last executing test programs:

4m17.612674836s ago: executing program 4 (id=3303):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x2, @value=0x5})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffff7f}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a0001000000edffffffffff80000000000000000000000008000f00fe000000"], 0x24}}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x0, 0xf, "f42a97b96d02674f51eae4da000000"}})
ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280))
connect$tipc(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x10)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0xc, 0x0, 0x6, 0x3}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x2, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x3, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x10, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x100000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xeeef0000, [0xffffffffffffff47, 0x401, 0x8, 0x6]})
r10 = syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r11 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000006, 0x12, r11, 0x0)
syz_usb_disconnect(r10)

4m14.407235485s ago: executing program 4 (id=3317):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 6)

4m14.250915892s ago: executing program 4 (id=3318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket(0x31, 0x5, 0x900) (async, rerun: 32)
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) (async, rerun: 32)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/102, 0x66}, {&(0x7f00000004c0)=""/141, 0x8d}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/150, 0x96}, {&(0x7f0000001680)=""/63, 0x3f}, {&(0x7f00000016c0)=""/115, 0x73}, {&(0x7f0000001740)}, {&(0x7f0000001780)=""/47, 0x2f}], 0xa, &(0x7f0000001880)=""/30, 0x1e}, 0x7fffffff}, {{&(0x7f00000018c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/185, 0xb9}, {&(0x7f0000001a00)=""/101, 0x65}, {&(0x7f0000001a80)=""/27, 0x1b}, {&(0x7f0000001ac0)=""/147, 0x93}, {&(0x7f0000001b80)=""/87, 0x57}, {&(0x7f0000001c00)=""/130, 0x82}], 0x6}, 0x3}, {{&(0x7f0000001d40)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001dc0)=""/214, 0xd6}, {&(0x7f0000001ec0)=""/91, 0x5b}, {&(0x7f0000001f40)=""/65, 0x41}, {&(0x7f0000001fc0)=""/232, 0xe8}], 0x4, &(0x7f0000002100)=""/64, 0x40}, 0x8}], 0x3, 0x120a4, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x6, 0x2, 0x7)
sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0x8800, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xfffffffa, 0x3}, 0x0) (async, rerun: 32)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) (async)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0x1) (async)
writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
close(r5) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x200, 0xfffffffd}}, 0x10) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000400)={0x46, 0x4}, 0x10) (async)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) (async, rerun: 64)
socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)

4m14.089188838s ago: executing program 4 (id=3320):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x1, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}})
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001500), 0x200)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406316, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x20)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r3, &(0x7f0000001200)={'#! ', './file0', [{0x20, '\x98\xe1Cvg\x9cO\x16\xc0TC\xe8\xb8\x91W\xb8\x84\xdf\xbe\xbd\x8f\x81!\xf2V[\x03V\xba/\xb9+\xd2\x95\xe0t\x0f<}T\v\x0f\xe8\xae\x89\xfa^\xce\xae[t/\x12\x1f\x02\x85\xbd\xbc\r(\xfd\xf2\xeeB\x12\xdc\x06\x1d\xd8\x86g\xcf\xb6\xde\xeb\xfc\xfc~A\x95\x8a6'}, {0x20, '5\xed\xe9\xe8\f\xcb\x82;\xc5\x98\"\x1c\x8d\xbb,X}\xec\x9f\xe5\xf0\x1f\x02\a\x0e\xe09\x17\xa9\xdbXP\x94}L\x17WT\xc0Rc\xe5\xd3\x9a\xcfGr3\xbaf\x8aS\xc6Q\x16\xf4\x9f\x02u.\xaf\xf3\xb8\x0e\x85a8\x03\x02\xf4\xf1\\b\x1ew\xd4F\xf1\xf9I\xe4\xca\xb1\xa51Sk\xdf\xc7\xd2\x87.b\xb9|+\x9f3@\xdfs\xa0\x01\x8fV/0\x8bo\xccQ\x9c\x9e\xae!b\xa0 \xea\xa4(C\n\x96\xdf\xd2\xd6\x91\x90\x83 \xb2\xb4\xac{\x02\xde,Ff\x98\x84\x16\x1b\x96\xac\x9e\x17\xf0\x13\xfa\xd1+\xcc\x19\x81ZZ\xa0\xde\xeb\xf3`\x0e\x87:` \x1b\xec\xc81\xb7\x91\xfdcL\xdcH/<w\x83\xd4B\x1cd\x8e\x98\xabd\xbc\f#\x92\xaf\xe5/|\x15\xaf\x81\x81\xe2l\x91'}]}, 0x12d)
close(r3)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[0x0, 0x0], 0xef}, 0x0)

4m12.221081112s ago: executing program 4 (id=3329):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4})
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})

4m12.151100098s ago: executing program 4 (id=3330):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2)
sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(r2, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))

3m56.798729288s ago: executing program 32 (id=3330):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r4, &(0x7f0000000380)=[{&(0x7f0000000400)}, {0x0}], 0x2)
sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="b70b2cbd7000fcdbdf250f0000000e0002"], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x2000c88c)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_open_procfs(r2, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20)
setitimer(0x2, &(0x7f0000000180)={{}, {0x77359400}}, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r8, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200))

10.820447787s ago: executing program 5 (id=4422):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0xa20000, 0x3, 0x5, r2, 0x0, &(0x7f0000000100)={0x9909cb, 0x5, '\x00', @p_u8=&(0x7f00000000c0)=0x2}})
lseek(r1, 0x0, 0x4)
read$FUSE(r1, 0x0, 0x0)
listen(r0, 0xfff)
accept$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev}, 0x0)

9.731363319s ago: executing program 1 (id=4429):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
syz_emit_ethernet(0x4e, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000003b3bc0dfdc830027000000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

9.526830611s ago: executing program 5 (id=4430):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x1, 0x7, 0xffffffb7, 0x8, 0x1, 0x6}]})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x1})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x5, 0x7ff}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x66, 0x3003, 0x1, 0x2, 0x3, 0x0, 0x4}})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r4 = socket$inet(0x2, 0xa, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000001380)={&(0x7f0000001340)=""/41, 0x2000, 0x1000, 0x10001, 0x1}, 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0})
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0x4008af13, &(0x7f0000000340)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff7, 0xfffffbff, 0x1, 0x2, 0x1, 0x3, 0x5, 0x1, 0x1, 0x4, 0x8, 0x0, 0x3, 0x6, 0x2, 0x20, {0x6, 0x2}, 0x44, 0x3}}})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'os2.', '%\'{!,/#{\x00'})
r9 = dup(r4)
fanotify_mark(r5, 0x1, 0x48001059, r9, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @empty, 0x4e20, 0x2, 'none\x00', 0x8, 0x8000, 0x48}, 0x2c)

8.751149904s ago: executing program 5 (id=4432):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000400000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200103"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000002140)=ANY=[@ANYBLOB='@\r\r'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="5b8e54bef54eed800000000000000000000000af528a369f6820b229d8f3d5b6ed5d29a575f785a28e1562361b72c30bc469c3aace51cd"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d7ecd5b163b650abc5f201ffffff000000d3d700"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[], 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000240), 0x8)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="08000c00090000000a0018000303030303030000"], 0x30}, 0x1, 0x0, 0x0, 0x20000810}, 0x40)

7.799154133s ago: executing program 1 (id=4436):
utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x1, 0x4})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xae60}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
close(0x3)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x4044841) (async)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x4044841)

7.465430044s ago: executing program 1 (id=4438):
bind$alg(0xffffffffffffffff, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ip6_flowlabel\x00')
statx(r3, 0x0, 0x7000, 0x200, 0x0)
socket$unix(0x1, 0x1, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0006}, {0x3, 0xae, 0x4, 0x10000}, {0x3, 0x0, 0x0, 0xfffffff0}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000180)={0x20007, r4})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
r7 = openat$cgroup_ro(r6, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r7, 0x0)
r8 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r8, 0xc0487c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r10 = fanotify_init(0x200, 0x0)
fanotify_mark(r10, 0x459, 0x10, r9, 0x0)

6.9181486s ago: executing program 2 (id=4439):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0)
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), &(0x7f0000000000))
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r5=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
r8 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r9 = shmat(r8, &(0x7f0000ff9000/0x2000)=nil, 0x400c)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0)
shmdt(r9)
r11 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000004940)=[{0x0}], 0x1}, 0x0, 0x12f4c4729364eade, 0x1})
io_uring_enter(r11, 0x3516, 0xa00100, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r14=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffdcd, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c804}, 0x20000004)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6}, 0x10)
setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054)

6.245679427s ago: executing program 1 (id=4440):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0})
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
r5 = getpid()
sched_setattr(r5, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r7, 0x1, 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sched_setattr(r5, &(0x7f00000003c0)={0x38, 0x3, 0x36, 0xc, 0x2, 0x87, 0x100000008000, 0x8, 0xfffffff9, 0x800007}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000e07550d7e67009d44eac67327331e137d4f80c2c98928376d0d9d769e2196fe75317d6a9eaff8a410a8c9cbb4cd66aa3e52b17ccd8fff34fa6227c6ce018f0d540c337b1dd3c1b0b2b3010387538d530942b9c2891d7f1838d6c0f3773475f43c8bb4a40da5aa3c1d3f72ec15a35bdf23873ecb9d3b16824e57301da7e3cbe302ab4cc61453b23ced7b46291e21a46ae768d9488f2bfa87f97fc26bf73c3d0a88cd1c15ca7987987028787e98c70708c7c"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

5.517440524s ago: executing program 3 (id=4443):
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
gettid()
stat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000380)={0x0, 0x69d0, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r8 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
syz_open_dev$hiddev(&(0x7f0000003040), 0x3, 0x301001)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000004740)={r8, 0x0, 0x25, 0x17, @void}, 0x10)

5.295619905s ago: executing program 5 (id=4444):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994", 0x64}], 0x2)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
socket(0xa, 0x801, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(r5, 0xffffffffffffffff, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)

5.244055411s ago: executing program 2 (id=4445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

5.000533736s ago: executing program 2 (id=4447):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"})

4.037542879s ago: executing program 1 (id=4448):
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, <r2=>0x0})
sched_getattr(r2, &(0x7f0000000180)={0x38}, 0x38, 0x0)
r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r3, 0xc0405668, &(0x7f0000000380)={0x1, 0x100, 0x5, {0x4, 0x7, 0x780000, 0xfcad}})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
bind$inet(0xffffffffffffffff, 0x0, 0x0)

3.96529769s ago: executing program 3 (id=4449):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00')
pread64(r6, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=ANY=[@ANYBLOB="30000000400007012bbd700000000000017c0000040042800c00018006000600800a00000c0002800578e45c95ff72b4"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)

3.853263381s ago: executing program 2 (id=4450):
madvise(&(0x7f0000900000/0xa000)=nil, 0xa000, 0x17)

3.23286627s ago: executing program 2 (id=4452):
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001"], 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14)
syz_usb_connect(0x0, 0x216, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0xe, 0xdb, 0xce, 0x20, 0x664, 0x306, 0xbaf8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x204, 0x2, 0xfc, 0x0, 0x30, 0xcc, [{{0x9, 0x4, 0x71, 0x4, 0x4, 0x85, 0x9a, 0xd5, 0x80, [], [{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x92, 0x3, [@generic={0xe0, 0x23, "1b100c687d988d01dd89471662d38dc85e9d891e2051224c6232a4d68f56c0f784b4206a0d40052c1f16d5cc88c9e45682f505d98693460c2a294ef58ce712ef96d249bb2031862a89557a01c31765dc1c6eafc3fac124a9be04d32ec5c7a06c2d42af490a18f8491e20c7e4048ac7838357a394df6b3fec7b76d29e1ce31853ccf0e098cc27bc1d0481e0eda4dde7e937a62bedaae86410999d1a946098b593d5f740a900c5defc737abd660cdf01a6b6773254037e13c882c5467440cdd3c0d68fde8753308373123ef21ef16788f14c5d2ccb817141e48637e6f932bb"}]}}, {{0x9, 0x5, 0x1, 0x1d, 0x20, 0x3, 0x40, 0x9a}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x1, 0x5, 0x97}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0xd}]}}]}}, {{0x9, 0x4, 0x2a, 0x0, 0xc, 0xf6, 0x75, 0x77, 0x7, [@uac_as, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "f2b9"}, {0x5, 0x24, 0x0, 0x4c}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x400, 0x1, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x4, 0x6}, @ncm={0x6, 0x24, 0x1a, 0xb5db, 0x3}]}], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x0, 0x2, 0x3}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0xc, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x2, 0x5}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0xea, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x1, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9ab}]}}, {{0x9, 0x5, 0x7, 0x4, 0x400, 0x4, 0x2, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x21, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x6}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0xe6, 0x8, 0x1, [@generic={0x2f, 0xb, "20e79857a5c6dc844b59c8a4aa25d2cfd53afa583b8e56131052e1a7bd8e3bed872f4d5f8d270666d1019ddab2"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0x5, 0xf8}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x6, 0x10, 0x1}}, {{0x9, 0x5, 0x8, 0x4, 0x0, 0x5, 0x4, 0x9b}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x10, 0x27}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x8, 0x8, 0x10, 0x3c}, 0x3e, &(0x7f0000000240)={0x5, 0xf, 0x3e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xc, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x5, 0x2}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x8, 0xff00, 0x0, [0x30, 0xc00f, 0x3f30, 0xff00c0, 0xff00]}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x5, 0x4, 0x6, 0x40}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x100c}}, {0xb, &(0x7f00000003c0)=@string={0xb, 0x3, "7b700c7f1954789e99"}}]})
r0 = socket$inet6(0xa, 0xa, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0xcd, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x620c, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x10, 0xc2}, &(0x7f00000007c0)=<r2=>0x0, &(0x7f0000000200))
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x6}})
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @sdr={0x3147504d, 0x1}})

2.865955396s ago: executing program 5 (id=4453):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x26020480)
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}]}, 0x6)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r4, r5, 0x0, 0x201f00)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0)
socket(0x2, 0x80805, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
close(0x3)

2.861569884s ago: executing program 3 (id=4454):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x679, 0x3ff00, 0xd, 0x6000, 0xffffffff, <r0=>0x0})
prctl$PR_SCHED_CORE(0x4d, 0x0, r0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000080)={[0x1000, 0x100002, 0xffffffff, 0xe000], 0x5, 0x80, 0x1})
timer_create(0x0, 0x0, 0x0)
r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
r3 = dup2(r2, r2)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004)
ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000240)={0x0, 0x9, "4969c25981221ce451764bd903b7e6c50c243ee92a325929b735886247205272", 0x100000000, 0x2, 0x7fffffff, 0x8000000000, 0x8, 0x7fff, 0x40, 0xfffffeff, [0x4, 0x5, 0x6, 0x9]})
socket$l2tp(0x2, 0x2, 0x73)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
open(&(0x7f00000002c0)='./file0\x00', 0x2a4c0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f00000061c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x8000}}, 0x50)
syz_fuse_handle_req(r7, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r10=>0x0)
io_submit(r10, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r9, &(0x7f00000000c0)='!', 0xb7f40}])
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
dup3(r9, r7, 0x80000)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x88, 0x2c, 0xe27, 0x70fd2d, 0x20000, {0x0, 0x0, 0x0, r6, {0xc, 0xa}, {}, {0x5, 0xa}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_ACT={0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x95, 0x9, 0xffffffffffffffff, 0x3, 0x9615}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x3f}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)

2.060596332s ago: executing program 1 (id=4458):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={{}, 0x10000, 0x5, 0x2})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)
r3 = syz_open_dev$vcsu(&(0x7f00000000c0), 0xffffffffffffff01, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0xd4, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xbc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x37f8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

1.989117128s ago: executing program 3 (id=4459):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0x30}], 0x1, 0x50, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x440)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000100)=@file={0x1, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d10708f8166154e49bf463b6fb41022c254bcccc23ee372aaa16969ee9126ca159a78a39427126cef7ade33a0d245f041509331ca15ca5d60118f8bac19d8a11777e8fc59e8064df4214b1d78506135d3a346d41528ea0d2d28b367805581dbcc14309c6980e4e4e83e510805e6212b846d247e0e42dfe66a35157805cae0b77454d6b4b9a8754ebb0dee9261b380f444c11aef2f6631c2c52078a04123e5589aca4b9e38ead526c7ca3972fbdc88bb757d95b575d8d7712be5fd35a5f754b323326a8bd6a553f9196fb1c02436b1ed376"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f00000005c0), &(0x7f0000000680)=""/151}, 0x20)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x3)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.667943613s ago: executing program 3 (id=4461):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c)
syz_emit_ethernet(0x4e, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000003b3bc0dfdc830027000000"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94)

1.226076647s ago: executing program 5 (id=4462):
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
setresuid(0x0, 0xee00, 0x0)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
syz_open_dev$dri(&(0x7f0000000000), 0x8001, 0x0)
socket(0xb, 0x2, 0x7)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200000000050005000000"], 0x80}}, 0x0)
sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

1.172299404s ago: executing program 2 (id=4463):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r2, &(0x7f0000000480)=[{&(0x7f0000000440)="90e7", 0x2}, {&(0x7f00000002c0)="d6a5a87479c1f4b466100d1c655210006555e3e974fdb971b60fe5960bcd802fe3f7da93acf4e6414158438095dc8ca02f5134d635bfc8e5c5704af7e46dd4506719ff2fc92cc098786865efc9ab3fd66ceefbe88d4b86b00e4ea2a826593de679ac3994", 0x64}], 0x2)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x64000600)
socket(0xa, 0x801, 0x0)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]})
dup2(0xffffffffffffffff, 0xffffffffffffffff)
close_range(r5, 0xffffffffffffffff, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x14)

837.166229ms ago: executing program 0 (id=4464):
r0 = socket$kcm(0x2d, 0x2, 0x0)
fsopen(&(0x7f0000000000)='sockfs\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000f80)={'syz0\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x54, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0xffffff81, 0x7f, 0xc, 0x2, 0x9, 0x1, 0x4, 0x8001000, 0x80000002, 0x6, 0x200008, 0x800, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x8, 0xc, 0x9, 0x4, 0x2, 0x1, 0x0, 0x4, 0x1, 0x4, 0x8, 0x6, 0x3, 0x9, 0x804d7f, 0x3, 0x8c00, 0x6, 0x939, 0x2, 0x9, 0x2, 0x2, 0x8, 0xfffffc01, 0x4, 0x6, 0x1, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x8000], [0x8, 0x405, 0x9, 0x9, 0x8, 0x12, 0x7fb, 0xc, 0x0, 0x272d, 0xfdb, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x2, 0xd7, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x80000005, 0x3, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0xffffffff, 0x6, 0xffff3f1a, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffff6ff, 0x7, 0x7fd, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x0, 0x24c, 0x1ff, 0x2a0, 0xe78e, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0xb56b, 0x9, 0x3, 0x6, 0x7aae, 0x80000000, 0xffffffff, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x0, 0x400, 0x80000002, 0x2b0, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x7fffffff, 0x5, 0x4, 0x9, 0xc90, 0xffbfff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0xb639, 0x2, 0x1000000c, 0x0, 0x6, 0x3, 0x8007c12, 0x2, 0x4, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x801, 0x9, 0x8, 0x20ffff, 0x2], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2001, 0x6, 0xfffffff3, 0xd077, 0x3, 0xffffffff, 0x21, 0x1ff, 0xa, 0x6, 0x2, 0x2001ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x40, 0xffffffff, 0x3, 0x10001, 0x61, 0x10, 0x101, 0xc, 0x100, 0x8, 0x20000001, 0x8, 0x15, 0x10b32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0x6e79, 0x0, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d3, 0x83, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r6, r1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e3, &(0x7f0000000000)={r6})
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000040))

768.487419ms ago: executing program 0 (id=4465):
r0 = socket(0x28, 0x5, 0x0)
r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0) (fail_nth: 35)

649.557678ms ago: executing program 0 (id=4466):
openat$random(0xffffffffffffff9c, &(0x7f00000014c0), 0x101202, 0x0)
syz_io_uring_setup(0xf44, 0x0, 0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r1)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000006080)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900fbffffff2d00000008000500060000001400040070696d726567000000000000000000000c001780060004"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0x1}, {@local, 0x5}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f24"}, 0x418, 0x8})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
close_range(r7, r0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'syz', 0x20, 0xffd}, 0x2e, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syz_emit_ethernet(0x4e, &(0x7f0000002940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60122d9200183afffe8000000000000000000000000000aafe8000000000000000000000000000aa88009078ce00000000000000000000000000339a00000001"], 0x0)

569.653688ms ago: executing program 0 (id=4467):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x1, 0x7, 0xffffffb7, 0x8, 0x1, 0x6}]})
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x1})
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x5, 0x7ff}, 0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000240)={0x0, 0x0, {0x9, 0x66, 0x3003, 0x1, 0x2, 0x3, 0x0, 0x4}})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x74, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x76}}}}, [@chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40080)
r4 = socket$inet(0x2, 0xa, 0x0)
r5 = fanotify_init(0x200, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$ptys(0xc, 0x3, 0x1)
r7 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0})
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0x4008af13, &(0x7f0000000340)={0x1, 0x0, '\x00', {0x0, @bt={0xfffffff7, 0xfffffbff, 0x1, 0x2, 0x1, 0x3, 0x5, 0x1, 0x1, 0x4, 0x8, 0x0, 0x3, 0x6, 0x2, 0x20, {0x6, 0x2}, 0x44, 0x3}}})
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fedbdb2500000000", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0)
fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@random={'os2.', '%\'{!,/#{\x00'})
r9 = dup(r4)
fanotify_mark(r5, 0x1, 0x48001059, r9, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r10, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @empty, 0x4e20, 0x2, 'none\x00', 0x8, 0x8000, 0x48}, 0x2c)

556.086951ms ago: executing program 0 (id=4468):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x74000, 0x0, 0x0, 'queue1\x00', 0x10007})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0xa}})

112.051076ms ago: executing program 3 (id=4469):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x42800)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) (fail_nth: 2)

0s ago: executing program 0 (id=4470):
syz_open_procfs(0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000040)=ANY=[@ANYBLOB="c92752ede134aaaaaaaaaaaa88a82e0081004704080045a7001400680000702f90780000ffffff0000008dd74e90ded11cfd76843792b547"], 0x0)

kernel console output (not intermixed with test programs):

x10
[  900.620472][T19788]  ? do_syscall_64+0xbe/0xf80
[  900.620492][T19788]  do_syscall_64+0xfa/0xf80
[  900.620510][T19788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.620527][T19788]  ? clear_bhb_loop+0x60/0xb0
[  900.620547][T19788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.620570][T19788] RIP: 0033:0x7f300c58e15c
[  900.620585][T19788] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  900.620598][T19788] RSP: 002b:00007f300d3f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  900.620617][T19788] RAX: ffffffffffffffda RBX: 00007f300c7e5fa0 RCX: 00007f300c58e15c
[  900.620630][T19788] RDX: 000000000000000f RSI: 00007f300d3f30a0 RDI: 0000000000000005
[  900.620642][T19788] RBP: 00007f300d3f3090 R08: 0000000000000000 R09: 0000000000000000
[  900.620653][T19788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  900.620663][T19788] R13: 00007f300c7e6038 R14: 00007f300c7e5fa0 R15: 00007f300c90fa28
[  900.620692][T19788]  </TASK>
[  901.010018][T14447] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  901.026783][T19792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  901.179997][T14447] usb 6-1: Using ep0 maxpacket: 16
[  901.186623][T14447] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  901.198525][T14447] usb 6-1: config 0 interface 0 has no altsetting 0
[  901.205735][T14447] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  901.216748][T14447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  901.242727][T14447] usb 6-1: config 0 descriptor??
[  901.249858][ T5841] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  901.383292][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  901.383309][   T30] audit: type=1326 audit(1766164179.127:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.423534][ T5841] usb 2-1: Using ep0 maxpacket: 32
[  901.439205][ T5841] usb 2-1: config 120 has an invalid interface number: 207 but max is 0
[  901.448941][ T5841] usb 2-1: config 120 has no interface number 0
[  901.448951][   T30] audit: type=1326 audit(1766164179.157:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.549352][   T30] audit: type=1326 audit(1766164179.157:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.577794][ T5841] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=6f.0b
[  901.587195][   T30] audit: type=1326 audit(1766164179.157:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.600090][ T7875] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  901.628227][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.636695][   T30] audit: type=1326 audit(1766164179.157:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.649434][ T5841] usb 2-1: Product: syz
[  901.672783][ T5841] usb 2-1: Manufacturer: syz
[  901.677591][ T5841] usb 2-1: SerialNumber: syz
[  901.677785][   T30] audit: type=1326 audit(1766164179.157:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.752596][T14447] kye 0003:0458:0087.0054: unknown main item tag 0x0
[  901.765374][T14447] kye 0003:0458:0087.0054: unknown main item tag 0x0
[  901.772850][ T5841] r8152-cfgselector 2-1: Unknown version 0x0000
[  901.779450][   T30] audit: type=1326 audit(1766164179.157:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.807299][T14447] kye 0003:0458:0087.0054: unknown main item tag 0x0
[  901.815683][T14447] kye 0003:0458:0087.0054: unknown main item tag 0x0
[  901.823669][T14447] kye 0003:0458:0087.0054: unknown main item tag 0x0
[  901.831611][   T30] audit: type=1326 audit(1766164179.157:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.831888][ T7875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  901.859040][T14447] kye 0003:0458:0087.0054: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.5-1/input0
[  901.902211][ T7875] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  901.914582][ T7875] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  901.924039][   T30] audit: type=1326 audit(1766164179.157:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.924089][   T30] audit: type=1326 audit(1766164179.157:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19805 comm="syz.3.3964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3f00f8f749 code=0x7ffc0000
[  901.976511][ T7875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  902.045371][ T5841] r8152-cfgselector 2-1: USB disconnect, device number 16
[  902.176884][ T7875] usb 1-1: config 0 descriptor??
[  902.735842][T19819] binder: BINDER_SET_CONTEXT_MGR already set
[  902.754393][T19819] binder: 19818:19819 ioctl 4018620d 2000000002c0 returned -16
[  902.974990][T15521] Bluetooth: hci0: command 0x0406 tx timeout
[  903.579955][ T5841] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  903.688834][T14442] usb 6-1: USB disconnect, device number 23
[  903.729796][ T5841] usb 4-1: Using ep0 maxpacket: 32
[  903.737429][ T5841] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  903.746227][ T5841] usb 4-1: config 0 has no interface number 0
[  903.756845][ T5841] usb 4-1: config 0 interface 12 has no altsetting 0
[  903.779344][ T5841] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  903.797798][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.808461][ T5841] usb 4-1: Product: syz
[  903.813443][ T5841] usb 4-1: Manufacturer: syz
[  903.818339][ T5841] usb 4-1: SerialNumber: syz
[  903.827400][ T5841] usb 4-1: config 0 descriptor??
[  904.153465][T14442] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  904.219845][T14447] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  904.309998][T14442] usb 6-1: Using ep0 maxpacket: 16
[  904.327929][T14442] usb 6-1: config 0 has no interfaces?
[  904.338698][ T7875] usb 1-1: USB disconnect, device number 107
[  904.356959][T14442] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  904.375561][T14442] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  904.385591][T14442] usb 6-1: Manufacturer: syz
[  904.402593][T14447] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  904.418594][T14442] usb 6-1: config 0 descriptor??
[  904.432547][T14447] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  904.460696][T14447] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  904.470237][T14447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  904.474553][T19839] FAULT_INJECTION: forcing a failure.
[  904.474553][T19839] name failslab, interval 1, probability 0, space 0, times 0
[  904.517259][T19834] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  904.525770][T19834] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  904.533436][T19839] CPU: 1 UID: 0 PID: 19839 Comm: syz.0.3974 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  904.533466][T19839] Tainted: [L]=SOFTLOCKUP
[  904.533474][T19839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  904.533485][T19839] Call Trace:
[  904.533492][T19839]  <TASK>
[  904.533501][T19839]  dump_stack_lvl+0x189/0x250
[  904.533530][T19839]  ? __pfx____ratelimit+0x10/0x10
[  904.533548][T19839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  904.533569][T19839]  ? __pfx__printk+0x10/0x10
[  904.533599][T19839]  ? __pfx___might_resched+0x10/0x10
[  904.533616][T19839]  ? fs_reclaim_acquire+0x7d/0x100
[  904.533639][T19839]  should_fail_ex+0x414/0x560
[  904.533669][T19839]  should_failslab+0xa8/0x100
[  904.533692][T19839]  __kmalloc_noprof+0xdf/0x800
[  904.533709][T19839]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  904.533734][T19839]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  904.533759][T19839]  genl_family_rcv_msg_doit+0xb8/0x300
[  904.533784][T19839]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  904.533810][T19839]  ? apparmor_capable+0x137/0x1a0
[  904.533836][T19839]  ? bpf_lsm_capable+0x9/0x20
[  904.533855][T19839]  ? security_capable+0x7e/0x2e0
[  904.533881][T19839]  genl_rcv_msg+0x60e/0x790
[  904.533905][T19839]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.533920][T19839]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  904.533939][T19839]  ? __pfx_nl80211_new_key+0x10/0x10
[  904.533957][T19839]  ? __pfx_nl80211_post_doit+0x10/0x10
[  904.533990][T19839]  netlink_rcv_skb+0x208/0x470
[  904.534013][T19839]  ? __pfx_genl_rcv_msg+0x10/0x10
[  904.534031][T19839]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  904.534070][T19839]  ? down_read+0x274/0x2e0
[  904.534088][T19839]  ? genl_rcv+0xd/0x40
[  904.534104][T19839]  genl_rcv+0x28/0x40
[  904.534116][T19839]  netlink_unicast+0x82f/0x9e0
[  904.534144][T19839]  ? __pfx_netlink_unicast+0x10/0x10
[  904.534165][T19839]  ? netlink_sendmsg+0x642/0xb30
[  904.534184][T19839]  ? skb_put+0x11b/0x210
[  904.534213][T19839]  netlink_sendmsg+0x805/0xb30
[  904.534240][T19839]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.534258][T19839]  ? aa_sock_msg_perm+0xf1/0x1b0
[  904.534279][T19839]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  904.534294][T19839]  ? __pfx_netlink_sendmsg+0x10/0x10
[  904.534310][T19839]  __sock_sendmsg+0x21c/0x270
[  904.534332][T19839]  ____sys_sendmsg+0x505/0x820
[  904.534352][T19839]  ? __pfx_____sys_sendmsg+0x10/0x10
[  904.534374][T19839]  ? import_iovec+0x74/0xa0
[  904.534392][T19839]  ___sys_sendmsg+0x21f/0x2a0
[  904.534410][T19839]  ? __pfx____sys_sendmsg+0x10/0x10
[  904.534434][T19839]  ? rcu_read_lock_any_held+0xb3/0x120
[  904.534470][T19839]  ? __fget_files+0x2a/0x420
[  904.534485][T19839]  ? __fget_files+0x3a0/0x420
[  904.534508][T19839]  __x64_sys_sendmsg+0x19b/0x260
[  904.534526][T19839]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  904.534550][T19839]  ? __pfx_ksys_write+0x10/0x10
[  904.534569][T19839]  ? do_syscall_64+0xbe/0xf80
[  904.534585][T19839]  do_syscall_64+0xfa/0xf80
[  904.534599][T19839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.534612][T19839]  ? clear_bhb_loop+0x60/0xb0
[  904.534628][T19839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  904.534641][T19839] RIP: 0033:0x7f6f9cf8f749
[  904.534654][T19839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  904.534666][T19839] RSP: 002b:00007f6f9ddf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  904.534682][T19839] RAX: ffffffffffffffda RBX: 00007f6f9d1e5fa0 RCX: 00007f6f9cf8f749
[  904.534695][T19839] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003
[  904.534705][T19839] RBP: 00007f6f9ddf9090 R08: 0000000000000000 R09: 0000000000000000
[  904.534713][T19839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  904.534721][T19839] R13: 00007f6f9d1e6038 R14: 00007f6f9d1e5fa0 R15: 00007f6f9d30fa28
[  904.534744][T19839]  </TASK>
[  904.954795][T14447] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  904.965276][ T5841] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[  904.976229][ T5841] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  904.985792][ T5841] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  904.993811][ T5841] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  905.008554][ T5841] usb 4-1: USB disconnect, device number 14
[  905.612179][T19851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3978'.
[  905.626282][T19851] vlan2: entered promiscuous mode
[  905.632429][T19851] macvtap0: entered promiscuous mode
[  905.679933][ T5841] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  905.843342][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  905.854651][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  905.872497][ T5841] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  905.888204][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.899648][ T5841] usb 1-1: config 0 descriptor??
[  906.307110][T19858] netlink: 'syz.1.3981': attribute type 4 has an invalid length.
[  906.524991][ T5841] usbhid 1-1:0.0: can't add hid device: -71
[  906.537525][ T5841] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  906.554092][ T5841] usb 1-1: USB disconnect, device number 108
[  906.877235][T14447] usb 3-1: USB disconnect, device number 33
[  907.026691][ T7875] usb 6-1: USB disconnect, device number 24
[  907.107450][ T5841] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  907.361091][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  907.361106][   T30] audit: type=1326 audit(1766164184.967:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  907.487129][   T30] audit: type=1326 audit(1766164184.967:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  907.552241][ T5841] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  907.604635][ T5841] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  907.633279][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  907.645953][   T30] audit: type=1326 audit(1766164184.967:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  907.678937][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.705191][ T5841] usb 2-1: config 0 descriptor??
[  907.714931][   T30] audit: type=1326 audit(1766164184.967:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  907.789867][ T7875] usb 1-1: new full-speed USB device number 109 using dummy_hcd
[  907.999298][   T30] audit: type=1326 audit(1766164184.967:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  908.092164][   T30] audit: type=1326 audit(1766164184.967:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  908.150880][ T7875] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  908.184361][ T7875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.192671][ T7875] usb 1-1: Product: syz
[  908.196850][ T7875] usb 1-1: Manufacturer: syz
[  908.201763][   T30] audit: type=1326 audit(1766164184.967:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  908.226215][ T7875] usb 1-1: SerialNumber: syz
[  908.250498][   T30] audit: type=1326 audit(1766164184.967:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  908.280688][ T7875] usb 1-1: config 0 descriptor??
[  908.286251][   T30] audit: type=1326 audit(1766164184.967:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f300c58e1ff code=0x7ffc0000
[  908.309211][   T30] audit: type=1326 audit(1766164184.967:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19871 comm="syz.2.3985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  908.537139][ T7875] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  908.599902][T14454] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  908.751636][T14454] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  908.759994][T14454] usb 4-1: config 0 has no interface number 0
[  908.766126][T14454] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  908.777327][T14454] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  908.789959][ T5841] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  908.800006][T14454] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  908.809079][T14454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  908.817401][T14454] usb 4-1: Product: syz
[  908.821642][T14454] usb 4-1: Manufacturer: syz
[  908.826242][T14454] usb 4-1: SerialNumber: syz
[  908.833300][T14454] usb 4-1: config 0 descriptor??
[  908.839062][T19899] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  908.848474][T14454] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  908.861023][T14454] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  908.959882][ T5841] usb 3-1: Using ep0 maxpacket: 32
[  908.966955][ T5841] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  908.977177][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  908.988928][ T5841] usb 3-1: config 0 descriptor??
[  909.197535][ T5841] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  909.206864][ T5841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  909.219329][ T5841] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  909.226665][ T5841] usb 3-1: media controller created
[  909.243223][ T5841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  909.405799][ T5841] az6027: usb out operation failed. (-71)
[  909.412523][ T5841] az6027: usb out operation failed. (-71)
[  909.418518][ T5841] stb0899_attach: Driver disabled by Kconfig
[  909.425020][ T5841] az6027: no front-end attached
[  909.425020][ T5841] 
[  909.432917][ T5841] az6027: usb out operation failed. (-71)
[  909.438773][ T5841] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  909.448284][ T5841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85
[  909.466134][ T5841] dvb-usb: schedule remote query interval to 400 msecs.
[  909.474252][ T5841] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  909.486646][ T5841] usb 3-1: USB disconnect, device number 34
[  909.534832][ T5841] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  909.605809][T19908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  909.616352][T19908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  909.862505][T14447] usb 2-1: USB disconnect, device number 17
[  910.062691][ T7875] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  910.104033][ T7875] usb 1-1: USB disconnect, device number 109
[  911.261394][T14447] usb 4-1: USB disconnect, device number 15
[  911.284340][T14447] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  911.313216][T14447] cyberjack 4-1:0.69: device disconnected
[  911.389764][T14454] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  911.560012][T14454] usb 2-1: Using ep0 maxpacket: 32
[  911.571904][T19943] fuse: Bad value for 'rootmode'
[  911.575777][T14454] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  911.593589][T14454] usb 2-1: config 0 has no interface number 0
[  911.603062][T14454] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  911.603759][T19941] pim6reg: entered allmulticast mode
[  911.616911][T14454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.628112][T14454] usb 2-1: Product: syz
[  911.632814][T14454] usb 2-1: Manufacturer: syz
[  911.637577][T14454] usb 2-1: SerialNumber: syz
[  911.650440][T14454] usb 2-1: config 0 descriptor??
[  911.670047][T14454] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  911.872968][T14454] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  911.900552][ T5841] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  911.910844][T14454] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  912.186079][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  912.193903][T14454] usb 2-1: USB disconnect, device number 18
[  912.258848][T14454] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  912.620728][T14454] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  912.650433][T14454] quatech2 2-1:0.51: device disconnected
[  912.656787][ T5841] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  912.684872][ T5841] usb 4-1: config 0 interface 0 has no altsetting 0
[  912.723860][ T5841] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  912.738263][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  912.747035][ T5841] usb 4-1: Product: syz
[  912.753301][ T5841] usb 4-1: Manufacturer: syz
[  912.760041][ T5841] usb 4-1: SerialNumber: syz
[  912.771936][ T5841] usb 4-1: config 0 descriptor??
[  912.783974][ T5841] usb 4-1: selecting invalid altsetting 0
[  914.653998][ T5841] usb 4-1: USB disconnect, device number 16
[  914.840482][T19998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4023'.
[  914.850119][T19998] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4023'.
[  914.860092][T14454] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  915.028515][T14454] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  915.046092][T14454] usb 3-1: config 54 has no interface number 0
[  915.064662][T14454] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  915.077337][T14454] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  915.091316][T14454] usb 3-1: Product: syz
[  915.096699][T14454] usb 3-1: Manufacturer: syz
[  915.102884][T14454] usb 3-1: SerialNumber: syz
[  915.653175][T19993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4021'.
[  915.744585][ T3692] usb 3-1: Failed to submit usb control message: -71
[  915.760761][T14454] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  915.784316][ T3692] usb 3-1: unable to send the bmi data to the device: -71
[  915.808492][ T3692] usb 3-1: unable to get target info from device
[  915.840539][T14454] usb 3-1: USB disconnect, device number 35
[  915.853367][ T3692] usb 3-1: could not get target info (-71)
[  915.931271][ T3692] usb 3-1: could not probe fw (-71)
[  919.833319][   T30] kauditd_printk_skb: 40 callbacks suppressed
[  919.833335][   T30] audit: type=1326 audit(1766164197.577:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  920.351968][   T30] audit: type=1326 audit(1766164197.607:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  920.576113][   T30] audit: type=1326 audit(1766164197.607:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  920.724438][   T30] audit: type=1326 audit(1766164197.607:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  920.846762][   T30] audit: type=1326 audit(1766164197.607:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  920.922673][   T30] audit: type=1326 audit(1766164197.607:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  921.007137][   T30] audit: type=1326 audit(1766164197.607:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  921.010861][T20092] macvtap1: entered promiscuous mode
[  921.045639][T20092] macvtap1: entered allmulticast mode
[  921.097890][   T30] audit: type=1326 audit(1766164197.607:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  921.104248][T20092] veth1_vlan: entered allmulticast mode
[  921.215410][   T30] audit: type=1326 audit(1766164197.607:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  921.250880][T20105] binder: BINDER_SET_CONTEXT_MGR already set
[  921.602307][T20105] binder: 20091:20105 ioctl 4018620d 200000000100 returned -16
[  921.612944][   T30] audit: type=1326 audit(1766164197.627:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20073 comm="syz.1.4044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  922.020313][T20112] loop2: detected capacity change from 0 to 7
[  922.027247][T20112] Dev loop2: unable to read RDB block 7
[  922.033369][T20112]  loop2: unable to read partition table
[  922.047954][T20112] loop2: partition table beyond EOD, truncated
[  922.067895][T20112] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  922.370926][T20122] [U] 
[  922.373723][T20122] [U] K{‘
[  922.376816][T20122] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  922.479808][T14447] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  922.531834][T20122] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  922.633157][T20122] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  922.674481][T20122] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  922.719972][T14447] usb 2-1: device descriptor read/64, error -71
[  922.758526][T20122] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  922.831668][T20122] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[  922.855035][T20122] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  922.870723][T20122] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  922.947377][T20122] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿
[  922.960045][T14447] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  923.067824][ T5201] Dev loop2: unable to read RDB block 7
[  923.096824][ T5201]  loop2: unable to read partition table
[  923.119773][T14447] usb 2-1: device descriptor read/64, error -71
[  923.121227][T20138] syz_tun: entered allmulticast mode
[  923.171016][ T5201] loop2: partition table beyond EOD, truncated
[  923.185023][T20140] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  923.239869][ T5201] Dev loop2: unable to read RDB block 7
[  923.245771][ T5201]  loop2: unable to read partition table
[  923.252215][T14447] usb usb2-port1: attempt power cycle
[  923.257877][ T5201] loop2: partition table beyond EOD, truncated
[  923.289827][T14452] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  923.450088][T14452] usb 4-1: Using ep0 maxpacket: 16
[  923.457821][T14452] usb 4-1: config 0 has no interfaces?
[  923.465378][T14452] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  923.494740][T14452] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  923.546532][T14452] usb 4-1: Manufacturer: syz
[  923.577829][T14452] usb 4-1: config 0 descriptor??
[  923.640764][T14447] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  923.710942][T14447] usb 2-1: device descriptor read/8, error -71
[  924.069874][T14447] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  924.104014][T14447] usb 2-1: device descriptor read/8, error -71
[  924.182880][T20148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4067'.
[  924.230111][T14447] usb usb2-port1: unable to enumerate USB device
[  924.358774][ T5201] Dev loop2: unable to read RDB block 7
[  924.366063][ T5201]  loop2: unable to read partition table
[  924.373618][ T5201] loop2: partition table beyond EOD, truncated
[  924.554953][T20157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  924.593715][T20159] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4072'.
[  925.504029][T20179] syzkaller0: entered promiscuous mode
[  925.509938][T20179] syzkaller0: entered allmulticast mode
[  925.778565][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4079'.
[  925.884688][T20186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  925.893517][T20186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  925.997543][T14452] usb 4-1: USB disconnect, device number 17
[  926.237155][T20196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4081'.
[  926.257972][ T5841] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  926.419816][T20199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.431929][ T5841] usb 3-1: config 0 has an invalid interface number: 172 but max is 0
[  926.440282][ T5841] usb 3-1: config 0 has no interface number 0
[  926.449644][ T5841] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de
[  926.505077][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.520012][   T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  926.532481][ T5841] usb 3-1: Product: syz
[  926.538787][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  926.538798][   T30] audit: type=1326 audit(1766164204.277:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  926.578575][ T5841] usb 3-1: Manufacturer: syz
[  926.585585][T20202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.603837][T20201] FAULT_INJECTION: forcing a failure.
[  926.603837][T20201] name failslab, interval 1, probability 0, space 0, times 0
[  926.618392][ T5841] usb 3-1: SerialNumber: syz
[  926.630761][ T5841] usb 3-1: config 0 descriptor??
[  926.644370][ T5841] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state.
[  926.653188][T20201] CPU: 1 UID: 0 PID: 20201 Comm: syz.5.4084 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  926.653220][T20201] Tainted: [L]=SOFTLOCKUP
[  926.653227][T20201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  926.653239][T20201] Call Trace:
[  926.653246][T20201]  <TASK>
[  926.653253][T20201]  dump_stack_lvl+0x189/0x250
[  926.653278][T20201]  ? __pfx____ratelimit+0x10/0x10
[  926.653296][T20201]  ? __pfx_dump_stack_lvl+0x10/0x10
[  926.653313][T20201]  ? __pfx__printk+0x10/0x10
[  926.653332][T20201]  ? vsnprintf+0x38b/0xee0
[  926.653353][T20201]  ? __pfx_snprintf+0x10/0x10
[  926.653379][T20201]  should_fail_ex+0x414/0x560
[  926.653406][T20201]  should_failslab+0xa8/0x100
[  926.653426][T20201]  __kmalloc_noprof+0xdf/0x800
[  926.653443][T20201]  ? aa_label_asxprint+0x70/0x130
[  926.653465][T20201]  aa_label_asxprint+0x70/0x130
[  926.653486][T20201]  apparmor_lsmprop_to_secctx+0x9d/0x170
[  926.653510][T20201]  audit_log_subj_ctx+0xfa/0x510
[  926.653534][T20201]  ? __pfx_audit_log_subj_ctx+0x10/0x10
[  926.653562][T20201]  ? apparmor_current_getlsmprop_subj+0xdd/0x180
[  926.653585][T20201]  audit_log_task_context+0x8c/0xd0
[  926.653605][T20201]  ? __pfx_audit_log_task_context+0x10/0x10
[  926.653626][T20201]  ? audit_log_start+0x7f4/0xa20
[  926.653651][T20201]  audit_log_task+0x190/0x3c0
[  926.653667][T20201]  ? get_pid_task+0x20/0x1f0
[  926.653689][T20201]  ? __pfx_audit_log_task+0x10/0x10
[  926.653709][T20201]  ? __pfx___cant_migrate+0x10/0x10
[  926.653733][T20201]  audit_seccomp+0x86/0x190
[  926.653756][T20201]  __seccomp_filter+0xcf0/0x1e20
[  926.653783][T20201]  ? ksys_write+0x1cb/0x250
[  926.653800][T20201]  ? __pfx___seccomp_filter+0x10/0x10
[  926.653818][T20201]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  926.653835][T20201]  ? __pfx_vfs_write+0x10/0x10
[  926.653854][T20201]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  926.653875][T20201]  ? __fget_files+0x3a0/0x420
[  926.653906][T20201]  ? ksys_write+0x22a/0x250
[  926.653927][T20201]  ? __secure_computing+0xe2/0x2a0
[  926.653955][T20201]  syscall_trace_enter+0xaa/0x160
[  926.653979][T20201]  do_syscall_64+0xd3/0xf80
[  926.653997][T20201]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.654014][T20201]  ? clear_bhb_loop+0x60/0xb0
[  926.654036][T20201]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.654052][T20201] RIP: 0033:0x7f2bb898f749
[  926.654067][T20201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  926.654081][T20201] RSP: 002b:00007f2bb988b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cd
[  926.654100][T20201] RAX: ffffffffffffffda RBX: 00007f2bb8be5fa0 RCX: 00007f2bb898f749
[  926.654113][T20201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  926.654123][T20201] RBP: 00007f2bb988b090 R08: 0000000000000000 R09: 0000000000000000
[  926.654134][T20201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  926.654144][T20201] R13: 00007f2bb8be6038 R14: 00007f2bb8be5fa0 R15: 00007f2bb8d0fa28
[  926.654174][T20201]  </TASK>
[  926.654838][T20201] audit: error in audit_log_subj_ctx
[  926.655109][T20199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.668423][   T30] audit: type=1326 audit(1766164204.347:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bb898df90 code=0x7ffc0000
[  926.991665][ T5841] dvb-usb: bulk message failed: -22 (4/0)
[  926.997401][ T5841] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  927.008780][ T5841] dvb-usb: bulk message failed: -22 (5/0)
[  927.014663][ T5841] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  927.027728][ T5841] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  927.052417][ T5841] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19)
[  927.072496][   T10] usb 1-1: Using ep0 maxpacket: 8
[  927.072673][ T5841] usb 3-1: USB disconnect, device number 36
[  927.106665][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  927.120616][   T10] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  927.151443][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  927.212781][   T10] usb 1-1: config 0 descriptor??
[  927.240202][   T30] audit: type=1326 audit(1766164204.347:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bb898e1ff code=0x7ffc0000
[  927.277492][   T10] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[  927.349757][   T30] audit: type=1326 audit(1766164204.347:928): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  927.392453][   T30] audit: type=1326 audit(1766164204.897:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2bb898e15c code=0x7ffc0000
[  927.459973][   T30] audit: type=1326 audit(1766164204.897:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bb898e1ff code=0x7ffc0000
[  927.573348][   T30] audit: type=1326 audit(1766164204.897:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2bb898e3aa code=0x7ffc0000
[  927.670648][   T30] audit: type=1326 audit(1766164204.897:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  927.703888][   T30] audit: type=1326 audit(1766164204.897:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20200 comm="syz.5.4084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  929.346439][   T10] usb 1-1: USB disconnect, device number 110
[  929.383501][T14447] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  929.563843][T14447] usb 6-1: device descriptor read/64, error -71
[  929.819788][ T5841] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  929.829758][T14447] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  929.920458][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  929.990031][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  930.001335][T14447] usb 6-1: device descriptor read/64, error -71
[  930.029770][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  930.059765][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  930.103156][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  930.110876][   T10] usb 3-1: Using ep0 maxpacket: 8
[  930.120215][T14442] usb 1-1: new full-speed USB device number 111 using dummy_hcd
[  930.129791][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  930.130994][   T10] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  930.150592][T14447] usb usb6-port1: attempt power cycle
[  930.150969][ T5841] usb 2-1: config 0 descriptor??
[  930.189756][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.228871][   T10] usb 3-1: Product: syz
[  930.239053][   T10] usb 3-1: Manufacturer: syz
[  930.249227][   T10] usb 3-1: SerialNumber: syz
[  930.263007][   T10] usb 3-1: config 0 descriptor??
[  930.282719][   T10] gspca_main: se401-2.14.0 probing 047d:5003
[  930.331518][T14442] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  930.342980][T14442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  930.354320][T14442] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  930.378368][T14442] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  930.396559][T14442] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  930.406959][T14442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  930.415690][T14442] usb 1-1: SerialNumber: syz
[  930.489904][T14447] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  930.510578][T14447] usb 6-1: device descriptor read/8, error -71
[  930.536294][T20268] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  930.638519][ T5841] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  930.790108][T14447] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  930.791438][   T10] gspca_se401: Bayer format not supported!
[  930.810556][T14447] usb 6-1: device descriptor read/8, error -71
[  930.930557][T14447] usb usb6-port1: unable to enumerate USB device
[  931.050937][T14447] usb 3-1: USB disconnect, device number 37
[  931.171759][   T10] usb 2-1: USB disconnect, device number 23
[  931.296578][T14442] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  931.314159][T14442] usb 1-1: USB disconnect, device number 111
[  931.604400][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  931.612159][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  932.189794][ T5841] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  932.306935][T20293] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4113'.
[  932.341552][ T5841] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  932.359236][ T5841] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  932.391837][ T5841] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  932.416294][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  932.448613][ T5841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  932.524877][ T5841] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  932.560460][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  932.568543][ T5841] usb 2-1: Product: syz
[  932.583671][ T5841] usb 2-1: Manufacturer: syz
[  932.606585][ T5841] cdc_wdm 2-1:1.0: skipping garbage
[  932.620354][ T5841] cdc_wdm 2-1:1.0: skipping garbage
[  932.636900][ T5841] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  932.655955][ T5841] cdc_wdm 2-1:1.0: Unknown control protocol
[  932.857686][T20310] syzkaller1: entered promiscuous mode
[  932.896220][T20310] syzkaller1: entered allmulticast mode
[  933.157752][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.845379][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  933.915426][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  933.926354][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  934.563664][ T7875] usb 2-1: USB disconnect, device number 24
[  934.637501][T20322] fuse: Bad value for 'fd'
[  936.764994][ T7875] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  937.036087][ T7875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  937.063231][ T7875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  937.096103][ T7875] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  937.132188][ T7875] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  937.160784][ T7875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  937.202877][ T7875] usb 3-1: config 0 descriptor??
[  937.702407][ T7875] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  938.229570][T14442] usb 3-1: USB disconnect, device number 38
[  938.886448][T20361] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4126'.
[  939.158827][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4130'.
[  939.272920][T20378] libceph: resolve '0' (ret=-3): failed
[  939.957762][ T5201] Dev loop6: unable to read RDB block 7
[  939.964213][ T5201]  loop6: unable to read partition table
[  939.970943][ T5201] loop6: partition table beyond EOD, truncated
[  940.609792][T14442] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  940.806397][T14442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  940.821997][T14442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  940.852535][T14442] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  940.894189][T14442] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  940.918042][T14442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  940.954726][T14442] usb 2-1: config 0 descriptor??
[  941.029925][T20410] netlink: 1260 bytes leftover after parsing attributes in process `syz.5.4137'.
[  941.457023][T20414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4139'.
[  941.490220][T14442] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  941.979251][ T5841] usb 2-1: USB disconnect, device number 25
[  942.033750][T20423] netlink: 'syz.5.4140': attribute type 3 has an invalid length.
[  942.061718][T20419] fido_id[20419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  942.386828][T20428] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  943.894413][   T30] audit: type=1326 audit(1766164221.607:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  943.947703][   T30] audit: type=1326 audit(1766164221.607:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  943.998730][   T30] audit: type=1326 audit(1766164221.607:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.056781][T20464] netlink: 'syz.1.4149': attribute type 5 has an invalid length.
[  944.074958][   T30] audit: type=1326 audit(1766164221.607:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.138135][   T30] audit: type=1326 audit(1766164221.607:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.316306][   T30] audit: type=1326 audit(1766164221.607:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f300c58e1ff code=0x7ffc0000
[  944.356453][T20471] binder: BINDER_SET_CONTEXT_MGR already set
[  944.362704][T20471] binder: 20465:20471 ioctl 4018620d 200000000040 returned -16
[  944.444839][   T30] audit: type=1326 audit(1766164221.607:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.548805][   T30] audit: type=1326 audit(1766164221.607:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.675671][   T30] audit: type=1326 audit(1766164221.607:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  944.754327][T20469] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4150'.
[  944.791641][   T30] audit: type=1326 audit(1766164221.607:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20453 comm="syz.2.4148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  945.820145][ T5841] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  945.972923][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  945.991216][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  946.015302][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  946.037394][ T5841] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  946.089528][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  946.120429][ T5841] usb 3-1: config 0 descriptor??
[  946.557931][ T5841] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  947.065338][ T5841] usb 3-1: USB disconnect, device number 39
[  947.474854][T20513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4164'.
[  949.794647][T20558] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4175'.
[  953.908878][T20612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4189'.
[  954.233864][T20620] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  954.243692][T20620] syzkaller0: entered promiscuous mode
[  954.249226][T20620] syzkaller0: entered allmulticast mode
[  954.278585][T20620] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  954.390191][ T5841] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  954.402433][T20628] tipc: Resetting bearer <eth:syzkaller0>
[  954.470150][T20619] tipc: Resetting bearer <eth:syzkaller0>
[  954.545569][T20619] tipc: Disabling bearer <eth:syzkaller0>
[  954.559978][ T5841] usb 4-1: Using ep0 maxpacket: 8
[  954.567435][ T5841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  954.612729][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  954.624427][ T5841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 11965, setting to 1024
[  954.639300][ T5841] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  954.676710][T20639] ip6gretap0: entered promiscuous mode
[  954.707434][T20638] Cannot find add_set index 2 as target
[  954.725104][ T5841] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  954.739952][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249
[  954.761709][ T5841] usb 4-1: SerialNumber: syz
[  954.785538][ T5841] usb 4-1: config 0 descriptor??
[  954.824740][T20622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  954.902548][T20622] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  955.368398][T20630] ip6gretap0: left promiscuous mode
[  955.438345][T20622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.470051][T20622] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  955.551797][ T5841] usb 4-1: USB disconnect, device number 18
[  956.365660][T20662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4205'.
[  958.639991][T14447] usb 6-1: new low-speed USB device number 29 using dummy_hcd
[  958.809826][ T7875] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  958.821803][T14447] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  958.837909][T14447] usb 6-1: config 0 has no interface number 0
[  958.848653][T14447] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  958.868780][T14447] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  958.898748][T14447] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  958.910794][T14447] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  958.922430][T14447] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  958.969810][ T7875] usb 4-1: Invalid ep0 maxpacket: 32
[  959.040088][T14447] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  959.130361][ T7875] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  959.198023][T14447] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  959.233360][T14447] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.258927][T14447] usb 6-1: config 0 descriptor??
[  959.270877][T20688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  959.285983][T20688] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  959.289838][ T7875] usb 4-1: Invalid ep0 maxpacket: 32
[  959.299078][ T7875] usb usb4-port1: attempt power cycle
[  959.308056][T14447] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  959.510574][T20688] ldusb 6-1:0.55: Write buffer overflow, 20 bytes dropped
[  959.670075][ T7875] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  959.710185][ T7875] usb 4-1: Invalid ep0 maxpacket: 32
[  959.852333][ T7875] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  959.960607][ T7875] usb 4-1: Invalid ep0 maxpacket: 32
[  959.967738][ T7875] usb usb4-port1: unable to enumerate USB device
[  960.612829][T20712] veth0: entered promiscuous mode
[  960.634924][T20712] veth0: left promiscuous mode
[  960.780834][T14442] usb 6-1: USB disconnect, device number 29
[  960.807220][T14442] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  960.899810][ T7875] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  961.150736][ T7875] usb 3-1: Using ep0 maxpacket: 16
[  961.433903][ T7875] usb 3-1: config 0 has an invalid interface number: 43 but max is 0
[  961.453407][ T7875] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  961.568797][ T7875] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config
[  961.593213][ T7875] usb 3-1: config 0 has no interface number 0
[  961.610268][T14442] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  961.619807][ T7875] usb 3-1: config 0 interface 43 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  961.713633][ T7875] usb 3-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice=36.d9
[  961.739920][ T7875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  961.758140][ T7875] usb 3-1: Product: syz
[  961.766097][ T7875] usb 3-1: Manufacturer: syz
[  961.776287][ T7875] usb 3-1: SerialNumber: syz
[  961.838907][ T7875] usb 3-1: config 0 descriptor??
[  961.866823][T20729] FAULT_INJECTION: forcing a failure.
[  961.866823][T20729] name failslab, interval 1, probability 0, space 0, times 0
[  961.892888][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.3.4223 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  961.892917][T20729] Tainted: [L]=SOFTLOCKUP
[  961.892925][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  961.892937][T20729] Call Trace:
[  961.892945][T20729]  <TASK>
[  961.892953][T20729]  dump_stack_lvl+0x189/0x250
[  961.892980][T20729]  ? __pfx____ratelimit+0x10/0x10
[  961.892999][T20729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  961.893020][T20729]  ? __pfx__printk+0x10/0x10
[  961.893047][T20729]  ? __pfx___might_resched+0x10/0x10
[  961.893067][T20729]  ? fs_reclaim_acquire+0x7d/0x100
[  961.893091][T20729]  should_fail_ex+0x414/0x560
[  961.893119][T20729]  should_failslab+0xa8/0x100
[  961.893140][T20729]  __kmalloc_cache_noprof+0x84/0x700
[  961.893158][T20729]  ? rtnl_newlink+0xfb/0x1c90
[  961.893176][T20729]  ? stack_depot_save_flags+0x40/0x850
[  961.893206][T20729]  rtnl_newlink+0xfb/0x1c90
[  961.893225][T20729]  ? kasan_save_track+0x4f/0x80
[  961.893242][T20729]  ? kasan_save_track+0x3e/0x80
[  961.893257][T20729]  ? kasan_save_free_info+0x46/0x50
[  961.893280][T20729]  ? __kasan_slab_free+0x5c/0x80
[  961.893296][T20729]  ? kmem_cache_free+0x197/0x620
[  961.893313][T20729]  ? nlmon_xmit+0xb0/0x100
[  961.893333][T20729]  ? dev_hard_start_xmit+0x2cd/0x800
[  961.893354][T20729]  ? __dev_queue_xmit+0x1493/0x3140
[  961.893374][T20729]  ? __netlink_deliver_tap+0x5ad/0x850
[  961.893395][T20729]  ? netlink_deliver_tap+0x19c/0x1b0
[  961.893414][T20729]  ? netlink_unicast+0x7fa/0x9e0
[  961.893430][T20729]  ? netlink_sendmsg+0x805/0xb30
[  961.893451][T20729]  ? __pfx_rtnl_newlink+0x10/0x10
[  961.893468][T20729]  ? do_syscall_64+0xfa/0xf80
[  961.893484][T20729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.893534][T20729]  ? kasan_quarantine_put+0xdd/0x220
[  961.893552][T20729]  ? lockdep_hardirqs_on+0x98/0x140
[  961.893576][T20729]  ? kmem_cache_free+0x197/0x620
[  961.893593][T20729]  ? nlmon_xmit+0xb0/0x100
[  961.893623][T20729]  ? __lock_acquire+0x6b6/0x2cf0
[  961.893645][T20729]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  961.893667][T20729]  ? __dev_queue_xmit+0x289/0x3140
[  961.893689][T20729]  ? __dev_queue_xmit+0x289/0x3140
[  961.893710][T20729]  ? __dev_queue_xmit+0x289/0x3140
[  961.893758][T20729]  ? __pfx_rtnl_newlink+0x10/0x10
[  961.893776][T20729]  rtnetlink_rcv_msg+0x7cf/0xb70
[  961.893804][T20729]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  961.893822][T20729]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  961.893839][T20729]  ? ref_tracker_free+0x63a/0x7d0
[  961.893857][T20729]  ? __asan_memcpy+0x40/0x70
[  961.893873][T20729]  ? __pfx_ref_tracker_free+0x10/0x10
[  961.893889][T20729]  ? __skb_clone+0x63/0x7a0
[  961.893919][T20729]  netlink_rcv_skb+0x208/0x470
[  961.893941][T20729]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  961.893962][T20729]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  961.893994][T20729]  ? netlink_deliver_tap+0x2e/0x1b0
[  961.894023][T20729]  netlink_unicast+0x82f/0x9e0
[  961.894051][T20729]  ? __pfx_netlink_unicast+0x10/0x10
[  961.894072][T20729]  ? netlink_sendmsg+0x642/0xb30
[  961.894091][T20729]  ? skb_put+0x11b/0x210
[  961.894112][T20729]  netlink_sendmsg+0x805/0xb30
[  961.894142][T20729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  961.894166][T20729]  ? aa_sock_msg_perm+0xf1/0x1b0
[  961.894190][T20729]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  961.894207][T20729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  961.894230][T20729]  __sock_sendmsg+0x21c/0x270
[  961.894257][T20729]  ____sys_sendmsg+0x505/0x820
[  961.894284][T20729]  ? __pfx_____sys_sendmsg+0x10/0x10
[  961.894313][T20729]  ? import_iovec+0x74/0xa0
[  961.894338][T20729]  ___sys_sendmsg+0x21f/0x2a0
[  961.894360][T20729]  ? __pfx____sys_sendmsg+0x10/0x10
[  961.894388][T20729]  ? rcu_read_lock_any_held+0xb3/0x120
[  961.894434][T20729]  ? __fget_files+0x2a/0x420
[  961.894454][T20729]  ? __fget_files+0x3a0/0x420
[  961.894484][T20729]  __x64_sys_sendmsg+0x19b/0x260
[  961.894507][T20729]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  961.894538][T20729]  ? __pfx_ksys_write+0x10/0x10
[  961.894559][T20729]  ? do_syscall_64+0xbe/0xf80
[  961.894581][T20729]  do_syscall_64+0xfa/0xf80
[  961.894600][T20729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.894617][T20729]  ? clear_bhb_loop+0x60/0xb0
[  961.894638][T20729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.894655][T20729] RIP: 0033:0x7f3f00f8f749
[  961.894673][T20729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  961.894687][T20729] RSP: 002b:00007f3eff1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  961.894708][T20729] RAX: ffffffffffffffda RBX: 00007f3f011e5fa0 RCX: 00007f3f00f8f749
[  961.894721][T20729] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003
[  961.894733][T20729] RBP: 00007f3eff1f6090 R08: 0000000000000000 R09: 0000000000000000
[  961.894745][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.894755][T20729] R13: 00007f3f011e6038 R14: 00007f3f011e5fa0 R15: 00007f3f0130fa28
[  961.894784][T20729]  </TASK>
[  961.897199][ T7875] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9001) Rev (0X36D9): ADI930
[  962.739907][T14442] usb 6-1: Using ep0 maxpacket: 8
[  962.891406][T14442] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  962.900010][T14442] usb 6-1: config 179 has no interface number 0
[  962.906322][T14442] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  962.970819][T14442] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  963.017957][T14442] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  963.044270][T14442] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  963.082185][T14442] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  963.106977][T14442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.143551][T20726] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  963.524512][ T7875] usb 3-1: [ueagle-atm] pre-firmware device, uploading firmware
[  963.535208][ T7875] usb 3-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw
[  963.543783][ T5841] usb 3-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2
[  963.554187][ T5841] usb 3-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw
[  963.634866][ T7875] usb 3-1: USB disconnect, device number 40
[  964.176597][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'.
[  965.003312][T14452] usb 6-1: USB disconnect, device number 30
[  966.030990][T20783] loop3: detected capacity change from 0 to 7
[  966.058261][T20783] Dev loop3: unable to read RDB block 7
[  966.073898][T20783]  loop3: unable to read partition table
[  966.096191][T20783] loop3: partition table beyond EOD, truncated
[  966.114375][T20783] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[  966.477478][T20797] Cannot find add_set index 2 as target
[  967.122972][T14442] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  967.302423][T14442] usb 4-1: config 8 has an invalid interface number: 86 but max is 3
[  967.310753][T14442] usb 4-1: config 8 has an invalid interface number: 38 but max is 3
[  967.319037][T14442] usb 4-1: config 8 has an invalid interface number: 47 but max is 3
[  967.356275][T14442] usb 4-1: config 8 has an invalid interface number: 108 but max is 3
[  967.381107][T14442] usb 4-1: config 8 has no interface number 0
[  967.400541][T14442] usb 4-1: config 8 has no interface number 1
[  967.451759][T14442] usb 4-1: config 8 has no interface number 2
[  967.470095][T14442] usb 4-1: config 8 has no interface number 3
[  967.490024][T14442] usb 4-1: config 8 interface 86 altsetting 220 endpoint 0x7 has invalid maxpacket 1560, setting to 64
[  967.529808][T14442] usb 4-1: config 8 interface 86 altsetting 220 endpoint 0x6 has invalid maxpacket 15840, setting to 64
[  967.560981][T14442] usb 4-1: config 8 interface 86 altsetting 220 has an invalid descriptor for endpoint zero, skipping
[  967.591364][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4246'.
[  967.619785][T14442] usb 4-1: config 8 interface 86 altsetting 220 has a duplicate endpoint with address 0x1, skipping
[  967.639766][T14442] usb 4-1: config 8 interface 86 altsetting 220 has a duplicate endpoint with address 0x7, skipping
[  967.678141][T14442] usb 4-1: config 8 interface 86 altsetting 220 has an invalid descriptor for endpoint zero, skipping
[  967.696813][T14442] usb 4-1: config 8 interface 38 altsetting 2 has a duplicate endpoint with address 0x5, skipping
[  967.708318][T14442] usb 4-1: config 8 interface 38 altsetting 2 endpoint 0x8C has invalid maxpacket 1024, setting to 64
[  967.888121][T14442] usb 4-1: config 8 interface 38 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  967.951161][T14442] usb 4-1: config 8 interface 38 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  967.982723][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4247'.
[  967.985169][T14442] usb 4-1: config 8 interface 38 altsetting 2 endpoint 0xD has invalid maxpacket 479, setting to 64
[  968.032768][T14442] usb 4-1: config 8 interface 38 altsetting 2 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  968.043985][T14442] usb 4-1: config 8 interface 38 altsetting 2 has a duplicate endpoint with address 0x7, skipping
[  968.054984][T14442] usb 4-1: config 8 interface 38 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  968.076993][T14442] usb 4-1: config 8 interface 38 altsetting 2 has a duplicate endpoint with address 0xB, skipping
[  968.157766][T20822] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  968.196186][T14442] usb 4-1: config 8 interface 38 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  968.275375][T14442] usb 4-1: config 8 interface 47 altsetting 127 has an invalid endpoint descriptor of length 4, skipping
[  968.302983][T14442] usb 4-1: config 8 interface 47 altsetting 127 has a duplicate endpoint with address 0xD, skipping
[  968.505188][T14442] usb 4-1: config 8 interface 47 altsetting 127 has an invalid descriptor for endpoint zero, skipping
[  968.556923][T14442] usb 4-1: config 8 interface 47 altsetting 127 has a duplicate endpoint with address 0x9, skipping
[  968.619175][T14442] usb 4-1: config 8 interface 47 altsetting 127 has a duplicate endpoint with address 0xB, skipping
[  968.717580][T14442] usb 4-1: config 8 interface 47 altsetting 127 has 7 endpoint descriptors, different from the interface descriptor's value: 6
[  968.745589][T14442] usb 4-1: config 8 interface 86 has no altsetting 0
[  968.798413][T14442] usb 4-1: config 8 interface 38 has no altsetting 0
[  968.815745][T14442] usb 4-1: config 8 interface 47 has no altsetting 0
[  968.830526][T14442] usb 4-1: config 8 interface 108 has no altsetting 0
[  968.843295][T14442] usb 4-1: Dual-Role OTG device on HNP port
[  968.872052][T14442] usb 4-1: New USB device found, idVendor=184f, idProduct=0051, bcdDevice=74.22
[  968.888593][T14442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  968.949966][T14447] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  969.221344][T14447] usb 3-1: config 0 has an invalid interface number: 46 but max is 0
[  969.229505][T14447] usb 3-1: config 0 has no interface number 0
[  969.277263][T14442] usb 4-1: string descriptor 0 read error: -71
[  969.308867][T14447] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  969.326132][T14442] smsc95xx v2.0.0
[  969.330679][T14442] smsc95xx 4-1:8.86 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  969.340958][T14447] usb 3-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  969.426736][T14442] smsc95xx 4-1:8.86: probe with driver smsc95xx failed with error -22
[  969.447633][T14447] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  969.498845][T14447] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  969.509563][T14442] smsc95xx v2.0.0
[  969.513787][T14442] smsc95xx 4-1:8.38 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  969.524301][T14447] usb 3-1: Product: syz
[  969.528588][T14447] usb 3-1: Manufacturer: syz
[  969.543736][T14447] usb 3-1: SerialNumber: syz
[  969.567536][T14442] smsc95xx 4-1:8.38: probe with driver smsc95xx failed with error -22
[  969.592520][T14447] usb 3-1: config 0 descriptor??
[  969.625248][T14447] ums-karma 3-1:0.46: USB Mass Storage device detected
[  969.635278][T14442] smsc95xx v2.0.0
[  969.643089][T14442] smsc95xx 4-1:8.47 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  969.677530][T14442] smsc95xx 4-1:8.47: probe with driver smsc95xx failed with error -22
[  969.733756][T14447] ums-karma 3-1:0.46: probe with driver ums-karma failed with error -5
[  969.745680][T14442] smsc95xx v2.0.0
[  969.754569][T14442] smsc95xx 4-1:8.108 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  969.771356][T14442] smsc95xx 4-1:8.108: probe with driver smsc95xx failed with error -22
[  969.820842][T20833] netlink: 'syz.2.4252': attribute type 2 has an invalid length.
[  969.829527][T14442] usb 4-1: USB disconnect, device number 23
[  969.842215][T20833] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.4252'.
[  970.038136][ T5915] usb 3-1: USB disconnect, device number 41
[  971.251392][T20871] Cannot find add_set index 2 as target
[  971.486597][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4266'.
[  971.577220][T20882] FAULT_INJECTION: forcing a failure.
[  971.577220][T20882] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.599809][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.5.4266 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  971.599838][T20882] Tainted: [L]=SOFTLOCKUP
[  971.599844][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  971.599855][T20882] Call Trace:
[  971.599863][T20882]  <TASK>
[  971.599873][T20882]  dump_stack_lvl+0x189/0x250
[  971.599899][T20882]  ? __pfx____ratelimit+0x10/0x10
[  971.599917][T20882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  971.599938][T20882]  ? __pfx__printk+0x10/0x10
[  971.599975][T20882]  should_fail_ex+0x414/0x560
[  971.600005][T20882]  _copy_to_user+0x31/0xb0
[  971.600029][T20882]  simple_read_from_buffer+0xe1/0x170
[  971.600054][T20882]  proc_fail_nth_read+0x1b3/0x220
[  971.600077][T20882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  971.600099][T20882]  ? rw_verify_area+0x2a6/0x4d0
[  971.600115][T20882]  ? tun_chr_write_iter+0x18a/0x200
[  971.600134][T20882]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  971.600161][T20882]  vfs_read+0x200/0xa30
[  971.600178][T20882]  ? fdget_pos+0x247/0x320
[  971.600203][T20882]  ? __pfx___mutex_lock+0x10/0x10
[  971.600223][T20882]  ? __pfx_vfs_read+0x10/0x10
[  971.600242][T20882]  ? __fget_files+0x2a/0x420
[  971.600266][T20882]  ? __fget_files+0x3a0/0x420
[  971.600284][T20882]  ? __fget_files+0x2a/0x420
[  971.600312][T20882]  ksys_read+0x145/0x250
[  971.600329][T20882]  ? __pfx_ksys_read+0x10/0x10
[  971.600347][T20882]  ? do_syscall_64+0xbe/0xf80
[  971.600367][T20882]  do_syscall_64+0xfa/0xf80
[  971.600384][T20882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.600401][T20882]  ? clear_bhb_loop+0x60/0xb0
[  971.600422][T20882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  971.600438][T20882] RIP: 0033:0x7f2bb898e15c
[  971.600455][T20882] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  971.600469][T20882] RSP: 002b:00007f2bb986a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  971.600486][T20882] RAX: ffffffffffffffda RBX: 00007f2bb8be6090 RCX: 00007f2bb898e15c
[  971.600499][T20882] RDX: 000000000000000f RSI: 00007f2bb986a0a0 RDI: 0000000000000004
[  971.600510][T20882] RBP: 00007f2bb986a090 R08: 0000000000000000 R09: 0000000000000000
[  971.600522][T20882] R10: 000000000000fdef R11: 0000000000000246 R12: 0000000000000002
[  971.600533][T20882] R13: 00007f2bb8be6128 R14: 00007f2bb8be6090 R15: 00007f2bb8d0fa28
[  971.600564][T20882]  </TASK>
[  973.280507][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4275'.
[  973.517797][T20911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4275'.
[  973.881640][T20922] FAULT_INJECTION: forcing a failure.
[  973.881640][T20922] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  973.909541][T20922] CPU: 0 UID: 0 PID: 20922 Comm: syz.2.4279 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  973.909572][T20922] Tainted: [L]=SOFTLOCKUP
[  973.909579][T20922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  973.909591][T20922] Call Trace:
[  973.909599][T20922]  <TASK>
[  973.909608][T20922]  dump_stack_lvl+0x189/0x250
[  973.909635][T20922]  ? __pfx____ratelimit+0x10/0x10
[  973.909652][T20922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  973.909673][T20922]  ? __pfx__printk+0x10/0x10
[  973.909694][T20922]  ? fs_reclaim_acquire+0x7d/0x100
[  973.909719][T20922]  should_fail_ex+0x414/0x560
[  973.909745][T20922]  prepare_alloc_pages+0x22b/0x650
[  973.909771][T20922]  __alloc_frozen_pages_noprof+0x123/0x370
[  973.909795][T20922]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  973.909830][T20922]  alloc_pages_bulk_noprof+0x560/0x710
[  973.909849][T20922]  ? trace_kmalloc+0x1f/0xb0
[  973.909866][T20922]  ? copy_splice_read+0x143/0xa50
[  973.909892][T20922]  copy_splice_read+0x173/0xa50
[  973.909930][T20922]  ? __pfx_copy_splice_read+0x10/0x10
[  973.909953][T20922]  ? register_lock_class+0x51/0x320
[  973.909978][T20922]  ? file_end_write+0xd8/0x250
[  973.910000][T20922]  ? direct_splice_actor+0x10c/0x160
[  973.910024][T20922]  ? __pfx_shmem_file_splice_read+0x10/0x10
[  973.910048][T20922]  splice_direct_to_actor+0x4d0/0xcc0
[  973.910090][T20922]  ? __pfx_direct_splice_actor+0x10/0x10
[  973.910111][T20922]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  973.910142][T20922]  do_splice_direct+0x181/0x270
[  973.910167][T20922]  ? __pfx_do_splice_direct+0x10/0x10
[  973.910186][T20922]  ? common_file_perm+0x1b5/0x220
[  973.910208][T20922]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  973.910232][T20922]  ? bpf_lsm_file_permission+0x9/0x20
[  973.910247][T20922]  ? security_file_permission+0x75/0x290
[  973.910265][T20922]  ? rw_verify_area+0x255/0x4d0
[  973.910286][T20922]  do_sendfile+0x4da/0x7e0
[  973.910307][T20922]  ? __pfx_vfs_write+0x10/0x10
[  973.910329][T20922]  ? __pfx_do_sendfile+0x10/0x10
[  973.910350][T20922]  ? __fget_files+0x3a0/0x420
[  973.910381][T20922]  __se_sys_sendfile64+0x13e/0x190
[  973.910404][T20922]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  973.910428][T20922]  ? do_syscall_64+0xbe/0xf80
[  973.910450][T20922]  do_syscall_64+0xfa/0xf80
[  973.910469][T20922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  973.910487][T20922]  ? clear_bhb_loop+0x60/0xb0
[  973.910508][T20922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  973.910525][T20922] RIP: 0033:0x7f300c58f749
[  973.910542][T20922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  973.910557][T20922] RSP: 002b:00007f300d3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  973.910577][T20922] RAX: ffffffffffffffda RBX: 00007f300c7e5fa0 RCX: 00007f300c58f749
[  973.910590][T20922] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000006
[  973.910601][T20922] RBP: 00007f300d3f3090 R08: 0000000000000000 R09: 0000000000000000
[  973.910613][T20922] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002
[  973.910624][T20922] R13: 00007f300c7e6038 R14: 00007f300c7e5fa0 R15: 00007f300c90fa28
[  973.910653][T20922]  </TASK>
[  974.220825][ T7875] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  974.382270][ T7875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  974.393483][ T7875] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  974.615655][ T7875] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  974.653391][ T7875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.706138][ T7875] usb 1-1: config 0 descriptor??
[  974.774367][T20930] Cannot find add_set index 2 as target
[  975.833134][T20944] libceph: resolve '0..' (ret=-3): failed
[  976.491187][T20965] fuse: Bad value for 'fd'
[  976.824210][T14442] usb 1-1: USB disconnect, device number 112
[  977.087336][T20949] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  977.094103][T20949] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  977.152431][T20949] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  977.199013][T20949] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  977.218150][T20949] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  977.224371][T20949] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  977.422340][T20949] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  977.445251][T20949] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  977.453558][T20949] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  977.470150][T20949] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  977.979976][T14452] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  978.149848][T14452] usb 2-1: Using ep0 maxpacket: 32
[  978.161077][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[  978.167447][T14452] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  978.200180][T14452] usb 2-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6
[  978.209279][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.227870][T14452] usb 2-1: Product: syz
[  978.235893][T14452] usb 2-1: Manufacturer: syz
[  978.294559][T14452] usb 2-1: SerialNumber: syz
[  978.496637][T14452] usb 2-1: config 0 descriptor??
[  978.522226][T14452] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench found
[  978.534502][T14452] usb 2-1: selecting invalid altsetting 1
[  978.540988][T14452] snd_usb_variax 2-1:0.0: set_interface failed
[  978.551152][T14452] snd_usb_variax 2-1:0.0: Line 6 Variax Workbench now disconnected
[  978.566134][T14452] snd_usb_variax 2-1:0.0: probe with driver snd_usb_variax failed with error -22
[  978.619845][ T7875] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  978.729919][T20979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  978.753841][T20979] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  978.782217][ T7875] usb 4-1: Using ep0 maxpacket: 8
[  978.788781][T14452] usb 2-1: USB disconnect, device number 26
[  978.797593][ T7875] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  978.806979][ T7875] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  978.895137][ T7875] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  978.953525][ T7875] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  978.982436][ T7875] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  979.035535][ T7875] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  979.070385][ T7875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  979.199771][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  979.279745][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[  979.439978][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  979.530795][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[  979.545132][T20993] usbtmc 4-1:16.0: simple usb_control_msg failed -71
[  979.552207][T14442] usb 4-1: USB disconnect, device number 24
[  979.724606][T21009] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4301'.
[  979.736958][T21009] fuse: Bad value for 'fd'
[  980.240039][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[  980.321251][T21020] syz_tun: entered allmulticast mode
[  980.712038][T21025] FAULT_INJECTION: forcing a failure.
[  980.712038][T21025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  980.834026][T21025] CPU: 1 UID: 0 PID: 21025 Comm: syz.3.4307 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  980.834055][T21025] Tainted: [L]=SOFTLOCKUP
[  980.834062][T21025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  980.834073][T21025] Call Trace:
[  980.834081][T21025]  <TASK>
[  980.834091][T21025]  dump_stack_lvl+0x189/0x250
[  980.834116][T21025]  ? __pfx____ratelimit+0x10/0x10
[  980.834134][T21025]  ? __pfx_dump_stack_lvl+0x10/0x10
[  980.834155][T21025]  ? __pfx__printk+0x10/0x10
[  980.834178][T21025]  ? __might_fault+0xb0/0x130
[  980.834210][T21025]  should_fail_ex+0x414/0x560
[  980.834243][T21025]  _copy_from_user+0x2d/0xb0
[  980.834264][T21025]  ___sys_sendmsg+0x158/0x2a0
[  980.834296][T21025]  ? __pfx____sys_sendmsg+0x10/0x10
[  980.834313][T21025]  ? __lock_acquire+0x6b6/0x2cf0
[  980.834372][T21025]  ? __might_fault+0xb0/0x130
[  980.834399][T21025]  __sys_sendmmsg+0x227/0x430
[  980.834426][T21025]  ? __pfx___sys_sendmmsg+0x10/0x10
[  980.834456][T21025]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  980.834490][T21025]  ? ksys_write+0x22a/0x250
[  980.834509][T21025]  ? __pfx_ksys_write+0x10/0x10
[  980.834531][T21025]  __x64_sys_sendmmsg+0xa0/0xc0
[  980.834554][T21025]  do_syscall_64+0xfa/0xf80
[  980.834573][T21025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.834590][T21025]  ? clear_bhb_loop+0x60/0xb0
[  980.834612][T21025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.834629][T21025] RIP: 0033:0x7f3f00f8f749
[  980.834645][T21025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  980.834659][T21025] RSP: 002b:00007f3eff1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  980.834679][T21025] RAX: ffffffffffffffda RBX: 00007f3f011e5fa0 RCX: 00007f3f00f8f749
[  980.834692][T21025] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003
[  980.834705][T21025] RBP: 00007f3eff1f6090 R08: 0000000000000000 R09: 0000000000000000
[  980.834716][T21025] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000002
[  980.834727][T21025] R13: 00007f3f011e6038 R14: 00007f3f011e5fa0 R15: 00007f3f0130fa28
[  980.834758][T21025]  </TASK>
[  981.339799][ T5832] Bluetooth: hci2: command 0x0406 tx timeout
[  981.360324][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[  981.520097][ T5832] Bluetooth: hci3: command 0x0406 tx timeout
[  981.599927][ T5832] Bluetooth: hci0: command 0x0406 tx timeout
[  981.696101][T21034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4311'.
[  982.266206][   T30] kauditd_printk_skb: 31 callbacks suppressed
[  982.266219][   T30] audit: type=1326 audit(1766164260.007:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  982.302230][T21056] FAULT_INJECTION: forcing a failure.
[  982.302230][T21056] name failslab, interval 1, probability 0, space 0, times 0
[  982.349848][T21056] CPU: 1 UID: 0 PID: 21056 Comm: syz.5.4318 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  982.349879][T21056] Tainted: [L]=SOFTLOCKUP
[  982.349886][T21056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  982.349896][T21056] Call Trace:
[  982.349904][T21056]  <TASK>
[  982.349912][T21056]  dump_stack_lvl+0x189/0x250
[  982.349937][T21056]  ? __pfx____ratelimit+0x10/0x10
[  982.349957][T21056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  982.349977][T21056]  ? __pfx__printk+0x10/0x10
[  982.350007][T21056]  ? __pfx___might_resched+0x10/0x10
[  982.350026][T21056]  ? fs_reclaim_acquire+0x7d/0x100
[  982.350050][T21056]  should_fail_ex+0x414/0x560
[  982.350080][T21056]  should_failslab+0xa8/0x100
[  982.350102][T21056]  __kmalloc_cache_noprof+0x84/0x700
[  982.350121][T21056]  ? audit_log_d_path+0xb8/0x1a0
[  982.350145][T21056]  audit_log_d_path+0xb8/0x1a0
[  982.350166][T21056]  audit_log_d_path_exe+0x42/0x70
[  982.350194][T21056]  audit_log_task+0x2b3/0x3c0
[  982.350212][T21056]  ? get_pid_task+0x20/0x1f0
[  982.350234][T21056]  ? __pfx_audit_log_task+0x10/0x10
[  982.350255][T21056]  ? __pfx___cant_migrate+0x10/0x10
[  982.350279][T21056]  audit_seccomp+0x86/0x190
[  982.350301][T21056]  __seccomp_filter+0xcf0/0x1e20
[  982.350329][T21056]  ? ksys_write+0x1cb/0x250
[  982.350347][T21056]  ? __pfx___seccomp_filter+0x10/0x10
[  982.350365][T21056]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  982.350385][T21056]  ? __pfx_vfs_write+0x10/0x10
[  982.350405][T21056]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  982.350428][T21056]  ? __fget_files+0x3a0/0x420
[  982.350459][T21056]  ? ksys_write+0x22a/0x250
[  982.350480][T21056]  ? __secure_computing+0xe2/0x2a0
[  982.350502][T21056]  syscall_trace_enter+0xaa/0x160
[  982.350525][T21056]  do_syscall_64+0xd3/0xf80
[  982.350544][T21056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.350561][T21056]  ? clear_bhb_loop+0x60/0xb0
[  982.350582][T21056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  982.350600][T21056] RIP: 0033:0x7f2bb898f749
[  982.350616][T21056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  982.350630][T21056] RSP: 002b:00007f2bb988b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cd
[  982.350649][T21056] RAX: ffffffffffffffda RBX: 00007f2bb8be5fa0 RCX: 00007f2bb898f749
[  982.350662][T21056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  982.350673][T21056] RBP: 00007f2bb988b090 R08: 0000000000000000 R09: 0000000000000000
[  982.350684][T21056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  982.350695][T21056] R13: 00007f2bb8be6038 R14: 00007f2bb8be5fa0 R15: 00007f2bb8d0fa28
[  982.350725][T21056]  </TASK>
[  982.623140][   T30] audit: type=1326 audit(1766164260.047:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2bb898df90 code=0x7ffc0000
[  982.646373][   T30] audit: type=1326 audit(1766164260.047:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bb898e1ff code=0x7ffc0000
[  982.668712][   T30] audit: type=1326 audit(1766164260.047:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="<no_memory>" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  982.690486][   T30] audit: type=1326 audit(1766164260.097:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2bb898e15c code=0x7ffc0000
[  982.713003][   T30] audit: type=1326 audit(1766164260.097:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2bb898e1ff code=0x7ffc0000
[  982.735476][   T30] audit: type=1326 audit(1766164260.097:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2bb898e3aa code=0x7ffc0000
[  982.757896][   T30] audit: type=1326 audit(1766164260.097:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21055 comm="syz.5.4318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb898f749 code=0x7ffc0000
[  982.788841][ T7875] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  982.944004][ T7875] usb 1-1: unable to get BOS descriptor or descriptor too short
[  982.956207][ T7875] usb 1-1: config 3 has an invalid interface number: 221 but max is 0
[  982.966107][ T7875] usb 1-1: config 3 has no interface number 0
[  983.054974][ T7875] usb 1-1: config 3 interface 221 has no altsetting 0
[  983.057566][T21067] FAULT_INJECTION: forcing a failure.
[  983.057566][T21067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  983.079839][T21067] CPU: 0 UID: 0 PID: 21067 Comm: syz.3.4321 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  983.079874][T21067] Tainted: [L]=SOFTLOCKUP
[  983.079880][T21067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  983.079891][T21067] Call Trace:
[  983.079898][T21067]  <TASK>
[  983.079906][T21067]  dump_stack_lvl+0x189/0x250
[  983.079933][T21067]  ? __pfx____ratelimit+0x10/0x10
[  983.079951][T21067]  ? __pfx_dump_stack_lvl+0x10/0x10
[  983.079970][T21067]  ? __pfx__printk+0x10/0x10
[  983.080006][T21067]  should_fail_ex+0x414/0x560
[  983.080037][T21067]  _copy_to_user+0x31/0xb0
[  983.080060][T21067]  simple_read_from_buffer+0xe1/0x170
[  983.080087][T21067]  proc_fail_nth_read+0x1b3/0x220
[  983.080108][T21067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  983.080131][T21067]  ? rw_verify_area+0x2a6/0x4d0
[  983.080148][T21067]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  983.080166][T21067]  vfs_read+0x200/0xa30
[  983.080182][T21067]  ? fdget_pos+0x247/0x320
[  983.080205][T21067]  ? __pfx___mutex_lock+0x10/0x10
[  983.080224][T21067]  ? __pfx_vfs_read+0x10/0x10
[  983.080243][T21067]  ? __fget_files+0x2a/0x420
[  983.080267][T21067]  ? __fget_files+0x3a0/0x420
[  983.080287][T21067]  ? __fget_files+0x2a/0x420
[  983.080317][T21067]  ksys_read+0x145/0x250
[  983.080337][T21067]  ? __pfx_ksys_read+0x10/0x10
[  983.080358][T21067]  ? do_syscall_64+0xbe/0xf80
[  983.080380][T21067]  do_syscall_64+0xfa/0xf80
[  983.080398][T21067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.080416][T21067]  ? clear_bhb_loop+0x60/0xb0
[  983.080438][T21067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  983.080455][T21067] RIP: 0033:0x7f3f00f8e15c
[  983.080473][T21067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  983.080487][T21067] RSP: 002b:00007f3eff1d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  983.080506][T21067] RAX: ffffffffffffffda RBX: 00007f3f011e6090 RCX: 00007f3f00f8e15c
[  983.080520][T21067] RDX: 000000000000000f RSI: 00007f3eff1d50a0 RDI: 0000000000000004
[  983.080532][T21067] RBP: 00007f3eff1d5090 R08: 0000000000000000 R09: 0000000000000000
[  983.080543][T21067] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  983.080555][T21067] R13: 00007f3f011e6128 R14: 00007f3f011e6090 R15: 00007f3f0130fa28
[  983.080586][T21067]  </TASK>
[  983.090174][ T7875] usb 1-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=e7.b4
[  983.341451][ T7875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.349585][ T7875] usb 1-1: Product: syz
[  983.380035][ T7875] usb 1-1: Manufacturer: syz
[  983.384900][ T7875] usb 1-1: SerialNumber: syz
[  983.764773][T21076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4324'.
[  983.795793][ T7875] belkin_sa 1-1:3.221: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  983.822444][ T7875] usb 1-1: bcdDevice: e7b4, bfc: 0
[  983.845004][ T7875] usb 1-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  983.919298][ T7875] usb 1-1: USB disconnect, device number 113
[  983.931498][ T7875] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  983.932847][ T7875] belkin_sa 1-1:3.221: device disconnected
[  984.144990][T21082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4326'.
[  984.642851][T21092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4330'.
[  984.704193][T21092] 8021q: adding VLAN 0 to HW filter on device bond2
[  984.807987][T21096] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  986.519830][ T5915] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  986.653475][ T5915] usb 4-1: device descriptor read/64, error -71
[  986.919787][ T5915] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  987.021120][T21125] FAULT_INJECTION: forcing a failure.
[  987.021120][T21125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  987.052721][T21125] CPU: 0 UID: 0 PID: 21125 Comm: syz.0.4337 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  987.052758][T21125] Tainted: [L]=SOFTLOCKUP
[  987.052765][T21125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  987.052775][T21125] Call Trace:
[  987.052783][T21125]  <TASK>
[  987.052791][T21125]  dump_stack_lvl+0x189/0x250
[  987.052817][T21125]  ? __pfx____ratelimit+0x10/0x10
[  987.052834][T21125]  ? __pfx_dump_stack_lvl+0x10/0x10
[  987.052854][T21125]  ? __pfx__printk+0x10/0x10
[  987.052876][T21125]  ? __might_fault+0xb0/0x130
[  987.052912][T21125]  should_fail_ex+0x414/0x560
[  987.052940][T21125]  _copy_from_iter+0x1cd/0x1630
[  987.052961][T21125]  ? __build_skb_around+0x22d/0x3c0
[  987.052988][T21125]  ? __pfx__copy_from_iter+0x10/0x10
[  987.053003][T21125]  ? __alloc_skb+0x2f1/0x430
[  987.053024][T21125]  ? __pfx___alloc_skb+0x10/0x10
[  987.053042][T21125]  ? netlink_sendmsg+0x642/0xb30
[  987.053059][T21125]  ? skb_put+0x11b/0x210
[  987.053081][T21125]  netlink_sendmsg+0x6b2/0xb30
[  987.053112][T21125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  987.053136][T21125]  ? aa_sock_msg_perm+0xf1/0x1b0
[  987.053159][T21125]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  987.053176][T21125]  ? __pfx_netlink_sendmsg+0x10/0x10
[  987.053196][T21125]  __sock_sendmsg+0x21c/0x270
[  987.053223][T21125]  ____sys_sendmsg+0x505/0x820
[  987.053249][T21125]  ? __pfx_____sys_sendmsg+0x10/0x10
[  987.053276][T21125]  ? import_iovec+0x74/0xa0
[  987.053299][T21125]  ___sys_sendmsg+0x21f/0x2a0
[  987.053321][T21125]  ? __pfx____sys_sendmsg+0x10/0x10
[  987.053346][T21125]  ? rcu_read_lock_any_held+0xb3/0x120
[  987.053394][T21125]  ? __fget_files+0x2a/0x420
[  987.053415][T21125]  ? __fget_files+0x3a0/0x420
[  987.053445][T21125]  __x64_sys_sendmsg+0x19b/0x260
[  987.053468][T21125]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  987.053497][T21125]  ? __pfx_ksys_write+0x10/0x10
[  987.053518][T21125]  ? do_syscall_64+0xbe/0xf80
[  987.053541][T21125]  do_syscall_64+0xfa/0xf80
[  987.053559][T21125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.053576][T21125]  ? clear_bhb_loop+0x60/0xb0
[  987.053597][T21125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.053614][T21125] RIP: 0033:0x7f6f9cf8f749
[  987.053630][T21125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  987.053646][T21125] RSP: 002b:00007f6f9ddf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  987.053665][T21125] RAX: ffffffffffffffda RBX: 00007f6f9d1e5fa0 RCX: 00007f6f9cf8f749
[  987.053678][T21125] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003
[  987.053691][T21125] RBP: 00007f6f9ddf9090 R08: 0000000000000000 R09: 0000000000000000
[  987.053703][T21125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  987.053714][T21125] R13: 00007f6f9d1e6038 R14: 00007f6f9d1e5fa0 R15: 00007f6f9d30fa28
[  987.053750][T21125]  </TASK>
[  987.479885][ T5915] usb 4-1: device descriptor read/64, error -71
[  987.590074][ T5915] usb usb4-port1: attempt power cycle
[  987.718148][   T30] audit: type=1326 audit(1766164265.457:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21135 comm="syz.2.4341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x0
[  987.930015][ T5915] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  988.087844][ T5915] usb 4-1: device descriptor read/8, error -71
[  988.349775][ T5915] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  988.370550][ T5915] usb 4-1: device descriptor read/8, error -71
[  988.480441][ T5915] usb usb4-port1: unable to enumerate USB device
[  988.944132][T21159] binder: BINDER_SET_CONTEXT_MGR already set
[  988.977706][T21159] binder: 21158:21159 ioctl 4018620d 200000000100 returned -16
[  989.013158][T21159] binder: 21158:21159 ioctl c0306201 0 returned -14
[  989.064255][T21159] binder: BINDER_SET_CONTEXT_MGR already set
[  989.070367][T21159] binder: 21158:21159 ioctl 4018620d 2000000002c0 returned -16
[  989.723857][T21175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4354'.
[  989.769414][T21175] 8021q: adding VLAN 0 to HW filter on device bond1
[  989.905699][T21175] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  989.917057][T21183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'.
[  989.927603][T21183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'.
[  991.600630][T21213] FAULT_INJECTION: forcing a failure.
[  991.600630][T21213] name failslab, interval 1, probability 0, space 0, times 0
[  991.680170][T21213] CPU: 1 UID: 0 PID: 21213 Comm: syz.2.4364 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  991.680197][T21213] Tainted: [L]=SOFTLOCKUP
[  991.680202][T21213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  991.680211][T21213] Call Trace:
[  991.680217][T21213]  <TASK>
[  991.680224][T21213]  dump_stack_lvl+0x189/0x250
[  991.680247][T21213]  ? __pfx____ratelimit+0x10/0x10
[  991.680265][T21213]  ? __pfx_dump_stack_lvl+0x10/0x10
[  991.680283][T21213]  ? __pfx__printk+0x10/0x10
[  991.680309][T21213]  ? __pfx___might_resched+0x10/0x10
[  991.680327][T21213]  ? fs_reclaim_acquire+0x7d/0x100
[  991.680350][T21213]  should_fail_ex+0x414/0x560
[  991.680378][T21213]  should_failslab+0xa8/0x100
[  991.680400][T21213]  kmem_cache_alloc_noprof+0x88/0x710
[  991.680425][T21213]  ? fcntl_getlk+0x33/0xb30
[  991.680450][T21213]  fcntl_getlk+0x33/0xb30
[  991.680488][T21213]  do_fcntl+0xaa9/0x1a50
[  991.680519][T21213]  ? __pfx_do_fcntl+0x10/0x10
[  991.680551][T21213]  ? __fget_files+0x2a/0x420
[  991.680578][T21213]  ? tomoyo_file_fcntl+0x78/0x210
[  991.680604][T21213]  ? bpf_lsm_file_fcntl+0x9/0x20
[  991.680627][T21213]  __se_sys_fcntl+0xc8/0x150
[  991.680653][T21213]  do_syscall_64+0xfa/0xf80
[  991.680672][T21213]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.680689][T21213]  ? clear_bhb_loop+0x60/0xb0
[  991.680710][T21213]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  991.680728][T21213] RIP: 0033:0x7f300c58f749
[  991.680744][T21213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  991.680758][T21213] RSP: 002b:00007f300d3d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[  991.680777][T21213] RAX: ffffffffffffffda RBX: 00007f300c7e6090 RCX: 00007f300c58f749
[  991.680790][T21213] RDX: 0000200000000200 RSI: 0000000000000005 RDI: 0000000000000004
[  991.680802][T21213] RBP: 00007f300d3d2090 R08: 0000000000000000 R09: 0000000000000000
[  991.680813][T21213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  991.680824][T21213] R13: 00007f300c7e6128 R14: 00007f300c7e6090 R15: 00007f300c90fa28
[  991.680854][T21213]  </TASK>
[  991.965327][T21215] binder: BINDER_SET_CONTEXT_MGR already set
[  991.972702][T21215] binder: 21214:21215 ioctl 4018620d 200000000100 returned -16
[  992.276910][T21215] binder: 21214:21215 ioctl c0306201 0 returned -14
[  992.285221][T21215] binder: BINDER_SET_CONTEXT_MGR already set
[  992.294161][T21215] binder: 21214:21215 ioctl 4018620d 2000000002c0 returned -16
[  992.691250][T21221] pim6reg1: entered promiscuous mode
[  992.702174][T21221] pim6reg1: entered allmulticast mode
[  992.975679][T21224] netlink: 182 bytes leftover after parsing attributes in process `syz.3.4368'.
[  993.044316][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  993.052689][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  993.210200][ T5915] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  993.248559][T21239] libceph: resolve '0' (ret=-3): failed
[  993.372972][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  993.405328][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  993.435447][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  993.450395][ T5915] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  993.529778][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  993.551465][ T5915] usb 1-1: config 0 descriptor??
[  993.749605][   T30] audit: type=1326 audit(1766164271.487:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  993.776579][   T30] audit: type=1326 audit(1766164271.517:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  993.830603][   T30] audit: type=1326 audit(1766164271.547:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  993.875120][   T30] audit: type=1326 audit(1766164271.547:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  993.946500][   T30] audit: type=1326 audit(1766164271.547:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  994.099558][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.173731][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.203758][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.220661][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.247518][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.278871][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.288504][   T30] audit: type=1326 audit(1766164271.547:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  994.296309][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.346629][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.368882][T21263] binder: BINDER_SET_CONTEXT_MGR already set
[  994.395680][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.395974][T21263] binder: 21261:21263 ioctl 4018620d 200000000100 returned -16
[  994.396999][T21263] binder: 21261:21263 ioctl c0306201 0 returned -14
[  994.424511][   T30] audit: type=1326 audit(1766164271.547:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  994.447507][ T5915] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0
[  994.623874][   T30] audit: type=1326 audit(1766164271.547:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  994.673386][T21265] binder: BINDER_SET_CONTEXT_MGR already set
[  994.694971][   T30] audit: type=1326 audit(1766164271.547:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  994.720980][T21265] binder: 21261:21265 ioctl 4018620d 2000000002c0 returned -16
[  994.789328][ T5915] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  994.844272][ T5915] usb 1-1: USB disconnect, device number 114
[  994.864803][   T30] audit: type=1326 audit(1766164271.547:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21254 comm="syz.2.4378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f300c58f749 code=0x7ffc0000
[  995.061258][T21266] fido_id[21266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  995.199027][T21274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4383'.
[  995.263472][T21273] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4382'.
[  996.590053][ T7875] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  996.739873][T14452] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  996.749316][ T7875] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  996.758174][ T7875] usb 4-1: config 0 has no interface number 0
[  996.794477][ T7875] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  996.836278][ T7875] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  996.875622][ T7875] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  996.889777][T14452] usb 1-1: device descriptor read/64, error -71
[  996.909995][ T7875] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  996.949060][ T7875] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  996.971797][ T7875] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  997.009961][ T7875] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  997.039864][ T7875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.063787][T21315] binder: BINDER_SET_CONTEXT_MGR already set
[  997.075653][ T7875] usb 4-1: config 0 descriptor??
[  997.093618][T21302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  997.101219][T21302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  997.117994][ T7875] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  997.129817][T14452] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  997.146971][T21315] binder: 21314:21315 ioctl 4018620d 200000000100 returned -16
[  997.147074][T21316] binder: BINDER_SET_CONTEXT_MGR already set
[  997.165612][T21316] binder: 21314:21316 ioctl 4018620d 2000000002c0 returned -16
[  997.261486][T14452] usb 1-1: device descriptor read/64, error -71
[  997.314774][T21302] ldusb 4-1:0.55: Write buffer overflow, 20 bytes dropped
[  997.383448][T14452] usb usb1-port1: attempt power cycle
[  997.969901][T14452] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  997.991312][T14452] usb 1-1: device descriptor read/8, error -71
[  998.283905][T14452] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  998.314511][T14452] usb 1-1: device descriptor read/8, error -71
[  998.674443][T14452] usb usb1-port1: unable to enumerate USB device
[  999.129247][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  999.129263][   T30] audit: type=1326 audit(1766164276.867:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.1.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  999.287943][   T30] audit: type=1326 audit(1766164276.877:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.1.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  999.464953][   T30] audit: type=1326 audit(1766164276.877:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.1.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[  999.603893][T14452] usb 4-1: USB disconnect, device number 29
[  999.618456][T14452] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  999.681787][   T30] audit: type=1326 audit(1766164276.877:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21331 comm="syz.1.4395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[ 1000.074561][T21340] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4397'.
[ 1000.459927][T21347] tap0: tun_chr_ioctl cmd 1074812118
[ 1000.885065][T21365] fuse: Bad value for 'fd'
[ 1000.922931][T21365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 1000.936090][T21365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 1000.948970][T21369] binder: 21362:21369 unknown command 1077961494
[ 1000.955461][T21369] binder: 21362:21369 ioctl c0306201 200000000100 returned -22
[ 1000.987639][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4407'.
[ 1001.109860][ T5915] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1001.169850][T14442] usb 3-1: new low-speed USB device number 42 using dummy_hcd
[ 1001.270166][ T5915] usb 1-1: Using ep0 maxpacket: 32
[ 1001.277464][ T5915] usb 1-1: no configurations
[ 1001.283309][ T5915] usb 1-1: can't read configurations, error -22
[ 1001.331966][T14442] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1001.340457][T14442] usb 3-1: config 0 has no interface number 0
[ 1001.351590][T14442] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1001.381440][T14442] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1001.399917][T14442] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1001.411988][T14442] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1001.423325][ T5915] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1001.431709][T14442] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1001.445075][T14442] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1001.458376][T14442] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1001.467520][T14442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.479466][T14442] usb 3-1: config 0 descriptor??
[ 1001.487478][T21368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1001.499050][T21368] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1001.540468][T14442] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1001.610065][ T5915] usb 1-1: Using ep0 maxpacket: 32
[ 1001.616281][ T5915] usb 1-1: no configurations
[ 1001.621238][ T5915] usb 1-1: can't read configurations, error -22
[ 1001.628375][ T5915] usb usb1-port1: attempt power cycle
[ 1001.787240][T21368] ldusb 3-1:0.55: Write buffer overflow, 20 bytes dropped
[ 1001.909823][ T7875] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[ 1001.980097][ T5915] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1002.011268][ T5915] usb 1-1: Using ep0 maxpacket: 32
[ 1002.020783][ T5915] usb 1-1: no configurations
[ 1002.025596][ T5915] usb 1-1: can't read configurations, error -22
[ 1002.078018][ T7875] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00
[ 1002.108107][T21383] binder: BINDER_SET_CONTEXT_MGR already set
[ 1002.127852][ T7875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.136082][T21383] binder: 21381:21383 ioctl 4018620d 2000000000c0 returned -16
[ 1002.163269][ T7875] usb 4-1: config 0 descriptor??
[ 1002.189827][ T5915] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1002.261238][ T5915] usb 1-1: Using ep0 maxpacket: 32
[ 1002.285824][ T5915] usb 1-1: no configurations
[ 1002.292750][ T5915] usb 1-1: can't read configurations, error -22
[ 1002.440300][ T5915] usb usb1-port1: unable to enumerate USB device
[ 1002.560143][T14454] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1002.648318][ T7875] usbhid 4-1:0.0: can't add hid device: -71
[ 1002.661300][ T7875] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1002.690644][ T7875] usb 4-1: USB disconnect, device number 30
[ 1002.720102][T14454] usb 6-1: Using ep0 maxpacket: 32
[ 1002.727223][T14454] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[ 1002.752092][T14454] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1002.764031][T14452] usb 3-1: USB disconnect, device number 42
[ 1002.790632][T14452] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1002.803905][T14454] usb 6-1: config 0 has no interface number 0
[ 1002.838393][T14454] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[ 1002.867086][T14454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.917034][T14454] usb 6-1: Product: syz
[ 1002.928704][T14454] usb 6-1: Manufacturer: syz
[ 1002.933756][T14454] usb 6-1: SerialNumber: syz
[ 1002.943474][T14454] usb 6-1: config 0 descriptor??
[ 1002.956808][T14454] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[ 1003.002991][T14454] input: xirlink-cit as /devices/platform/dummy_hcd.5/usb6/6-1/input/input86
[ 1003.188350][T14454] usb 6-1: USB disconnect, device number 32
[ 1003.397374][T21400] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4417'.
[ 1003.774094][T21409] binder: BINDER_SET_CONTEXT_MGR already set
[ 1003.790470][T21409] binder: 21405:21409 ioctl 4018620d 200000000100 returned -16
[ 1003.847225][T21409] binder: BINDER_SET_CONTEXT_MGR already set
[ 1003.983684][T21409] binder: 21405:21409 ioctl 4018620d 2000000002c0 returned -16
[ 1004.639794][ T5915] usb 1-1: new low-speed USB device number 123 using dummy_hcd
[ 1004.801616][ T5915] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1004.822124][ T5915] usb 1-1: config 0 has no interface number 0
[ 1004.833786][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1004.851924][ T5915] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1004.868894][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1004.880976][ T5915] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1004.896347][ T5915] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1004.909140][ T5915] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1004.949514][ T5915] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1004.967269][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1004.990359][ T5915] usb 1-1: config 0 descriptor??
[ 1005.014981][T21423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1005.036757][T21423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1005.068647][ T5915] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1005.564053][T21423] ldusb 1-1:0.55: Write buffer overflow, 20 bytes dropped
[ 1006.107175][T21454] hub 9-0:1.0: USB hub found
[ 1006.152331][T21454] hub 9-0:1.0: 1 port detected
[ 1006.362008][ T5915] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1006.384716][    C1] ldusb 1-1:0.55: usb_submit_urb failed (-1)
[ 1006.452907][   T10] usb 1-1: USB disconnect, device number 123
[ 1006.549705][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1006.565166][   T10] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1006.573217][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1006.646409][ T5915] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1006.656198][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1006.671451][ T5915] usb 6-1: Manufacturer: syz
[ 1006.722395][ T5915] usb 6-1: config 0 descriptor??
[ 1007.158258][ T5915] hid_parser_main: 5 callbacks suppressed
[ 1007.158280][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.180192][ T7875] usb 1-1: new low-speed USB device number 124 using dummy_hcd
[ 1007.208670][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.228577][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.250190][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.257223][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.270100][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.289747][ T5915] pyra 0003:1E7D:2CF6.005A: unknown main item tag 0x0
[ 1007.310267][ T5915] pyra 0003:1E7D:2CF6.005A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 1007.362908][ T7875] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1007.547173][ T7875] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1007.571402][ T7875] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1007.584613][ T7875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.626019][ T7875] usb 1-1: config 0 descriptor??
[ 1007.912721][T21464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1007.927218][T21464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1008.335259][ T5915] pyra 0003:1E7D:2CF6.005A: couldn't init struct pyra_device
[ 1008.349995][ T5915] pyra 0003:1E7D:2CF6.005A: couldn't install mouse
[ 1008.360848][ T5915] pyra 0003:1E7D:2CF6.005A: probe with driver pyra failed with error -32
[ 1008.377196][ T7875] usb 1-1: USB disconnect, device number 124
[ 1009.410531][T14442] usb 6-1: USB disconnect, device number 33
[ 1009.939783][T14442] usb 6-1: new low-speed USB device number 34 using dummy_hcd
[ 1010.131680][T14442] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1010.140766][T14442] usb 6-1: config 0 has no interface number 0
[ 1010.146881][T14442] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1010.202302][T14442] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1010.233773][T14442] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1010.265775][T14442] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1010.296308][T14442] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1010.326630][T14442] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1010.367041][T14442] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1010.391095][T14442] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.432215][T14442] usb 6-1: config 0 descriptor??
[ 1010.467469][T21508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1010.475234][T21508] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1010.506482][T14442] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1010.724346][T21508] ldusb 6-1:0.55: Write buffer overflow, 20 bytes dropped
[ 1011.059376][T21529] fuse: Bad value for 'fd'
[ 1011.095873][   T30] audit: type=1326 audit(1766164288.837:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[ 1011.128233][   T30] audit: type=1326 audit(1766164288.857:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21518 comm="syz.1.4448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67f3f8f749 code=0x7ffc0000
[ 1011.176659][T21524] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1011.725703][ T5915] usb 6-1: USB disconnect, device number 34
[ 1011.742974][ T5915] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1011.840361][T14452] usb 3-1: new low-speed USB device number 43 using dummy_hcd
[ 1011.922435][T21540] vivid-002: =================  START STATUS  =================
[ 1011.954286][T21540] vivid-002: Radio HW Seek Mode: Bounded
[ 1012.040723][T14452] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1012.074159][T21540] vivid-002: Radio Programmable HW Seek: false
[ 1012.089227][T21540] vivid-002: RDS Rx I/O Mode: Block I/O
[ 1012.095418][T14452] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1012.108624][T21540] vivid-002: Generate RBDS Instead of RDS: false
[ 1012.115664][T21540] vivid-002: RDS Reception: true
[ 1012.121456][T21540] vivid-002: RDS Program Type: 0 inactive
[ 1012.131767][T21540] vivid-002: RDS PS Name:  inactive
[ 1012.137734][T21540] vivid-002: RDS Radio Text:  inactive
[ 1012.207029][T14452] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1012.235118][T14452] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.249838][T21540] vivid-002: RDS Traffic Announcement: false inactive
[ 1012.256841][T21540] vivid-002: RDS Traffic Program: false inactive
[ 1012.266821][T14452] usb 3-1: config 0 descriptor??
[ 1012.345149][T21540] vivid-002: RDS Music: false inactive
[ 1012.388676][T21540] vivid-002: ==================  END STATUS  ==================
[ 1012.545223][T21537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1012.554681][T21537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1012.928154][   T30] audit: type=1326 audit(1766164290.667:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21565 comm="syz.0.4460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f9cf8f749 code=0x0
[ 1012.968356][ T7875] usb 3-1: USB disconnect, device number 43
[ 1012.989793][T14452] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1013.154593][T14452] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[ 1013.167598][T14452] usb 2-1: config 0 has no interface number 0
[ 1013.180322][T14452] usb 2-1: config 0 interface 98 has no altsetting 0
[ 1013.202559][T14452] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[ 1013.225459][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.245714][T14452] usb 2-1: Product: syz
[ 1013.255859][T14452] usb 2-1: Manufacturer: syz
[ 1013.306988][T14452] usb 2-1: SerialNumber: syz
[ 1013.332394][T14452] usb 2-1: config 0 descriptor??
[ 1013.613577][T14452] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[ 1013.818269][T21562] bridge3: entered promiscuous mode
[ 1013.882626][ T5915] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[ 1014.147812][ T5915] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1014.160966][ T5915] usb 3-1: config 0 has no interface number 0
[ 1014.183800][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1014.200503][ T5915] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1014.219504][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1014.248446][ T5915] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1014.270072][ T5915] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1014.283140][ T5915] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1014.384277][T14452] usb 2-1: reset high-speed USB device number 27 using dummy_hcd
[ 1014.509332][T14452] usb 2-1: device reset changed ep0 maxpacket size!
[ 1014.521938][ T5915] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1014.526927][T14452] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1014.554974][T14452] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[ 1014.560123][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.563889][ T7875] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[ 1014.586482][T21590] ALSA: seq fatal error: cannot create timer (-19)
[ 1014.614973][T14452] usb 2-1: USB disconnect, device number 27
[ 1014.621446][ T7875] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[ 1014.629445][ T5915] usb 3-1: config 0 descriptor??
[ 1014.644806][T21576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1014.657551][ T7875] ------------[ cut here ]------------
[ 1014.663945][ T7875] WARNING: fs/kernfs/dir.c:537 at kernfs_get+0x72/0x90, CPU#1: kworker/1:8/7875
[ 1014.671755][T21576] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1014.673457][ T7875] Modules linked in:
[ 1014.685359][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: kworker/1:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1014.696660][ T7875] Tainted: [L]=SOFTLOCKUP
[ 1014.701522][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1014.711943][ T7875] Workqueue: events request_firmware_work_func
[ 1014.718147][ T7875] RIP: 0010:kernfs_get+0x72/0x90
[ 1014.723737][ T7875] Code: e8 93 53 5d ff 48 89 df be 04 00 00 00 e8 36 b2 c3 ff f0 ff 03 eb 05 e8 7c 53 5d ff 5b 5d e9 c5 4c fa 08 cc e8 6f 53 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[ 1014.728055][T21595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4470'.
[ 1014.743935][ T7875] RSP: 0018:ffffc9000d0af5c0 EFLAGS: 00010293
[ 1014.759558][ T7875] RAX: ffffffff82645ee1 RBX: ffff88807c896d20 RCX: ffff888024db3d00
[ 1014.767852][ T7875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1014.775866][ T7875] RBP: 0000000000000000 R08: ffff88807c896d23 R09: 1ffff1100f912da4
[ 1014.783889][ T7875] R10: dffffc0000000000 R11: ffffed100f912da5 R12: ffff8880261612a8
[ 1014.791899][ T7875] R13: 1ffff11004c2c256 R14: ffff8880261612b0 R15: dffffc0000000000
[ 1014.800034][ T7875] FS:  0000000000000000(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000
[ 1014.808955][ T7875] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1014.815643][ T7875] CR2: 0000001b2ef63fff CR3: 0000000033264000 CR4: 00000000003526f0
[ 1014.823700][ T7875] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951
[ 1014.831715][ T7875] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1014.839749][ T7875] Call Trace:
[ 1014.843038][ T7875]  <TASK>
[ 1014.845977][ T7875]  kobject_add_internal+0x72b/0xcc0
[ 1014.851250][ T7875]  kobject_add+0x155/0x220
[ 1014.855667][ T7875]  ? __pfx_kobject_add+0x10/0x10
[ 1014.860855][ T7875]  ? __kasan_kmalloc+0x93/0xb0
[ 1014.865614][ T7875]  ? kobject_init+0x83/0x1e0
[ 1014.870631][ T7875]  get_device_parent+0x316/0x3a0
[ 1014.875588][ T7875]  device_add+0x2e1/0xb80
[ 1014.879982][ T7875]  firmware_fallback_sysfs+0x2e4/0xa40
[ 1014.885439][ T7875]  ? kmem_cache_free+0x197/0x620
[ 1014.890429][ T7875]  _request_firmware+0xfa4/0x1680
[ 1014.895456][ T7875]  ? __pfx__request_firmware+0x10/0x10
[ 1014.900945][ T7875]  ? process_scheduled_works+0x9ef/0x1770
[ 1014.906674][ T7875]  request_firmware_work_func+0xaf/0x1c0
[ 1014.912392][ T7875]  ? process_scheduled_works+0x9ef/0x1770
[ 1014.918184][ T7875]  process_scheduled_works+0xad1/0x1770
[ 1014.923768][ T7875]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1014.929801][ T7875]  worker_thread+0x8a0/0xda0
[ 1014.934392][ T7875]  kthread+0x711/0x8a0
[ 1014.938448][ T7875]  ? __pfx_worker_thread+0x10/0x10
[ 1014.943626][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1014.948218][ T7875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1014.953538][ T7875]  ? lockdep_hardirqs_on+0x98/0x140
[ 1014.958727][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1014.963803][ T7875]  ret_from_fork+0x599/0xb30
[ 1014.968402][ T7875]  ? __pfx_ret_from_fork+0x10/0x10
[ 1014.973970][ T7875]  ? __switch_to_asm+0x39/0x70
[ 1014.979035][ T7875]  ? __switch_to_asm+0x33/0x70
[ 1014.984272][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1014.989013][ T7875]  ret_from_fork_asm+0x1a/0x30
[ 1014.993911][ T7875]  </TASK>
[ 1014.996983][ T7875] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1015.004327][ T7875] CPU: 1 UID: 0 PID: 7875 Comm: kworker/1:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1015.015346][ T7875] Tainted: [L]=SOFTLOCKUP
[ 1015.019665][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1015.029801][ T7875] Workqueue: events request_firmware_work_func
[ 1015.035958][ T7875] Call Trace:
[ 1015.039227][ T7875]  <TASK>
[ 1015.042146][ T7875]  dump_stack_lvl+0x99/0x250
[ 1015.046724][ T7875]  ? __asan_memcpy+0x40/0x70
[ 1015.051317][ T7875]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1015.056506][ T7875]  ? __pfx__printk+0x10/0x10
[ 1015.061096][ T7875]  vpanic+0x237/0x6d0
[ 1015.065070][ T7875]  ? __pfx_vpanic+0x10/0x10
[ 1015.069563][ T7875]  ? is_bpf_text_address+0x292/0x2b0
[ 1015.074836][ T7875]  ? is_bpf_text_address+0x26/0x2b0
[ 1015.080035][ T7875]  panic+0xb9/0xc0
[ 1015.083749][ T7875]  ? __pfx_panic+0x10/0x10
[ 1015.088160][ T7875]  ? ret_from_fork_asm+0x1a/0x30
[ 1015.093096][ T7875]  __warn+0x317/0x4b0
[ 1015.097240][ T7875]  ? kernfs_get+0x72/0x90
[ 1015.101563][ T7875]  ? kernfs_get+0x72/0x90
[ 1015.105880][ T7875]  __report_bug+0x288/0x500
[ 1015.110368][ T7875]  ? kernfs_get+0x72/0x90
[ 1015.114817][ T7875]  ? __pfx___report_bug+0x10/0x10
[ 1015.120260][ T7875]  ? preempt_schedule_thunk+0x16/0x30
[ 1015.125629][ T7875]  ? up_write+0x1da/0x410
[ 1015.129958][ T7875]  ? kernfs_get+0x72/0x90
[ 1015.134273][ T7875]  report_bug+0x16a/0x220
[ 1015.138592][ T7875]  ? kernfs_get+0x72/0x90
[ 1015.142902][ T7875]  ? kernfs_get+0x74/0x90
[ 1015.147239][ T7875]  handle_bug+0x98/0x200
[ 1015.151480][ T7875]  exc_invalid_op+0x1a/0x50
[ 1015.155970][ T7875]  asm_exc_invalid_op+0x1a/0x20
[ 1015.160802][ T7875] RIP: 0010:kernfs_get+0x72/0x90
[ 1015.165726][ T7875] Code: e8 93 53 5d ff 48 89 df be 04 00 00 00 e8 36 b2 c3 ff f0 ff 03 eb 05 e8 7c 53 5d ff 5b 5d e9 c5 4c fa 08 cc e8 6f 53 5d ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[ 1015.185335][ T7875] RSP: 0018:ffffc9000d0af5c0 EFLAGS: 00010293
[ 1015.191403][ T7875] RAX: ffffffff82645ee1 RBX: ffff88807c896d20 RCX: ffff888024db3d00
[ 1015.199383][ T7875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1015.207344][ T7875] RBP: 0000000000000000 R08: ffff88807c896d23 R09: 1ffff1100f912da4
[ 1015.215302][ T7875] R10: dffffc0000000000 R11: ffffed100f912da5 R12: ffff8880261612a8
[ 1015.223261][ T7875] R13: 1ffff11004c2c256 R14: ffff8880261612b0 R15: dffffc0000000000
[ 1015.231225][ T7875]  ? kernfs_get+0x71/0x90
[ 1015.235555][ T7875]  kobject_add_internal+0x72b/0xcc0
[ 1015.240762][ T7875]  kobject_add+0x155/0x220
[ 1015.245190][ T7875]  ? __pfx_kobject_add+0x10/0x10
[ 1015.250122][ T7875]  ? __kasan_kmalloc+0x93/0xb0
[ 1015.255233][ T7875]  ? kobject_init+0x83/0x1e0
[ 1015.259907][ T7875]  get_device_parent+0x316/0x3a0
[ 1015.264837][ T7875]  device_add+0x2e1/0xb80
[ 1015.269159][ T7875]  firmware_fallback_sysfs+0x2e4/0xa40
[ 1015.274618][ T7875]  ? kmem_cache_free+0x197/0x620
[ 1015.279549][ T7875]  _request_firmware+0xfa4/0x1680
[ 1015.284578][ T7875]  ? __pfx__request_firmware+0x10/0x10
[ 1015.290118][ T7875]  ? process_scheduled_works+0x9ef/0x1770
[ 1015.295827][ T7875]  request_firmware_work_func+0xaf/0x1c0
[ 1015.301455][ T7875]  ? process_scheduled_works+0x9ef/0x1770
[ 1015.307276][ T7875]  process_scheduled_works+0xad1/0x1770
[ 1015.312926][ T7875]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1015.318908][ T7875]  worker_thread+0x8a0/0xda0
[ 1015.323507][ T7875]  kthread+0x711/0x8a0
[ 1015.327651][ T7875]  ? __pfx_worker_thread+0x10/0x10
[ 1015.332761][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1015.337349][ T7875]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1015.342561][ T7875]  ? lockdep_hardirqs_on+0x98/0x140
[ 1015.347742][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1015.352323][ T7875]  ret_from_fork+0x599/0xb30
[ 1015.356903][ T7875]  ? __pfx_ret_from_fork+0x10/0x10
[ 1015.362036][ T7875]  ? __switch_to_asm+0x39/0x70
[ 1015.366800][ T7875]  ? __switch_to_asm+0x33/0x70
[ 1015.371554][ T7875]  ? __pfx_kthread+0x10/0x10
[ 1015.376224][ T7875]  ret_from_fork_asm+0x1a/0x30
[ 1015.380994][ T7875]  </TASK>
[ 1015.384607][ T7875] Kernel Offset: disabled
[ 1015.388950][ T7875] Rebooting in 86400 seconds..