc: Askey VC010 type 2 USB webcam detected.
[ 2448.773659][ T3685] usb 2-1: config 0 has no interfaces?
[ 2448.786798][ T3685] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=e4.df
[ 2448.805313][ T3685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2448.828649][ T3685] usb 2-1: config 0 descriptor??
[ 2449.167392][ T7261] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2449.183021][ T7261] pwc: recv_control_msg error -32 req 02 val 2700
[ 2449.193768][ T7261] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2449.210246][ T7261] pwc: recv_control_msg error -32 req 04 val 1000
[ 2449.227345][ T7261] pwc: recv_control_msg error -32 req 04 val 1300
[ 2449.237093][ T7261] pwc: recv_control_msg error -32 req 04 val 1400
[ 2449.254329][ T7261] pwc: recv_control_msg error -32 req 02 val 2000
[ 2449.265953][ T7261] pwc: recv_control_msg error -32 req 02 val 2100
[ 2449.277489][ T7261] pwc: recv_control_msg error -32 req 04 val 1500
[ 2449.294988][ T7261] pwc: recv_control_msg error -32 req 02 val 2500
[ 2449.302545][ T7261] pwc: recv_control_msg error -32 req 02 val 2400
[ 2449.317568][ T7261] pwc: recv_control_msg error -32 req 02 val 2600
[ 2449.335135][ T7261] pwc: recv_control_msg error -32 req 02 val 2900
[ 2449.347374][ T7261] pwc: recv_control_msg error -32 req 02 val 2800
[ 2449.376661][ T7261] pwc: recv_control_msg error -32 req 04 val 1100
[ 2449.527130][ T7261] pwc: recv_control_msg error -71 req 04 val 1200
[ 2449.548255][ T7261] pwc: Registered as video103.
[ 2449.568741][ T7261] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input101
[ 2449.604513][ T7261] usb 5-1: USB disconnect, device number 93
[ 2450.117900][ T3685] usb 2-1: USB disconnect, device number 119
[ 2450.260011][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7703'.
[ 2450.404779][T17011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7706'.
[ 2450.650750][T17027] loop8: detected capacity change from 0 to 8
[ 2450.662476][T17027] Dev loop8: unable to read RDB block 8
[ 2450.668826][T17027]  loop8: unable to read partition table
[ 2450.674813][T17027] loop8: partition table beyond EOD, truncated
[ 2450.686630][T17027] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– �) failed (rc=-5)
[ 2450.847375][T15906] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 2450.909817][T17049] FAULT_INJECTION: forcing a failure.
[ 2450.909817][T17049] name failslab, interval 1, probability 0, space 0, times 0
[ 2450.928005][T17049] CPU: 1 UID: 0 PID: 17049 Comm: syz.2.7713 Not tainted syzkaller #0 PREEMPT(full) 
[ 2450.928032][T17049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2450.928046][T17049] Call Trace:
[ 2450.928054][T17049]  <TASK>
[ 2450.928063][T17049]  dump_stack_lvl+0x189/0x250
[ 2450.928092][T17049]  ? __pfx____ratelimit+0x10/0x10
[ 2450.928113][T17049]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2450.928137][T17049]  ? __pfx__printk+0x10/0x10
[ 2450.928167][T17049]  ? __pfx___might_resched+0x10/0x10
[ 2450.928187][T17049]  ? fs_reclaim_acquire+0x7d/0x100
[ 2450.928210][T17049]  should_fail_ex+0x414/0x560
[ 2450.928246][T17049]  should_failslab+0xa8/0x100
[ 2450.928278][T17049]  __kmalloc_noprof+0xcb/0x4f0
[ 2450.928304][T17049]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2450.928340][T17049]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 2450.928375][T17049]  genl_family_rcv_msg_doit+0xb8/0x300
[ 2450.928410][T17049]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2450.928454][T17049]  ? apparmor_capable+0x137/0x1b0
[ 2450.928482][T17049]  ? bpf_lsm_capable+0x9/0x20
[ 2450.928508][T17049]  ? security_capable+0x7e/0x2e0
[ 2450.928545][T17049]  genl_rcv_msg+0x60e/0x790
[ 2450.928579][T17049]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2450.928606][T17049]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[ 2450.928642][T17049]  netlink_rcv_skb+0x208/0x470
[ 2450.928662][T17049]  ? __lock_acquire+0xab9/0xd20
[ 2450.928691][T17049]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2450.928718][T17049]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2450.928757][T17049]  ? down_read+0x1ad/0x2e0
[ 2450.928788][T17049]  genl_rcv+0x28/0x40
[ 2450.928815][T17049]  netlink_unicast+0x82c/0x9e0
[ 2450.928864][T17049]  ? __pfx_netlink_unicast+0x10/0x10
[ 2450.928902][T17049]  ? netlink_sendmsg+0x642/0xb30
[ 2450.928924][T17049]  ? skb_put+0x11b/0x210
[ 2450.928957][T17049]  netlink_sendmsg+0x805/0xb30
[ 2450.928994][T17049]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2450.929022][T17049]  ? __import_iovec+0x5d4/0x7f0
[ 2450.929050][T17049]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 2450.929075][T17049]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2450.929100][T17049]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2450.929127][T17049]  __sock_sendmsg+0x21c/0x270
[ 2450.929165][T17049]  ____sys_sendmsg+0x505/0x830
[ 2450.929200][T17049]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2450.929250][T17049]  ___sys_sendmsg+0x21f/0x2a0
[ 2450.929282][T17049]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2450.929354][T17049]  ? __fget_files+0x2a/0x420
[ 2450.929374][T17049]  ? __fget_files+0x3a0/0x420
[ 2450.929408][T17049]  __sys_sendmsg+0x164/0x220
[ 2450.929449][T17049]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2450.929516][T17049]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2450.929545][T17049]  __do_fast_syscall_32+0xb6/0x2b0
[ 2450.929574][T17049]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2450.929604][T17049]  do_fast_syscall_32+0x34/0x80
[ 2450.929630][T17049]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2450.929661][T17049] RIP: 0023:0xf7f85539
[ 2450.929682][T17049] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2450.929702][T17049] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2450.929727][T17049] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000400
[ 2450.929745][T17049] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[ 2450.929758][T17049] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2450.929772][T17049] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2450.929798][T17049] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2450.929832][T17049]  </TASK>
[ 2451.038811][T15906] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[ 2451.038843][T15906] usb 1-1: config 0 has no interface number 0
[ 2451.038874][T15906] usb 1-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[ 2451.038912][T15906] usb 1-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[ 2451.038942][T15906] usb 1-1: config 0 interface 48 has no altsetting 0
[ 2451.038980][T15906] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 2451.039005][T15906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2451.041798][T15906] usb 1-1: config 0 descriptor??
[ 2451.290293][T15906] usb 1-1: string descriptor 0 read error: -32
[ 2451.292427][T15906] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 2452.863407][T15906] usb 1-1: USB disconnect, device number 84
[ 2453.052651][T17089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2453.101532][T17089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2453.276564][ T7261] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2453.437272][ T7261] usb 5-1: Using ep0 maxpacket: 16
[ 2453.443000][T17063] binfmt_misc: register: failed to install interpreter file ./file0
[ 2453.461483][ T7261] usb 5-1: too many configurations: 97, using maximum allowed: 8
[ 2453.540456][   T30] audit: type=1326 audit(1758420362.032:3575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2453.552021][ T7261] usb 5-1: string descriptor 0 read error: -71
[ 2454.124883][ T7261] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[ 2454.134592][   T30] audit: type=1326 audit(1758420362.032:3576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2454.206855][ T7261] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[ 2454.256635][   T30] audit: type=1326 audit(1758420362.052:3577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2454.261218][T17054] syz.1.7714: vmalloc error: size 141557760, failed to allocated page array size 276480, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[ 2454.283852][ T7261] usb 5-1: rejected 8 configurations due to insufficient available bus power
[ 2454.334756][T17054] ,cpuset=/,mems_allowed=0-1
[ 2454.346446][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.1.7714 Not tainted syzkaller #0 PREEMPT(full) 
[ 2454.346477][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2454.346492][T17054] Call Trace:
[ 2454.346498][T17054]  <TASK>
[ 2454.346506][T17054]  dump_stack_lvl+0x189/0x250
[ 2454.346532][T17054]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2454.346552][T17054]  ? __pfx__printk+0x10/0x10
[ 2454.346574][T17054]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 2454.346593][T17054]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 2454.346613][T17054]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 2454.346633][T17054]  warn_alloc+0x214/0x310
[ 2454.346663][T17054]  ? __pfx_warn_alloc+0x10/0x10
[ 2454.346694][T17054]  ? __get_vm_area_node+0x28f/0x300
[ 2454.346717][T17054]  ? vb2_vmalloc_alloc+0xef/0x340
[ 2454.346740][T17054]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 2454.346785][T17054]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 2454.346813][T17054]  ? __kasan_kmalloc+0x93/0xb0
[ 2454.346837][T17054]  vmalloc_user_noprof+0xad/0xf0
[ 2454.346867][T17054]  ? vb2_vmalloc_alloc+0xef/0x340
[ 2454.346893][T17054]  vb2_vmalloc_alloc+0xef/0x340
[ 2454.346919][T17054]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[ 2454.346945][T17054]  __vb2_queue_alloc+0x9c2/0x15a0
[ 2454.347006][T17054]  vb2_core_reqbufs+0xc31/0x1420
[ 2454.347048][T17054]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[ 2454.347083][T17054]  ? __vb2_init_fileio+0x1e8/0xff0
[ 2454.347112][T17054]  __vb2_init_fileio+0x318/0xff0
[ 2454.347144][T17054]  ? vb2_fop_read+0x101/0x360
[ 2454.347170][T17054]  ? __pfx___mutex_lock+0x10/0x10
[ 2454.347198][T17054]  __vb2_perform_fileio+0x284/0x1600
[ 2454.347244][T17054]  vb2_fop_read+0x273/0x360
[ 2454.347276][T17054]  v4l2_read+0x199/0x2c0
[ 2454.347305][T17054]  vfs_readv+0x5aa/0x850
[ 2454.347328][T17054]  ? __pfx_v4l2_read+0x10/0x10
[ 2454.347354][T17054]  ? __pfx_vfs_readv+0x10/0x10
[ 2454.347392][T17054]  ? __fget_files+0x2a/0x420
[ 2454.347416][T17054]  ? __fget_files+0x3a0/0x420
[ 2454.347434][T17054]  ? __fget_files+0x2a/0x420
[ 2454.347468][T17054]  __ia32_compat_sys_preadv+0x1bf/0x2c0
[ 2454.347505][T17054]  ? __pfx___ia32_compat_sys_preadv+0x10/0x10
[ 2454.347544][T17054]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2454.347571][T17054]  __do_fast_syscall_32+0xb6/0x2b0
[ 2454.347604][T17054]  do_fast_syscall_32+0x34/0x80
[ 2454.347629][T17054]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2454.347655][T17054] RIP: 0023:0xf70be539
[ 2454.347676][T17054] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2454.347695][T17054] RSP: 002b:00000000f504955c EFLAGS: 00000206 ORIG_RAX: 000000000000014d
[ 2454.347718][T17054] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080001200
[ 2454.347733][T17054] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 000000000000000b
[ 2454.347746][T17054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2454.347759][T17054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2454.347771][T17054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2454.347803][T17054]  </TASK>
[ 2454.397997][   T30] audit: type=1326 audit(1758420362.132:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2454.683974][T17054] Mem-Info:
[ 2454.687202][ T7261] usb 5-1: no configuration chosen from 8 choices
[ 2454.708664][T17054] active_anon:7385 inactive_anon:0 isolated_anon:0
[ 2454.708664][T17054]  active_file:21890 inactive_file:40807 isolated_file:0
[ 2454.708664][T17054]  unevictable:768 dirty:52 writeback:0
[ 2454.708664][T17054]  slab_reclaimable:7937 slab_unreclaimable:134476
[ 2454.708664][T17054]  mapped:41674 shmem:1359 pagetables:1529
[ 2454.708664][T17054]  sec_pagetables:0 bounce:0
[ 2454.708664][T17054]  kernel_misc_reclaimable:0
[ 2454.708664][T17054]  free:1202268 free_pcp:28129 free_cma:0
[ 2454.802934][T17054] Node 0 active_anon:29740kB inactive_anon:0kB active_file:87332kB inactive_file:163028kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:166644kB dirty:208kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14916kB pagetables:5844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 2454.866547][ T7261] usb 5-1: USB disconnect, device number 94
[ 2454.878026][T17054] Node 1 active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 2454.926517][T17054] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 2454.996487][T17054] lowmem_reserve[]: 0 2497 2499 2499 2499
[ 2455.051267][T17054] Node 0 DMA32 free:890272kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26892kB inactive_anon:0kB active_file:87332kB inactive_file:161452kB unevictable:1536kB writepending:208kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:102944kB local_pcp:73544kB free_cma:0kB
[ 2455.084639][T17054] lowmem_reserve[]: 0 0 1 1 1
[ 2455.096717][T17054] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 2455.266238][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7724'.
[ 2455.285588][T17054] lowmem_reserve[]: 0 0 0 0 0
[ 2455.296778][   T30] audit: type=1326 audit(1758420362.162:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2455.396502][T17054] Node 1 Normal free:3903432kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12044kB local_pcp:4236kB free_cma:0kB
[ 2455.582856][T17054] lowmem_reserve[]: 0 0 0 0 0
[ 2455.619180][T17054] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB
[ 2455.619848][   T30] audit: type=1326 audit(1758420362.162:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2456.054810][T17054] Node 0 DMA32: 5*4kB (UME) 825*8kB (ME) 859*16kB (UME) 535*32kB (UME) 227*64kB (ME) 93*128kB (ME) 47*256kB (UME) 19*512kB (ME) 37*1024kB (UME) 10*2048kB (UM) 182*4096kB (UM) = 889516kB
[ 2456.212841][   T30] audit: type=1326 audit(1758420362.202:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2456.308223][T17054] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 2456.466629][   T30] audit: type=1326 audit(1758420362.202:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2456.490451][T17054] Node 1 Normal: 220*4kB (UME) 85*8kB (UME) 47*16kB (UME) 276*32kB (UME) 99*64kB (UME) 35*128kB (UME) 14*256kB (UME) 16*512kB (UME) 13*1024kB (UM) 7*2048kB (UME) 938*4096kB (M) = 3903432kB
[ 2456.545814][   T30] audit: type=1326 audit(1758420362.282:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2456.577458][   T30] audit: type=1326 audit(1758420362.282:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17095 comm="syz.3.7719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2456.676053][T17054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2456.780025][T17144] net_ratelimit: 2 callbacks suppressed
[ 2456.780048][T17144] openvswitch: netlink: Tunnel attr 14 has unexpected len 6 expected 0
[ 2456.889306][T17054] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB
[ 2456.923387][T17054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 2456.940896][T17054] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[ 2456.955500][T17054] 64054 total pagecache pages
[ 2456.960810][T17054] 0 pages in swap cache
[ 2456.965443][T17054] Free swap  = 124996kB
[ 2456.970373][T17054] Total swap = 124996kB
[ 2457.043585][T17054] 2097051 pages RAM
[ 2457.048364][T17054] 0 pages HighMem/MovableOnly
[ 2457.055174][T17054] 425672 pages reserved
[ 2457.062082][T17054] 0 pages cma reserved
[ 2457.626105][T17149] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.7729'.
[ 2457.671349][T17149] netlink: 4696 bytes leftover after parsing attributes in process `syz.3.7729'.
[ 2457.728926][T17149] netlink: 508 bytes leftover after parsing attributes in process `syz.3.7729'.
[ 2458.938929][T15923] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2459.186526][T15923] usb 5-1: Using ep0 maxpacket: 16
[ 2459.207879][T15923] usb 5-1: config 0 has no interfaces?
[ 2459.240237][T15923] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 2459.550297][T15923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2459.587732][T15923] usb 5-1: config 0 descriptor??
[ 2460.404453][T17215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7736'.
[ 2460.450005][T17220] FAULT_INJECTION: forcing a failure.
[ 2460.450005][T17220] name failslab, interval 1, probability 0, space 0, times 0
[ 2460.465537][T17220] CPU: 0 UID: 0 PID: 17220 Comm: syz.3.7738 Not tainted syzkaller #0 PREEMPT(full) 
[ 2460.465566][T17220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2460.465578][T17220] Call Trace:
[ 2460.465588][T17220]  <TASK>
[ 2460.465597][T17220]  dump_stack_lvl+0x189/0x250
[ 2460.465636][T17220]  ? __pfx____ratelimit+0x10/0x10
[ 2460.465658][T17220]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2460.465684][T17220]  ? __pfx__printk+0x10/0x10
[ 2460.465718][T17220]  ? __pfx___might_resched+0x10/0x10
[ 2460.465736][T17220]  ? fs_reclaim_acquire+0x7d/0x100
[ 2460.465760][T17220]  should_fail_ex+0x414/0x560
[ 2460.465797][T17220]  should_failslab+0xa8/0x100
[ 2460.465828][T17220]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2460.465856][T17220]  ? nft_trans_rule_add+0x59/0x440
[ 2460.465893][T17220]  nft_trans_rule_add+0x59/0x440
[ 2460.465929][T17220]  nf_tables_newrule+0x1b5e/0x2890
[ 2460.465971][T17220]  ? __pfx_nf_tables_newrule+0x10/0x10
[ 2460.465999][T17220]  ? nfnl_pernet+0x23/0x240
[ 2460.466040][T17220]  ? __nla_parse+0x40/0x60
[ 2460.466067][T17220]  nfnetlink_rcv+0x1132/0x2520
[ 2460.466129][T17220]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2460.466180][T17220]  ? ref_tracker_free+0x63a/0x7d0
[ 2460.466230][T17220]  ? __netlink_deliver_tap+0x807/0x850
[ 2460.466254][T17220]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2460.466296][T17220]  netlink_unicast+0x82c/0x9e0
[ 2460.466341][T17220]  ? __pfx_netlink_unicast+0x10/0x10
[ 2460.466372][T17220]  ? netlink_sendmsg+0x642/0xb30
[ 2460.466389][T17220]  ? skb_put+0x11b/0x210
[ 2460.466416][T17220]  netlink_sendmsg+0x805/0xb30
[ 2460.466449][T17220]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2460.466475][T17220]  ? __import_iovec+0x5d4/0x7f0
[ 2460.466500][T17220]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 2460.466523][T17220]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2460.466546][T17220]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2460.466569][T17220]  __sock_sendmsg+0x21c/0x270
[ 2460.466605][T17220]  ____sys_sendmsg+0x505/0x830
[ 2460.466652][T17220]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2460.466697][T17220]  ___sys_sendmsg+0x21f/0x2a0
[ 2460.466727][T17220]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2460.466794][T17220]  ? __fget_files+0x2a/0x420
[ 2460.466812][T17220]  ? __fget_files+0x3a0/0x420
[ 2460.466843][T17220]  __sys_sendmsg+0x164/0x220
[ 2460.466872][T17220]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2460.466917][T17220]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2460.466943][T17220]  __do_fast_syscall_32+0xb6/0x2b0
[ 2460.466968][T17220]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2460.466994][T17220]  do_fast_syscall_32+0x34/0x80
[ 2460.467018][T17220]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2460.467044][T17220] RIP: 0023:0xf701e539
[ 2460.467063][T17220] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2460.467081][T17220] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2460.467103][T17220] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[ 2460.467117][T17220] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2460.467129][T17220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2460.467141][T17220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2460.467153][T17220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2460.467183][T17220]  </TASK>
[ 2461.075838][T17224] FAULT_INJECTION: forcing a failure.
[ 2461.075838][T17224] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2461.186637][T17224] CPU: 0 UID: 0 PID: 17224 Comm: syz.1.7740 Not tainted syzkaller #0 PREEMPT(full) 
[ 2461.186667][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2461.186681][T17224] Call Trace:
[ 2461.186690][T17224]  <TASK>
[ 2461.186699][T17224]  dump_stack_lvl+0x189/0x250
[ 2461.186728][T17224]  ? __pfx____ratelimit+0x10/0x10
[ 2461.186749][T17224]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2461.186773][T17224]  ? __pfx__printk+0x10/0x10
[ 2461.186801][T17224]  ? __might_fault+0xb0/0x130
[ 2461.186840][T17224]  should_fail_ex+0x414/0x560
[ 2461.186874][T17224]  _copy_from_user+0x2d/0xb0
[ 2461.186903][T17224]  get_compat_msghdr+0xad/0x4a0
[ 2461.186935][T17224]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 2461.186970][T17224]  ___sys_sendmsg+0x193/0x2a0
[ 2461.187000][T17224]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2461.187062][T17224]  ? __fget_files+0x2a/0x420
[ 2461.187079][T17224]  ? __fget_files+0x3a0/0x420
[ 2461.187109][T17224]  __sys_sendmsg+0x164/0x220
[ 2461.187138][T17224]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2461.187179][T17224]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2461.187203][T17224]  __do_fast_syscall_32+0xb6/0x2b0
[ 2461.187221][T17224]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2461.187239][T17224]  do_fast_syscall_32+0x34/0x80
[ 2461.187257][T17224]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2461.187275][T17224] RIP: 0023:0xf70be539
[ 2461.187288][T17224] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2461.187302][T17224] RSP: 002b:00000000f54ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2461.187318][T17224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[ 2461.187329][T17224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2461.187338][T17224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2461.187347][T17224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2461.187356][T17224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2461.187379][T17224]  </TASK>
[ 2461.656503][T15923] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 2461.765248][ T3685] usb 5-1: USB disconnect, device number 95
[ 2461.819063][T15923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2461.931844][T15923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40
[ 2461.946243][T15923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2461.954657][T15923] usb 3-1: Product: syz
[ 2461.968048][T15923] usb 3-1: Manufacturer: syz
[ 2461.986026][T15923] usb 3-1: SerialNumber: syz
[ 2462.042521][T15923] cdc_subset 3-1:1.0: probe with driver cdc_subset failed with error -22
[ 2462.141691][T15923] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[ 2462.185014][T15923] cdc_ncm 3-1:1.0: bind() failure
[ 2462.279588][T15923] cdc_subset 3-1:1.1: probe with driver cdc_subset failed with error -22
[ 2462.336244][T17266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7737'.
[ 2462.365164][ T7261] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 2462.395285][T15923] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 2462.558527][ T7261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2462.580980][ T7261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2462.597052][T15923] cdc_ncm 3-1:1.1: bind() failure
[ 2462.664194][ T7261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2462.689242][ T7261] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[ 2462.714248][ T7261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2462.840912][ T7261] usb 2-1: config 0 descriptor??
[ 2463.433118][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 2463.433142][   T30] audit: type=1326 audit(1758420371.962:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701e558 code=0x7ffc0000
[ 2463.526688][   T30] audit: type=1326 audit(1758420372.052:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701e558 code=0x7ffc0000
[ 2463.568145][   T30] audit: type=1326 audit(1758420372.052:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701e558 code=0x7ffc0000
[ 2463.592552][   T30] audit: type=1326 audit(1758420372.082:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701e558 code=0x7ffc0000
[ 2463.638217][T17287] netlink: 'syz.0.7749': attribute type 3 has an invalid length.
[ 2463.799730][   T30] audit: type=1326 audit(1758420372.082:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2463.894659][   T30] audit: type=1326 audit(1758420372.082:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf701e558 code=0x7ffc0000
[ 2463.936979][ T7266] usb 3-1: USB disconnect, device number 94
[ 2464.012198][   T30] audit: type=1326 audit(1758420372.082:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17273 comm="syz.3.7748" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2466.513382][T17327] FAULT_INJECTION: forcing a failure.
[ 2466.513382][T17327] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2466.566575][T17327] CPU: 0 UID: 0 PID: 17327 Comm: syz.0.7753 Not tainted syzkaller #0 PREEMPT(full) 
[ 2466.566605][T17327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2466.566619][T17327] Call Trace:
[ 2466.566628][T17327]  <TASK>
[ 2466.566638][T17327]  dump_stack_lvl+0x189/0x250
[ 2466.566669][T17327]  ? __pfx____ratelimit+0x10/0x10
[ 2466.566691][T17327]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2466.566715][T17327]  ? __pfx__printk+0x10/0x10
[ 2466.566745][T17327]  ? __might_fault+0xb0/0x130
[ 2466.566787][T17327]  should_fail_ex+0x414/0x560
[ 2466.566822][T17327]  _copy_from_user+0x2d/0xb0
[ 2466.566851][T17327]  video_usercopy+0x354/0x14f0
[ 2466.566888][T17327]  ? __pfx___video_do_ioctl+0x10/0x10
[ 2466.566921][T17327]  ? __pfx_video_usercopy+0x10/0x10
[ 2466.566965][T17327]  ? __fget_files+0x2a/0x420
[ 2466.566987][T17327]  v4l2_ioctl+0x18d/0x1e0
[ 2466.567014][T17327]  v4l2_compat_ioctl32+0x1d4/0x260
[ 2466.567050][T17327]  __ia32_compat_sys_ioctl+0x540/0x840
[ 2466.567080][T17327]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2466.567107][T17327]  ? __fget_files+0x3a0/0x420
[ 2466.567129][T17327]  ? irqentry_exit+0x74/0x90
[ 2466.567149][T17327]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2466.567193][T17327]  __do_fast_syscall_32+0xb6/0x2b0
[ 2466.567221][T17327]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2466.567245][T17327]  do_fast_syscall_32+0x34/0x80
[ 2466.567268][T17327]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2466.567294][T17327] RIP: 0023:0xf7f85539
[ 2466.567312][T17327] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2466.567331][T17327] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2466.567352][T17327] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657
[ 2466.567366][T17327] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000
[ 2466.567379][T17327] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2466.567390][T17327] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2466.567402][T17327] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2466.567431][T17327]  </TASK>
[ 2466.788036][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2467.215662][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7754'.
[ 2467.737182][T17346] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.7758'.
[ 2468.320234][T17350] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2468.350510][T17349] tipc: Disabling bearer <eth:syzkaller0>
[ 2468.438764][ T7261] usbhid 2-1:0.0: can't add hid device: -32
[ 2468.446846][ T7261] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 2468.586846][T17359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2468.616097][T17359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2469.729992][T17380] netlink: 'syz.0.7765': attribute type 16 has an invalid length.
[ 2469.764022][T17380] netlink: 'syz.0.7765': attribute type 17 has an invalid length.
[ 2469.773662][T17380] lo: left allmulticast mode
[ 2469.820931][T17380] tunl0: left allmulticast mode
[ 2469.854851][T17380] gre0: left allmulticast mode
[ 2469.924659][T17380] gretap0: left allmulticast mode
[ 2469.949836][T17380] erspan0: left allmulticast mode
[ 2469.966891][T17380] ip_vti0: left allmulticast mode
[ 2469.987093][T17380] ip6_vti0: left allmulticast mode
[ 2470.044164][T17380] sit0: left allmulticast mode
[ 2470.063134][T17380] ip6tnl0: left allmulticast mode
[ 2470.072315][T17380] ip6gre0: left allmulticast mode
[ 2470.084203][T17380] syz_tun: left allmulticast mode
[ 2470.095906][T17380] ip6gretap0: left allmulticast mode
[ 2470.111587][T17380] vcan0: left allmulticast mode
[ 2470.118642][T17380] bond0: left allmulticast mode
[ 2470.124643][T17380] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2470.149066][T17380] 8021q: adding VLAN 0 to HW filter on device team0
[ 2470.178129][T17380] dummy0: left allmulticast mode
[ 2470.198718][T17380] nlmon0: left allmulticast mode
[ 2470.250980][T17380] caif0: left allmulticast mode
[ 2470.255951][T17380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2470.525632][T17401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7769'.
[ 2471.313913][T17420] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2471.415834][T17427] vivid-002: disconnect
[ 2471.421931][T17427] vivid-002: reconnect
[ 2472.684637][T15923] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 2472.866957][T15923] usb 1-1: Using ep0 maxpacket: 8
[ 2472.876711][T15923] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 2472.885523][T15923] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2472.944821][T15923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2472.993345][T15923] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2473.623940][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2473.635940][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2473.684567][T15923] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2473.760049][T15923] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2473.771150][T15923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2473.776794][ T7261] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 2473.998079][T15923] usb 1-1: usb_control_msg returned -32
[ 2474.004969][T15923] usbtmc 1-1:16.0: can't read capabilities
[ 2474.021572][ T7261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2474.146510][ T7261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2474.161014][ T7261] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2474.186168][ T7261] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2474.201203][ T7261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2474.223365][ T7261] usb 5-1: config 0 descriptor??
[ 2474.355862][T17428] usbtmc 1-1:16.0: stb usb_control_msg returned -32
[ 2474.363869][    C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2474.376606][T15923] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 2474.391516][T15933] usb 1-1: USB disconnect, device number 85
[ 2474.546789][T15923] usb 3-1: device descriptor read/64, error -71
[ 2474.856569][T15923] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 2475.078825][T15923] usb 3-1: device descriptor read/64, error -71
[ 2475.181990][ T7261] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2475.217183][T15923] usb usb3-port1: attempt power cycle
[ 2475.436467][ T3685] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 2475.657019][T15923] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 2475.686676][ T3685] usb 1-1: Using ep0 maxpacket: 32
[ 2475.692741][T15923] usb 3-1: device descriptor read/8, error -71
[ 2475.702183][ T3685] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2475.720474][ T3685] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2475.748019][ T3685] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2475.774530][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2475.822402][ T3685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2475.854644][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2475.904008][ T3685] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2475.921934][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2475.964111][T15923] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 2475.977929][ T3685] usb 1-1: config 0 descriptor??
[ 2476.007487][T15923] usb 3-1: device descriptor read/8, error -71
[ 2476.057488][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7783'.
[ 2476.136974][T15923] usb usb3-port1: unable to enumerate USB device
[ 2476.219840][ T3685] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2476.326807][ T3685] usb 1-1: USB disconnect, device number 86
[ 2476.401284][ T3685] usblp1: removed
[ 2476.579716][ T7261] usb 5-1: reset high-speed USB device number 96 using dummy_hcd
[ 2476.786805][ T3685] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 2476.956761][ T3685] usb 1-1: Using ep0 maxpacket: 32
[ 2476.984086][ T3685] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 2476.985924][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'.
[ 2476.996639][ T3685] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 2477.016686][T17522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7785'.
[ 2477.082506][ T3685] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 2477.136583][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2477.174230][ T3685] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2477.194324][T17532] libceph: resolve '0' (ret=-3): failed
[ 2477.206520][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 2477.237550][ T3685] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 2477.285263][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2477.303019][ T3685] usb 1-1: config 0 descriptor??
[ 2477.348737][T17540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2477.376842][T17540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2477.537660][T24623] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 2477.666501][T15933] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[ 2477.687667][T24623] usb 3-1: Using ep0 maxpacket: 16
[ 2477.695588][T24623] usb 3-1: config index 0 descriptor too short (expected 16456, got 72)
[ 2477.716100][T24623] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[ 2477.725484][T24623] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[ 2477.726648][ T3685] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 87 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 2477.753109][T24623] usb 3-1: config 0 has an invalid interface number: 125 but max is 1
[ 2477.761864][T24623] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2477.770957][T24623] usb 3-1: config 0 has no interface number 0
[ 2477.778624][T24623] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 2477.810871][T24623] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 2477.821003][T24623] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2477.833123][T24623] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2477.857995][T15933] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2477.866819][T15933] usb 4-1: not running at top speed; connect to a high speed hub
[ 2477.885246][T24623] usb 3-1: config 0 interface 125 has no altsetting 0
[ 2477.892318][T24623] usb 3-1: config 0 interface 125 has no altsetting 2
[ 2477.900201][T15933] usb 4-1: config 1 has an invalid interface number: 138 but max is 0
[ 2477.926113][T15933] usb 4-1: config 1 has no interface number 0
[ 2477.933943][T15933] usb 4-1: config 1 interface 138 has no altsetting 0
[ 2477.948168][ T7266] usb 5-1: USB disconnect, device number 96
[ 2477.954566][T24623] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 2477.992222][T24623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2478.003274][T24623] usb 3-1: Product: syz
[ 2478.008262][T24623] usb 3-1: Manufacturer: syz
[ 2478.013378][T15933] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[ 2478.026171][T15933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2478.034400][T24623] usb 3-1: SerialNumber: syz
[ 2478.041454][T15933] usb 4-1: Product: syz
[ 2478.045686][T15933] usb 4-1: Manufacturer: syz
[ 2478.051589][T24623] usb 3-1: config 0 descriptor??
[ 2478.057382][T15933] usb 4-1: SerialNumber: syz
[ 2478.070530][T24623] usb 3-1: selecting invalid altsetting 2
[ 2478.278478][   T30] audit: type=1326 audit(1758420386.812:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.302709][   T30] audit: type=1326 audit(1758420386.832:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.314890][T17553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7790'.
[ 2478.327848][   T30] audit: type=1326 audit(1758420386.862:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.355885][T17553] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7790'.
[ 2478.357456][   T30] audit: type=1326 audit(1758420386.862:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.398976][   T30] audit: type=1326 audit(1758420386.862:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.417125][T15933] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 2478.428648][   T30] audit: type=1326 audit(1758420386.862:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.465856][   T30] audit: type=1326 audit(1758420386.922:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.492618][   T30] audit: type=1326 audit(1758420386.922:3600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.575791][T15933] usb 4-1: USB disconnect, device number 64
[ 2478.635075][   T30] audit: type=1326 audit(1758420386.982:3601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.701284][   T30] audit: type=1326 audit(1758420386.982:3602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17536 comm="syz.2.7787" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85539 code=0x7ffc0000
[ 2478.823256][T17609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7794'.
[ 2478.924011][ T3685] hid_parser_main: 5 callbacks suppressed
[ 2478.924035][ T3685] hid-generic 00A0:0008:0003.004C: unknown main item tag 0x0
[ 2478.953698][ T3685] hid-generic 00A0:0008:0003.004C: unknown main item tag 0x3
[ 2478.963866][ T3685] hid-generic 00A0:0008:0003.004C: unknown main item tag 0x0
[ 2478.973313][ T3685] hid-generic 00A0:0008:0003.004C: unknown main item tag 0x0
[ 2478.981388][ T3685] hid-generic 00A0:0008:0003.004C: unknown main item tag 0x0
[ 2479.014511][ T3685] hid-generic 00A0:0008:0003.004C: collection stack underflow
[ 2479.023026][ T3685] hid-generic 00A0:0008:0003.004C: item 0 0 0 12 parsing failed
[ 2479.032326][ T3685] hid-generic 00A0:0008:0003.004C: probe with driver hid-generic failed with error -22
[ 2479.084886][ T3685] usb 1-1: USB disconnect, device number 87
[ 2479.113733][ T3685] usblp1: removed
[ 2479.198618][T24623] get_1284_register timeout
[ 2479.203420][    C1] usb 3-1: async_complete: urb error -104
[ 2479.209350][    C1] usb 3-1: async_complete: urb error -104
[ 2479.215294][    C1] usb 3-1: async_complete: urb error -104
[ 2479.263965][T24623] uss720 3-1:0.125: probe with driver uss720 failed with error -5
[ 2480.862543][T15906] usb 3-1: USB disconnect, device number 99
[ 2480.991590][T17653] FAULT_INJECTION: forcing a failure.
[ 2480.991590][T17653] name failslab, interval 1, probability 0, space 0, times 0
[ 2481.028407][T17653] CPU: 1 UID: 0 PID: 17653 Comm: syz.4.7798 Not tainted syzkaller #0 PREEMPT(full) 
[ 2481.028437][T17653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2481.028451][T17653] Call Trace:
[ 2481.028460][T17653]  <TASK>
[ 2481.028470][T17653]  dump_stack_lvl+0x189/0x250
[ 2481.028501][T17653]  ? __pfx____ratelimit+0x10/0x10
[ 2481.028523][T17653]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2481.028549][T17653]  ? __pfx__printk+0x10/0x10
[ 2481.028580][T17653]  ? __pfx___might_resched+0x10/0x10
[ 2481.028600][T17653]  ? fs_reclaim_acquire+0x7d/0x100
[ 2481.028632][T17653]  should_fail_ex+0x414/0x560
[ 2481.028670][T17653]  should_failslab+0xa8/0x100
[ 2481.028704][T17653]  __kmalloc_noprof+0xcb/0x4f0
[ 2481.028732][T17653]  ? tomoyo_encode+0x28b/0x550
[ 2481.028758][T17653]  tomoyo_encode+0x28b/0x550
[ 2481.028786][T17653]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 2481.028811][T17653]  ? tomoyo_domain+0xd9/0x130
[ 2481.028839][T17653]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2481.028868][T17653]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 2481.028901][T17653]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2481.028949][T17653]  ? __lock_acquire+0xab9/0xd20
[ 2481.028999][T17653]  ? __fget_files+0x2a/0x420
[ 2481.029021][T17653]  ? __fget_files+0x3a0/0x420
[ 2481.029036][T17653]  ? __fget_files+0x2a/0x420
[ 2481.029057][T17653]  security_file_ioctl_compat+0xcb/0x2d0
[ 2481.029090][T17653]  __ia32_compat_sys_ioctl+0x128/0x840
[ 2481.029120][T17653]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2481.029148][T17653]  ? __fget_files+0x3a0/0x420
[ 2481.029175][T17653]  ? fput+0xa0/0xd0
[ 2481.029197][T17653]  ? ksys_write+0x22a/0x250
[ 2481.029236][T17653]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2481.029262][T17653]  __do_fast_syscall_32+0xb6/0x2b0
[ 2481.029287][T17653]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2481.029313][T17653]  do_fast_syscall_32+0x34/0x80
[ 2481.029337][T17653]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2481.029363][T17653] RIP: 0023:0xf7f77539
[ 2481.029386][T17653] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2481.029405][T17653] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2481.029427][T17653] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008919
[ 2481.029442][T17653] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 2481.029455][T17653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2481.029468][T17653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2481.029480][T17653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2481.029512][T17653]  </TASK>
[ 2481.295189][T17653] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2481.952993][T17685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2481.973225][T17685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2482.991690][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7809'.
[ 2484.518269][T15923] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 2484.671553][T17728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2484.795992][T17727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2484.887124][T15923] usb 1-1: Using ep0 maxpacket: 8
[ 2484.898175][T15923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2484.950623][T15923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2485.003021][T15923] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[ 2485.053884][T15923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2485.248917][T15923] usb 1-1: config 0 descriptor??
[ 2485.700425][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: unknown main item tag 0x0
[ 2485.726404][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: unknown main item tag 0x0
[ 2485.755129][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: unknown main item tag 0x0
[ 2485.786408][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: unknown main item tag 0x0
[ 2485.835468][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: unknown main item tag 0x0
[ 2485.892867][T15923] aquacomputer_d5next 0003:0C70:F00A.004D: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.0-1/input0
[ 2486.069165][T15923] usb 1-1: USB disconnect, device number 88
[ 2486.143619][T17738] fido_id[17738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[ 2486.515658][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7822'.
[ 2486.579690][T17773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7823'.
[ 2486.643991][T17776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7822'.
[ 2486.966621][T24623] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 2486.983432][T15933] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 2487.116819][T24623] usb 3-1: Using ep0 maxpacket: 16
[ 2487.126967][T24623] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 2487.141422][T24623] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2487.267432][T15933] usb 1-1: config 0 has no interfaces?
[ 2487.273117][T15933] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2487.286418][T15933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2487.295039][T24623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2487.305972][T24623] usb 3-1: Product: syz
[ 2487.316619][T15933] usb 1-1: config 0 descriptor??
[ 2487.321767][T24623] usb 3-1: Manufacturer: syz
[ 2487.346596][T24623] usb 3-1: SerialNumber: syz
[ 2487.372562][T24623] usb 3-1: config 0 descriptor??
[ 2487.390666][T24623] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2487.407132][T24623] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 2487.542171][T17788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2487.646860][T17788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2487.673821][T15906] usb 1-1: USB disconnect, device number 89
[ 2488.272753][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2488.284690][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2488.316866][T15923] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 2488.352607][T24623] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 2488.369647][T17780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2488.413854][T17780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2488.426574][T15906] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 2488.575059][T15923] usb 4-1: Using ep0 maxpacket: 32
[ 2488.674553][T15906] usb 1-1: Using ep0 maxpacket: 16
[ 2488.687948][T15906] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2488.698908][T15906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2488.709475][T15923] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 2488.717806][T15923] usb 4-1: config 0 has no interface number 0
[ 2488.728911][T15923] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2488.738381][T15923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2488.747175][T15923] usb 4-1: Product: syz
[ 2488.751864][T15923] usb 4-1: Manufacturer: syz
[ 2488.758073][T15923] usb 4-1: SerialNumber: syz
[ 2488.763914][T15906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 2488.781561][T15906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2488.796680][T15906] usb 1-1: Product: syz
[ 2488.806399][T15906] usb 1-1: Manufacturer: syz
[ 2488.815628][T15923] usb 4-1: config 0 descriptor??
[ 2488.821674][T15906] usb 1-1: SerialNumber: syz
[ 2488.835986][T15923] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2489.234122][T15923] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2489.305884][T15923] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2489.361669][T24623] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2489.385860][T24623] em28xx 3-1:0.0: board has no eeprom
[ 2489.450567][T15906] usb 1-1: 0:2 : does not exist
[ 2489.504146][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 11
[ 2489.702873][T15906] usb 1-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 2489.718967][T15906] usb 1-1: Warning! Unlikely big volume range (=58653), cval->res is probably wrong.
[ 2489.752401][T15906] usb 1-1: [5] FU [Delay Control] ch = 1, val = 0/58653/1
[ 2489.766919][T24623] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 2489.801772][T24623] em28xx 3-1:0.0: dvb set to bulk mode.
[ 2489.835273][T15933] em28xx 3-1:0.0: Binding DVB extension
[ 2489.843775][T15906] usb 1-1: USB disconnect, device number 90
[ 2489.887439][T24623] usb 3-1: USB disconnect, device number 100
[ 2489.966080][T24623] em28xx 3-1:0.0: Disconnecting em28xx
[ 2490.018657][T15301] udevd[15301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2490.315130][T15933] em28xx 3-1:0.0: Registering input extension
[ 2490.381576][T24623] em28xx 3-1:0.0: Closing input extension
[ 2490.502409][T24623] em28xx 3-1:0.0: Freeing device
[ 2490.631256][T17905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7834'.
[ 2490.692783][T17905] FAULT_INJECTION: forcing a failure.
[ 2490.692783][T17905] name failslab, interval 1, probability 0, space 0, times 0
[ 2490.769640][T17905] CPU: 1 UID: 0 PID: 17905 Comm: syz.4.7834 Not tainted syzkaller #0 PREEMPT(full) 
[ 2490.769671][T17905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2490.769685][T17905] Call Trace:
[ 2490.769694][T17905]  <TASK>
[ 2490.769703][T17905]  dump_stack_lvl+0x189/0x250
[ 2490.769734][T17905]  ? __pfx____ratelimit+0x10/0x10
[ 2490.769764][T17905]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2490.769791][T17905]  ? __pfx__printk+0x10/0x10
[ 2490.769826][T17905]  ? __pfx___might_resched+0x10/0x10
[ 2490.769846][T17905]  ? fs_reclaim_acquire+0x7d/0x100
[ 2490.769870][T17905]  should_fail_ex+0x414/0x560
[ 2490.769907][T17905]  should_failslab+0xa8/0x100
[ 2490.769941][T17905]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 2490.769971][T17905]  ? __pfx_nf_tables_abort+0x10/0x10
[ 2490.769995][T17905]  ? __alloc_skb+0x112/0x2d0
[ 2490.770023][T17905]  __alloc_skb+0x112/0x2d0
[ 2490.770051][T17905]  netlink_ack+0x146/0xa50
[ 2490.770097][T17905]  nfnetlink_rcv+0x2290/0x2520
[ 2490.770163][T17905]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2490.770247][T17905]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2490.770289][T17905]  netlink_unicast+0x82c/0x9e0
[ 2490.770329][T17905]  ? __pfx_netlink_unicast+0x10/0x10
[ 2490.770364][T17905]  ? netlink_sendmsg+0x642/0xb30
[ 2490.770385][T17905]  ? skb_put+0x11b/0x210
[ 2490.770411][T17905]  netlink_sendmsg+0x805/0xb30
[ 2490.770443][T17905]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2490.770467][T17905]  ? __import_iovec+0x5d4/0x7f0
[ 2490.770493][T17905]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 2490.770517][T17905]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2490.770541][T17905]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2490.770564][T17905]  __sock_sendmsg+0x21c/0x270
[ 2490.770597][T17905]  ____sys_sendmsg+0x505/0x830
[ 2490.770631][T17905]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2490.770677][T17905]  ___sys_sendmsg+0x21f/0x2a0
[ 2490.770706][T17905]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2490.770780][T17905]  ? __fget_files+0x2a/0x420
[ 2490.770799][T17905]  ? __fget_files+0x3a0/0x420
[ 2490.770829][T17905]  __sys_sendmsg+0x164/0x220
[ 2490.770858][T17905]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2490.770902][T17905]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2490.770929][T17905]  __do_fast_syscall_32+0xb6/0x2b0
[ 2490.770954][T17905]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2490.770980][T17905]  do_fast_syscall_32+0x34/0x80
[ 2490.771003][T17905]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2490.771029][T17905] RIP: 0023:0xf7f77539
[ 2490.771049][T17905] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2490.771068][T17905] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2490.771089][T17905] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[ 2490.771103][T17905] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2490.771116][T17905] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2490.771128][T17905] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2490.771140][T17905] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2490.771170][T17905]  </TASK>
[ 2491.077551][T15933] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 2491.408592][T15933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2491.418758][T15933] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[ 2491.452662][T15933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2491.605292][T15933] usb 1-1: config 0 descriptor??
[ 2491.848427][T15906] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2492.051644][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2492.059881][T15923] usb 4-1: USB disconnect, device number 65
[ 2492.075999][T15923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2492.077532][T15933] lenovo 0003:17EF:6047.004E: item fetching failed at offset 2/5
[ 2492.099853][T15906] usb 5-1: Using ep0 maxpacket: 8
[ 2492.115388][T15906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2492.147184][T15923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2492.168066][T15906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2492.173652][T15933] lenovo 0003:17EF:6047.004E: hid_parse failed
[ 2492.192414][T15906] usb 5-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[ 2492.235876][T15923] quatech2 4-1:0.51: device disconnected
[ 2492.261600][T15906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2492.296941][T15933] lenovo 0003:17EF:6047.004E: probe with driver lenovo failed with error -22
[ 2492.304365][T15906] usb 5-1: config 0 descriptor??
[ 2492.348686][T15933] usb 1-1: USB disconnect, device number 91
[ 2492.618838][T17935] could not allocate digest TFM handle sha512-ssse3
[ 2492.741113][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: unknown main item tag 0x0
[ 2492.758877][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: unknown main item tag 0x0
[ 2492.876407][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: unknown main item tag 0x0
[ 2492.894449][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: unknown main item tag 0x0
[ 2492.937495][T17908] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2493.022518][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: unknown main item tag 0x0
[ 2493.136835][T15906] aquacomputer_d5next 0003:0C70:F00A.004F: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.4-1/input0
[ 2493.196889][T15933] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 2493.347015][T15933] usb 4-1: Using ep0 maxpacket: 8
[ 2493.369890][T15933] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 2493.389127][T15933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2493.449815][T15933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2493.483601][T15933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2493.519244][T15933] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2493.564410][T15933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2493.589239][T15933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2493.809562][T15933] usb 4-1: usb_control_msg returned -32
[ 2493.819653][T15933] usbtmc 4-1:16.0: can't read capabilities
[ 2493.864914][T17991] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (16)
[ 2493.887368][T17992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2493.937331][T17992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2493.956419][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 2494.198621][T17958] usbtmc 4-1:16.0: stb usb_control_msg returned -32
[ 2494.219389][T15933] usb 4-1: USB disconnect, device number 66
[ 2494.256559][T15906] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 2494.356459][T15923] usb 5-1: reset high-speed USB device number 97 using dummy_hcd
[ 2494.405063][T18010] input: syz0 as /devices/virtual/input/input104
[ 2494.414353][T15906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2494.473186][T15906] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2494.563853][T15906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2494.640973][T15906] usb 3-1: config 0 descriptor??
[ 2494.953574][T15906] usbhid 3-1:0.0: can't add hid device: -71
[ 2494.967557][T15906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2494.978194][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7848'.
[ 2495.026099][T15906] usb 3-1: USB disconnect, device number 101
[ 2495.486559][T15906] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 2495.520571][T28800] usb 5-1: USB disconnect, device number 97
[ 2497.473625][T18023] hsr_slave_1 (unregistering): left promiscuous mode
[ 2497.575301][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.605964][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.628447][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.642226][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.653127][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.671264][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.797080][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2497.839460][T18080] input: syz1 as /devices/virtual/input/input105
[ 2497.915119][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2498.043351][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2498.079370][T18056] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[ 2498.099541][T18088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2498.115901][T18088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2498.543511][   T30] kauditd_printk_skb: 63 callbacks suppressed
[ 2498.543531][   T30] audit: type=1326 audit(1758420407.072:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18107 comm="syz.2.7857" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f85539 code=0x0
[ 2498.588182][T28800] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2498.756576][T28800] usb 5-1: Using ep0 maxpacket: 16
[ 2498.763718][T28800] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2498.774843][T28800] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2498.790470][T28800] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2498.800637][T28800] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2498.826458][T28800] usb 5-1: Product: syz
[ 2498.836680][T28800] usb 5-1: Manufacturer: syz
[ 2498.843282][T28800] usb 5-1: SerialNumber: syz
[ 2499.096117][T28800] usb 5-1: 0:2 : does not exist
[ 2499.113472][T28800] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 2499.160766][T28800] usb 5-1: USB disconnect, device number 98
[ 2499.322549][T15299] udevd[15299]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2499.821918][T18147] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7860'.
[ 2499.836665][T28800] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2499.856701][T18147] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7860'.
[ 2500.056649][T28800] usb 3-1: Using ep0 maxpacket: 8
[ 2500.071001][T28800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2500.125374][T28800] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2500.175857][T28800] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[ 2500.202485][T28800] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2500.257914][T28800] usb 3-1: config 0 descriptor??
[ 2500.315127][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'.
[ 2500.367451][T18149] netlink: 38 bytes leftover after parsing attributes in process `syz.1.7869'.
[ 2500.460987][T18153] syzkaller1: entered promiscuous mode
[ 2500.466856][T18153] syzkaller1: entered allmulticast mode
[ 2500.586809][T15933] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 2500.728353][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x0
[ 2500.760676][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x0
[ 2500.776749][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x0
[ 2500.777168][T15933] usb 1-1: Using ep0 maxpacket: 16
[ 2500.786549][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x0
[ 2500.809390][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: unknown main item tag 0x0
[ 2500.820359][T15933] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[ 2500.850473][T15933] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 2500.853460][T28800] aquacomputer_d5next 0003:0C70:F00A.0050: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.2-1/input0
[ 2500.892605][T15933] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 2500.915109][T15933] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[ 2500.927617][T15933] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 2500.945527][T15933] usb 1-1: config 0 has no interface number 0
[ 2500.960751][T15933] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 2500.988208][T15933] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 2501.042719][T15933] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2501.063036][T15933] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2501.086779][T15933] usb 1-1: too many endpoints for config 0 interface 125 altsetting 49: 56, using maximum allowed: 30
[ 2501.107155][T15933] usb 1-1: config 0 interface 125 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 56
[ 2501.144100][T15933] usb 1-1: config 0 interface 125 has no altsetting 0
[ 2501.161803][T15933] usb 1-1: config 0 interface 125 has no altsetting 2
[ 2501.172698][T15933] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 2501.187661][T15933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2501.206121][T15933] usb 1-1: Product: syz
[ 2501.210852][T15933] usb 1-1: Manufacturer: syz
[ 2501.215640][T15933] usb 1-1: SerialNumber: syz
[ 2501.231298][T15933] usb 1-1: config 0 descriptor??
[ 2501.254013][T15933] usb 1-1: selecting invalid altsetting 2
[ 2501.980989][T18195] FAULT_INJECTION: forcing a failure.
[ 2501.980989][T18195] name failslab, interval 1, probability 0, space 0, times 0
[ 2502.035653][T18195] CPU: 1 UID: 0 PID: 18195 Comm: syz.3.7867 Not tainted syzkaller #0 PREEMPT(full) 
[ 2502.035685][T18195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2502.035699][T18195] Call Trace:
[ 2502.035711][T18195]  <TASK>
[ 2502.035721][T18195]  dump_stack_lvl+0x189/0x250
[ 2502.035752][T18195]  ? __pfx____ratelimit+0x10/0x10
[ 2502.035776][T18195]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2502.035801][T18195]  ? __pfx__printk+0x10/0x10
[ 2502.035837][T18195]  ? __pfx___might_resched+0x10/0x10
[ 2502.035856][T18195]  ? fs_reclaim_acquire+0x7d/0x100
[ 2502.035883][T18195]  should_fail_ex+0x414/0x560
[ 2502.035921][T18195]  should_failslab+0xa8/0x100
[ 2502.035953][T18195]  __kmalloc_noprof+0xcb/0x4f0
[ 2502.035981][T18195]  ? kfree+0x4d/0x440
[ 2502.036004][T18195]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 2502.036046][T18195]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 2502.036092][T18195]  ? tomoyo_domain+0xd9/0x130
[ 2502.036121][T18195]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2502.036152][T18195]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 2502.036186][T18195]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2502.036237][T18195]  ? __lock_acquire+0xab9/0xd20
[ 2502.036290][T18195]  ? __fget_files+0x2a/0x420
[ 2502.036315][T18195]  ? __fget_files+0x3a0/0x420
[ 2502.036331][T18195]  ? __fget_files+0x2a/0x420
[ 2502.036353][T18195]  security_file_ioctl_compat+0xcb/0x2d0
[ 2502.036385][T18195]  __ia32_compat_sys_ioctl+0x128/0x840
[ 2502.036414][T18195]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 2502.036442][T18195]  ? __fget_files+0x3a0/0x420
[ 2502.036467][T18195]  ? fput+0xa0/0xd0
[ 2502.036490][T18195]  ? ksys_write+0x22a/0x250
[ 2502.036528][T18195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2502.036585][T18195]  __do_fast_syscall_32+0xb6/0x2b0
[ 2502.036611][T18195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2502.036637][T18195]  do_fast_syscall_32+0x34/0x80
[ 2502.036661][T18195]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2502.036687][T18195] RIP: 0023:0xf701e539
[ 2502.036705][T18195] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2502.036724][T18195] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2502.036747][T18195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005441
[ 2502.036761][T18195] RDX: 0000000000000b3d RSI: 0000000000000000 RDI: 0000000000000000
[ 2502.036773][T18195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2502.036784][T18195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2502.036796][T18195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2502.036827][T18195]  </TASK>
[ 2502.126767][T28800] usb 3-1: reset high-speed USB device number 103 using dummy_hcd
[ 2502.312453][T18195] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2502.319573][T15933] get_1284_register timeout
[ 2502.324208][T15933] uss720 1-1:0.125: probe with driver uss720 failed with error -5
[ 2502.332357][    C1] usb 1-1: async_complete: urb error -104
[ 2502.332519][    C1] usb 1-1: async_complete: urb error -104
[ 2502.332668][    C1] usb 1-1: async_complete: urb error -104
[ 2502.332808][    C1] usb 1-1: async_complete: urb error -104
[ 2502.437975][T18200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7868'.
[ 2502.554609][T18203] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7868'.
[ 2503.003270][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7871'.
[ 2503.015648][ T7266] usb 1-1: USB disconnect, device number 92
[ 2503.376152][T18227] vivid-000: =================  START STATUS  =================
[ 2503.388130][T18227] vivid-000: Test Pattern: 75% Colorbar
[ 2503.395862][T18227] vivid-000: Fill Percentage of Frame: 100
[ 2503.402395][T18227] vivid-000: Horizontal Movement: No Movement
[ 2503.436489][T18227] vivid-000: Vertical Movement: No Movement
[ 2503.442482][T18227] vivid-000: OSD Text Mode: All
[ 2503.563793][T18227] vivid-000: Show Border: false
[ 2503.579248][T18227] vivid-000: Show Square: true
[ 2503.588987][T18227] vivid-000: Sensor Flipped Horizontally: false
[ 2503.595381][T18227] vivid-000: Sensor Flipped Vertically: false
[ 2503.604561][T18227] vivid-000: Insert SAV Code in Image: false
[ 2503.611419][T18227] vivid-000: Insert EAV Code in Image: false
[ 2503.618074][T18227] vivid-000: Insert Video Guard Band: false
[ 2503.624355][T18227] vivid-000: Reduced Framerate: false
[ 2503.630157][T18227] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[ 2503.660618][T18227] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[ 2503.677961][T18227] vivid-000: Enable Capture Cropping: true grabbed
[ 2503.697700][T15906] usb 3-1: USB disconnect, device number 103
[ 2503.703939][T18227] vivid-000: Enable Capture Composing: true grabbed
[ 2503.711062][T18227] vivid-000: Enable Capture Scaler: true grabbed
[ 2503.719266][T18227] vivid-000: Timestamp Source: End of Frame
[ 2503.725749][T18227] vivid-000: Colorspace: Rec. 709
[ 2503.731466][T18227] vivid-000: Transfer Function: None
[ 2503.737338][T18227] vivid-000: Y'CbCr Encoding: Default
[ 2503.743344][T18227] vivid-000: HSV Encoding: Hue 0-179
[ 2503.749212][T18227] vivid-000: Quantization: Default
[ 2503.755027][T18227] vivid-000: Apply Alpha To Red Only: false
[ 2503.761501][T18227] vivid-000: Standard Aspect Ratio: 4x3
[ 2503.768091][T18227] vivid-000: DV Timings Signal Mode: Current DV Timings
[ 2503.775578][T18227] vivid-000: DV Timings: 640x480p59 inactive
[ 2503.782606][T18227] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 2503.790991][T18227] vivid-000: Maximum EDID Blocks: 2
[ 2503.796486][T18227] vivid-000: Limited RGB Range (16-235): true
[ 2503.802856][T18227] vivid-000: Rx RGB Quantization Range: Automatic
[ 2503.809477][T18227] vivid-000: Power Present: 0x00000001
[ 2503.815018][T18227] tpg source WxH: 1280x720 (R'G'B)
[ 2503.821261][T18227] tpg field: 1
[ 2503.824802][T18227] tpg crop: (0,0)/64x64
[ 2503.829187][T18227] tpg compose: (0,0)/16x16
[ 2503.833688][T18227] tpg colorspace: 3
[ 2503.837631][T18227] tpg transfer function: 5/5
[ 2503.842297][T18227] tpg quantization: 0/1
[ 2503.846607][T18227] tpg RGB range: 0/1
[ 2503.850584][T18227] vivid-000: ==================  END STATUS  ==================
[ 2505.626607][   T30] audit: type=1326 audit(1758420414.142:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18260 comm="syz.3.7876" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0
[ 2505.670964][T18267] binder: BINDER_SET_CONTEXT_MGR already set
[ 2505.677287][T18267] binder: 18266:18267 ioctl 4018620d 80000100 returned -16
[ 2505.687379][T18267] binder: BINDER_SET_CONTEXT_MGR already set
[ 2505.696272][T18267] binder: 18266:18267 ioctl 4018620d 800002c0 returned -16
[ 2505.751821][T18269] netlink: 'syz.3.7878': attribute type 10 has an invalid length.
[ 2505.834323][T18269] 8021q: adding VLAN 0 to HW filter on device team0
[ 2505.841669][T18270] netlink: 'syz.3.7878': attribute type 10 has an invalid length.
[ 2505.888352][   T30] audit: type=1326 audit(1758420414.422:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2505.925330][T18269] bond0: (slave team0): Enslaving as an active interface with an up link
[ 2505.961051][T18270] bond0: (slave team0): Releasing backup interface
[ 2505.992799][T18270] bridge0: port 3(team0) entered blocking state
[ 2506.077955][T18270] bridge0: port 3(team0) entered disabled state
[ 2506.130848][T18270] team0: entered allmulticast mode
[ 2506.139159][   T30] audit: type=1326 audit(1758420414.452:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.177637][T18270] team_slave_0: entered allmulticast mode
[ 2506.206735][T18270] team_slave_1: entered allmulticast mode
[ 2506.231129][   T30] audit: type=1326 audit(1758420414.452:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.260604][T18270] team0: entered promiscuous mode
[ 2506.266247][T18270] team_slave_0: entered promiscuous mode
[ 2506.273175][   T30] audit: type=1326 audit(1758420414.452:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.299911][T18270] team_slave_1: entered promiscuous mode
[ 2506.307822][   T30] audit: type=1326 audit(1758420414.452:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.345414][   T30] audit: type=1326 audit(1758420414.452:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.446859][   T30] audit: type=1326 audit(1758420414.452:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.542797][   T30] audit: type=1326 audit(1758420414.452:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.617130][   T30] audit: type=1326 audit(1758420414.452:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18268 comm="syz.3.7878" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701e539 code=0x7ffc0000
[ 2506.694521][T18289] FAULT_INJECTION: forcing a failure.
[ 2506.694521][T18289] name failslab, interval 1, probability 0, space 0, times 0
[ 2506.726956][T15933] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[ 2506.732100][T18289] CPU: 0 UID: 0 PID: 18289 Comm: syz.3.7882 Not tainted syzkaller #0 PREEMPT(full) 
[ 2506.732135][T18289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2506.732152][T18289] Call Trace:
[ 2506.732162][T18289]  <TASK>
[ 2506.732173][T18289]  dump_stack_lvl+0x189/0x250
[ 2506.732208][T18289]  ? __pfx____ratelimit+0x10/0x10
[ 2506.732233][T18289]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2506.732262][T18289]  ? __pfx__printk+0x10/0x10
[ 2506.732302][T18289]  ? __pfx___might_resched+0x10/0x10
[ 2506.732323][T18289]  ? fs_reclaim_acquire+0x7d/0x100
[ 2506.732351][T18289]  should_fail_ex+0x414/0x560
[ 2506.732392][T18289]  should_failslab+0xa8/0x100
[ 2506.732428][T18289]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2506.732459][T18289]  ? nf_tables_newchain+0xfeb/0x2900
[ 2506.732496][T18289]  nf_tables_newchain+0xfeb/0x2900
[ 2506.732544][T18289]  ? __pfx_nf_tables_newchain+0x10/0x10
[ 2506.732613][T18289]  ? nfnl_pernet+0x23/0x240
[ 2506.732660][T18289]  ? __nla_parse+0x40/0x60
[ 2506.732700][T18289]  nfnetlink_rcv+0x1132/0x2520
[ 2506.732777][T18289]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2506.732833][T18289]  ? ref_tracker_free+0x63a/0x7d0
[ 2506.732891][T18289]  ? __netlink_deliver_tap+0x807/0x850
[ 2506.732917][T18289]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2506.732963][T18289]  netlink_unicast+0x82c/0x9e0
[ 2506.733011][T18289]  ? __pfx_netlink_unicast+0x10/0x10
[ 2506.733049][T18289]  ? netlink_sendmsg+0x642/0xb30
[ 2506.733071][T18289]  ? skb_put+0x11b/0x210
[ 2506.733103][T18289]  netlink_sendmsg+0x805/0xb30
[ 2506.733141][T18289]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2506.733170][T18289]  ? __import_iovec+0x5d4/0x7f0
[ 2506.733199][T18289]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 2506.733226][T18289]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 2506.733251][T18289]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2506.733278][T18289]  __sock_sendmsg+0x21c/0x270
[ 2506.733317][T18289]  ____sys_sendmsg+0x505/0x830
[ 2506.733354][T18289]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2506.733405][T18289]  ___sys_sendmsg+0x21f/0x2a0
[ 2506.733435][T18289]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2506.733510][T18289]  ? __fget_files+0x2a/0x420
[ 2506.733530][T18289]  ? __fget_files+0x3a0/0x420
[ 2506.733564][T18289]  __sys_sendmsg+0x164/0x220
[ 2506.733594][T18289]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2506.733641][T18289]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2506.733676][T18289]  __do_fast_syscall_32+0xb6/0x2b0
[ 2506.733705][T18289]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2506.733735][T18289]  do_fast_syscall_32+0x34/0x80
[ 2506.733762][T18289]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2506.733791][T18289] RIP: 0023:0xf701e539
[ 2506.733813][T18289] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2506.733833][T18289] RSP: 002b:00000000f540e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2506.733858][T18289] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000008000c2c0
[ 2506.733875][T18289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2506.733888][T18289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2506.733903][T18289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2506.733917][T18289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2506.733951][T18289]  </TASK>
[ 2507.103497][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7884'.
[ 2507.326628][T15933] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2507.716408][T15933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2507.781489][T15933] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2507.811682][T15933] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2508.089323][T15933] usb 1-1: Manufacturer: syz
[ 2508.138281][T15933] usb 1-1: config 0 descriptor??
[ 2508.341110][T15933] rc_core: IR keymap rc-hauppauge not found
[ 2508.356443][T15933] Registered IR keymap rc-empty
[ 2508.402979][T15933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 2508.444009][T15933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input106
[ 2508.563094][    C1] igorplugusb 1-1:0.0: Error: urb status = -32
[ 2508.662660][T15933] usb 1-1: USB disconnect, device number 93
[ 2509.085818][T18333] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7888'.
[ 2509.694386][T18354] loop8: detected capacity change from 0 to 8
[ 2509.819225][T18354] Dev loop8: unable to read RDB block 8
[ 2509.827863][T18356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7893'.
[ 2509.871984][T18354]  loop8: unable to read partition table
[ 2509.897150][T18354] loop8: partition table beyond EOD, truncated
[ 2509.914206][T18361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7893'.
[ 2509.946990][T18354] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[ 2510.307355][T18372] vivid-000: =================  START STATUS  =================
[ 2510.582983][T18372] vivid-000: Test Pattern: 75% Colorbar
[ 2510.589375][T18372] vivid-000: Fill Percentage of Frame: 100
[ 2510.595576][T18372] vivid-000: Horizontal Movement: No Movement
[ 2510.623842][T18372] vivid-000: Vertical Movement: No Movement
[ 2510.669993][T18372] vivid-000: OSD Text Mode: All
[ 2510.716698][T18372] vivid-000: Show Border: false
[ 2510.766807][ T7266] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2510.772634][T18372] vivid-000: Show Square: true
[ 2510.772927][T18372] vivid-000: Sensor Flipped Horizontally: false
[ 2510.773358][T18372] vivid-000: Sensor Flipped Vertically: false
[ 2510.776935][T18372] vivid-000: Insert SAV Code in Image: false
[ 2510.777225][T18372] vivid-000: Insert EAV Code in Image: false
[ 2510.777329][T18372] vivid-000: Insert Video Guard Band: false
[ 2510.777488][T18372] vivid-000: Reduced Framerate: false
[ 2510.777549][T18372] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[ 2510.777632][T18372] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[ 2510.783248][T18372] vivid-000: Enable Capture Cropping: true grabbed
[ 2510.783321][T18372] vivid-000: Enable Capture Composing: true grabbed
[ 2510.783354][T18372] vivid-000: Enable Capture Scaler: true grabbed
[ 2510.783395][T18372] vivid-000: Timestamp Source: End of Frame
[ 2510.783489][T18372] vivid-000: Colorspace: Rec. 709
[ 2510.783517][T18372] vivid-000: Transfer Function: None
[ 2510.783710][T18372] vivid-000: Y'CbCr Encoding: Default
[ 2510.783788][T18372] vivid-000: HSV Encoding: Hue 0-179
[ 2510.784101][T18372] vivid-000: Quantization: Default
[ 2510.784187][T18372] vivid-000: Apply Alpha To Red Only: false
[ 2510.784246][T18372] vivid-000: Standard Aspect Ratio: 4x3
[ 2510.784352][T18372] vivid-000: DV Timings Signal Mode: Current DV Timings
[ 2510.784421][T18372] vivid-000: DV Timings: 640x480p59 inactive
[ 2510.784596][T18372] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 2510.784691][T18372] vivid-000: Maximum EDID Blocks: 2
[ 2510.784889][T18372] vivid-000: Limited RGB Range (16-235): true
[ 2510.785122][T18372] vivid-000: Rx RGB Quantization Range: Automatic
[ 2510.785247][T18372] vivid-000: Power Present: 0x00000001
[ 2510.785367][T18372] tpg source WxH: 1280x720 (R'G'B)
[ 2510.785384][T18372] tpg field: 1
[ 2510.785394][T18372] tpg crop: (0,0)/64x64
[ 2510.785537][T18372] tpg compose: (0,0)/16x16
[ 2510.785668][T18372] tpg colorspace: 3
[ 2510.785680][T18372] tpg transfer function: 5/5
[ 2510.785764][T18372] tpg quantization: 0/1
[ 2510.785807][T18372] tpg RGB range: 0/1
[ 2510.785821][T18372] vivid-000: ==================  END STATUS  ==================
[ 2510.999878][ T7266] usb 5-1: Using ep0 maxpacket: 32
[ 2511.008730][ T7266] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2511.010082][ T7266] usb 5-1: config 6 has an invalid interface number: 3 but max is 2
[ 2511.010113][ T7266] usb 5-1: config 6 has an invalid interface number: 255 but max is 2
[ 2511.010136][ T7266] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[ 2511.010157][ T7266] usb 5-1: config 6 has no interface number 0
[ 2511.010175][ T7266] usb 5-1: config 6 has no interface number 1
[ 2511.010226][ T7266] usb 5-1: too many endpoints for config 6 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 2511.010265][ T7266] usb 5-1: config 6 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 2511.010296][ T7266] usb 5-1: config 6 interface 2 has no altsetting 0
[ 2511.010325][ T7266] usb 5-1: config 6 interface 255 has no altsetting 0
[ 2511.021998][ T7266] usb 5-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=ec.5b
[ 2511.022024][ T7266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2511.022040][ T7266] usb 5-1: Product: syz
[ 2511.022052][ T7266] usb 5-1: Manufacturer: syz
[ 2511.022063][ T7266] usb 5-1: SerialNumber: syz
[ 2511.369083][ T7266] usb 5-1: selecting invalid altsetting 0
[ 2511.404985][ T7266] usb 5-1: Could not set interface, error -22
[ 2511.563397][T15906] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 2511.580914][ T7266] usb 5-1: USB disconnect, device number 99
[ 2511.712604][T15906] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2511.712633][T15906] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2511.712663][T15906] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2511.712681][T15906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2511.717239][T18385] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 2511.722861][T15906] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 2511.929852][T18385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2511.931819][T18385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2512.802168][T18435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7898'.
[ 2513.146759][T28800] usb 5-1: new full-speed USB device number 100 using dummy_hcd
[ 2513.341176][T28800] usb 5-1: config 0 has an invalid interface number: 218 but max is 0
[ 2513.341206][T28800] usb 5-1: config 0 has no interface number 0
[ 2513.341231][T28800] usb 5-1: config 0 interface 218 has no altsetting 0
[ 2513.341260][T28800] usb 5-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=b6.d6
[ 2513.341278][T28800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2513.343979][T28800] usb 5-1: config 0 descriptor??
[ 2513.773935][T28800] usb 5-1: string descriptor 0 read error: -71
[ 2513.792047][ T7266] usb 1-1: USB disconnect, device number 94
[ 2513.792335][T28800] usb 5-1: USB disconnect, device number 100
[ 2514.164532][T18474] syz_tun: entered allmulticast mode
[ 2514.222727][T18474] syz_tun: left allmulticast mode
[ 2514.398961][T18384] tty tty25: ldisc open failed (-12), clearing slot 24
[ 2515.612431][   T30] kauditd_printk_skb: 38 callbacks suppressed
[ 2515.612449][   T30] audit: type=1800 audit(1758420424.132:3715): pid=18496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7908" name="/" dev="fuse" ino=5 res=0 errno=0
[ 2515.816577][T28800] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 2515.969204][T28800] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2515.980037][T28800] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2516.162297][T28800] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2516.207227][T28800] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2516.227570][T28800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2516.495358][T28800] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 2516.506836][T15906] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 2516.627633][T28800] usb 1-1: invalid MIDI out EP 0
[ 2516.708833][T15906] usb 3-1: config 0 has no interfaces?
[ 2516.728957][T15906] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 2516.748008][T15906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2516.781098][T15906] usb 3-1: Product: syz
[ 2516.789022][T15906] usb 3-1: Manufacturer: syz
[ 2516.798164][T15906] usb 3-1: SerialNumber: syz
[ 2516.822709][T15906] usb 3-1: config 0 descriptor??
[ 2517.456063][T18517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2517.475496][T28800] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 2517.588577][T18517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2518.657144][T18596] fuse: Bad value for 'fd'
[ 2519.095057][T18595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2519.095568][T18595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2519.141829][   T30] audit: type=1326 audit(1758420427.382:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18581 comm="syz.3.7912" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701e539 code=0x0
[ 2519.146968][T24623] usb 1-1: USB disconnect, device number 95
[ 2519.283383][T28800] usb 3-1: USB disconnect, device number 104
[ 2520.197173][T15906] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2520.397050][T15906] usb 3-1: Using ep0 maxpacket: 8
[ 2520.410577][T15906] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[ 2520.442541][T15906] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 2520.471954][T15906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2520.522542][T15906] usb 3-1: Product: syz
[ 2520.537966][T15906] usb 3-1: Manufacturer: syz
[ 2520.559174][T15906] usb 3-1: SerialNumber: syz
[ 2520.706078][T15906] usb 3-1: config 0 descriptor??
[ 2520.751525][T15906] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 2520.781313][T15906] usb 3-1: setting power ON
[ 2520.794605][T15906] dvb-usb: bulk message failed: -22 (2/0)
[ 2520.854030][T15906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2520.864650][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7916'.
[ 2520.881293][T15906] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 2520.900954][T15906] usb 3-1: media controller created
[ 2520.952727][T15906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2520.953050][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7916'.
[ 2521.050062][T15906] usb 3-1: selecting invalid altsetting 6
[ 2521.069857][T15906] usb 3-1: digital interface selection failed (-22)
[ 2521.086017][T15906] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 2521.212665][T15906] usb 3-1: setting power OFF
[ 2521.223794][T15906] dvb-usb: bulk message failed: -22 (2/0)
[ 2521.274005][T15906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 2521.284959][T15906] (NULL device *): no alternate interface
[ 2521.373652][T15906] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 2521.568617][T18653] netlink: del zone limit has 4 unknown bytes
[ 2521.581801][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7921'.
[ 2522.141317][T18661] pim6reg: entered allmulticast mode
[ 2522.167892][T18661] pim6reg: left allmulticast mode
[ 2522.886419][ T7266] usb 3-1: USB disconnect, device number 105
[ 2525.236714][T24623] usb 3-1: new full-speed USB device number 106 using dummy_hcd
[ 2525.398772][T24623] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 2525.418542][T24623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2525.481280][T24623] usb 3-1: config 0 descriptor??
[ 2525.500614][T24623] ums-realtek 3-1:0.0: USB Mass Storage device detected
[ 2525.512580][T18717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7934'.
[ 2525.692567][T18728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7934'.
[ 2525.706665][T24623] usb 3-1: USB disconnect, device number 106
[ 2526.441875][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7936'.
[ 2526.475441][T18740] netlink: 38 bytes leftover after parsing attributes in process `syz.4.7936'.
[ 2526.596621][T15906] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 2526.646731][T15923] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 2526.767099][T15906] usb 3-1: Using ep0 maxpacket: 8
[ 2526.783376][T15906] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2526.802311][T15923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2526.816784][T15906] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2526.827448][T15923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2526.835660][T15923] usb 4-1: Product: syz
[ 2526.851803][T15906] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2526.866620][T15923] usb 4-1: Manufacturer: syz
[ 2526.871305][T15923] usb 4-1: SerialNumber: syz
[ 2526.884358][T15906] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2526.914890][T15906] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 2526.925156][T15906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2527.144232][T18751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2527.158522][T18751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2527.208375][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7952'.
[ 2527.218349][T15906] usb 3-1: GET_CAPABILITIES returned 0
[ 2527.225072][T15906] usbtmc 3-1:16.0: can't read capabilities
[ 2527.324464][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7942'.
[ 2527.415854][T28800] usb 3-1: USB disconnect, device number 107
[ 2527.996679][T24623] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 2528.165924][T24623] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[ 2528.178613][T24623] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2528.203052][T24623] usb 5-1: config 0 has no interface number 0
[ 2528.213855][T24623] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 2528.233855][T24623] usb 5-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 2528.332347][T18801] vivid-000: =================  START STATUS  =================
[ 2528.341850][T18801] vivid-000: Test Pattern: 75% Colorbar
[ 2528.388919][T24623] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=ad.aa
[ 2528.403861][T18801] vivid-000: Fill Percentage of Frame: 100
[ 2528.410442][T18801] vivid-000: Horizontal Movement: No Movement
[ 2528.418766][T18801] vivid-000: Vertical Movement: No Movement
[ 2528.444712][T18801] vivid-000: OSD Text Mode: All
[ 2528.445426][T24623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2528.461980][T18801] vivid-000: Show Border: false
[ 2528.478738][T18801] vivid-000: Show Square: true
[ 2528.484179][T18801] vivid-000: Sensor Flipped Horizontally: false
[ 2528.486673][T24623] usb 5-1: Product: syz
[ 2528.497260][T18801] vivid-000: Sensor Flipped Vertically: false
[ 2528.515796][T24623] usb 5-1: Manufacturer: syz
[ 2528.522871][T18801] vivid-000: Insert SAV Code in Image: false
[ 2528.529548][T18801] vivid-000: Insert EAV Code in Image: false
[ 2528.536938][T18801] vivid-000: Insert Video Guard Band: false
[ 2528.547559][T24623] usb 5-1: SerialNumber: syz
[ 2528.561999][T18801] vivid-000: Reduced Framerate: false
[ 2528.573513][T24623] usb 5-1: config 0 descriptor??
[ 2528.584302][T18801] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[ 2528.601217][T24623] adutux 5-1:0.55: interrupt endpoints not found
[ 2528.642159][T18801] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[ 2528.663697][T18801] vivid-000: Enable Capture Cropping: true grabbed
[ 2528.698201][T18801] vivid-000: Enable Capture Composing: true grabbed
[ 2528.742574][T18801] vivid-000: Enable Capture Scaler: true grabbed
[ 2528.778249][T18801] vivid-000: Timestamp Source: End of Frame
[ 2528.785981][T18801] vivid-000: Colorspace: Rec. 709
[ 2528.792446][T18801] vivid-000: Transfer Function: None
[ 2528.801733][T18792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2528.814811][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2528.905160][T18801] vivid-000: Y'CbCr Encoding: Default
[ 2528.912209][T18801] vivid-000: HSV Encoding: Hue 0-179
[ 2528.919213][T18801] vivid-000: Quantization: Default
[ 2528.925662][T18801] vivid-000: Apply Alpha To Red Only: false
[ 2528.933399][T18801] vivid-000: Standard Aspect Ratio: 4x3
[ 2528.943836][T18801] vivid-000: DV Timings Signal Mode: Current DV Timings
[ 2528.946139][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2528.959813][T18801] vivid-000: DV Timings: 640x480p59 inactive
[ 2528.969512][T18801] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[ 2528.979842][T18792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2528.989419][T18801] vivid-000: Maximum EDID Blocks: 2
[ 2528.994888][T18801] vivid-000: Limited RGB Range (16-235): true
[ 2529.002214][T18801] vivid-000: Rx RGB Quantization Range: Automatic
[ 2529.009032][T18801] vivid-000: Power Present: 0x00000001
[ 2529.014719][T18801] tpg source WxH: 1280x720 (R'G'B)
[ 2529.020153][T18801] tpg field: 1
[ 2529.023652][T18801] tpg crop: (0,0)/64x64
[ 2529.028085][T18801] tpg compose: (0,0)/16x16
[ 2529.032635][T18801] tpg colorspace: 3
[ 2529.036651][T18801] tpg transfer function: 5/5
[ 2529.041353][T18801] tpg quantization: 0/1
[ 2529.045632][T18801] tpg RGB range: 0/1
[ 2529.049766][T18801] vivid-000: ==================  END STATUS  ==================
[ 2529.110204][T18802] ==================================================================
[ 2529.118355][T18802] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.126983][T18802] Write of size 2560 at addr ffffc900000e2a00 by task vivid-000-vid-c/18802
[ 2529.135687][T18802] 
[ 2529.138030][T18802] CPU: 1 UID: 0 PID: 18802 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) 
[ 2529.138049][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2529.138062][T18802] Call Trace:
[ 2529.138071][T18802]  <TASK>
[ 2529.138081][T18802]  dump_stack_lvl+0x189/0x250
[ 2529.138110][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.138132][T18802]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2529.138155][T18802]  ? __pfx__printk+0x10/0x10
[ 2529.138176][T18802]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 2529.138200][T18802]  ? __virt_addr_valid+0xdc/0x5c0
[ 2529.138224][T18802]  ? __virt_addr_valid+0xdc/0x5c0
[ 2529.138252][T18802]  print_report+0xca/0x240
[ 2529.138271][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.138290][T18802]  kasan_report+0x118/0x150
[ 2529.138317][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.138335][T18802]  kasan_check_range+0x2b0/0x2c0
[ 2529.138355][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.138374][T18802]  __asan_memcpy+0x40/0x70
[ 2529.138399][T18802]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.138462][T18802]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[ 2529.138485][T18802]  ? finish_task_switch+0x18b/0x950
[ 2529.138516][T18802]  ? __schedule+0x17ae/0x4cc0
[ 2529.138547][T18802]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2529.138592][T18802]  vivid_thread_vid_cap+0x8da/0x10d0
[ 2529.138630][T18802]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2529.138655][T18802]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2529.138676][T18802]  ? __kthread_parkme+0x7b/0x200
[ 2529.138699][T18802]  ? __kthread_parkme+0x1a1/0x200
[ 2529.138725][T18802]  kthread+0x70e/0x8a0
[ 2529.138750][T18802]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2529.138778][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.138797][T18802]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2529.138819][T18802]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2529.138839][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.138865][T18802]  ret_from_fork+0x439/0x7d0
[ 2529.138887][T18802]  ? __pfx_ret_from_fork+0x10/0x10
[ 2529.138909][T18802]  ? __switch_to_asm+0x39/0x70
[ 2529.138931][T18802]  ? __switch_to_asm+0x33/0x70
[ 2529.138949][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.138968][T18802]  ret_from_fork_asm+0x1a/0x30
[ 2529.139001][T18802]  </TASK>
[ 2529.139009][T18802] 
[ 2529.353792][T18802] The buggy address belongs to a 1-page vmalloc region starting at 0xffffc900000e2000 allocated at vb2_vmalloc_alloc+0xef/0x340
[ 2529.367043][T18802] The buggy address belongs to the physical page:
[ 2529.373521][T18802] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888051404000 pfn:0x51404
[ 2529.383717][T18802] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 2529.390865][T18802] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 2529.399464][T18802] raw: ffff888051404000 0000000000000000 00000001ffffffff 0000000000000000
[ 2529.408155][T18802] page dumped because: kasan: bad access detected
[ 2529.414607][T18802] page_owner tracks the page as allocated
[ 2529.420329][T18802] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 18801, tgid 18796 (syz.0.7944), ts 2528280713239, free_ts 2528280633224
[ 2529.440010][T18802]  post_alloc_hook+0x240/0x2a0
[ 2529.444825][T18802]  get_page_from_freelist+0x21e4/0x22c0
[ 2529.450408][T18802]  __alloc_frozen_pages_noprof+0x181/0x370
[ 2529.456267][T18802]  alloc_pages_bulk_noprof+0x560/0x710
[ 2529.461780][T18802]  alloc_pages_bulk_mempolicy_noprof+0x341/0x1650
[ 2529.468240][T18802]  __vmalloc_node_range_noprof+0x733/0x12f0
[ 2529.474162][T18802]  vmalloc_user_noprof+0xad/0xf0
[ 2529.479131][T18802]  vb2_vmalloc_alloc+0xef/0x340
[ 2529.484023][T18802]  __vb2_queue_alloc+0x9c2/0x15a0
[ 2529.489075][T18802]  vb2_core_reqbufs+0xc31/0x1420
[ 2529.494040][T18802]  __vb2_init_fileio+0x318/0xff0
[ 2529.499011][T18802]  __vb2_perform_fileio+0x284/0x1600
[ 2529.504317][T18802]  vb2_fop_read+0x273/0x360
[ 2529.508840][T18802]  v4l2_read+0x199/0x2c0
[ 2529.513100][T18802]  vfs_readv+0x5aa/0x850
[ 2529.517351][T18802]  __ia32_compat_sys_preadv+0x1bf/0x2c0
[ 2529.522912][T18802] page last free pid 18801 tgid 18796 stack trace:
[ 2529.529439][T18802]  __free_frozen_pages+0xbc4/0xd30
[ 2529.534581][T18802]  kasan_populate_vmalloc+0x256/0x270
[ 2529.539976][T18802]  alloc_vmap_area+0xd62/0x14a0
[ 2529.544854][T18802]  __get_vm_area_node+0x1f8/0x300
[ 2529.549922][T18802]  __vmalloc_node_range_noprof+0x301/0x12f0
[ 2529.555846][T18802]  vmalloc_user_noprof+0xad/0xf0
[ 2529.560825][T18802]  vb2_vmalloc_alloc+0xef/0x340
[ 2529.565808][T18802]  __vb2_queue_alloc+0x9c2/0x15a0
[ 2529.570941][T18802]  vb2_core_reqbufs+0xc31/0x1420
[ 2529.575908][T18802]  __vb2_init_fileio+0x318/0xff0
[ 2529.580951][T18802]  __vb2_perform_fileio+0x284/0x1600
[ 2529.586276][T18802]  vb2_fop_read+0x273/0x360
[ 2529.590804][T18802]  v4l2_read+0x199/0x2c0
[ 2529.595077][T18802]  vfs_readv+0x5aa/0x850
[ 2529.599336][T18802]  __ia32_compat_sys_preadv+0x1bf/0x2c0
[ 2529.604917][T18802]  __do_fast_syscall_32+0xb6/0x2b0
[ 2529.610064][T18802] 
[ 2529.612410][T18802] Memory state around the buggy address:
[ 2529.618046][T18802]  ffffc900000e2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2529.626130][T18802]  ffffc900000e2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 2529.634217][T18802] >ffffc900000e3000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2529.642402][T18802]                    ^
[ 2529.646503][T18802]  ffffc900000e3080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2529.654587][T18802]  ffffc900000e3100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 2529.662675][T18802] ==================================================================
[ 2529.683802][T18802] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2529.691076][T18802] CPU: 0 UID: 0 PID: 18802 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) 
[ 2529.700934][T18802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 2529.711000][T18802] Call Trace:
[ 2529.714286][T18802]  <TASK>
[ 2529.717219][T18802]  dump_stack_lvl+0x99/0x250
[ 2529.721915][T18802]  ? __asan_memcpy+0x40/0x70
[ 2529.726546][T18802]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2529.731758][T18802]  ? __pfx__printk+0x10/0x10
[ 2529.736459][T18802]  vpanic+0x281/0x750
[ 2529.740475][T18802]  ? preempt_schedule+0xae/0xc0
[ 2529.745362][T18802]  ? __pfx_vpanic+0x10/0x10
[ 2529.750412][T18802]  ? preempt_schedule_common+0x83/0xd0
[ 2529.755874][T18802]  ? preempt_schedule+0xae/0xc0
[ 2529.760739][T18802]  ? __pfx_preempt_schedule+0x10/0x10
[ 2529.766199][T18802]  panic+0xb9/0xc0
[ 2529.769942][T18802]  ? __pfx_panic+0x10/0x10
[ 2529.774453][T18802]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 2529.780360][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.786345][T18802]  check_panic_on_warn+0x89/0xb0
[ 2529.791393][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.797034][T18802]  end_report+0x78/0x160
[ 2529.801282][T18802]  kasan_report+0x129/0x150
[ 2529.805875][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.811515][T18802]  kasan_check_range+0x2b0/0x2c0
[ 2529.816462][T18802]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.822093][T18802]  __asan_memcpy+0x40/0x70
[ 2529.826513][T18802]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 2529.831997][T18802]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[ 2529.837724][T18802]  ? finish_task_switch+0x18b/0x950
[ 2529.842954][T18802]  ? __schedule+0x17ae/0x4cc0
[ 2529.847654][T18802]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 2529.853835][T18802]  vivid_thread_vid_cap+0x8da/0x10d0
[ 2529.859151][T18802]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2529.864888][T18802]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2529.870956][T18802]  ? __kthread_parkme+0x7b/0x200
[ 2529.875921][T18802]  ? __kthread_parkme+0x1a1/0x200
[ 2529.880952][T18802]  kthread+0x70e/0x8a0
[ 2529.885028][T18802]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 2529.890761][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.895377][T18802]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2529.900671][T18802]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2529.905902][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.910494][T18802]  ret_from_fork+0x439/0x7d0
[ 2529.915097][T18802]  ? __pfx_ret_from_fork+0x10/0x10
[ 2529.920294][T18802]  ? __switch_to_asm+0x39/0x70
[ 2529.925063][T18802]  ? __switch_to_asm+0x33/0x70
[ 2529.929836][T18802]  ? __pfx_kthread+0x10/0x10
[ 2529.934429][T18802]  ret_from_fork_asm+0x1a/0x30
[ 2529.939204][T18802]  </TASK>
[ 2529.942587][T18802] Kernel Offset: disabled
[ 2529.946918][T18802] Rebooting in 86400 seconds..