last executing test programs:

15.1296713s ago: executing program 1 (id=2282):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000280)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xa, 0x3a, '#', 0x3a, '\\', 0x3a, './bus', 0x3a, [0x4f, 0x50]}, 0x29)

15.041179605s ago: executing program 1 (id=2283):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="ad000000000037eb00800000f1cfb65c", 0x10)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1)
recvmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000780)=""/177, 0xb1}, 0x10001)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

12.88544135s ago: executing program 2 (id=2305):
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x77359400}, 0x0)

11.842471066s ago: executing program 2 (id=2311):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
r2 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r3, 0x0, 0x880)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x120, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x4, 0x9}}, @inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328)
sendfile(r4, r4, 0x0, 0x200000)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
read$dsp(r6, &(0x7f00000000c0)=""/152, 0x98)

10.821434633s ago: executing program 0 (id=2317):
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r0, 0x0, 0x0)

10.779944808s ago: executing program 4 (id=2319):
r0 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)

10.341596291s ago: executing program 0 (id=2320):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
pwrite64(r1, &(0x7f0000000680), 0x0, 0x3)

10.324171758s ago: executing program 4 (id=2321):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00')
read(r0, &(0x7f0000000540)=""/233, 0xe9)

10.173758383s ago: executing program 4 (id=2322):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
preadv2(r3, 0x0, 0x0, 0x3, 0x0, 0xd)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680))
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0)
r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00000001c0)=0x400, 0x4)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cae, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280))

10.097432199s ago: executing program 0 (id=2323):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201)
pwritev2(r1, 0x0, 0x0, 0x7000, 0x0, 0x3)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
syz_emit_ethernet(0xc2, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x3f}, 0x2c)
r5 = socket$kcm(0xa, 0x2, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0}, 0x0)
r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x82002)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f0000000140)=0x12)
close(r7)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\n'])

9.872320806s ago: executing program 2 (id=2324):
getpid()
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setns(r0, 0x66020000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r3, 0x890b, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040))
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000010000010900010073797a3000000000c0020000080a010100000000000000000a273f0105000740130000005c010480100001800a000100696e6e6572000000100001800b00010074756e6e656c0000140001800b0001007470726f787900000400028010000180090001006c617374000000000c000180080001006f7366000801018008000100636d7000fc000280f0000380200002800900020073797a320000000008000340000000020800018000000003aa000100e15638c24e489f2aed46053ff77adfce160c3d9a095fdc37d0f86de24cde58aed4e3c66b97f071000641eac44677e9485b7e5dddcc8a28e9647922ba48d0128a3011221abb8bda915afa8a5d1b48da6f6b0629fbb77f7129573be23abd180da199098ae5c8190b8627db7c9f1d47ff655ea853834a0267964e23cf3df36326c185b9eff3b2d853f6def26cc0b95c2d08aa541874e966242968bd56b35751fabae8068b4bd7a100001c00028008000180fffffffc0800034000000002080003400000000104000100080001400000000d24000580080001400000005e0800024000000002080002400000000308000140000000846700074039080eded84fcdbc09da6c2c66bad7e0b520e0cd0f2a3c678155d7bfb5a9b5b2c61b37c5ab985f1cb7ed86d4e08fdb79e26c28a534b2bb6a4d20e16786c7ed69420fa533025fccf83954070c70417fa5d2731c3d1c453a851296259e8e2665934b022900b2000740b7491bffe625afeaac9108240a711d48d620f39a22ecc32fc331be0e1839835766bd749aa53851f4a023b12a9d6c5bc41b357ac43b789edd645fa63c373c1baaf92fafbce54a0e58df116c3c52f6f9d97dd6253cf5a104409c9274216b35ebb5ed42aa25284623d9d5fba371d712ca280a97381aa5415f20c9b4bbd919fc80c9ae01590bff11e26fbf7bbaa77cb7628fe454c241d66cdd99f6014a0d8e5e50f466ecdec6b193fab37c829a326ebb000008000b400000000414000000020a01010000000000000000020000021400000010000100"], 0x31c}}, 0x0)
listen(0xffffffffffffffff, 0x0)
timerfd_create(0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50)

9.138535267s ago: executing program 3 (id=2326):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x9, 0x0, 0x10, 0x0, 0x2, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000eb00000000000000000000000000765d6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x38, 0x20, 0x70bd25, 0x25dfdbff, {}, [@typed={0xc, 0x148, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, 0x20}}, 0x8000)

8.057349233s ago: executing program 2 (id=2327):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
preadv2(r3, 0x0, 0x0, 0x3, 0x0, 0xd)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680))
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0)
r5 = io_uring_setup(0x115c, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00000001c0)=0x400, 0x4)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sched_getattr(0x0, &(0x7f0000000640)={0x38}, 0x38, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cae, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280))

7.503774011s ago: executing program 4 (id=2328):
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, 0x0)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r3, 0x7855, 0x10000000, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x4)
writev(r6, &(0x7f0000000780)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c37900000000000000005800", 0x20}], 0x1)
recvmmsg(r6, &(0x7f0000000e80), 0x0, 0x40000040, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0x2b)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0)

7.496324084s ago: executing program 0 (id=2338):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f0000001400), 0x13f}}, 0x20)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
preadv2(r3, 0x0, 0x0, 0x3, 0x0, 0xd)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc2a, 0x10100}, &(0x7f0000000180), &(0x7f0000000680))
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0)
r5 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
io_uring_register$IORING_REGISTER_FILES(r5, 0x1e, &(0x7f0000000000)=[r5], 0x1)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r2, 0x1, 0x27, &(0x7f00000001c0)=0x400, 0x4)
sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
sched_getattr(0x0, 0x0, 0x0, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000030701"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cae, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280))

5.483174746s ago: executing program 4 (id=2329):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001900010929bd700080000000021810000000fd010066da5908ba076324e8fea78300000008000500ac141400080005000a0101021800168000000000000600150002000000362bd77be0d1ac56d64aee043e5018926fe7eb8312c107156e8ea37423a85e0de6b6dcf105166c0ef7b2a19236c5647ca8cbf93db40000000000000000e5000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r2})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3)
r5 = openat$ttyprintk(0xffffff9c, &(0x7f0000000240), 0x10000, 0x0)
ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000003c0)={0x9, 0xff, 0xa7c, 0x2, 0x2, "208e04dac6d0f8c3d75c62ae839e2e23b61258", 0x8, 0xe54})
preadv(r4, 0x0, 0x0, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000000000f0000500000a70000000060a0a04000000000000000002000000440004802c0001800b0001006e756567656e00001c00028008000240fdffff01083a0340000000000800014000040015140001800b00010072656a656374000004000900020073797a3200000000140000001100010000000100000000000000000a00"], 0x98}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902240001fa000000090400"], 0x0)

4.700948044s ago: executing program 3 (id=2330):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000100001002abd70000000000000000000", @ANYRES32=r4, @ANYBLOB="802100000000000008000d"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

4.470689898s ago: executing program 0 (id=2331):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x7, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
write$tun(r3, &(0x7f0000000100)={@val={0x0, 0x4}, @val={0x6, 0x4, 0xfffd, 0x0, 0xe, 0xc27}, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @local, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@x25={0x805, {0x1, 0x3, 0xf6, "78338b94c8cc3be19db33dccf0d083ca4ae146c7a5cf2d95937e31e2b2f905e05c57b8e434d49141f415a6db364f4265580ce990e4eb1a2662ffdd645079c920b22dc311145ae0dfafd898f82c0311"}}}}}, 0x72)
r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41414270, 0x0, 0x0, [{}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x7}], 0x7}}, 0xfffffffc})
openat$cgroup_procs(r3, &(0x7f0000000300)='cgroup.threads\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000180)={0x3, 0x980900, 0x1})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af60, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)

4.403626908s ago: executing program 2 (id=2332):
socket$inet(0x2, 0x3, 0x33)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]})
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86, 0xfffffffc}, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
getpriority(0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800)
close(r2)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x8818)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x3)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10}, 0x10)

3.926738279s ago: executing program 3 (id=2333):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000800), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140100323e00000073d931000000000003000000"], 0x14}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg(r5, &(0x7f0000000740)={&(0x7f00000002c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)="e495ad1f03219f57778cc58f1fdfb4a0143662fb33abdef69960bb075916b3add7", 0x21}, {&(0x7f0000000140)="4ec1ee489e68f04d4c3687eeb4", 0xd}, {&(0x7f0000000340)="3becd8a96130481390bfa72ae288c0780093b406b1262588b5082b0462ef0fe4d73879b9044b6d8bd8138a19288fb7595cde9ee4806b4b06d9b32c35b1e73a6e6cb00d453da14b6d930d92c3bad2aba6deccadc3fa08d597133791c45a696b67e2e04b1c1f431d97f2a80ab808a8db05a3d164cfdea766d664", 0x79}, {&(0x7f00000003c0)="47e4461faa2694df74b90a02bf650b461124ffc49018a5082df54bc2d0d5e6a9d64c5611f71bb1ecaf1cf2a52d70d7ce36708f9ff6d4f9d87ef1a42f052907c37977763fb1f28642454cb614862ad55620ecd5921e0d963db63255ac348346437ecbd4ca01e8cd3a4ca5be963649c15ffe7d89707fe268f7e198", 0x7a}, {&(0x7f0000000440)="9ec6286c122d8ce95236a4b52a22a49eb492e048df380329a539215ab35d9481b60950f8ba08ed8f4fa928923e09b532d05f31afca054d0517ad447d16de99bba25e2b5cc95dd9ed5920", 0x4a}, {&(0x7f00000004c0)="3cf9aa6c713d5708eee5d7d0ef009300ffd2ee82f1b510154a0c2c7cf411813d1d1fca22a4ea510de8fe1520cedc4ca4f26850e9ced59fd510f67bdb9634671913d6671d", 0x44}, {&(0x7f0000000200)="63d3069bcbacfc", 0x7}, {&(0x7f0000000540)="ea5193b3f7d490ad6751e618d6b74f3be726c7fbd3719e5b419883aafafed94c3cb529c0d210ccc1185265f6eed7272c7d9383e5ab3687b06241504a556624ae3aa939fd11", 0x45}, {&(0x7f0000000680)="ab0340f8f9805ea0adfd88c9400683e298a0e850c1dd689d398ef07a728f3452248a4d3ec77a6707fa70883de745b036a949bf80ff9c2649f0d06ad016f6fc92cc17b8d7cd6729973da1aed7eee6a6da0b0e2ea721b557cd2894e671746811c638f8e40e46a4391e38af6f4f36387ad6ab9adba2bf88d691892f325b251aa98129d2af7a5030dc138f9295acd33dd08d4a9fe082a637a7c5d327f62706da61f1c0378fd9d228b930cb7bda02f765562e6dd419bf169fb21fed8993", 0xbb}, {&(0x7f00000005c0)="42d13fb7a810ea9e9265d9f7e3576eca80378b34ffaa12de8de64f1eb78c563cdc063d21e49fc93e1c703fe5c0e1c97bebd264e9b735d4953efd9199b8fd2d907da75b88d62fbf0f7126", 0x4a}], 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="340000001201000000000000eecb217083e432a08d5c94d9b452d500ddd00ecbaa65beb0e31ed349f98326bcb81e970d23770000db000000de00000000000000dbf4db69f3c673ee047156456ff2f281451b60dbf0df126d68d67698bb496506bffdd18057eaaa7b303ec213a40552adabcf0cd1d405000000469be6a58e45bd1c9a490915e5405cf7a18727d6d1e0aef7d8e4d457e90752ec6dda065ec0c2301cc6f539a45bdcacca5afad0aa123828"], 0xb0}, 0x8000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000f284d634b2ba4e0a20dde4c4083ce27634e38e36b300e66aa60768a635da11692d9a8a27ecd3b10a3b3b3bf995410ea57e88f92bb5556f7508639a467a16692f57e2b39cacf4768e1090b917e074eff331553cccbc985b68aa1f81441c70b903b6f05afedbd53048f9725835d9f6d4668dfb35744287bb4445a6b43531325bb7da482484ed8269dcb408b7d60a8bfe701677f3795aa4e0566c9c77c19f6cf61da49e1059253e013e31082b5ffb67f2947492cfad4b1df52ef9764e", @ANYRES16=r8, @ANYBLOB="01002700fedbdf2589000000080003740a92", @ANYRES32=r7, @ANYRES8=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000020010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0)

1.852608636s ago: executing program 3 (id=2334):
r0 = socket(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0/file0'}, 0x11)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
close_range(r0, r1, 0x0)

1.738912183s ago: executing program 3 (id=2335):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25)

1.72044155s ago: executing program 1 (id=2336):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x80000021)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000013)
readv(r0, 0x0, 0x0)

1.623647888s ago: executing program 2 (id=2337):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unshare(0x26020480)
socket(0x10, 0x80002, 0x2)
r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r2, 0x80047456, &(0x7f0000000140)={0x3, 0x0, 0x1, 0x7fffffff, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0xffffffff, 0x8})
socket$inet6(0xa, 0x3, 0x7)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x10, 0x1405, 0x621}, 0x10}}, 0x0)

1.562825323s ago: executing program 1 (id=2339):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="50030500", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xf}]}}}]}, 0x3c}}, 0x54)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0021000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.172109613s ago: executing program 1 (id=2340):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
openat$procfs(0xffffff9c, &(0x7f0000000c40)='/proc/crypto\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000200)=@l={0x92, 0x3, 0xb0, 0x16, 0x5, 0xf9, 0xf801})
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc491, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0xef8e, 0x0, 0x0, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)

1.126072623s ago: executing program 0 (id=2341):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x9, 0x0, 0x10, 0x0, 0x2, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000eb00000000000000000000000000765d6d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x30}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x38, 0x20, 0x70bd25, 0x25dfdbff, {}, [@typed={0xc, 0x148, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, 0x20}}, 0x8000)

776.109474ms ago: executing program 3 (id=2342):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0)
r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000800), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000ac0)={0x6, 0x118, 0xfa00, {{0x7, 0x2, "c1eb6e3184c028b396819e8ce24d407feb9ceea91465aff21b05906383422635d277b7555b780253ac54a0e3f19432db7f01752ab347387eb7a33fe89e2d5d5e4dd4da2a0cc3f46a37ce7ca53625afef72fde4e59b2a900923823f0f1e3038e62568eafa8de40918b74a6ebe7792f1d2a675eda069d3538b28f8da9b5411c4459c465b64ad7cf4ecc8d5a344170c935a285557e60dddf0145ddd6c800f507f7ed01c7e339b4b9a0ed809a0971fc463a7d939fe9bcb13431e89cc4b6851cb4b416abe6db368f1de15fb90e79718a7dbe62b7890073f015bbd103ed9966ecaf769b5c17aec66dcfdb520eb549361fb598bf7d980ff2df7e908bcd737115e2c448b", 0x3, 0x1, 0x9, 0x2, 0x0, 0xff, 0x9}}}, 0x120)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r2, 0x400454cd, 0x339)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140100323e00000073d93100000000000300"], 0x14}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r7=>0x0})
sendmsg(r5, &(0x7f0000000740)={&(0x7f00000002c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000000c0)="e495ad1f03219f57778cc58f1fdfb4a0143662fb33abdef69960bb075916b3add7", 0x21}, {&(0x7f0000000140)="4ec1ee489e68f04d4c3687eeb4", 0xd}, {&(0x7f0000000340)="3becd8a96130481390bfa72ae288c0780093b406b1262588b5082b0462ef0fe4d73879b9044b6d8bd8138a19288fb7595cde9ee4806b4b06d9b32c35b1e73a6e6cb00d453da14b6d930d92c3bad2aba6deccadc3fa08d597133791c45a696b67e2e04b1c1f431d97f2a80ab808a8db05a3d164cfdea766d664", 0x79}, {&(0x7f00000003c0)="47e4461faa2694df74b90a02bf650b461124ffc49018a5082df54bc2d0d5e6a9d64c5611f71bb1ecaf1cf2a52d70d7ce36708f9ff6d4f9d87ef1a42f052907c37977763fb1f28642454cb614862ad55620ecd5921e0d963db63255ac348346437ecbd4ca01e8cd3a4ca5be963649c15ffe7d89707fe268f7e198", 0x7a}, {&(0x7f0000000440)="9ec6286c122d8ce95236a4b52a22a49eb492e048df380329a539215ab35d9481b60950f8ba08ed8f4fa928923e09b532d05f31afca054d0517ad447d16de99bba25e2b5cc95dd9ed5920", 0x4a}, {&(0x7f00000004c0)="3cf9aa6c713d5708eee5d7d0ef009300ffd2ee82f1b510154a0c2c7cf411813d1d1fca22a4ea510de8fe1520cedc4ca4f26850e9ced59fd510f67bdb9634671913d6671d", 0x44}, {&(0x7f0000000200)="63d3069bcbacfc", 0x7}, {&(0x7f0000000540)="ea5193b3f7d490ad6751e618d6b74f3be726c7fbd3719e5b419883aafafed94c3cb529c0d210ccc1185265f6eed7272c7d9383e5ab3687b06241504a556624ae3aa939fd11", 0x45}, {&(0x7f0000000680)="ab0340f8f9805ea0adfd88c9400683e298a0e850c1dd689d398ef07a728f3452248a4d3ec77a6707fa70883de745b036a949bf80ff9c2649f0d06ad016f6fc92cc17b8d7cd6729973da1aed7eee6a6da0b0e2ea721b557cd2894e671746811c638f8e40e46a4391e38af6f4f36387ad6ab9adba2bf88d691892f325b251aa98129d2af7a5030dc138f9295acd33dd08d4a9fe082a637a7c5d327f62706da61f1c0378fd9d228b930cb7bda02f765562e6dd419bf169fb21fed8993", 0xbb}, {&(0x7f00000005c0)="42d13fb7a810ea9e9265d9f7e3576eca80378b34ffaa12de8de64f1eb78c563cdc063d21e49fc93e1c703fe5c0e1c97bebd264e9b735d4953efd9199b8fd2d907da75b88d62fbf0f7126", 0x4a}], 0xa, &(0x7f0000000940)=ANY=[@ANYBLOB="340000001201000000000000eecb217083e432a08d5c94d9b452d500ddd00ecbaa65beb0e31ed349f98326bcb81e970d23770000db000000de00000000000000dbf4db69f3c673ee047156456ff2f281451b60dbf0df126d68d67698bb496506bffdd18057eaaa7b303ec213a40552adabcf0cd1d405000000469be6a58e45bd1c9a490915e5405cf7a18727d6d1e0aef7d8e4d457e90752ec6dda065ec0c2301cc6f539a45bdcacca5afad0aa123828"], 0xb0}, 0x8000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r6)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c00)=ANY=[@ANYBLOB="2c000000f284d634b2ba4e0a20dde4c4083ce27634e38e36b300e66aa60768a635da11692d9a8a27ecd3b10a3b3b3bf995410ea57e88f92bb5556f7508639a467a16692f57e2b39cacf4768e1090b917e074eff331553cccbc985b68aa1f81441c70b903b6f05afedbd53048f9725835d9f6d4668dfb35744287bb4445a6b43531325bb7da482484ed8269dcb408b7d60a8bfe701677f3795aa4e0566c9c77c19f6cf61da49e1059253e013e31082b5ffb67f2947492cfad4b1df52ef9764e", @ANYRES16=r8, @ANYBLOB="01002700fedbdf2589000000080003740a92", @ANYRES32=r7, @ANYRES8=r7], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000040)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$NL80211_CMD_NEW_MPATH(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4010)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000020010000000900010073797a310000000054000000030a01020000000000000000010000000900010073797a31000000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0)

727.719µs ago: executing program 1 (id=2343):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, &(0x7f00000022c0)=[@text64={0x40, 0x0}], 0x1, 0x71, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r0, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
r7 = io_uring_setup(0x191a, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x11)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000004100)={0x2020}, 0x2020)
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/237, 0xed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x14, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000100)={0x9, 0x9, 0x6, 0x7, 0x9, 0x0, 0x0, 0x8}, &(0x7f0000000140)=0x20)
socket$nl_xfrm(0x10, 0x3, 0x6)

0s ago: executing program 4 (id=2344):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000240))
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r6, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]})
r7 = socket$unix(0x1, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xe3, "f7f96fc2acd672feb56ce63272357942"}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000b100)=@newtfilter={0x2010, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x1fe0, 0x2, [@TCA_CGROUP_EMATCHES={0x1a8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x19c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x8c, 0x3, 0x0, 0x0, {{0x40, 0x0, 0x9}, "a64a77302103f1ccc19326f3ce83af2bf9e4c3c57f0f712a280b3ae7bf791af65735a597cee416d3d98f3b28a61c786e9d0b29c000a732db018cb9c27b15a5c5f16bea6a552d6d14c5a0a73e05a53bec52bf786e405e86cb107296b358c66c26efafd9c695ef5ca9ef2b434ff06c59b9f6731797bdd4e52b969e79234ea982"}}, @TCF_EM_META={0x4c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_VAR="95", @TCF_META_TYPE_VAR="f55db9fb", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1344e7d104daef1291", @TCF_META_TYPE_VAR="4ac093"]}, @TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="085cc87d55", @TCF_META_TYPE_VAR="9c5a85f4f7676024ce12", @TCF_META_TYPE_VAR="0f", @TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPT={0xa4, 0x3, 0x0, 0x0, {{0xfff8, 0x9, 0x8}, [@TCA_EM_IPT_MATCH_DATA={0x95, 0x5, "1ae9f520af9cc6bf8f3e79553c30b4dcecd7d3460f751ae1035c56654899eeb671a6d72c98be051edea2765a3baf5f30c5dec79078978f91226c3039ad2047dac0eea30ddc302b2fa94b78d1a30b6a2c59ec9392b0894da530cb6fad44de72c0dc01cda47ca80667ab467b683ea5747b2e8e122bee3ac772e5b39fe2d4d0597b378ba42e66ed0dc2e224dec6e4f21de5e0"}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0x9, 0x4ace, 0x4dc5, 0x2d31}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3e}}]}, @TCA_CGROUP_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x3, 0x10, 0x5, 0x80000000, 0x6, 0xf, 0x5, 0x80000000, 0x9, 0x46b3, 0x81, 0x10001, 0x6, 0xfffffbff, 0x5, 0x1ff, 0xffff5a3d, 0x8, 0x5eff, 0x1, 0x3, 0x40, 0x7ff, 0xfff, 0x3, 0xfffffff7, 0x6, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x7, 0x10001, 0x0, 0x1, 0xc49c, 0x7fff, 0xb, 0x6, 0x1, 0x7, 0xe22, 0x3, 0x8, 0x3d3a, 0x3, 0x5, 0x8cac, 0x5, 0x7, 0x1, 0x3, 0x7ff, 0x1, 0x3, 0x7, 0x2, 0x4, 0x1000, 0x5, 0xfffffff7, 0xffff, 0x1, 0x8, 0xb, 0x5, 0x6, 0x9, 0x7f, 0x6, 0x8, 0x2, 0x2, 0x4, 0x6, 0x0, 0x8, 0x7, 0x0, 0x2, 0x100, 0xfffffc01, 0x4f, 0x8, 0x1, 0x1, 0x5, 0x3, 0x4f, 0x2, 0x9, 0x303542ba, 0x5e4, 0x6, 0xe95, 0x6, 0x5, 0x2, 0x1, 0xda, 0x6, 0x5, 0x101, 0x7b94, 0x8000, 0x6, 0x8, 0x6, 0xc0, 0x0, 0x4, 0x3, 0x8, 0x5, 0xf7b, 0x5e7, 0xc, 0x1000, 0x7, 0xd7f5, 0x68e5, 0x9, 0x4, 0x7fffffff, 0x8, 0x3, 0x1, 0x3a, 0x8, 0x4, 0x464f157, 0x9, 0x4, 0x5, 0x6, 0x8, 0xe44, 0x0, 0xe7e, 0x5, 0x92, 0xfffffffc, 0x5, 0x7, 0x0, 0x8, 0x0, 0x7c5, 0x5, 0x2, 0x9, 0x5, 0xffffffff, 0x6, 0x7f, 0x3, 0x40, 0x3, 0x212da99, 0x6, 0xffffff27, 0x9, 0x9, 0x3, 0x5, 0x2, 0xd, 0x5, 0x3, 0x9, 0x8d, 0x5, 0x4, 0xc8, 0x2, 0x5, 0x1, 0x10, 0x36, 0x10001, 0xbfb1, 0x4, 0x1, 0x0, 0x5c17, 0xa82, 0x5, 0xd079, 0x2, 0x0, 0xfffffffd, 0xc, 0x7, 0x6, 0xfffffff8, 0x3, 0x8, 0x7, 0x3d3e9657, 0x5, 0xfffffffa, 0x7, 0x6, 0x54, 0x9c9f, 0x401, 0x19, 0xffff7ecf, 0x9, 0x7, 0x6, 0x8, 0x4, 0x80000001, 0x0, 0x6, 0x2, 0x3, 0x8, 0xf5e7, 0x1, 0x9, 0x9, 0xc, 0x5, 0x9, 0x40, 0x81, 0x7, 0x2, 0x5, 0x1ff, 0x0, 0x3, 0x7f, 0x0, 0x2, 0xffffffff, 0x2, 0x6, 0x5, 0x81, 0x2, 0x8, 0x7, 0x33ec, 0xfffeffff, 0x8, 0x5, 0x9, 0x4, 0x4, 0x706, 0x8]}]}, @TCA_CGROUP_POLICE={0x8b4, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7c, 0x4, 0x80, 0x6, 0x5, {0x70, 0x2, 0x0, 0x6, 0xfff, 0x80000000}, {0x9, 0x0, 0x2, 0x7, 0x7, 0x9}, 0x4, 0x4, 0x10001}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x7, 0x4, 0x3, 0xff, 0x0, 0x4, 0x4, 0x400, 0x7ff, 0x9, 0x9, 0x6, 0x0, 0x7, 0x6a, 0xb7, 0x4, 0x200, 0x4e, 0x8000, 0x7ff, 0xfff, 0x8, 0x0, 0x8, 0x5, 0xd4, 0xfffffffe, 0x7aa, 0x1f, 0x4add, 0x7, 0x4, 0xe, 0x20, 0xfffffff8, 0x9, 0x9, 0x7fffffff, 0x21, 0xc1ea, 0x4, 0x9, 0x4, 0x6, 0x0, 0xbc, 0x2, 0x76, 0x7fff, 0xd, 0xfffff001, 0x37f00000, 0x9, 0x7, 0x380000, 0xffff, 0x2, 0x3, 0x7, 0x473b, 0x9, 0x1, 0xfa, 0x8fe, 0x80000001, 0x6, 0x3, 0x0, 0xfffffffa, 0x2, 0x8, 0x8, 0x146b, 0xd, 0x2, 0x9, 0x1417, 0x4, 0xe2, 0x205, 0x2, 0x7f, 0x4e, 0x5, 0x3549, 0xf, 0x2, 0x5, 0x9, 0x334, 0x5, 0x10, 0x1ff, 0x3, 0x4667, 0x8, 0x0, 0x8, 0x3, 0x5000000, 0x9, 0xda8e, 0x3780, 0x5, 0x3, 0x9, 0x6, 0x1000, 0xe0b, 0x7e, 0x100, 0x5, 0x8001, 0x6, 0x10000, 0xfffffff9, 0x7fff, 0x6, 0x8001, 0x8001, 0x3, 0x3, 0x5, 0xb, 0x3, 0x0, 0x4, 0x78, 0xfffffe01, 0x7, 0x625, 0x7, 0x2, 0x3, 0xffff, 0x400, 0x6, 0xcd, 0x4, 0x401, 0x6, 0xc, 0x4, 0x7, 0x4, 0x8, 0x1, 0xe, 0x2, 0x8, 0x10, 0xcd, 0x8, 0x6, 0x7fff, 0x7, 0x7, 0x6, 0x9, 0x3eb1, 0xff800000, 0x8951, 0xc, 0x81, 0x8, 0xda53, 0x5, 0x10, 0x6, 0x7fff, 0x8, 0x8000, 0x3ff, 0x9, 0x1, 0x2, 0x2, 0x81, 0xd89f, 0x4, 0x851, 0x1dc8, 0xfff, 0x7, 0x1, 0x0, 0x10001, 0x3ff, 0x16, 0x4, 0x6, 0x3ff, 0x2, 0xd44, 0x9, 0x9, 0x9, 0x5, 0x311b, 0x5b1, 0xad, 0xff, 0x200, 0x0, 0x1, 0x1, 0xfffffff9, 0x100, 0xa, 0x1, 0x5, 0xffffffff, 0x3, 0x7, 0xf201, 0x7, 0xfff, 0x101, 0x7, 0xb, 0x1ff, 0x6, 0x3, 0xffffffff, 0xfffffffa, 0x1, 0x5, 0x38, 0x7, 0x80000001, 0x8, 0xfffffffc, 0x8, 0x3, 0x1, 0x4, 0x9, 0xadd, 0x80, 0x17, 0x1, 0x1, 0xed, 0x3, 0x2, 0x0, 0xbc6, 0x7, 0x7, 0xd4b, 0xffffffff, 0x0, 0x7fff, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x4, 0x9, 0x8, {0xa, 0x0, 0x8, 0x2d4a, 0x7c, 0x1}, {0x1, 0x1, 0x61, 0x3, 0xe, 0x5}, 0xd, 0x47, 0xb64e}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x17e884cc, 0x6, 0x2, 0xfff, 0xd7d, 0x5c21, 0x0, 0x2, 0x4, 0x42eb9457, 0x97f3, 0x7, 0xe, 0x30b0, 0x8, 0xe, 0x6, 0x81, 0x8001, 0x3ff, 0x0, 0x2, 0xb5, 0x8, 0x9, 0x3, 0x7fff, 0xf4b, 0x5, 0xfff, 0xb3, 0xffffffff, 0x3, 0x3, 0x465, 0x7f, 0x8, 0x7, 0x7789, 0x2, 0x1, 0x9, 0x1ff, 0x0, 0x6, 0x5, 0x401, 0x3, 0xd59f, 0x8, 0x1, 0x2, 0x80, 0x9, 0x7fff, 0x1, 0x2, 0x6, 0xb84, 0xe, 0xea4e, 0x5, 0x1, 0xb0, 0x10000, 0x51d, 0xaf, 0x2, 0xd, 0x10001, 0x8, 0x7, 0x0, 0x7, 0x2, 0x1000000, 0x7fffffff, 0x0, 0x4, 0xffffffff, 0x5, 0x30e, 0x5, 0xa00000, 0xc6dd, 0x3, 0x1, 0x4, 0x1, 0xc, 0x4, 0x6, 0x2, 0x9, 0x2, 0xffffffa1, 0x9, 0x3, 0x100, 0xa, 0x0, 0x4, 0x0, 0x1ff, 0xffffffff, 0x7ff, 0x3, 0x3f4, 0x80000000, 0xffffffff, 0x2, 0x2, 0xffff, 0xe, 0x1ff, 0x0, 0x6, 0xfffffffc, 0x10000, 0x0, 0x6, 0x3, 0x0, 0x6, 0x2, 0x30c, 0x78, 0x5, 0xfffffff3, 0x80000001, 0x5, 0x1, 0x3e33f502, 0x8a, 0x4, 0xbc4e05d, 0x7, 0x8f, 0x80, 0x4, 0x3, 0x2, 0x8, 0x2, 0xff, 0xfffffff7, 0x1, 0xdf6, 0x80000001, 0x4, 0x3, 0x4, 0xe55, 0x8001, 0x3ff, 0x2, 0x7fffffff, 0x3ffc00, 0x9, 0x7, 0x6, 0x3, 0x5, 0x3, 0xb3e2, 0x2, 0xff8, 0x1, 0x4, 0x4, 0x7, 0x800, 0x80000001, 0x0, 0x7, 0x6, 0x7, 0x8, 0xe22b, 0x8, 0x6, 0xb32, 0xaa, 0x10, 0x3efe5831, 0x10, 0x6, 0x9, 0x2, 0x9, 0x48, 0x16000000, 0x6655, 0xfffffff7, 0x200, 0x8, 0x1a88, 0xc6, 0x3, 0x5, 0xcd, 0x0, 0x1, 0x200, 0x5d56, 0x2, 0x8b9c, 0x36, 0x3297, 0xa, 0x2, 0x0, 0x7, 0x1, 0x6, 0x9, 0x0, 0x4, 0x9, 0x9, 0xa000000, 0x5, 0xe, 0x10, 0x9c32, 0x5, 0x400, 0x8, 0x0, 0x7ff, 0x53, 0x6, 0x7, 0x5, 0x9, 0xfffffffb, 0x6, 0xc, 0x4, 0x7, 0x100, 0x0, 0x2, 0x7fff, 0xde2d, 0xfffffeff, 0x51, 0x1ff, 0x7, 0x1, 0x3, 0x1, 0xe, 0x5, 0x79cd, 0x2]}]}, @TCA_CGROUP_POLICE={0x54, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x6, 0x9, 0x101, {0x6, 0x1, 0x1, 0x5, 0x7, 0x89b6}, {0x8, 0x0, 0x78, 0x8, 0x2, 0xffff}, 0xfcf, 0x91d, 0x6}}]}, @TCA_CGROUP_EMATCHES={0x111c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1118, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x8, 0x0, 0xf}, "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"}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xf5a5, 0x1, 0x7}, {0x1, 0x200, 0x1, 0x2, 0x5, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x7}, {0xffffffffffffffff, 0x2}}}, @TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0x5, 0x9, 0x5}, [@TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "d9da"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x1336}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x8}, {{0x2, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3ff, 0x1, 0x1}, {0x2, 0x0, 0x7, 0x3, 0x4, 0x2, 0x2}}}, @TCF_EM_U32={0x1c, 0x7f, 0x0, 0x0, {{0x2}, {0x8c, 0xca5, 0x8}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x9}, {0x2, 0xd, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7ff, 0x3, 0x8}, {0x4, 0x8, 0x10}}}]}]}]}}]}, 0x2010}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x48, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x48}}, 0x40000)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xf8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@private=0xa010101, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa02, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x0, 0x0, 0x5}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xf8}}, 0x0)
r11 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r11, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x4c810)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x10200c0, 0x0, 0x0, 0x0, 0x0)
r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r12, &(0x7f0000006280)={0x2020, 0x0, <r13=>0x0, 0x0, <r14=>0x0}, 0x2020)
write$FUSE_INIT(r12, &(0x7f0000004200)={0x50, 0x0, r13, {0x7, 0x29, 0x0, 0x2010008, 0x4, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r12, &(0x7f0000004280)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x7a4552d3, {0x5, 0x67, 0x0, '\x00', {0x1, 0x0, 0x10, 0x0, 0x0, r14, 0x2000, '\x00', 0x800, 0xffffffffffffffff, 0xfffd, 0x358, {0xffffffffffff9603, 0x400000}, {0x1f96, 0x7fff}, {0x7, 0x8}, {0xa, 0x10}, 0x5, 0x2080e16, 0x6, 0x7}}}})

kernel console output (not intermixed with test programs):

hould_fail_ex+0x414/0x560
[  577.294133][T12687]  _copy_from_iter+0x1cd/0x1630
[  577.294149][T12687]  ? __build_skb_around+0x22d/0x3c0
[  577.294164][T12687]  ? __pfx__copy_from_iter+0x10/0x10
[  577.294175][T12687]  ? __alloc_skb+0x2f1/0x430
[  577.294187][T12687]  ? __pfx___alloc_skb+0x10/0x10
[  577.294199][T12687]  ? netlink_sendmsg+0x642/0xb30
[  577.294213][T12687]  ? skb_put+0x11b/0x210
[  577.294226][T12687]  netlink_sendmsg+0x6b2/0xb30
[  577.294244][T12687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.294258][T12687]  ? __import_iovec+0x5d4/0x7f0
[  577.294270][T12687]  ? aa_sock_msg_perm+0xf1/0x1b0
[  577.294281][T12687]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  577.294291][T12687]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.294305][T12687]  __sock_sendmsg+0x21c/0x270
[  577.294316][T12687]  ____sys_sendmsg+0x505/0x820
[  577.294332][T12687]  ? __pfx_____sys_sendmsg+0x10/0x10
[  577.294347][T12687]  ? kstrtouint+0x6e/0xe0
[  577.294362][T12687]  ___sys_sendmsg+0x21f/0x2a0
[  577.294375][T12687]  ? __pfx____sys_sendmsg+0x10/0x10
[  577.294391][T12687]  ? rcu_read_lock_any_held+0xb3/0x120
[  577.294418][T12687]  ? __fget_files+0x2a/0x420
[  577.294429][T12687]  ? __fget_files+0x3a0/0x420
[  577.294446][T12687]  __sys_sendmsg+0x164/0x220
[  577.294460][T12687]  ? __pfx___sys_sendmsg+0x10/0x10
[  577.294477][T12687]  ? __pfx_ksys_write+0x10/0x10
[  577.294488][T12687]  ? __do_fast_syscall_32+0xbe/0x570
[  577.294503][T12687]  __do_fast_syscall_32+0x1f7/0x570
[  577.294515][T12687]  ? rcu_is_watching+0x15/0xb0
[  577.294526][T12687]  ? do_fast_syscall_32+0x34/0x80
[  577.294539][T12687]  do_fast_syscall_32+0x34/0x80
[  577.294551][T12687]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  577.294563][T12687] RIP: 0023:0xf704d539
[  577.294573][T12687] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  577.294581][T12687] RSP: 002b:00000000f543d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  577.294592][T12687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240
[  577.294599][T12687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  577.294605][T12687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  577.294610][T12687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  577.294616][T12687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  577.294630][T12687]  </TASK>
[  577.591321][ T6993] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  577.661684][   T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  577.900122][   T24] usb 4-1: too many configurations: 32, using maximum allowed: 8
[  577.909771][ T6993] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  577.924788][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  577.933651][   T24] usb 4-1: can't read configurations, error -61
[  577.940001][ T6993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  577.977888][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'.
[  578.028123][   T24] usb usb4-port1: attempt power cycle
[  578.040768][ T6993] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  578.057954][ T6993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  578.079289][ T6993] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  578.098561][ T6993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.116743][ T6993] usb 5-1: Product: syz
[  578.128516][ T6993] usb 5-1: Manufacturer: syz
[  578.136279][ T6993] usb 5-1: SerialNumber: syz
[  578.158645][ T6993] usb 5-1: config 0 descriptor??
[  578.183096][T12680] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  578.211160][ T6993] usb 5-1: ucan: probing device on interface #0
[  578.217753][ T6993] usb 5-1: ucan: invalid endpoint configuration
[  578.228436][ T6993] usb 5-1: ucan: probe failed; try to update the device firmware
[  578.383570][   T24] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  578.413599][   T24] usb 4-1: too many configurations: 32, using maximum allowed: 8
[  578.427840][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  578.439328][   T24] usb 4-1: can't read configurations, error -61
[  578.612044][   T24] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  578.683575][   T24] usb 4-1: too many configurations: 32, using maximum allowed: 8
[  578.702690][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  578.715771][   T24] usb 4-1: can't read configurations, error -61
[  578.728395][   T24] usb usb4-port1: unable to enumerate USB device
[  579.017839][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1661'.
[  580.087254][   T24] usb 5-1: USB disconnect, device number 51
[  580.252420][T12727] FAULT_INJECTION: forcing a failure.
[  580.252420][T12727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  580.273060][T12727] CPU: 1 UID: 0 PID: 12727 Comm: syz.1.1670 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  580.273087][T12727] Tainted: [L]=SOFTLOCKUP
[  580.273092][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  580.273101][T12727] Call Trace:
[  580.273108][T12727]  <TASK>
[  580.273115][T12727]  dump_stack_lvl+0x189/0x250
[  580.273138][T12727]  ? __pfx____ratelimit+0x10/0x10
[  580.273158][T12727]  ? __pfx_dump_stack_lvl+0x10/0x10
[  580.273178][T12727]  ? __pfx__printk+0x10/0x10
[  580.273199][T12727]  ? __might_fault+0xb0/0x130
[  580.273231][T12727]  should_fail_ex+0x414/0x560
[  580.273254][T12727]  _copy_from_iter+0x1cd/0x1630
[  580.273280][T12727]  ? __build_skb_around+0x22d/0x3c0
[  580.273307][T12727]  ? __pfx__copy_from_iter+0x10/0x10
[  580.273327][T12727]  ? __alloc_skb+0x2f1/0x430
[  580.273348][T12727]  ? __pfx___alloc_skb+0x10/0x10
[  580.273369][T12727]  ? netlink_sendmsg+0x642/0xb30
[  580.273389][T12727]  ? skb_put+0x11b/0x210
[  580.273420][T12727]  netlink_sendmsg+0x6b2/0xb30
[  580.273453][T12727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  580.273478][T12727]  ? __import_iovec+0x5d4/0x7f0
[  580.273498][T12727]  ? aa_sock_msg_perm+0xf1/0x1b0
[  580.273515][T12727]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  580.273531][T12727]  ? __pfx_netlink_sendmsg+0x10/0x10
[  580.273553][T12727]  __sock_sendmsg+0x21c/0x270
[  580.273571][T12727]  ____sys_sendmsg+0x505/0x820
[  580.273595][T12727]  ? __pfx_____sys_sendmsg+0x10/0x10
[  580.273620][T12727]  ? kstrtouint+0x6e/0xe0
[  580.273644][T12727]  ___sys_sendmsg+0x21f/0x2a0
[  580.273666][T12727]  ? __pfx____sys_sendmsg+0x10/0x10
[  580.273691][T12727]  ? rcu_read_lock_any_held+0xb3/0x120
[  580.273734][T12727]  ? __fget_files+0x2a/0x420
[  580.273751][T12727]  ? __fget_files+0x3a0/0x420
[  580.273777][T12727]  __sys_sendmsg+0x164/0x220
[  580.273800][T12727]  ? __pfx___sys_sendmsg+0x10/0x10
[  580.273827][T12727]  ? __pfx_ksys_write+0x10/0x10
[  580.273846][T12727]  ? __do_fast_syscall_32+0xbe/0x570
[  580.273869][T12727]  __do_fast_syscall_32+0x1f7/0x570
[  580.273888][T12727]  ? rcu_is_watching+0x15/0xb0
[  580.273906][T12727]  ? do_fast_syscall_32+0x34/0x80
[  580.273929][T12727]  do_fast_syscall_32+0x34/0x80
[  580.273948][T12727]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  580.273967][T12727] RIP: 0023:0xf7ff2539
[  580.273982][T12727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  580.273995][T12727] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  580.274013][T12727] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  580.274024][T12727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  580.274034][T12727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  580.274043][T12727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  580.274053][T12727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  580.274078][T12727]  </TASK>
[  580.973343][ T5920] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  581.113047][T12742] netlink: 'syz.2.1675': attribute type 21 has an invalid length.
[  581.129345][T12742] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1675'.
[  581.138534][ T5920] usb 1-1: Using ep0 maxpacket: 16
[  581.151220][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  581.172407][T12742] netlink: 'syz.2.1675': attribute type 4 has an invalid length.
[  581.180174][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  581.211824][T12742] netlink: 'syz.2.1675': attribute type 5 has an invalid length.
[  581.219640][T12742] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1675'.
[  581.230764][ T5920] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  581.286668][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.316851][ T5920] usb 1-1: Product: syz
[  581.327170][ T5920] usb 1-1: Manufacturer: syz
[  581.350645][ T5920] usb 1-1: SerialNumber: syz
[  581.383229][ T5920] usb 1-1: config 0 descriptor??
[  581.474370][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1673'.
[  581.647472][   T24] usb 1-1: USB disconnect, device number 58
[  582.957109][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1677'.
[  582.998536][   T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  583.229333][   T24] usb 4-1: Using ep0 maxpacket: 16
[  583.244531][   T24] usb 4-1: config 6 has an invalid interface number: 107 but max is 2
[  583.255039][   T24] usb 4-1: config 6 has an invalid interface number: 109 but max is 2
[  583.304702][   T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  583.329493][   T24] usb 4-1: config 6 has no interface number 0
[  583.351502][   T24] usb 4-1: config 6 has no interface number 1
[  583.409360][   T24] usb 4-1: config 6 interface 107 altsetting 10 bulk endpoint 0x3 has invalid maxpacket 8
[  583.422665][   T24] usb 4-1: config 6 interface 107 altsetting 10 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  583.515985][   T24] usb 4-1: config 6 interface 107 altsetting 10 has an endpoint descriptor with address 0x98, changing to 0x88
[  583.641763][   T24] usb 4-1: config 6 interface 107 altsetting 10 endpoint 0x88 has invalid maxpacket 10114, setting to 1024
[  583.677564][   T24] usb 4-1: config 6 interface 107 altsetting 10 bulk endpoint 0x88 has invalid maxpacket 1024
[  583.702840][   T24] usb 4-1: config 6 interface 107 altsetting 10 has a duplicate endpoint with address 0x5, skipping
[  583.732392][   T24] usb 4-1: config 6 interface 107 altsetting 10 endpoint 0xD has invalid wMaxPacketSize 0
[  583.762722][   T24] usb 4-1: config 6 interface 107 altsetting 10 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  583.791738][   T24] usb 4-1: config 6 interface 107 altsetting 10 has a duplicate endpoint with address 0x88, skipping
[  583.814334][   T24] usb 4-1: config 6 interface 107 altsetting 10 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  583.883346][   T24] usb 4-1: config 6 interface 109 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  583.914268][   T24] usb 4-1: too many endpoints for config 6 interface 2 altsetting 56: 117, using maximum allowed: 30
[  583.959754][   T24] usb 4-1: config 6 interface 2 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 117
[  584.063700][   T24] usb 4-1: config 6 interface 107 has no altsetting 0
[  584.070596][   T24] usb 4-1: config 6 interface 109 has no altsetting 0
[  584.077991][   T24] usb 4-1: config 6 interface 2 has no altsetting 0
[  584.099543][   T24] usb 4-1: New USB device found, idVendor=0c52, idProduct=2882, bcdDevice=65.0e
[  584.114273][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.124083][   T24] usb 4-1: Product: 짴颡쒘븋䠸걟ԧᩊ鴍癸ⷿ咍ⲻ廣埒峕퍺놙邪ꛧ램瑉Ѵ䍄
[  584.124207][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'.
[  584.135208][   T24] usb 4-1: Manufacturer: 귊蠷袍쓍髣ᴸ₣ో朮퐃茤໗㵟炥ꖥ꜍匋㑣ꢸ假ꅤ厸⬳钽䨭掊ěꝾ䡐ೱᒕ蹡僆蚉氆붷玭逐씇洞혨秊林䶵䖭?➎㮓㛓䰾ꓠ른䜎숚۹պ톸㒄딺嶢ᆑ틃䶽훫ᨏ㒡ᖻ㠕펔ធ륲唩䀆㽷ᰎ梭ꊲꯣಃ펵╒偎埅䨔쌩嘖긽㩅᳴爫⣳峓ﻋ㖯晝딻嫴䞵ﮟᛁ灱橪߄㽸輖縛鬪췌
[  584.180620][   T24] usb 4-1: SerialNumber: syz
[  584.207143][T12769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  584.215167][T12769] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  584.237827][T12777] macvlan3: entered promiscuous mode
[  584.295763][T12783] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320
[  584.429374][   T24] ftdi_sio 4-1:6.107: FTDI USB Serial Device converter detected
[  584.446719][T12786] Invalid logical block size (21930)
[  584.450816][   T24] ftdi_sio ttyUSB0: unknown device type: 0x650e
[  584.497229][   T24] ftdi_sio 4-1:6.109: FTDI USB Serial Device converter detected
[  584.528057][   T24] ftdi_sio ttyUSB1: unknown device type: 0x650e
[  584.552335][   T24] ftdi_sio 4-1:6.2: FTDI USB Serial Device converter detected
[  584.564931][   T24] ftdi_sio ttyUSB2: unknown device type: 0x650e
[  584.634810][   T24] usb 4-1: USB disconnect, device number 65
[  584.670468][   T24] ftdi_sio 4-1:6.107: device disconnected
[  584.685089][   T24] ftdi_sio 4-1:6.109: device disconnected
[  584.703027][   T24] ftdi_sio 4-1:6.2: device disconnected
[  584.941730][ T5920] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  585.061984][   T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  585.073324][ T5920] usb 2-1: device descriptor read/64, error -71
[  585.221729][   T24] usb 3-1: Using ep0 maxpacket: 32
[  585.236368][   T24] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  585.261865][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  585.278777][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  585.288127][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.296614][   T24] usb 3-1: Product: syz
[  585.300856][   T24] usb 3-1: Manufacturer: ࡡ
[  585.306484][   T24] usb 3-1: SerialNumber: syz
[  585.322742][ T5920] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  585.395924][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1692'.
[  585.543918][ T5920] usb 2-1: device descriptor read/64, error -71
[  585.560604][   T24] usb 3-1: 0:2 : does not exist
[  585.573988][   T24] usb 3-1: USB disconnect, device number 49
[  585.606100][T12351] udevd[12351]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  585.669212][ T5920] usb usb2-port1: attempt power cycle
[  585.681786][ T5935] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  585.883443][ T5935] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  585.923626][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  585.952132][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  586.031780][ T5920] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  586.052453][ T5935] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  586.066004][ T5920] usb 2-1: device descriptor read/8, error -71
[  586.074248][ T5935] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  586.083528][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  586.092196][ T5935] usb 1-1: Product: syz
[  586.096594][ T5935] usb 1-1: Manufacturer: syz
[  586.240048][ T5935] cdc_wdm 1-1:1.0: skipping garbage
[  586.355134][ T5935] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  586.405225][ T5920] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  586.432534][ T5920] usb 2-1: device descriptor read/8, error -71
[  586.475075][ T6993] usb 1-1: USB disconnect, device number 59
[  586.542736][ T5920] usb usb2-port1: unable to enumerate USB device
[  586.863931][T12807] netlink: 'syz.0.1691': attribute type 4 has an invalid length.
[  588.592193][ T5920] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  588.794683][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'.
[  588.983221][ T5920] usb 5-1: Using ep0 maxpacket: 16
[  589.006860][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  589.018152][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  589.047837][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  589.100800][ T5920] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  589.142450][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.183750][ T5920] usb 5-1: config 0 descriptor??
[  590.969567][ T5920] usbhid 5-1:0.0: can't add hid device: -71
[  590.983457][ T5920] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  591.039590][ T5920] usb 5-1: USB disconnect, device number 52
[  592.529085][T12906] syz.2.1716 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  592.541293][T12906] random: crng reseeded on system resumption
[  593.218488][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1714'.
[  595.770697][T12960] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  596.517056][T12969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1731'.
[  596.549171][T12984] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1732'.
[  596.591734][ T6993] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  596.755358][ T6993] usb 3-1: Using ep0 maxpacket: 8
[  596.774147][ T6993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  596.790071][ T6993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  596.812599][ T6993] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  596.871195][ T6993] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  596.897356][ T6993] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  596.917185][ T6993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.098444][ T6993] hub 3-1:1.0: bad descriptor, ignoring hub
[  597.130118][ T6993] hub 3-1:1.0: probe with driver hub failed with error -5
[  597.198509][ T6993] cdc_wdm 3-1:1.0: skipping garbage
[  597.215345][ T6993] cdc_wdm 3-1:1.0: skipping garbage
[  597.243928][T12988] FAULT_INJECTION: forcing a failure.
[  597.243928][T12988] name failslab, interval 1, probability 0, space 0, times 0
[  597.256941][ T6993] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  597.266374][ T6993] cdc_wdm 3-1:1.0: Unknown control protocol
[  597.289203][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.1.1736 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  597.289232][T12988] Tainted: [L]=SOFTLOCKUP
[  597.289238][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  597.289248][T12988] Call Trace:
[  597.289256][T12988]  <TASK>
[  597.289263][T12988]  dump_stack_lvl+0x189/0x250
[  597.289280][T12988]  ? __pfx____ratelimit+0x10/0x10
[  597.289292][T12988]  ? __pfx_dump_stack_lvl+0x10/0x10
[  597.289303][T12988]  ? __pfx__printk+0x10/0x10
[  597.289318][T12988]  ? __pfx___might_resched+0x10/0x10
[  597.289330][T12988]  ? fs_reclaim_acquire+0x7d/0x100
[  597.289343][T12988]  should_fail_ex+0x414/0x560
[  597.289358][T12988]  should_failslab+0xa8/0x100
[  597.289371][T12988]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  597.289386][T12988]  ? __alloc_skb+0x255/0x430
[  597.289397][T12988]  ? napi_skb_cache_get+0x4a5/0x780
[  597.289407][T12988]  ? napi_skb_cache_get+0x151/0x780
[  597.289420][T12988]  __alloc_skb+0x255/0x430
[  597.289432][T12988]  ? __pfx___alloc_skb+0x10/0x10
[  597.289446][T12988]  ? netlink_ack_tlv_len+0x6c/0x210
[  597.289461][T12988]  netlink_ack+0x146/0xa50
[  597.289472][T12988]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  597.289493][T12988]  netlink_rcv_skb+0x28c/0x470
[  597.289506][T12988]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  597.289518][T12988]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  597.289536][T12988]  ? netlink_deliver_tap+0x2e/0x1b0
[  597.289553][T12988]  netlink_unicast+0x82f/0x9e0
[  597.289569][T12988]  ? __pfx_netlink_unicast+0x10/0x10
[  597.289582][T12988]  ? netlink_sendmsg+0x642/0xb30
[  597.289594][T12988]  ? skb_put+0x11b/0x210
[  597.289607][T12988]  netlink_sendmsg+0x805/0xb30
[  597.289625][T12988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.289639][T12988]  ? __import_iovec+0x5d4/0x7f0
[  597.289652][T12988]  ? aa_sock_msg_perm+0xf1/0x1b0
[  597.289663][T12988]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  597.289672][T12988]  ? __pfx_netlink_sendmsg+0x10/0x10
[  597.289685][T12988]  __sock_sendmsg+0x21c/0x270
[  597.289696][T12988]  ____sys_sendmsg+0x505/0x820
[  597.289712][T12988]  ? __pfx_____sys_sendmsg+0x10/0x10
[  597.289736][T12988]  ? kstrtouint+0x6e/0xe0
[  597.289751][T12988]  ___sys_sendmsg+0x21f/0x2a0
[  597.289765][T12988]  ? __pfx____sys_sendmsg+0x10/0x10
[  597.289780][T12988]  ? rcu_read_lock_any_held+0xb3/0x120
[  597.289807][T12988]  ? __fget_files+0x2a/0x420
[  597.289818][T12988]  ? __fget_files+0x3a0/0x420
[  597.289835][T12988]  __sys_sendmsg+0x164/0x220
[  597.289848][T12988]  ? __pfx___sys_sendmsg+0x10/0x10
[  597.289865][T12988]  ? __pfx_ksys_write+0x10/0x10
[  597.289877][T12988]  ? __do_fast_syscall_32+0xbe/0x570
[  597.289891][T12988]  __do_fast_syscall_32+0x1f7/0x570
[  597.289903][T12988]  ? rcu_is_watching+0x15/0xb0
[  597.289913][T12988]  ? do_fast_syscall_32+0x34/0x80
[  597.289927][T12988]  do_fast_syscall_32+0x34/0x80
[  597.289938][T12988]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  597.289951][T12988] RIP: 0023:0xf7ff2539
[  597.289960][T12988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  597.289969][T12988] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  597.289980][T12988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  597.289988][T12988] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[  597.289993][T12988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  597.289998][T12988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  597.290005][T12988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  597.290019][T12988]  </TASK>
[  598.711723][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  598.731713][ T5935] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  598.831734][ T5920] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  598.861684][   T10] usb 5-1: Using ep0 maxpacket: 32
[  598.871518][   T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  598.880725][   T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  598.893127][ T5935] usb 4-1: config 0 has an invalid interface number: 216 but max is 0
[  598.903848][ T5935] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.914601][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  598.926936][ T5935] usb 4-1: config 0 has no interface number 0
[  598.933254][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  598.944102][ T5935] usb 4-1: config 0 interface 216 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  598.957440][   T10] usb 5-1: config 1 has no interface number 0
[  598.963811][   T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  598.973252][ T5935] usb 4-1: config 0 interface 216 has no altsetting 0
[  598.980245][ T5935] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  598.989806][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.999819][ T5920] usb 1-1: config 0 has an invalid interface number: 216 but max is 0
[  599.008366][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.019292][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.033388][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  599.041743][ T5920] usb 1-1: config 0 has no interface number 0
[  599.047856][ T5920] usb 1-1: config 0 interface 216 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  599.066337][ T5935] usb 4-1: config 0 descriptor??
[  599.080158][ T5920] usb 1-1: config 0 interface 216 has no altsetting 0
[  599.091410][ T5935] usb 4-1: NFC: intf ffff888057b77000 id ffffffff8e934880
[  599.118711][ T5920] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  599.128435][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  599.148554][ T5920] usb 1-1: config 0 descriptor??
[  599.160691][ T5920] usb 1-1: NFC: intf ffff888058a1e000 id ffffffff8e934880
[  599.237112][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.240589][T13012] FAULT_INJECTION: forcing a failure.
[  599.240589][T13012] name failslab, interval 1, probability 0, space 0, times 0
[  599.251549][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.269698][T13012] CPU: 1 UID: 0 PID: 13012 Comm: syz.1.1742 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  599.269725][T13012] Tainted: [L]=SOFTLOCKUP
[  599.269732][T13012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  599.269743][T13012] Call Trace:
[  599.269751][T13012]  <TASK>
[  599.269759][T13012]  dump_stack_lvl+0x189/0x250
[  599.269785][T13012]  ? __pfx____ratelimit+0x10/0x10
[  599.269805][T13012]  ? __pfx_dump_stack_lvl+0x10/0x10
[  599.269826][T13012]  ? __pfx__printk+0x10/0x10
[  599.269854][T13012]  ? __pfx___might_resched+0x10/0x10
[  599.269877][T13012]  should_fail_ex+0x414/0x560
[  599.269905][T13012]  should_failslab+0xa8/0x100
[  599.269927][T13012]  __kmalloc_noprof+0xdf/0x800
[  599.269945][T13012]  ? kfree+0x4d/0x660
[  599.269964][T13012]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  599.269989][T13012]  tomoyo_realpath_from_path+0xe3/0x5d0
[  599.270010][T13012]  ? tomoyo_domain+0xd8/0x130
[  599.270034][T13012]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  599.270057][T13012]  tomoyo_path_number_perm+0x1e8/0x5a0
[  599.270083][T13012]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  599.270105][T13012]  ? __lock_acquire+0x6b6/0x2cf0
[  599.270162][T13012]  ? __fget_files+0x2a/0x420
[  599.270189][T13012]  ? __fget_files+0x3a0/0x420
[  599.270208][T13012]  ? __fget_files+0x2a/0x420
[  599.270233][T13012]  security_file_ioctl_compat+0xcb/0x2d0
[  599.270258][T13012]  __ia32_compat_sys_ioctl+0x128/0x840
[  599.270280][T13012]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  599.270298][T13012]  ? __fget_files+0x3a0/0x420
[  599.270326][T13012]  ? fput+0xa0/0xd0
[  599.270348][T13012]  ? ksys_write+0x22a/0x250
[  599.270364][T13012]  ? exc_page_fault+0x82/0x100
[  599.270384][T13012]  ? __pfx_ksys_write+0x10/0x10
[  599.270406][T13012]  ? __do_fast_syscall_32+0xbe/0x570
[  599.270430][T13012]  __do_fast_syscall_32+0x1f7/0x570
[  599.270452][T13012]  ? rcu_is_watching+0x15/0xb0
[  599.270471][T13012]  ? do_fast_syscall_32+0x34/0x80
[  599.270498][T13012]  do_fast_syscall_32+0x34/0x80
[  599.270518][T13012]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  599.270538][T13012] RIP: 0023:0xf7ff2539
[  599.270554][T13012] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  599.270570][T13012] RSP: 002b:00000000f54c555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  599.270589][T13012] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000890b
[  599.270609][T13012] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  599.270620][T13012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  599.270631][T13012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  599.270641][T13012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  599.270671][T13012]  </TASK>
[  599.270686][T13012] ERROR: Out of memory at tomoyo_realpath_from_path.
[  599.279639][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.328584][ T6993] usb 4-1: USB disconnect, device number 66
[  599.570343][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.602705][   T24] usb 1-1: USB disconnect, device number 60
[  599.722417][ T5907] usb 3-1: USB disconnect, device number 50
[  599.831747][ T5923] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  599.983190][ T5923] usb 2-1: config 0 has an invalid interface number: 216 but max is 0
[  599.991797][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.002305][ T5923] usb 2-1: config 0 has no interface number 0
[  600.008467][ T5923] usb 2-1: config 0 interface 216 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  600.023151][ T5923] usb 2-1: config 0 interface 216 has no altsetting 0
[  600.029968][ T5923] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[  600.039084][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.049927][ T5923] usb 2-1: config 0 descriptor??
[  600.058195][ T5923] usb 2-1: NFC: intf ffff8880288c5000 id ffffffff8e934880
[  600.081812][ T5907] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  600.213772][ T5907] usb 3-1: device descriptor read/64, error -71
[  600.257102][ T5923] usb 2-1: USB disconnect, device number 66
[  600.350207][   T10] snd_usb_pod 5-1:1.1: set_interface failed
[  600.357869][   T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  600.372142][   T10] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[  600.420777][   T10] usb 5-1: USB disconnect, device number 53
[  600.426982][T13026] FAULT_INJECTION: forcing a failure.
[  600.426982][T13026] name failslab, interval 1, probability 0, space 0, times 0
[  600.441542][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.4.1747 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  600.441571][T13026] Tainted: [L]=SOFTLOCKUP
[  600.441579][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  600.441593][T13026] Call Trace:
[  600.441600][T13026]  <TASK>
[  600.441607][T13026]  dump_stack_lvl+0x189/0x250
[  600.441632][T13026]  ? __pfx____ratelimit+0x10/0x10
[  600.441660][T13026]  ? __pfx_dump_stack_lvl+0x10/0x10
[  600.441680][T13026]  ? __pfx__printk+0x10/0x10
[  600.441719][T13026]  should_fail_ex+0x414/0x560
[  600.441745][T13026]  should_failslab+0xa8/0x100
[  600.441767][T13026]  __kmalloc_cache_noprof+0x84/0x700
[  600.441786][T13026]  ? sctp_add_bind_addr+0x8c/0x370
[  600.441815][T13026]  sctp_add_bind_addr+0x8c/0x370
[  600.441844][T13026]  sctp_copy_local_addr_list+0x30b/0x4e0
[  600.441872][T13026]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  600.441897][T13026]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  600.441925][T13026]  ? sctp_v4_is_any+0x35/0x60
[  600.441941][T13026]  ? sctp_copy_one_addr+0x93/0x360
[  600.441968][T13026]  sctp_bind_addr_copy+0xb3/0x3c0
[  600.441992][T13026]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  600.442018][T13026]  sctp_connect_new_asoc+0x2e0/0x690
[  600.442043][T13026]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  600.442064][T13026]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  600.442084][T13026]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  600.442102][T13026]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  600.442122][T13026]  ? sctp_endpoint_lookup_assoc+0x22f/0x260
[  600.442146][T13026]  __sctp_connect+0x5b5/0xda0
[  600.442178][T13026]  ? __pfx___sctp_connect+0x10/0x10
[  600.442196][T13026]  ? security_sctp_bind_connect+0x7e/0x2e0
[  600.442221][T13026]  ? __sctp_setsockopt_connectx+0xc7/0x190
[  600.442247][T13026]  sctp_getsockopt_connectx3+0x1fa/0x320
[  600.442275][T13026]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  600.442302][T13026]  ? __local_bh_enable_ip+0x12d/0x1c0
[  600.442335][T13026]  sctp_getsockopt+0x984/0xb90
[  600.442352][T13026]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  600.442374][T13026]  do_sock_getsockopt+0x2b4/0x3d0
[  600.442399][T13026]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  600.442420][T13026]  ? __do_fast_syscall_32+0x10/0x570
[  600.442441][T13026]  ? __fget_files+0x2a/0x420
[  600.442461][T13026]  ? __fget_files+0x3a0/0x420
[  600.442481][T13026]  ? __fget_files+0x2a/0x420
[  600.442509][T13026]  __ia32_sys_getsockopt+0x1a5/0x250
[  600.442530][T13026]  ? __do_fast_syscall_32+0x10/0x570
[  600.442553][T13026]  ? __do_fast_syscall_32+0x10/0x570
[  600.442577][T13026]  __do_fast_syscall_32+0x1f7/0x570
[  600.442598][T13026]  ? rcu_is_watching+0x15/0xb0
[  600.442618][T13026]  ? do_fast_syscall_32+0x34/0x80
[  600.442650][T13026]  do_fast_syscall_32+0x34/0x80
[  600.442671][T13026]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  600.442691][T13026] RIP: 0023:0xf70ed539
[  600.442707][T13026] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  600.442722][T13026] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 000000000000016d
[  600.442742][T13026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084
[  600.442755][T13026] RDX: 000000000000006f RSI: 00000000800000c0 RDI: 0000000080000100
[  600.442766][T13026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  600.442777][T13026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  600.442788][T13026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  600.442817][T13026]  </TASK>
[  600.822090][ T5907] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  600.881845][ T6993] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  600.951707][ T5907] usb 3-1: device descriptor read/64, error -71
[  600.994412][T13028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1745'.
[  601.043711][ T6993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  601.054148][ T6993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  601.063328][ T5907] usb usb3-port1: attempt power cycle
[  601.070739][ T6993] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  601.080120][ T6993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  601.088330][ T6993] usb 4-1: SerialNumber: syz
[  601.431803][ T5907] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  601.463555][ T5907] usb 3-1: device descriptor read/8, error -71
[  601.471113][T13023] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  601.769600][ T5907] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  601.784697][ T6993] usb 4-1: 0:2 : does not exist
[  601.842361][ T5907] usb 3-1: device descriptor read/8, error -71
[  601.866807][ T6993] usb 4-1: USB disconnect, device number 67
[  601.992464][ T5907] usb usb3-port1: unable to enumerate USB device
[  602.039479][T12351] udevd[12351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  602.771735][ T6993] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  602.961778][ T6993] usb 5-1: Using ep0 maxpacket: 16
[  602.969106][ T6993] usb 5-1: unable to get BOS descriptor or descriptor too short
[  602.978278][ T6993] usb 5-1: config 1 has an invalid interface number: 160 but max is 0
[  602.998826][ T6993] usb 5-1: config 1 has no interface number 0
[  603.028012][ T6993] usb 5-1: config 1 interface 160 has no altsetting 0
[  603.054575][ T6993] usb 5-1: string descriptor 0 read error: -22
[  603.061095][ T6993] usb 5-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47
[  603.082087][ T6993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.172959][ T5907] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  603.218372][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  603.218390][   T30] audit: type=1326 audit(1765118805.852:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.252678][   T30] audit: type=1326 audit(1765118805.852:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.278274][   T30] audit: type=1326 audit(1765118805.852:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.301370][   T30] audit: type=1326 audit(1765118805.852:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.325277][   T30] audit: type=1326 audit(1765118805.852:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.348727][   T30] audit: type=1326 audit(1765118805.862:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.350867][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.382288][ T5907] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  603.391565][ T5907] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.428947][ T5907] usb 1-1: config 0 descriptor??
[  603.437001][ T6993] usb 5-1: palm_os_4_probe - error -110 getting connection info
[  603.441712][   T30] audit: type=1326 audit(1765118805.862:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.447316][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.493930][ T6993] visor 5-1:1.160: Handspring Visor / Palm OS converter detected
[  603.508113][ T6993] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  603.527737][   T30] audit: type=1326 audit(1765118805.862:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.558904][   T30] audit: type=1326 audit(1765118805.862:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.583431][T13053] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1753'.
[  603.589147][ T6993] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  603.660444][   T30] audit: type=1326 audit(1765118805.862:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.3.1757" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  603.691271][T13070] FAULT_INJECTION: forcing a failure.
[  603.691271][T13070] name failslab, interval 1, probability 0, space 0, times 0
[  603.705515][T13070] CPU: 0 UID: 0 PID: 13070 Comm: syz.3.1759 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  603.705542][T13070] Tainted: [L]=SOFTLOCKUP
[  603.705549][T13070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  603.705560][T13070] Call Trace:
[  603.705568][T13070]  <TASK>
[  603.705576][T13070]  dump_stack_lvl+0x189/0x250
[  603.705603][T13070]  ? __pfx____ratelimit+0x10/0x10
[  603.705623][T13070]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.705644][T13070]  ? __pfx__printk+0x10/0x10
[  603.705674][T13070]  ? __pfx___might_resched+0x10/0x10
[  603.705692][T13070]  ? fs_reclaim_acquire+0x7d/0x100
[  603.705716][T13070]  should_fail_ex+0x414/0x560
[  603.705743][T13070]  should_failslab+0xa8/0x100
[  603.705766][T13070]  __kmalloc_cache_noprof+0x84/0x700
[  603.705786][T13070]  ? ip_setup_cork+0x299/0x9a0
[  603.705807][T13070]  ? ipv4_mtu+0x53b/0x650
[  603.705830][T13070]  ip_setup_cork+0x299/0x9a0
[  603.705859][T13070]  ip_append_data+0x13b/0x190
[  603.705881][T13070]  ? __pfx_raw_getfrag+0x10/0x10
[  603.705907][T13070]  raw_sendmsg+0x13d8/0x18b0
[  603.705946][T13070]  ? __pfx_raw_sendmsg+0x10/0x10
[  603.705987][T13070]  ? aa_sk_perm+0x7ee/0x920
[  603.706018][T13070]  ? __pfx_aa_sk_perm+0x10/0x10
[  603.706041][T13070]  ? tomoyo_socket_sendmsg_permission+0x216/0x300
[  603.706064][T13070]  ? sock_rps_record_flow+0x19/0x410
[  603.706091][T13070]  ? inet_sendmsg+0x2f4/0x370
[  603.706113][T13070]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  603.706134][T13070]  __sock_sendmsg+0x19c/0x270
[  603.706156][T13070]  ____sys_sendmsg+0x52d/0x820
[  603.706184][T13070]  ? __pfx_____sys_sendmsg+0x10/0x10
[  603.706223][T13070]  ___sys_sendmsg+0x21f/0x2a0
[  603.706248][T13070]  ? __pfx____sys_sendmsg+0x10/0x10
[  603.706307][T13070]  ? __fget_files+0x2a/0x420
[  603.706328][T13070]  ? __fget_files+0x3a0/0x420
[  603.706366][T13070]  __sys_sendmmsg+0x28e/0x430
[  603.706395][T13070]  ? __pfx___sys_sendmmsg+0x10/0x10
[  603.706428][T13070]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  603.706482][T13070]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  603.706513][T13070]  __do_fast_syscall_32+0x1f7/0x570
[  603.706536][T13070]  ? rcu_is_watching+0x15/0xb0
[  603.706556][T13070]  ? do_fast_syscall_32+0x34/0x80
[  603.706582][T13070]  do_fast_syscall_32+0x34/0x80
[  603.706604][T13070]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  603.706626][T13070] RIP: 0023:0xf7f71539
[  603.706642][T13070] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  603.706658][T13070] RSP: 002b:00000000f542455c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  603.706677][T13070] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000f40
[  603.706691][T13070] RDX: 0000000000068000 RSI: 0000000000000000 RDI: 0000000000000000
[  603.706702][T13070] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  603.706713][T13070] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  603.706724][T13070] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  603.706753][T13070]  </TASK>
[  603.811879][   T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  603.940346][   T10] usb 5-1: USB disconnect, device number 54
[  603.963257][ T5907] usbhid 1-1:0.0: can't add hid device: -71
[  604.083549][ T5907] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  604.113423][ T5907] usb 1-1: USB disconnect, device number 61
[  604.183496][   T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  604.556794][   T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  604.612327][   T10] visor 5-1:1.160: device disconnected
[  604.691723][   T24] usb 2-1: Using ep0 maxpacket: 16
[  604.701536][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.721912][   T24] usb 2-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  604.739808][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.757205][   T24] usb 2-1: config 0 descriptor??
[  605.198619][   T24] hid-alps 0003:044E:120B.000B: unknown main item tag 0x0
[  605.210451][   T24] hid-alps 0003:044E:120B.000B: unknown main item tag 0x0
[  605.221998][   T24] hid-alps 0003:044E:120B.000B: unknown main item tag 0x0
[  605.231726][   T24] hid-alps 0003:044E:120B.000B: unknown main item tag 0x0
[  605.243442][   T24] hid-alps 0003:044E:120B.000B: unknown main item tag 0x0
[  605.291138][   T24] hid-alps 0003:044E:120B.000B: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.1-1/input0
[  605.329217][T13095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1761'.
[  605.406944][   T24] usb 2-1: USB disconnect, device number 67
[  605.490431][T13098] fido_id[13098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  605.871724][   T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  606.021678][   T24] usb 4-1: Using ep0 maxpacket: 8
[  606.035833][   T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  606.077840][   T24] usb 4-1: config 0 has no interface number 0
[  606.100892][   T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  606.100990][T13105] fuse: Bad value for 'user_id'
[  606.162139][   T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  606.168452][T13105] fuse: Bad value for 'user_id'
[  606.212751][   T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  606.214063][T13109] FAULT_INJECTION: forcing a failure.
[  606.214063][T13109] name failslab, interval 1, probability 0, space 0, times 0
[  606.292172][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.4.1770 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  606.292192][T13109] Tainted: [L]=SOFTLOCKUP
[  606.292196][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  606.292203][T13109] Call Trace:
[  606.292208][T13109]  <TASK>
[  606.292213][T13109]  dump_stack_lvl+0x189/0x250
[  606.292231][T13109]  ? __pfx____ratelimit+0x10/0x10
[  606.292243][T13109]  ? __pfx_dump_stack_lvl+0x10/0x10
[  606.292255][T13109]  ? __pfx__printk+0x10/0x10
[  606.292273][T13109]  ? __pfx___might_resched+0x10/0x10
[  606.292283][T13109]  ? fs_reclaim_acquire+0x7d/0x100
[  606.292297][T13109]  should_fail_ex+0x414/0x560
[  606.292312][T13109]  should_failslab+0xa8/0x100
[  606.292325][T13109]  __kmalloc_noprof+0xdf/0x800
[  606.292335][T13109]  ? tomoyo_encode+0x28b/0x550
[  606.292349][T13109]  tomoyo_encode+0x28b/0x550
[  606.292362][T13109]  tomoyo_realpath_from_path+0x58d/0x5d0
[  606.292379][T13109]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  606.292392][T13109]  tomoyo_path_number_perm+0x1e8/0x5a0
[  606.292407][T13109]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  606.292420][T13109]  ? __lock_acquire+0x6b6/0x2cf0
[  606.292451][T13109]  ? __fget_files+0x2a/0x420
[  606.292466][T13109]  ? __fget_files+0x3a0/0x420
[  606.292477][T13109]  ? __fget_files+0x2a/0x420
[  606.292491][T13109]  security_file_ioctl_compat+0xcb/0x2d0
[  606.292505][T13109]  __ia32_compat_sys_ioctl+0x128/0x840
[  606.292518][T13109]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  606.292528][T13109]  ? __fget_files+0x3a0/0x420
[  606.292543][T13109]  ? fput+0xa0/0xd0
[  606.292556][T13109]  ? ksys_write+0x22a/0x250
[  606.292565][T13109]  ? exc_page_fault+0x82/0x100
[  606.292577][T13109]  ? __pfx_ksys_write+0x10/0x10
[  606.292589][T13109]  ? __do_fast_syscall_32+0xbe/0x570
[  606.292604][T13109]  __do_fast_syscall_32+0x1f7/0x570
[  606.292616][T13109]  ? rcu_is_watching+0x15/0xb0
[  606.292627][T13109]  ? do_fast_syscall_32+0x34/0x80
[  606.292642][T13109]  do_fast_syscall_32+0x34/0x80
[  606.292653][T13109]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  606.292666][T13109] RIP: 0023:0xf70ed539
[  606.292676][T13109] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  606.292684][T13109] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  606.292696][T13109] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5605
[  606.292704][T13109] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000
[  606.292710][T13109] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  606.292716][T13109] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  606.292721][T13109] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  606.292737][T13109]  </TASK>
[  606.292750][T13109] ERROR: Out of memory at tomoyo_realpath_from_path.
[  606.385727][   T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  606.941155][T13121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  606.977260][   T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  606.994402][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.016714][   T24] usb 4-1: config 0 descriptor??
[  607.034966][   T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  607.046863][T13123] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1771'.
[  607.171779][   T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  607.331793][   T10] usb 5-1: Using ep0 maxpacket: 32
[  607.364835][   T10] usb 5-1: config 7 has an invalid interface number: 98 but max is 1
[  607.382256][   T10] usb 5-1: config 7 has an invalid interface number: 224 but max is 1
[  607.391515][   T10] usb 5-1: config 7 has no interface number 0
[  607.400124][   T10] usb 5-1: config 7 has no interface number 1
[  607.413448][   T10] usb 5-1: config 7 interface 224 has no altsetting 0
[  607.431524][   T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=c3.55
[  607.444836][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.460190][   T10] usb 5-1: Product: syz
[  607.469674][   T10] usb 5-1: Manufacturer: syz
[  607.496232][   T10] usb 5-1: SerialNumber: syz
[  607.697763][ T5920] usb 4-1: USB disconnect, device number 68
[  607.697801][    C0] ldusb 4-1:0.55: usb_submit_urb failed (-19)
[  607.991800][   T10] usb 5-1: USB disconnect, device number 55
[  608.288377][T13142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1779'.
[  608.371394][T13147] FAULT_INJECTION: forcing a failure.
[  608.371394][T13147] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.399841][T13147] CPU: 0 UID: 0 PID: 13147 Comm: syz.2.1780 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.399866][T13147] Tainted: [L]=SOFTLOCKUP
[  608.399871][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  608.399877][T13147] Call Trace:
[  608.399882][T13147]  <TASK>
[  608.399888][T13147]  dump_stack_lvl+0x189/0x250
[  608.399905][T13147]  ? __pfx____ratelimit+0x10/0x10
[  608.399917][T13147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  608.399929][T13147]  ? __pfx__printk+0x10/0x10
[  608.399952][T13147]  should_fail_ex+0x414/0x560
[  608.399968][T13147]  _copy_to_user+0x31/0xb0
[  608.399985][T13147]  simple_read_from_buffer+0xe1/0x170
[  608.400001][T13147]  proc_fail_nth_read+0x1b3/0x220
[  608.400015][T13147]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  608.400030][T13147]  ? rw_verify_area+0x2a6/0x4d0
[  608.400042][T13147]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  608.400053][T13147]  vfs_read+0x200/0xa30
[  608.400063][T13147]  ? fdget_pos+0x247/0x320
[  608.400078][T13147]  ? __pfx___mutex_lock+0x10/0x10
[  608.400092][T13147]  ? __pfx_vfs_read+0x10/0x10
[  608.400109][T13147]  ? __fget_files+0x2a/0x420
[  608.400133][T13147]  ? __fget_files+0x3a0/0x420
[  608.400153][T13147]  ? __fget_files+0x2a/0x420
[  608.400182][T13147]  ksys_read+0x145/0x250
[  608.400199][T13147]  ? __pfx_ksys_read+0x10/0x10
[  608.400211][T13147]  ? __do_fast_syscall_32+0xbe/0x570
[  608.400226][T13147]  __do_fast_syscall_32+0x1f7/0x570
[  608.400238][T13147]  ? rcu_is_watching+0x15/0xb0
[  608.400250][T13147]  ? do_fast_syscall_32+0x34/0x80
[  608.400265][T13147]  do_fast_syscall_32+0x34/0x80
[  608.400277][T13147]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  608.400289][T13147] RIP: 0023:0xf704d539
[  608.400300][T13147] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  608.400309][T13147] RSP: 002b:00000000f543d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  608.400320][T13147] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f543d620
[  608.400328][T13147] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000
[  608.400334][T13147] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  608.400340][T13147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  608.400346][T13147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  608.400362][T13147]  </TASK>
[  608.879199][T13125] ldusb 4-1:0.55: Couldn't submit interrupt_out_urb -19
[  608.940771][ T5920] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  609.781731][ T5907] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  610.076749][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.088400][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.161486][ T5907] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  610.311042][ T5907] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  610.444456][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.510043][T13172] syzkaller0: entered promiscuous mode
[  610.521888][ T5907] usb 4-1: config 0 descriptor??
[  610.527527][T13172] syzkaller0: entered allmulticast mode
[  611.045745][T13180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'.
[  611.675766][   T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  611.841773][   T24] usb 3-1: Using ep0 maxpacket: 32
[  611.860293][   T24] usb 3-1: config 0 has an invalid interface number: 82 but max is 0
[  611.899568][   T24] usb 3-1: config 0 has no interface number 0
[  611.906395][   T24] usb 3-1: too many endpoints for config 0 interface 82 altsetting 250: 142, using maximum allowed: 30
[  612.008196][ T5907] usbhid 4-1:0.0: can't add hid device: -71
[  612.018626][ T5907] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  612.101669][   T24] usb 3-1: config 0 interface 82 altsetting 250 has 0 endpoint descriptors, different from the interface descriptor's value: 142
[  612.118356][ T5907] usb 4-1: USB disconnect, device number 69
[  612.174978][   T24] usb 3-1: config 0 interface 82 has no altsetting 0
[  612.191809][   T24] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  612.200885][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.252756][   T24] usb 3-1: config 0 descriptor??
[  612.591949][ T5907] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  612.672116][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  612.672134][   T30] audit: type=1326 audit(1765118815.302:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  612.673359][T13202] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1795'.
[  612.678282][   T30] audit: type=1326 audit(1765118815.302:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  612.678327][   T30] audit: type=1326 audit(1765118815.302:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf701d539 code=0x7ffc0000
[  612.754791][ T5907] usb 4-1: Using ep0 maxpacket: 32
[  612.772284][ T5907] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  612.813001][ T5907] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48
[  612.824783][T13205] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1795'.
[  612.839553][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.858683][ T5907] usb 4-1: Product: syz
[  612.872035][   T30] audit: type=1326 audit(1765118815.302:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  612.873856][ T5907] usb 4-1: Manufacturer: syz
[  612.924071][   T30] audit: type=1326 audit(1765118815.302:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf701d539 code=0x7ffc0000
[  612.931916][ T5907] usb 4-1: SerialNumber: syz
[  612.958368][T13207] netlink: 'syz.4.1797': attribute type 10 has an invalid length.
[  612.976915][T13207] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  612.999580][ T5907] usb 4-1: config 0 descriptor??
[  613.003615][   T30] audit: type=1326 audit(1765118815.302:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  613.038410][   T30] audit: type=1326 audit(1765118815.302:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000
[  613.101691][   T30] audit: type=1326 audit(1765118815.312:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  613.124297][   T30] audit: type=1326 audit(1765118815.312:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf701d539 code=0x7ffc0000
[  613.146246][T13207] 8021q: adding VLAN 0 to HW filter on device bond3
[  613.146847][   T30] audit: type=1326 audit(1765118815.342:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13201 comm="syz.0.1795" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  613.183506][T13212] fuse: Unknown parameter ''
[  613.202523][T13210] 8021q: adding VLAN 0 to HW filter on device macvlan6
[  613.204121][   T24] usb 3-1: string descriptor 0 read error: -71
[  613.213775][T13210] bond3: (slave macvlan6): Enslaving as a backup interface with an up link
[  613.228454][   T24] gspca_main: sunplus-2.14.0 probing 041e:400b
[  613.238248][   T24] gspca_sunplus: reg_w_riv err -71
[  613.247792][   T24] sunplus 3-1:0.82: probe with driver sunplus failed with error -71
[  613.270011][   T10] usb 4-1: USB disconnect, device number 70
[  613.300351][   T24] usb 3-1: USB disconnect, device number 55
[  613.701791][ T5923] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  613.748245][   T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  613.974170][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  613.986083][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  614.000677][ T5923] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  614.156850][   T24] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  614.166381][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.216367][   T24] usb 3-1: Product: syz
[  614.220626][ T5923] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  614.232807][   T24] usb 3-1: Manufacturer: syz
[  614.243663][   T24] usb 3-1: SerialNumber: syz
[  614.252672][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.480667][ T5923] usb 1-1: config 0 descriptor??
[  614.521190][   T24] usb 3-1: config 0 descriptor??
[  614.536654][   T24] usb 3-1: can't set config #0, error -71
[  614.560556][   T24] usb 3-1: USB disconnect, device number 56
[  614.904064][ T5923] plantronics 0003:047F:FFFF.000C: item fetching failed at offset 14/15
[  614.922763][ T5923] plantronics 0003:047F:FFFF.000C: parse failed
[  614.929142][ T5923] plantronics 0003:047F:FFFF.000C: probe with driver plantronics failed with error -22
[  615.129754][ T5923] usb 1-1: USB disconnect, device number 62
[  615.237029][T13241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1803'.
[  615.593528][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'.
[  616.215160][T13246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1804'.
[  616.476891][T13256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'.
[  616.530520][T13256] binder: 13255:13256 ioctl 40044591 0 returned -22
[  616.537703][T13256] binder: 13255:13256 ioctl c0306201 80000640 returned -22
[  616.562138][T13256] binder: 13255:13256 ioctl 127f 80000480 returned -22
[  617.149900][T13262] FAULT_INJECTION: forcing a failure.
[  617.149900][T13262] name failslab, interval 1, probability 0, space 0, times 0
[  617.202431][T13262] CPU: 0 UID: 0 PID: 13262 Comm: syz.4.1812 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  617.202464][T13262] Tainted: [L]=SOFTLOCKUP
[  617.202471][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  617.202482][T13262] Call Trace:
[  617.202490][T13262]  <TASK>
[  617.202498][T13262]  dump_stack_lvl+0x189/0x250
[  617.202523][T13262]  ? __pfx____ratelimit+0x10/0x10
[  617.202544][T13262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  617.202564][T13262]  ? __pfx__printk+0x10/0x10
[  617.202594][T13262]  ? __pfx___might_resched+0x10/0x10
[  617.202613][T13262]  ? fs_reclaim_acquire+0x7d/0x100
[  617.202638][T13262]  should_fail_ex+0x414/0x560
[  617.202665][T13262]  should_failslab+0xa8/0x100
[  617.202687][T13262]  __kmalloc_cache_noprof+0x84/0x700
[  617.202704][T13262]  ? __genradix_ptr_alloc+0x463/0x4a0
[  617.202722][T13262]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  617.202751][T13262]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[  617.202786][T13262]  sctp_association_new+0x15d3/0x25e0
[  617.202821][T13262]  sctp_connect_new_asoc+0x2c5/0x690
[  617.202845][T13262]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  617.202863][T13262]  ? __local_bh_enable_ip+0x12d/0x1c0
[  617.202889][T13262]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  617.202907][T13262]  ? security_sctp_bind_connect+0x7e/0x2e0
[  617.202933][T13262]  sctp_sendmsg+0x155c/0x2840
[  617.202964][T13262]  ? __pfx_sctp_sendmsg+0x10/0x10
[  617.202982][T13262]  ? aa_sk_perm+0x15f/0x920
[  617.203016][T13262]  ? aa_sk_perm+0x7ee/0x920
[  617.203044][T13262]  ? __pfx_aa_sk_perm+0x10/0x10
[  617.203075][T13262]  ? sock_rps_record_flow+0x19/0x410
[  617.203102][T13262]  ? inet_sendmsg+0x2f4/0x370
[  617.203128][T13262]  __sock_sendmsg+0x19c/0x270
[  617.203149][T13262]  __sys_sendto+0x3bd/0x520
[  617.203173][T13262]  ? __pfx___sys_sendto+0x10/0x10
[  617.203190][T13262]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  617.203224][T13262]  ? __fget_files+0x3a0/0x420
[  617.203258][T13262]  ? ksys_write+0x22a/0x250
[  617.203274][T13262]  ? exc_page_fault+0x82/0x100
[  617.203295][T13262]  ? __pfx_ksys_write+0x10/0x10
[  617.203317][T13262]  __ia32_sys_sendto+0xdd/0x100
[  617.203341][T13262]  __do_fast_syscall_32+0x1f7/0x570
[  617.203363][T13262]  ? rcu_is_watching+0x15/0xb0
[  617.203382][T13262]  ? do_fast_syscall_32+0x34/0x80
[  617.203409][T13262]  do_fast_syscall_32+0x34/0x80
[  617.203430][T13262]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  617.203451][T13262] RIP: 0023:0xf70ed539
[  617.203466][T13262] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  617.203482][T13262] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  617.203501][T13262] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  617.203515][T13262] RDX: 0000000000000001 RSI: 0000000024004851 RDI: 0000000080000140
[  617.203527][T13262] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000
[  617.203538][T13262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  617.203549][T13262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  617.203578][T13262]  </TASK>
[  617.719213][T13271] netlink: 'syz.4.1817': attribute type 1 has an invalid length.
[  617.800433][T13281] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1817'.
[  617.947815][T13271] bond4: entered promiscuous mode
[  617.984535][T13271] 8021q: adding VLAN 0 to HW filter on device bond4
[  618.418780][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'.
[  619.077609][T13300] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  619.108135][T13300] netlink: 'syz.0.1818': attribute type 2 has an invalid length.
[  619.240689][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'.
[  619.401839][   T24] usb 4-1: new low-speed USB device number 71 using dummy_hcd
[  619.563063][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  619.591183][   T24] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  619.615249][   T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  619.652387][   T24] usb 4-1: config 4 has no interface number 0
[  620.299175][T13348] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  620.335413][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1823'.
[  621.149324][   T30] kauditd_printk_skb: 24 callbacks suppressed
[  621.149344][   T30] audit: type=1326 audit(1765118823.782:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  621.238670][   T30] audit: type=1326 audit(1765118823.822:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  621.271711][   T30] audit: type=1326 audit(1765118823.822:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  621.448041][   T30] audit: type=1326 audit(1765118823.822:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  621.475225][   T30] audit: type=1326 audit(1765118823.822:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13366 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  621.943492][T13377] tipc: Cannot configure node identity twice
[  622.215533][   T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.05
[  622.239805][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.280761][   T24] usb 4-1: can't set config #4, error -71
[  622.311981][   T24] usb 4-1: USB disconnect, device number 71
[  623.874229][T13419] vivid-007: =================  START STATUS  =================
[  623.883021][T13419] vivid-007: FM Deviation: 75000
[  623.888294][T13419] vivid-007: ==================  END STATUS  ==================
[  624.321748][ T5920] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  624.339207][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1832'.
[  624.373450][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  624.381198][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  624.581694][ T5920] usb 5-1: Using ep0 maxpacket: 8
[  624.618530][ T5920] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  624.631704][ T5920] usb 5-1: config 179 has no interface number 0
[  624.639233][ T5920] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  624.712107][ T5920] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  624.771646][ T5920] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  624.801846][ T5920] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  624.833100][ T5920] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  624.904376][ T5920] usb 5-1: config 179 interface 65 has no altsetting 0
[  624.911302][ T5920] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  625.177970][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.237803][ T5920] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input29
[  625.525716][ T5920] usb 5-1: USB disconnect, device number 56
[  625.531868][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  625.682097][ T5923] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  625.832116][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  625.839670][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  625.850410][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  625.862096][ T5923] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  625.871151][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.879837][ T5923] usb 2-1: Product: syz
[  625.886229][ T5923] usb 2-1: Manufacturer: syz
[  625.890879][ T5923] usb 2-1: SerialNumber: syz
[  625.961851][   T24] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  626.121058][ T5923] usb 2-1: 0:2 : does not exist
[  626.149887][ T5923] usb 2-1: USB disconnect, device number 68
[  626.156458][   T24] usb 3-1: Using ep0 maxpacket: 32
[  626.171312][   T24] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  626.205034][T12351] udevd[12351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  626.224322][   T24] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  626.237721][   T24] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  626.261550][   T24] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  626.280606][   T24] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  626.290726][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.306636][   T24] usb 3-1: Product: syz
[  626.310826][   T24] usb 3-1: Manufacturer: syz
[  626.316461][   T24] usb 3-1: SerialNumber: syz
[  626.342592][    C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  626.353564][ T5907] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  626.370154][   T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input30
[  626.561704][ T5907] usb 5-1: Using ep0 maxpacket: 32
[  626.566944][   T24] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  626.575578][   T24]  (id 0x00)
[  626.580648][ T5907] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  626.590344][ T5907] usb 5-1: config 0 has no interface number 0
[  626.610120][ T5907] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  626.641837][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.660603][ T5907] usb 5-1: Product: syz
[  626.665324][ T5907] usb 5-1: Manufacturer: syz
[  626.669931][ T5907] usb 5-1: SerialNumber: syz
[  626.695973][ T5907] usb 5-1: config 0 descriptor??
[  626.717109][ T5907] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  626.746447][ T5907] usb 5-1: selecting invalid altsetting 1
[  626.766676][ T5907] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  626.792948][ T5907] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  626.807202][ T5907] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  626.821498][ T5907] usb 5-1: media controller created
[  626.831959][   T24] rc_core: IR keymap rc-imon-pad not found
[  626.837794][   T24] Registered IR keymap rc-empty
[  626.851974][   T24] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  626.872387][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  626.880862][   T24] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  626.887610][T13448] loop6: detected capacity change from 0 to 2640
[  626.913292][T13448] buffer_io_error: 19 callbacks suppressed
[  626.913308][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  626.923489][   T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0
[  626.951293][   T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input31
[  626.968290][   T24] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:57> initialized
[  626.980602][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.033852][T13449] loop6: detected capacity change from 2640 to 524287999
[  627.056035][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.090510][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.130274][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.140105][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.165179][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.181920][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.193711][T13448] ldm_validate_partition_table(): Disk read failed.
[  627.201063][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.209663][T13448] Buffer I/O error on dev loop6, logical block 0, async page read
[  627.220852][T13448] Dev loop6: unable to read RDB block 0
[  627.228142][T13448]  loop6: unable to read partition table
[  627.234682][T13448] loop_reread_partitions: partition scan of loop6 (ir�c����VU�X��G�����ZtM<I�i8NL���	��W�@��Q6��%�������) failed (rc=-5)
[  627.412776][   T24] usb 3-1: USB disconnect, device number 57
[  627.423184][T13435] imon:send_packet: packet tx failed (-71)
[  627.439947][T13458] fuse: Unknown parameter '0xffffffffffffffff'
[  627.446599][T13435] imon:vfd_write: send packet #1 failed
[  627.962396][T13442] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  627.993901][ T5907] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  628.001258][ T5907] zl10353_read_register: readreg error (reg=127, ret==-71)
[  628.010761][ T5907] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  628.353364][ T5907] usb 5-1: USB disconnect, device number 57
[  628.431078][T13469] geneve1: entered promiscuous mode
[  629.251683][   T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  629.521717][   T24] usb 5-1: Using ep0 maxpacket: 8
[  629.549025][T13495] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  629.568491][   T24] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  629.568519][   T24] usb 5-1: config 0 has no interface number 0
[  629.568574][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  629.568597][   T24] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  629.568623][   T24] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  630.208860][   T24] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  630.229864][   T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  630.239537][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.309904][   T24] usb 5-1: config 0 descriptor??
[  630.340528][   T24] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  630.588113][ T5935] usb 5-1: USB disconnect, device number 58
[  630.602772][ T5935] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  631.068167][T13522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1876'.
[  631.170232][T13520] fuse: Unknown parameter '0xffffffffffffffff'
[  631.687715][ T5935] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  631.937263][ T5935] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  631.965080][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.053099][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.074497][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.465242][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.547289][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.601722][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.615940][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.639954][ T5935] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  632.662289][ T5935] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  632.697206][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.777208][T13538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1882'.
[  633.266644][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1888'.
[  633.314522][T13559] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  633.331758][   T30] audit: type=1326 audit(1765118835.962:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  633.405768][   T30] audit: type=1326 audit(1765118835.992:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  633.446099][   T30] audit: type=1326 audit(1765118835.992:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  633.508819][   T30] audit: type=1326 audit(1765118835.992:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  633.628322][   T30] audit: type=1326 audit(1765118835.992:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  633.668074][   T30] audit: type=1326 audit(1765118836.002:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13551 comm="syz.4.1889" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  634.790118][   T24] usb 2-1: USB disconnect, device number 69
[  634.856480][   T30] audit: type=1326 audit(1765118837.472:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  634.917609][   T30] audit: type=1326 audit(1765118837.492:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  634.989460][   T30] audit: type=1326 audit(1765118837.512:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  635.064528][   T30] audit: type=1326 audit(1765118837.512:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13572 comm="syz.4.1892" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  635.115926][   T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  635.274781][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  635.296419][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  635.324651][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  635.335320][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  635.356307][T13570] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  635.381250][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  635.724146][   T10] usb 4-1: USB disconnect, device number 72
[  636.288205][T13594] fuse: Unknown parameter '0xffffffffffffffff'
[  636.794169][ T5843] Bluetooth: hci4: Unknown advertising packet type: 0x78
[  636.794288][ T5843] Bluetooth: hci4: Malformed LE Event: 0x0d
[  637.447492][T13611] vivid-003: =================  START STATUS  =================
[  637.463903][T13611] vivid-003: FM Deviation: 75000
[  637.468895][T13611] vivid-003: ==================  END STATUS  ==================
[  638.362076][ T5843] Bluetooth: hci0: command 0x0406 tx timeout
[  638.370691][T13586] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  639.307131][T13586] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  639.314126][T13586] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  639.320291][T13586] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  639.326903][T13586] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  639.600733][T13626] syzkaller0: entered promiscuous mode
[  639.607249][T13626] syzkaller0: entered allmulticast mode
[  639.651889][   T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  639.811781][   T10] usb 2-1: Using ep0 maxpacket: 32
[  639.899897][T13643] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  639.995468][   T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  640.021732][   T10] usb 2-1: config 0 has no interface number 0
[  640.037284][   T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  640.072675][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.086078][   T10] usb 2-1: Product: syz
[  640.091947][   T10] usb 2-1: Manufacturer: syz
[  640.101762][   T10] usb 2-1: SerialNumber: syz
[  640.117294][   T10] usb 2-1: config 0 descriptor??
[  640.135571][   T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  640.368478][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  640.546157][ T5843] Bluetooth: hci1: command 0x0406 tx timeout
[  640.552725][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  640.786709][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  640.788161][ T5923] usb 2-1: USB disconnect, device number 70
[  640.808190][ T5923] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  640.856797][ T5923] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  640.907217][ T5923] quatech2 2-1:0.51: device disconnected
[  641.321785][ T5834] Bluetooth: hci3: command 0x0406 tx timeout
[  641.327868][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  641.401926][ T5843] Bluetooth: hci4: command 0x0406 tx timeout
[  641.878306][T13667] input: syz0 as /devices/virtual/input/input32
[  641.974253][ T5923] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  642.155314][ T5923] usb 4-1: Using ep0 maxpacket: 32
[  642.178473][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  642.217620][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  642.255805][ T5923] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  642.288271][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  642.343830][ T5923] usb 4-1: config 0 descriptor??
[  642.776796][ T5923] ft260 0003:0403:6030.000D: unknown main item tag 0x7
[  642.969116][ T5923] ft260 0003:0403:6030.000D: chip code: 6424 8183
[  643.169508][ T5923] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0
[  643.390426][ T5923] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup
[  643.407980][ T5923] ft260 0003:0403:6030.000D: failed to retrieve status: -32
[  643.489607][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1923'.
[  643.626384][ T5923] usb 4-1: USB disconnect, device number 73
[  644.017694][T13687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1927'.
[  646.573431][T13731] program syz.2.1942 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  649.853827][T13790] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1960'.
[  649.871130][T13790] 0�X��D: renamed from macvtap0
[  649.895490][T13790] 0�X��D: entered allmulticast mode
[  649.908837][T13790] veth0_macvtap: entered allmulticast mode
[  649.926987][T13790] A link change request failed with some changes committed already. Interface 
30�X��D may have been left with an inconsistent configuration, please check.
[  649.951781][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  650.461684][   T10] usb 1-1: Using ep0 maxpacket: 32
[  650.468842][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  650.493289][   T10] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  650.511920][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.557069][T13796] input: syz0 as /devices/virtual/input/input33
[  650.567181][   T10] usb 1-1: Product: syz
[  650.571376][   T10] usb 1-1: Manufacturer: syz
[  650.752974][   T10] usb 1-1: SerialNumber: syz
[  650.781219][   T10] usb 1-1: config 0 descriptor??
[  651.291453][   T10] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  651.712106][   T10] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  651.795172][   T10] usb 1-1: USB disconnect, device number 63
[  652.831114][T13832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  652.837693][T13832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  652.901869][T13832] vhci_hcd vhci_hcd.0: Device attached
[  653.112180][   T10] vhci_hcd: vhci_device speed not set
[  653.181728][   T10] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  653.443954][T13843] openvswitch: netlink: Flow key attr not present in new flow.
[  653.480269][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'.
[  653.772378][T13833] vhci_hcd: connection reset by peer
[  653.782120][ T1963] vhci_hcd: stop threads
[  653.788143][ T5843] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  653.801769][ T1963] vhci_hcd: release socket
[  653.814672][ T1963] vhci_hcd: disconnect device
[  654.855979][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'.
[  656.311678][ T5920] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  656.471708][ T5920] usb 3-1: Using ep0 maxpacket: 16
[  656.487433][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  656.528401][ T5920] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  656.559592][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.582944][ T5920] usb 3-1: Product: syz
[  656.587123][ T5920] usb 3-1: Manufacturer: syz
[  656.611710][ T5920] usb 3-1: SerialNumber: syz
[  656.627606][ T5920] usb 3-1: config 0 descriptor??
[  656.667658][ T5920] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  656.699086][ T5920] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  657.296072][ T5920] em28xx 3-1:0.0: chip ID is em2750
[  657.555559][ T5920] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  657.572094][ T5920] em28xx 3-1:0.0: board has no eeprom
[  657.661785][ T5920] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  657.674900][ T5920] em28xx 3-1:0.0: dvb set to bulk mode.
[  657.694324][ T5935] em28xx 3-1:0.0: Binding DVB extension
[  657.719081][ T5920] usb 3-1: USB disconnect, device number 58
[  657.736672][ T5920] em28xx 3-1:0.0: Disconnecting em28xx
[  657.782941][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  657.782958][   T30] audit: type=1326 audit(1765118860.422:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  657.879912][   T30] audit: type=1326 audit(1765118860.452:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  657.971681][ T5935] em28xx 3-1:0.0: Registering input extension
[  657.978630][ T5920] em28xx 3-1:0.0: Closing input extension
[  658.062892][   T30] audit: type=1326 audit(1765118860.452:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=258 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  658.092820][ T5920] em28xx 3-1:0.0: Freeing device
[  658.131874][   T30] audit: type=1326 audit(1765118860.452:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  658.195611][   T30] audit: type=1326 audit(1765118860.452:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.1.1997" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  658.362401][   T10] vhci_hcd: vhci_device speed not set
[  658.381691][ T5923] usb 2-1: new full-speed USB device number 71 using dummy_hcd
[  658.543506][ T5923] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  658.676064][ T5923] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  658.873207][ T5923] usb 2-1: config 8 has an invalid descriptor of length 40, skipping remainder of the config
[  658.883529][ T5923] usb 2-1: config 8 has no interface number 0
[  658.889667][ T5923] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  658.900776][ T5923] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  658.922957][ T5923] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  658.932117][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.940255][ T5923] usb 2-1: Product: syz
[  658.949787][ T5923] usb 2-1: Manufacturer: syz
[  658.967021][ T5923] usb 2-1: SerialNumber: syz
[  659.316602][ T5923] usb 2-1: USB disconnect, device number 71
[  660.041771][ T5923] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  660.392864][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  660.411735][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  660.420722][ T5923] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  660.432178][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.463742][ T5923] usb 5-1: config 0 descriptor??
[  660.494978][ T5923] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  660.516218][ T5923] dvb-usb: bulk message failed: -22 (3/0)
[  660.534745][ T5923] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  660.565969][ T5923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  660.586587][ T5923] usb 5-1: media controller created
[  660.644838][T13936] input: syz0 as /devices/virtual/input/input35
[  660.663495][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  660.783123][ T5923] dvb-usb: bulk message failed: -22 (6/0)
[  660.802483][ T5923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  660.858539][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36
[  660.936806][ T5923] dvb-usb: schedule remote query interval to 150 msecs.
[  660.972682][ T5923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  660.994573][ T5923] usb 5-1: USB disconnect, device number 59
[  661.088502][ T5923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  661.643073][T13948] veth0_to_team: entered promiscuous mode
[  668.099918][T14006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'.
[  668.430402][ T5923] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  668.673472][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  668.683893][ T5923] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  668.694432][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  668.710263][ T5923] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  668.720024][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.742899][ T5923] usb 3-1: Product: syz
[  668.747613][ T5923] usb 3-1: Manufacturer: syz
[  668.777167][ T5923] usb 3-1: SerialNumber: syz
[  668.807384][ T5923] usb 3-1: config 0 descriptor??
[  668.832170][ T5923] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  669.068697][ T5920] usb 3-1: USB disconnect, device number 59
[  669.132557][   T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  669.302342][   T10] usb 1-1: Using ep0 maxpacket: 32
[  669.312610][   T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  669.323498][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.331544][   T10] usb 1-1: Product: syz
[  669.336453][   T10] usb 1-1: Manufacturer: syz
[  669.341073][   T10] usb 1-1: SerialNumber: syz
[  669.355065][   T10] usb 1-1: config 0 descriptor??
[  669.382820][   T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  671.012341][ T5923] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  671.163841][ T5923] usb 2-1: config 0 interface 0 has no altsetting 0
[  671.170578][ T5923] usb 2-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  671.180376][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.202861][ T5923] usb 2-1: config 0 descriptor??
[  671.208475][   T10] gspca_ov534_9: reg_r err -71
[  671.299721][T14057] x_tables: duplicate underflow at hook 1
[  671.472377][   T10] gspca_ov534_9: Unknown sensor 0000
[  671.472469][   T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  671.684231][ T5923] holtek_mouse 0003:04D9:A0C2.000E: hidraw0: USB HID v1.01 Device [HID 04d9:a0c2] on usb-dummy_hcd.1-1/input0
[  671.709518][   T10] usb 1-1: USB disconnect, device number 64
[  671.876700][ T5923] usb 2-1: USB disconnect, device number 72
[  672.381152][   T30] audit: type=1326 audit(1765118874.932:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.421797][   T30] audit: type=1326 audit(1765118874.932:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.497296][   T30] audit: type=1326 audit(1765118874.932:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.592096][   T30] audit: type=1326 audit(1765118874.932:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.824705][   T30] audit: type=1326 audit(1765118874.962:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14074 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.880325][ T5923] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  672.914655][   T30] audit: type=1326 audit(1765118874.962:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  672.996645][   T30] audit: type=1326 audit(1765118874.972:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  673.053156][ T5923] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  673.071431][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.099870][   T30] audit: type=1326 audit(1765118874.972:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  673.105324][ T5923] usb 5-1: Product: syz
[  673.191728][   T30] audit: type=1326 audit(1765118874.972:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  673.207441][ T5923] usb 5-1: Manufacturer: syz
[  673.282834][ T5923] usb 5-1: SerialNumber: syz
[  673.287645][   T30] audit: type=1326 audit(1765118874.972:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14067 comm="syz.4.2049" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70ed539 code=0x7ffc0000
[  673.372809][ T5923] usb 5-1: config 0 descriptor??
[  673.393098][ T5923] ch341 5-1:0.0: ch341-uart converter detected
[  674.443210][ T5923] usb 5-1: failed to receive control message: -110
[  674.464343][ T5923] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  675.211911][ T5923] usb 5-1: USB disconnect, device number 60
[  675.218627][ T5923] ch341 5-1:0.0: device disconnected
[  675.800530][T14120] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2063'.
[  676.004610][T14122] netlink: 'syz.3.2065': attribute type 4 has an invalid length.
[  679.464365][T14169] netlink: 'syz.2.2080': attribute type 4 has an invalid length.
[  682.056622][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  682.056642][   T30] audit: type=1326 audit(1765118884.652:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.305415][   T30] audit: type=1326 audit(1765118884.652:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.328027][   T30] audit: type=1326 audit(1765118884.652:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.352048][   T30] audit: type=1326 audit(1765118884.652:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.377378][   T30] audit: type=1326 audit(1765118884.732:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.697940][ T5923] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  682.829649][   T30] audit: type=1326 audit(1765118884.732:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.859992][   T30] audit: type=1326 audit(1765118884.732:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14220 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.934021][   T30] audit: type=1326 audit(1765118884.812:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.971284][   T30] audit: type=1326 audit(1765118884.812:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[  682.998454][   T30] audit: type=1326 audit(1765118884.812:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf704d539 code=0x7ffc0000
[  683.024686][ T5923] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  683.047830][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.067471][ T5923] usb 3-1: Product: syz
[  683.080386][ T5923] usb 3-1: Manufacturer: syz
[  683.096431][ T5923] usb 3-1: SerialNumber: syz
[  683.145961][ T5923] usb 3-1: config 0 descriptor??
[  683.179223][ T5923] ch341 3-1:0.0: ch341-uart converter detected
[  684.252138][ T5923] usb 3-1: failed to receive control message: -110
[  684.267951][ T5923] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  684.350536][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'.
[  684.829933][ T5920] usb 3-1: USB disconnect, device number 60
[  684.842387][ T5920] ch341 3-1:0.0: device disconnected
[  685.806269][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  685.812875][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  685.948966][T14264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2109'.
[  686.151941][ T5920] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  686.314012][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  686.325493][ T5920] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  686.343035][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  686.384575][ T5920] usb 2-1: config 0 descriptor??
[  686.617260][T14280] vivid-005: =================  START STATUS  =================
[  686.625129][T14280] vivid-005: FM Deviation: 75000
[  686.725508][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'.
[  686.751896][T14280] vivid-005: ==================  END STATUS  ==================
[  686.826549][ T5920] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  686.853040][ T5920] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000F/input/input37
[  687.110570][ T5920] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  687.170630][ T5843] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260
[  687.335241][   T24] usb 2-1: USB disconnect, device number 73
[  687.637075][T14287] fido_id[14287]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  689.106999][   T24] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[  689.273637][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  689.420092][   T24] usb 4-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.00
[  689.439509][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.441715][ T5920] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  689.471329][   T24] usb 4-1: config 0 descriptor??
[  689.484542][T14309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  689.704484][ T5920] usb 5-1: config 252 has an invalid interface number: 251 but max is 0
[  689.712995][ T5920] usb 5-1: config 252 has no interface number 0
[  689.719348][ T5920] usb 5-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc
[  689.729362][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.755700][ T5920] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280
[  689.915129][   T24] saitek 0003:0738:1709.0010: unknown main item tag 0x0
[  689.931725][   T24] saitek 0003:0738:1709.0010: unknown main item tag 0x0
[  689.959463][   T24] saitek 0003:0738:1709.0010: hidraw0: USB HID v1.01 Device [HID 0738:1709] on usb-dummy_hcd.3-1/input0
[  690.112024][   T24] usb 4-1: USB disconnect, device number 74
[  690.161511][ T5920] gspca_sn9c20x: Write register 1001 failed -71
[  690.170577][ T5920] gspca_sn9c20x: Device initialization failed
[  690.188931][ T5920] gspca_sn9c20x 5-1:252.251: probe with driver gspca_sn9c20x failed with error -71
[  690.229682][ T5920] usb 5-1: USB disconnect, device number 61
[  690.407771][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x1
[  690.422039][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.429939][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.438931][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.447804][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.456455][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.465055][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.473012][ T5920] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  690.486401][ T5920] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[  690.752306][T14331] fido_id[14331]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  690.831280][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'.
[  691.083860][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2130'.
[  692.471826][   T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  692.634691][   T24] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  692.644037][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.726458][   T24] usb 4-1: config 0 descriptor??
[  692.743911][   T24] cp210x 4-1:0.0: cp210x converter detected
[  692.947263][   T24] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[  692.961862][   T24] cp210x 4-1:0.0: querying part number failed
[  693.033046][   T24] usb 4-1: cp210x converter now attached to ttyUSB0
[  693.229398][   T24] usb 4-1: USB disconnect, device number 75
[  693.261573][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  693.293608][   T24] cp210x 4-1:0.0: device disconnected
[  694.306812][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  694.306826][   T30] audit: type=1326 audit(1765118896.902:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.341901][   T30] audit: type=1326 audit(1765118896.902:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.364606][   T30] audit: type=1326 audit(1765118896.902:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=138 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.386892][   T30] audit: type=1326 audit(1765118896.902:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.551817][   T30] audit: type=1326 audit(1765118896.902:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.573936][   T30] audit: type=1326 audit(1765118896.922:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14385 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.596066][   T30] audit: type=1326 audit(1765118896.932:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.669769][   T30] audit: type=1326 audit(1765118896.932:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.716259][   T30] audit: type=1326 audit(1765118897.172:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14385 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.861852][   T30] audit: type=1326 audit(1765118897.382:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14378 comm="syz.1.2145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  694.944479][T14395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2148'.
[  695.942070][   T24] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  696.309530][   T24] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  696.327543][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.361761][   T24] usb 2-1: Product: syz
[  696.374325][   T24] usb 2-1: Manufacturer: syz
[  696.378958][   T24] usb 2-1: SerialNumber: syz
[  696.444558][   T24] usb 2-1: config 0 descriptor??
[  696.500294][   T24] ch341 2-1:0.0: ch341-uart converter detected
[  697.570424][   T24] usb 2-1: failed to receive control message: -110
[  697.610593][   T24] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  698.109420][   T10] usb 2-1: USB disconnect, device number 74
[  698.124740][   T10] ch341 2-1:0.0: device disconnected
[  698.353230][ T5935] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  698.511705][ T5935] usb 4-1: Using ep0 maxpacket: 16
[  698.523714][ T5935] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  698.561164][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  698.724234][ T5935] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  698.757658][ T5935] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  698.776538][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  698.799101][ T5935] usb 4-1: SerialNumber: syz
[  698.828268][ T5935] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  699.033958][   T24] usb 4-1: USB disconnect, device number 76
[  700.762374][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2167'.
[  704.554959][T14530] netlink: 'syz.0.2188': attribute type 322 has an invalid length.
[  705.598706][T14559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2193'.
[  708.604000][T14597] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2206'.
[  708.651713][   T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  709.005986][T14597] vim2m vim2m.0: vidioc_s_fmt queue busy
[  709.472227][   T24] usb 3-1: too many configurations: 72, using maximum allowed: 8
[  709.563075][   T24] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  709.572676][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.622762][   T24] usb 3-1: config 0 descriptor??
[  709.868938][   T24] usb 3-1: USB disconnect, device number 61
[  710.361745][ T5923] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  710.448033][   T30] kauditd_printk_skb: 71 callbacks suppressed
[  710.448045][   T30] audit: type=1326 audit(1765118913.082:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14611 comm="syz.4.2211" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf70ed539 code=0x0
[  710.514167][ T5923] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  710.523457][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  710.553101][ T5923] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  710.564874][ T5923] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  710.582683][ T5923] usb 4-1: Manufacturer: syz
[  710.598179][ T5923] usb 4-1: config 0 descriptor??
[  710.619842][ T5923] igorplugusb 4-1:0.0: incorrect number of endpoints
[  710.843327][ T5923] usb 4-1: USB disconnect, device number 77
[  712.777966][T14650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2221'.
[  712.803905][T14650] vim2m vim2m.0: vidioc_s_fmt queue busy
[  715.085462][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2226'.
[  715.319021][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2224'.
[  715.343611][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2224'.
[  718.416046][T14720] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.2240'.
[  718.425640][T14720] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.2240'.
[  718.939515][T14724] random: crng reseeded on system resumption
[  721.389255][T14750] kvm: pic: non byte read
[  721.393907][T14750] kvm: pic: non byte read
[  721.398387][T14750] kvm: pic: non byte read
[  721.402993][T14750] kvm: pic: non byte read
[  721.407498][T14750] kvm: pic: non byte read
[  721.412007][T14750] kvm: pic: non byte read
[  721.416496][T14750] kvm: pic: non byte read
[  721.420972][T14750] kvm: pic: non byte read
[  721.425497][T14750] kvm: pic: non byte read
[  721.429966][T14750] kvm: pic: non byte read
[  723.499291][   T30] audit: type=1326 audit(1765118926.132:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  723.803362][   T30] audit: type=1326 audit(1765118926.132:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  723.924445][   T30] audit: type=1326 audit(1765118926.132:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  723.995056][T14779] program syz.1.2254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  724.034932][   T30] audit: type=1326 audit(1765118926.132:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.079425][   T30] audit: type=1326 audit(1765118926.132:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.106909][   T30] audit: type=1326 audit(1765118926.132:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.201519][   T30] audit: type=1326 audit(1765118926.132:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.521736][   T30] audit: type=1326 audit(1765118926.132:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.586604][   T30] audit: type=1326 audit(1765118926.132:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  724.676832][   T30] audit: type=1326 audit(1765118926.132:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.1.2254" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7ff2539 code=0x7ffc0000
[  725.814326][T14790] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2257'.
[  728.191829][   T24] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  728.410089][   T24] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  728.461081][   T24] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  728.553138][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  728.576965][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  728.771774][   T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  728.833154][   T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  728.881803][   T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  728.889820][   T24] usb 1-1: Product: syz
[  728.914357][   T24] usb 1-1: Manufacturer: syz
[  728.973744][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  728.999339][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  728.999359][   T30] audit: type=1326 audit(1765118931.622:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14823 comm="syz.2.2268" exe="/root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf704d539 code=0x0
[  729.031793][   T24] cdc_wdm 1-1:1.0: skipping garbage
[  729.047645][   T24] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  729.067468][   T24] cdc_wdm 1-1:1.0: Unknown control protocol
[  729.538277][    C1] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE
[  729.736482][   T24] usb 1-1: USB disconnect, device number 65
[  730.005339][T14839] random: crng reseeded on system resumption
[  730.391376][T14852] random: crng reseeded on system resumption
[  730.402273][T14851] kernel read not supported for file /file1 (pid: 14851 comm: syz.1.2279)
[  730.436141][   T30] audit: type=1800 audit(1765118933.072:570): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2279" name="file1" dev="mqueue" ino=56590 res=0 errno=0
[  730.796323][   T30] audit: type=1326 audit(1765118933.432:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14865 comm="syz.0.2285" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x0
[  731.603943][T14870] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2286'.
[  732.450986][   T30] audit: type=1326 audit(1765118935.082:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14896 comm="syz.4.2300" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ed539 code=0x0
[  733.766783][T14925] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2309'.
[  734.345798][   T30] audit: type=1326 audit(1765118936.982:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14929 comm="syz.0.2312" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x0
[  735.333870][   T30] audit: type=1800 audit(1765118937.972:574): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2319" name="file1" dev="tmpfs" ino=2508 res=0 errno=0
[  735.716707][   T30] audit: type=1326 audit(1765118938.352:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  735.791910][   T30] audit: type=1326 audit(1765118938.372:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  735.827292][   T30] audit: type=1326 audit(1765118938.372:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf701d539 code=0x7ffc0000
[  735.907408][T14962] program syz.0.2323 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  735.916853][   T30] audit: type=1326 audit(1765118938.372:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  735.919372][ T5935] IPVS: starting estimator thread 0...
[  736.040621][   T30] audit: type=1326 audit(1765118938.372:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  736.108226][T14963] IPVS: using max 31 ests per chain, 74400 per kthread
[  736.270463][   T30] audit: type=1326 audit(1765118938.382:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=379 compat=1 ip=0xf701d539 code=0x7ffc0000
[  736.411790][   T30] audit: type=1326 audit(1765118938.382:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  736.434688][   T30] audit: type=1326 audit(1765118938.382:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14957 comm="syz.0.2323" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000
[  737.348705][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2322'.
[  739.657264][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2338'.
[  740.124403][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'.
[  740.653786][T15000] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2329'.
[  741.042607][   T10] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  741.594458][   T10] usb 5-1: too many configurations: 65, using maximum allowed: 8
[  741.675429][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2331'.
[  741.778653][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  741.844801][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  741.897646][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  741.941109][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  742.140637][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  742.203288][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  742.375776][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  742.592195][   T10] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  742.724575][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2333'.
[  742.810611][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  742.842100][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.443015][T15034] bond1: entered promiscuous mode
[  745.119311][ T6993] usb 5-1: USB disconnect, device number 62
[  745.299545][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'.
[  745.846427][T15060] ------------[ cut here ]------------
[  745.852512][T15060] WARNING: kernel/sched/core.c:10569 at sched_mm_cid_fork+0x66/0xc30, CPU#0: kworker/u8:17/15060
[  745.863330][T15060] Modules linked in:
[  745.867718][T15060] CPU: 0 UID: 0 PID: 15060 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  745.879010][T15060] Tainted: [L]=SOFTLOCKUP
[  745.883552][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  745.893677][T15060] RIP: 0010:sched_mm_cid_fork+0x66/0xc30
[  745.899538][T15060] Code: 4c 8b 3b 4d 85 ff 74 21 49 8d 9d d4 15 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 13 0a 00 00 31 c0 3b 03 70 04 90 <0f> 0b 90 49 8d 9f 00 01 00 00 49 8d bf c0 01 00 00 48 89 7c 24 20
[  745.919667][T15060] RSP: 0018:ffffc9001c59fbd8 EFLAGS: 00010246
[  745.925789][T15060] RAX: 1ffff1100a18f853 RBX: ffff888050c7c298 RCX: ffff888050c7bd00
[  745.933841][T15060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888050c7bd00
[  745.942080][T15060] RBP: ffffc9001c59fd68 R08: ffffffff8e093f03 R09: 1ffffffff1c127e0
[  745.950045][T15060] R10: dffffc0000000000 R11: fffffbfff1c127e1 R12: ffff888050c7bd00
[  745.958121][T15060] R13: ffff888050c7bd00 R14: dffffc0000000000 R15: 0000000000000000
[  745.966211][T15060] FS:  0000000000000000(0000) GS:ffff88812604a000(0000) knlGS:0000000000000000
[  745.975236][T15060] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  745.981824][T15060] CR2: 0000000080150000 CR3: 00000000525ea000 CR4: 00000000003526f0
[  745.989783][T15060] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  745.997789][T15060] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  746.005794][T15060] Call Trace:
[  746.009057][T15060]  <TASK>
[  746.012011][T15060]  bprm_execve+0xd88/0x1400
[  746.016510][T15060]  ? __pfx_bprm_execve+0x10/0x10
[  746.021426][T15060]  ? copy_string_kernel+0x25f/0x2a0
[  746.026648][T15060]  kernel_execve+0x8f0/0x9f0
[  746.031228][T15060]  call_usermodehelper_exec_async+0x210/0x360
[  746.037435][T15060]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  746.044093][T15060]  ret_from_fork+0x599/0xb30
[  746.048673][T15060]  ? __pfx_ret_from_fork+0x10/0x10
[  746.054018][T15060]  ? __switch_to_asm+0x39/0x70
[  746.058793][T15060]  ? __switch_to_asm+0x33/0x70
[  746.063643][T15060]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  746.070228][T15060]  ret_from_fork_asm+0x1a/0x30
[  746.075105][T15060]  </TASK>
[  746.078154][T15060] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  746.085415][T15060] CPU: 0 UID: 0 PID: 15060 Comm: kworker/u8:17 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  746.096597][T15060] Tainted: [L]=SOFTLOCKUP
[  746.100896][T15060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  746.110938][T15060] Call Trace:
[  746.114201][T15060]  <TASK>
[  746.117114][T15060]  dump_stack_lvl+0x99/0x250
[  746.121694][T15060]  ? __asan_memcpy+0x40/0x70
[  746.126267][T15060]  ? __pfx_dump_stack_lvl+0x10/0x10
[  746.131445][T15060]  ? __pfx__printk+0x10/0x10
[  746.136035][T15060]  vpanic+0x237/0x6d0
[  746.140003][T15060]  ? __pfx_vpanic+0x10/0x10
[  746.144485][T15060]  ? is_bpf_text_address+0x292/0x2b0
[  746.149749][T15060]  ? is_bpf_text_address+0x26/0x2b0
[  746.154931][T15060]  panic+0xb9/0xc0
[  746.158645][T15060]  ? __pfx_panic+0x10/0x10
[  746.163046][T15060]  ? ret_from_fork_asm+0x1a/0x30
[  746.167968][T15060]  __warn+0x317/0x4b0
[  746.171931][T15060]  ? sched_mm_cid_fork+0x66/0xc30
[  746.176939][T15060]  ? sched_mm_cid_fork+0x66/0xc30
[  746.181977][T15060]  __report_bug+0x288/0x500
[  746.186464][T15060]  ? sched_mm_cid_fork+0x66/0xc30
[  746.191472][T15060]  ? __pfx___report_bug+0x10/0x10
[  746.196478][T15060]  ? __lock_acquire+0x6b6/0x2cf0
[  746.201417][T15060]  ? sched_mm_cid_fork+0x66/0xc30
[  746.206421][T15060]  report_bug+0x16a/0x220
[  746.210729][T15060]  ? sched_mm_cid_fork+0x66/0xc30
[  746.215739][T15060]  ? sched_mm_cid_fork+0x68/0xc30
[  746.220741][T15060]  handle_bug+0x98/0x200
[  746.224968][T15060]  exc_invalid_op+0x1a/0x50
[  746.229452][T15060]  asm_exc_invalid_op+0x1a/0x20
[  746.234299][T15060] RIP: 0010:sched_mm_cid_fork+0x66/0xc30
[  746.239917][T15060] Code: 4c 8b 3b 4d 85 ff 74 21 49 8d 9d d4 15 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 13 0a 00 00 31 c0 3b 03 70 04 90 <0f> 0b 90 49 8d 9f 00 01 00 00 49 8d bf c0 01 00 00 48 89 7c 24 20
[  746.259504][T15060] RSP: 0018:ffffc9001c59fbd8 EFLAGS: 00010246
[  746.265555][T15060] RAX: 1ffff1100a18f853 RBX: ffff888050c7c298 RCX: ffff888050c7bd00
[  746.273507][T15060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888050c7bd00
[  746.281456][T15060] RBP: ffffc9001c59fd68 R08: ffffffff8e093f03 R09: 1ffffffff1c127e0
[  746.289407][T15060] R10: dffffc0000000000 R11: fffffbfff1c127e1 R12: ffff888050c7bd00
[  746.297360][T15060] R13: ffff888050c7bd00 R14: dffffc0000000000 R15: 0000000000000000
[  746.305328][T15060]  bprm_execve+0xd88/0x1400
[  746.309826][T15060]  ? __pfx_bprm_execve+0x10/0x10
[  746.314742][T15060]  ? copy_string_kernel+0x25f/0x2a0
[  746.319928][T15060]  kernel_execve+0x8f0/0x9f0
[  746.324504][T15060]  call_usermodehelper_exec_async+0x210/0x360
[  746.330558][T15060]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  746.337156][T15060]  ret_from_fork+0x599/0xb30
[  746.341728][T15060]  ? __pfx_ret_from_fork+0x10/0x10
[  746.346830][T15060]  ? __switch_to_asm+0x39/0x70
[  746.351588][T15060]  ? __switch_to_asm+0x33/0x70
[  746.356367][T15060]  ? __pfx_call_usermodehelper_exec_async+0x10/0x10
[  746.362946][T15060]  ret_from_fork_asm+0x1a/0x30
[  746.367705][T15060]  </TASK>
[  746.371157][T15060] Kernel Offset: disabled
[  746.375468][T15060] Rebooting in 86400 seconds..