last executing test programs:

2m47.899321228s ago: executing program 3 (id=1095):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0xfffffffb)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x87, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x9}]}, 0x28)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x400, 0x1}, 0x18, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x6000, r1}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x1}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140c, 0x31b4363caaba38a7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}]}, 0x20}}, 0x4000)
syz_emit_ethernet(0xee, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000000b81100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e2000b890"], 0x0)

2m47.606639838s ago: executing program 3 (id=1098):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402)
writev(r1, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x24040844}, 0x4000000)
sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x2)

2m47.229523908s ago: executing program 3 (id=1100):
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
r0 = gettid()
tkill(r0, 0xb)
r1 = openat$uhid(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000140)=""/228, 0xe4, 0x2, 0x0, 0x7, 0x8, 0x3}}, 0x11c)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)="600000004e007f049eefc7b4d87c87406910f368911005ea366248266e311c32ba82fbd3eaef15cdd18a5e6d0d4452706ca39be850bc2da9e5d2", 0x3a}, {&(0x7f0000000180)="78cabf2dfb73fc0a512a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52bf06", 0x26}], 0x2}, 0x0)
r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x40, 0xe, 0x3, {0x3, 0x8, '7'}}, 0x0}, 0x0)
syz_usb_control_io$uac1(r3, &(0x7f0000000080)={0xc, &(0x7f0000000300)={0x0, 0x6, 0xc0, {0xc0, 0x2d, "ce6f0e44fc361d56fdad2a717c51db60a69d6132ea74b75167aac095c9c09a9ba7d2941b1be269d71d65d4c99177af415c305f83a4fbe87f2dc5f5351b00a428836099e914649857ea6d439e3e425750335cdb962f07c35047b5570862c3c2f029664f8cc5dceaea071f7cb4d011ef7cfa53e976eec6e9bd993d9bd2b1936f0c04a519fb18d37fe14f4991dfd7330250fbfe9d788b8b75712869df84b87ba6a8021bfeea63526efe55cd2101af0eeaf7736b2addee8284ab8cc53b675e09"}}, &(0x7f0000000400)={0x0, 0x3, 0xfa, @string={0xfa, 0x3, "6e542c138a197e8f22eb2dc7739034fadb0e35a5a6c904399f74de391120f24ea055ef5efc4127b0bbdd5e8a90670352720b68fe991989d0dc7cc5b5d8cb92ad5c70d06f80af504cd9b46faae0c50ad5c58f226bd3284f341f155e9289295cecbe3033e44a4ddfbfd9a6d61745a691cd71079df55f6604c2e88de4de8003005e2874110944fe57e0b20439e06061c6930e14f0e01a434e588718a24dd0f08c045108e9faf78ae7918f2b4bd01b1e1984e8f09e310edb09b975c040e9087c32aa3097cb598ccf2682a81dd5a3f987d20ac008d4a74c63038f6458661626c454879334c2c8172993fabc13f72e37f449fcfe6892a83b005193"}}}, &(0x7f0000000680)={0x24, &(0x7f0000000500)={0x20, 0x12, 0x83, "786f8a354d25e963a303434ded4a59589d49590e6e1fcddf6fbfc8a86c1cebb90c0603ba7e58c7d36588447e5ad3b16bd71e293aae6ba0e14569d37ab6c154b6b425ed73b54c61ccb8c1abd5609f8f21649825cf65fa5f0e6448bdf4f8ecff428442829dd242a27796fe03a287e8f1f4e1260063b2d7951fe1311462b89cb51ba25e7b"}, &(0x7f0000000100)={0x0, 0xa, 0x1}, &(0x7f0000000140)={0x0, 0x8, 0x1, 0xb}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "dfc0c5"}, &(0x7f0000000200)=ANY=[@ANYBLOB="208203748294629005"], &(0x7f00000005c0)={0x20, 0x83, 0x3, "6dc0d5"}, &(0x7f0000000600)={0x20, 0x84, 0x1, 'm'}, &(0x7f0000000640)={0x20, 0x85, 0x3, "c03a61"}})
r4 = openat$vcsa(0xffffff9c, &(0x7f00000006c0), 0x40, 0x0)
fcntl$setownex(r4, 0xf, &(0x7f0000000700)={0x0, r0})
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x23, 0x5, {0x5, 0xa, "98e7c6"}}, 0x0, 0x0, 0x0}, 0x0)

2m43.551577728s ago: executing program 3 (id=1112):
epoll_create1(0x80000)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0)

2m42.502268452s ago: executing program 3 (id=1116):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
io_setup(0x8, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480))
syz_open_dev$dri(0x0, 0x1ff, 0x0)
r3 = getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r4, 0x0, 0x0, 0x8000, 0x0)
syz_pidfd_open(r3, 0x0)
setns(r4, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x2, 0x0, [{0x8b, 0x0, 0x8}, {0x0, 0x0, 0x7}]})
r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44010)
r6 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x0)
sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x5, "01735021d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x8, 0x1bb, 0x3ff, 0x7, 0x8001, 0x3, 0x0, 0x0, [0x10001, 0x7, 0x401000a, 0x7]})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x1, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000640), 0x183180, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

2m38.254986799s ago: executing program 3 (id=1126):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008d17d4cb0b10065"], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
r4 = memfd_secret(0x0)
readahead(r4, 0x7, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)

2m23.009049233s ago: executing program 32 (id=1126):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x800)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e08004502005800000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb000000002000000002000000000000000000000008d17d4cb0b10065"], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2)
r4 = memfd_secret(0x0)
readahead(r4, 0x7, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)

12.278240269s ago: executing program 2 (id=1578):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.id\x00', 0x0, 0x0, 0x2)
syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006400)="7f73a2cec5d0db4d420442fce4e4191e2ed112a607e662fc1eeef7926d41c5a0f91c64de08fcd231ba34fb2b58307d834cc83ce0f3908b5333fec9af958c900344d938cfa948f432dd5acb1a7a73bdba45cd411b82f7fed6fa3bf23c9abdc4f263fdf3fd68dcbd973b4dc2aef81c7296d7d08e562f89231f57d43e4d7458c8f389810e60c1c20bddfefcf1739824ad409148f4647b52cc98987f7c31bd6f7f44e39ac5f97f75f06dccd331d2828625fbfd3a65fd0d32871b92c0a6aa8895d3b467921c933eeb93cdbd7387abe27c4427d4ab77bbf9558a9a085a74170e875d83f8c5017d46901eb519854e8aaeaf94e6e050fec7c1afd81e26da117484dfb042805ed1ad3fc67a28636f5a35ad72f6106a5c3cbdd25048567ef13b229024142ebeb7a8bf518f017fd49dc31d8652ab7036107f8d5216a142e58f8ed850ba177786e911fa4f9ff952f8ddb66af705c7b97ed4b385d9ea3c0fecfdd5dcf168832726ced26b51f7a5911a35106aaee0e8662497f6c5dce5543690ea32505e79f13bace0f89ad9e8c551578eedc78028c414145dc3be2184e2055c037cc2ae07842a78910815c69d010bfbb850ec8f1a5da8b48ed2f75838dfe8657e5b1b59c561cd5d219a481802939c7abfb216e01173985e3436b7135d2377ba714281dcb3f82c064957e621464e5de29e8248d2400668e5775d8a75d23d7e3fd9fdce31aef258be698b121ac4ff319c6e4f872c4cf1b5f3ebbfb2ebabe113ccffe028d829922ea909a5522e5b632e3b99fb47ba9d0f8e15ca401e3ac671e80dcb56214330e7ffb3a415d6a0b84c56b056a6f2a4ffbb77130a5867b12e061a2539aaf67360af472c21a27855b5387e132ef9bac10b86b1f93974da52b3f4c48011c77eab7481e1838975fec2ae160f6b8c168b80dcfd3e03e8c1ec2a643cf850203e8254112c08ed4c2c6d0715b6bf5f281df7356cc2c9f8baac8b0dc574fc46eef5eaa9530dc0a6a88b3ad315d01a36282c5338cc5c399deb78cad23b22eb71b80d266fa904fc1a6d94f77a1e3a2173abe5dba58af48a75fbadd339eddfe7dc5ecf3fb85284e903ab70dc00663f0a5270ab805556aaf09223679845a1e091f24318d71dff015847107ffd9d7f789e8753abc2a51d5067da21c49fa8b8f66c89afb009cf17200753164786af597b8b6d5b5505d1d716c74fb26cd78679d77330c2cb2bd154423bd6e5b8972e2c576a89806e57686a7019a369de75c99e0bb6704f508adfd5394568a2f8c56a5333c861432e4ed056e5b8f20217c81563f0fb9efa6467459753832814e3118c24b634d6068b35871bcaaadda1d206584324a2bd35050f5fb993e898ca25fe82b3578e325658a4cb91ba32589c6d6720284c610569788acd2907091a968651b3978d797a5e808d4f33be1859de2bb57b5d249725f06d94e32ab46d1b7d1174703bf8dba02d4a5f5a16fb3878d6a2c915df4ea588ad8b0545b62308112d6c7f9bd93e5a51a45af9e990985f8d7dc8925ac1f63210cad488769d4957b03108e5e6f716d80a0bf88349d680067fb0a0bc59edd8ba646a2a86b4c32fd531dbc4879c86ab74e17f49f877c30a36279698a3420f3f236a69a84781fb981a2248bc0dd12dcc464f6b970b27ee634f0fa8c1338bdc3b4193b865727eb856995c08d9b88161b9a15245ec0967000f678e807c953f933edc6e80fcfe963663f7cc801927bc91c238d0b6f0c61ae66a8d210ca577b17677d79ffad404194d733dbcce9b2f163637b7ed1cf4f967ca680bf1db83b1b6f090dd99b8e0d49e7b3cac65864c32cb321d84bf43e7a300a6f4ac27c8091e39e4383fc99617f4b367d7a2e0041176dee5fa85ceb501c3d2a2efc1f489f83fbbbdc4af125fcac9a2ed8db3cc227543b195e36adef6a67a126a28be525e0441d3c5def236da4bb1d5cec084b1f08da02299f72b2a10ea7fdd5eb3c2f999740a287c179db7fa5766f8781b5147a6933623bbaec777152c4e65d262733ce7e864c5c79a56f60075662248f6b765562f718d0767a89de9bd3649957fa54bc9df603158d4ea631d71be5ea93ce64d4718abc196fdc85dddd8656806500660aaf5e3c5c74732872141cf9c542bd32f1ad210cae53fd91bce48a55afe056540d396b0930632d6b252833a91bb4d9020d5ed10d66d2467e324ee68f06926194d378da476f0d4dbb9c452475d938e8c774cc68bd291726a95223ae3866d9a2f3e4e6c319e2b4700ef4640ceedd9ab0a587bdaabd649363f0d93ec1afd6106e791f8d8f1a0d52c085a4c8a89a5c6d8443c63d3757dcca07e1f813aa6c7d007385b54b9a280713e80d8b61630360166c5ef66190fe367d7694112f340f790d8a9cf0f39eef719edbe914c9da3ecae2913a544cdce5bdb9fa462ef83bf3da34e76670612885e66c1cb13c76f72fa796ab1810f507be6dccdb66aad16e88168e0637ce5ea5bbb01ba6731052459600121734f1db7c610920e979e1f2c69be00a33a7cf14e5dec0626d3928040c75db097626e198c17114da8841c9e5cea3ba122dc119d6a2da3144993e7e023849f5360f299675f49353828a592aa8b6c2ec821b0991dc478024a6811656a265431f9aa56feda7e8267d6e3351ce340a79856e59de5db2c919c6726cff7ee678b95390d6c6ddd2ba323be59eb4c42f08a2f9973ff0c45820d59b50b6a153775ed0e9e73e73c6ccb98887bf70d35d97ae8d226c35b4fe8a5d4cda816eac80cdb962e8444a5cb4452ea83da83ccb437c7b00e146d7b71aa86a0933aced67fada0588dfd280066f5a735215691ecdcfd474dd0ae3c644af51a79f8fe7a84b0c2130e619dba270a101b0d1669c9317d5e548a2cc3755d5a37817d8eaae8059713854fb1b5b70991ac62db6453afc3bc4fb78a5cdd56e22b4d7abd70e6370ba28d5cba9478886f232a482cc4a1dda770c0458c8bef5ac19d8f4a24117d6ab0c7d37928c05a9b51cb6b2d8f5e422383dfae0f8152365fea2a948a12899aac9587a01ed162e6e70572d3eb02fec0cf0af4e65757f4bb535aa4fb82a193f79913b09e8a4d1ebe26eb4bd3d1549ecb20a08c501bfb5aa8ceb236a99d6ac3cf7be65475a867c27d301bd62a947c1d03e7247db527d9f7356bd59ea335f3c0afe3de183fc16c77e658aade451f036c34b9ee58ba53672994358355209728a760d76aa2f22d7d4e37732cca6404fde0d067bc97a4020a9f3946893743fe132704285a7e1b01403955d61aa22805dd592e4f4af41bd3c3f3ff2b1f0fa434c141261fc28b2bc1b104c78ed7f27cc9609a3d9ca2b8b976dd2374db05550e85032d7e080fac951aa68eac62a9de55565ab6201508cff33c38286494184219c919958415b50420756d32ea98cd04b6ac9c5f311fc933e48a597285c2f8a3dc008f174854b6ea186af6aa55aeecc10345b7d9bb9d2bbd3c0bb8153f6fbf080f4cd49e07dd850ab3a44cf505fecc8cb52b0540a60598ca941d40bda71b16f703bb30e344d3de13e540bc1205a1d9b3c94658b2199b2f2008c9f106eae565ef605278b8779ece25cda761069c7c72f020b820a39e6d0c441cdb00a41292c3146f39d2a5f7bb2fc8723a318fe3df11ce8a2e81eeabd0dd9245cb0f54a6d048c428c899182804cff8947361c01b009214b7d95617d312fbbfd379925f402bd9cc0cf5c25f14c24c64ccc7d87add9ce615711c9c6df6b0866d001f4669030abde15fd2e4059f25ad1c5543ededdf6d26c5a4f52d6c4448d105bbaad24a88cdc41b7e741c82973dc2578f9f1fd1faf4e522eb08c430f4efc4772fa4f6e504164b7b0b275635446c64fe3764cc13b1903b2a359eaa16c28abd331a34f78354ef286116c7b4a0ed3b8c38e8667f26a4ad8de9e205b9f1b24ec8c46a3c3578655f45d4356bd9504b2c4bceab55e7b02cd53139c1b5f044d9182b1e41c9020ad44eb31b8e8a7bf01e85c182ec849d7ed42d69eda8eb57d58c1c38e4ef4c3266fab97db4047eee31d289e91c53b243f5ad50af8de32c35cdd1165c894cfc9df5f59f55b2acdf81b6ee3db4eeed50c7cad36cf53dd10ad592c6d059f067d76711c067d42a148443a195512ea16f41589b3f1dace5e63d2c1255ea19c8ef1836ed19ff7ccaf96536548c06d4fdc76daf99d960c040e4df0e5a1f39f57bcd6dc294adff4af3a8ef364338049c5991d532a248aef4a0d166de764a4c3b583b6f8c30a8cad255f34f342f2b778fdda98766e11c21f4df0db226e6bfb66e71c342d904e99d506aea721d01456938e02f60e78b2652204819ed4595ee77e987d9646b2720ecdd41869653f7225e23dec28dbf0709a1da684693cb22f5b74f569f2d424499eb246ca8d8cf9ba86b2f1d25ac5e3707d46c46fa5d3008cc01aaf2e645b92dda134010df5ce5ad6ca03c2a30ae023a72688f766bcc821f24fb81d1c9edf5da5d96816476a3afcd4df699cc2b98664af0d1365e589673ee7272e3746d7e95ff6c87e1d5ae8055551724e3ad3c50d852eeac1333a4507d096687c6a7765accefc4b22dcc36a73f231d6c9dc242a5e7a0309415bb10455c2df3bf719c79d73e35ad068f5473b66c7e9bf769919b295d6c9dce8f774a21bb7878fd7d4b887bd2efaee03c73532a35bd23810dfe10e214d4f9cec03c72afa212f009e068852546eca171ce2c7070228901527621eca6771cb75b1613df30ad1582df923e12b91013f73102f130fb33b85d82f038bc1f54e6f126d5077262ca82ea7130995a5b24c4974ca8a1b1d4ae7c3417d05547cdf5e6030c4d02c6cfa0bec697be7df432b8d78926831d00e7bca1a5e67e6d55666cca07c6842950cd793ce986da89185efe61046e863add47c745775b8e3727b074434f1c14c502e44d276b73ad2faad946cef2435fbf1225076c461b76b3f83e24a05cbaf0fed70c3a05f4765c0499a9b7a80805be294053e7f27e2260e1ddd1737d535aeb7692a0c8c169b5c058a9d217776b1a9888dd8175477f4cfa44b83715ab4f6f212153628554f719fcdb6bd376c1d443c2692ba8f2db168c63723eb8c88e9a9612a0934ee66dd63daab19078d61fe68ab10a621460d98d12bd3cc6799b2c35eb1010a457e2f36fccf3b37a96233d844291bf798f630fec23525ffa41e64b17b895c28ff7699cf31e9faab9b2f515d2e14dd3981ac7c21dea76810ab33ac178648ecab1cb09b158f43d1d9a97ab05b52c322d02206922a719a400367796063570b480980d4f9347214d747ce0de4f56902df321e892bac8a79ededdac14b93682b9ca8b95452b68c8ec3fa1ed188237dd1f67a286d988fb8e43889c00f4a87a3e6416bfb34259646296cd5f73d0e00534309af6e8f5e0e54c63fca9822505237f4e3cd95b8adccf45f3709e8427da5d7c3c57c99286a2c094db3f815373a756e9ffd2af88d6e69a8829dd4a7cee75942aea8556ffcd82653fce46daeee574ed7502fb2b1e8dd8d60a5d46b898684a0d715f643ad91505747cca04968e6a1d0c447e036e1ca25419cd8bd785402d88bce5e40532b1806aee693f8b5030cfad71e9f52d0445304aa2af28893b1bc731f37b55bfc6e5846634482cfa3cee7e9d2c8a34a48fcca25393d7b3fe5c5a3c2d53de126654468984ab1777954272c6e25ba392f3c3c2a658518625921196839ddfbaa0bab14836ea12e63542a60db72048bc0770351cc2c30ed6185ce69b61f8160078415e86f9bab5f399bd7ed4b720fd19fa327f440f6054937b0dd6ef511849823e6162e0c7d1f846f9ebafc32583954e7b136303977a191d9974e939fc7cac14134026967b5408fa6907afbdfa41cf80a17c251fc1363725987819f165518f86fee07ca1660c25d04f157ecd43b8b92f93b2c6c02e0c1e715836d70c503e60ceaeaaac61f7b9e07d3fc9904ecfc81ece857754191e57a8991bd0042750b53722f35741641ebd5c5febee02d648fc1d048bf916a8d8f33227fca790602c02dfbd4aad34f2dc8e77e537ad4042a553e5e8a0a15dbee27da24ac13048378899c3a8772a0d8b85c442c8082f464b58fc016e845186bafa8fdf4f04d0d952136d4c7be90a909e3e6adcb3d74ed37da19769cb81114ead1a40dc0368169e5c230eb02a0d1c1a11ffd808f27159baeaa8879a034dcaf6a70b2f99e5859ad9c7465d61b4b51e993d8b93095ca63675dee276ba112bd2f469efdfb79fc8c97b809e0076001b98651bffa6829b2141fb3ff789d0ddc3d73b077d36521841ed9aa5a8a134f5875c444c62efa1f9b0d98a4bb4a62760a15d33824791420a5a89467ec364f30954db77219b849677e0f5bfea9c3d2a3a1e1e76ce3df4c8b9a6a3866b20566e7c68c6d32bad4d70fd2b9235fa7d38475ec1b9c9d746f55b02bdbdee6dcb6238caeed353de28d1e6e2d5126117e5fa82b9d57b703dd527736b51444b0d7d4b77562d4a370a202ed70b4940bf58ef3ff8801f78d632f2d2428fb133a910aaf4757b32d657d831c5575398aa88643e7fb1431ed0dec16a505e2d8583ef3d8787413bbdfe132c921d16cf272ca791e88e196824ea3a5c009a6a21b88dd1d6d6f87733528959ed24a4d3505d469d32a09b1970329add757c533afea8f8314c58400c0f3e25b703d9757c4b04f1b1bf293defb008ea60dcc77b0d3a6e9a1286c761bb3aa0c8f3aed74f8cab11094741c093e495867afb3857d3a92ef0fae7253b2bc3291a9ac0dcdb62c517ce2471ca23d985012f2e860238ccbec834039e8538de07f6086d1ac09027729bcc4e0bbd36e931be4242ec7135d16b01b3da39b1cd1c1d751017df8ffb31875f5a541a94099a4f035044f310fe5356d3b2d9a1eb5bcefd422e546bb3c169b8793df2764e6390dd161d90943a55d40f1984e1e211fd0227296e2b5c6485ad19675dcbce483a88f5c68d44b80ebb716c1aa0017ebafe340a0273b48979c7dd4e426f8c0a736e40c4f844a037742d00a73b67fba3c14051c6278c4dabdc4d8446ab5762e2d9d4f34359da34cdc333735b02e5deb9f71c8af1a5cea228eb70d0d8b371e378f5fd8172e60d9432e38e8eef54758d89e5413693ff2deb95fadfda6ecb6feb3adeae0c08860056a23d122e7b070568ca196b58cf0c5e737be9f2d9c66fa2be4f532c603ea8533cf06152d231cd2513cdcf212af2869ab96488f5cc484cf773c4d6eff8573b9487e51c84c3ea2e03e0bf3bea7717b8c92470a05d6e518265e8d31e23a22dbefbf82bb2a81d6c76372c5f41b19c5bcbea706ebd0b3cb7e52be6f8c70b7fbbfda4de69318cf9186aaba9d94c93b2df2310c44ed93d937db65b5f596dfaf6b52a7a4ae77c4b096d0075189cb568e4bbf6ce9c796839855440e6f060e241f295e4f76b0f162dacb2cb2e47a06961152e0057ed615fe14943822e8d6fa18636f3168f09ff2986dbf1904043ba4fee74b5c4706781568861df4c9b13bf2a815ba7c69a0b60114e19d817c3a038921fbb1b47acb8597bb38f7980f8b628f3565b09d7f7be504264ff143409b54516b4e79bdf7147eac7b1de7e43d76c558d6306bf780095f2bb5b9ffa3846df980001b22171d65463c17f4adbb95274abe315707946e65026a86d1b368586046e0cfd2a99352c16b9bbd91bb839c443e9962ae35a9d0dd6e2a48e773e6ac06597c6e428f5cc14836e6462135972bec63de2e7e3b5306704d44c2d9367308ffc4bb43cf839e37ee5fda8e50383aaf2eb67004645fad98662d6ce3d499ed921c9015ee5691b030f53cf95c346131097fd8fdbf257dbbb4410fb1dd14d64e384ad486ed5903866cb1982c606d41d611d4bb6298fb26cf965a7dbaf57309d46483fd5ff7c4782341446e7ad9695c52f7aa57a0c856214f67b7a7b8def0e915f5eb2ae457e4800d8791faac0133cb3851881aa429826cda874a42b7956a032f3d0615296c4f706ed649690d196ca6a6a2481be470c0a3922c7789276effa51e0221c8e163ce47dd8ba62391882338ad843d5579a6c3cd3ed711d770b8e0be9de4c91120bc01d69f457715fd770d6c335de853c87be3b638953faa0f2284d415c537e01285afe9b7f54d7a432bb7e16cd18621b6e5769b635dba997a5c65279bad6522d189da110e549f51fe20af42fcabf1a900cdea166bfe279855b8fdcb1bfb97049238dd17aec8093ea38b04e04bf43dd1b43658abab3b0b395cecf73d59279b9001e0d4ba93b95de101534ac718336a82216f2112b7aa0235c15594960f4771a0fdc21b4636ce3ddda5dd63291bfedce53347b725f8fe17848319b05cdf4c8d3d198b64deb3e10f6fab3db35ecce06908cd4f26cbda0f8c4a7deeb6ee12e0b5c13dd022851e6da21f44505697a4a974a10e57145bc75960ba59e189768938e89eb0c81071b45345ce428e90c4fc04ba11e75127f96698a4a2dba776a0f0a1576853d39e0ad3addb7bc1f3c030794d1fe621799d34582d07b80114df1039cd2866f1899f19fe34b946571c17f8b3efdc0e857fcf83f1ebc2b99ad59485fef3057e07534d36e7b4350dee86fe84f6f85f75330064301e2f055e017cc187f93bb8e92583b9e6e3999ae5c7ad1521ec77ee0ba476308242f9d6cad4d5ed385924c3806077f0d143bce70b9205b6d59f8f107f50133fd6fa87ddffaabab3a16156d353c28c5b3d92ba8643e4f06b866ea3f7ffc604a234750e5eba551e4787b340ddc90081b74a0d2e7df723e73b09e5cd38568993f171ecd6056aee45496c8d8fc458f8e2e721e359541cbb9dbcb1d801538cb84324fb090e960d53bc81c0020229e38e36c186cfaff1a1bc385e2d5338bd3bd9148730275b36f2dab198ee329b060159efb17ab00e40a940245d8ca47712921db546dde1100c29ff47dab5dd8cf10cca97565ed96901b0309841d7e3d746cde9fb1985cc276e4420636b145a2ee8720ad2fa2c256b995879b95e2e597f6d6fdeac1f2d349e3305322cd4b0df519abf958e874ed6d25bd4eb7418e9e45addd44e4a9e6cdf7b553cb48fc0c2d12683b2a83d2aeeaf03b6718abfaaffa59f38879a1b380668ade3e320ec2db4bdfa4409d09abf35fdd2ff501dafd55fbb2dd2ff2821a47ef41f644f4cc87d4a41576e2618a4da38302aa3ab38516e656b5a64f790a008d0200aede7267bea8bfe554e7d082d11d8ec186e314b070b5ea07b0ae722b4f2ab965bea7f906326710e0909eb1c0ba9959dd97a7b5331494d87b74c04587e4b78c420b8aa8ac99ad6c59d05d35a2e370b2126de5eb8901cc6ba879ee86de290bcf77e0bed67a74932794b3faaa187f5fd23a7932037f0a3d4517a1509eb981752492d13aa7d48d997fb71e65ee97db61d51ede49a215a158890bb60103f5502893a998be6ba800a07ecf9d8e5379b817621047933b3b314b7cb20abb6c30c6d490db451c7ee5c37942b5e886e0b43f21b9ff383ab80461e1a2c9c05f870111d023fc49dc425fae83e848eae43772902f83bdb1af645039e0cc961d6ce39588bd4b00e2a5e55ec02cfcc3ebe3783fbedab8ab64ed2d78202493ff6550471ba6196e73ad2b35f828eceaf8e340b78e9ff0fca04431e56cb7d0c3e366f938f0d7d966ba34458b0ac9dd6dd5c0034f73f902ed2183d7438377b72e81919ce168f294009c734220b4a501ec8e47b2d1f3f69605ce91fc825b5c4ac7b267718cf28c81d485aaa7de1d0dee66f677b6ee9ad02d75099c653decac58e0f1e13f414304b972d6e17d3d1fc0ff30591b82aa785a3dbf24c59bc8efc57fdef33c7c2d051214d9d8f48a9a71ed77ee6a3a2a699bd3882a4a71ccb714c8a911388be571a2a7136b9c308c5c854f6ed7bb74bab77076ff3d48ba989384ee4dc996262fc9e1585d2638107df8615d66f335d147efb64373ad8668fb50e00eba86ef4c65842cbf246496e997fcf0546c043740035af30e05f69d69ae06334e249fc828d5c3d1d58f31f2e439fd6d415be63ac6c88385935bdb11f4e8cba2f0209314253a0e5001fb029cfff63e012c379d8269611eb3868055868087f3916990089d3cb9dd201db0fbc4768a03b4c36c2a58511932468ce65f6b2d5fdaf3b1e669dbb7bd3ed2525d6f81944512d79918b1b14e17e225b3b7cce0bbcc073eec2ca8aa47a260d4842ab5a0e29b163d83ed1392ede695ad64e44f530af80aa4af328f8fbad8e4ea11f71bfc8418a145ae47612f9e7a7d4d037c3249e5d3a1feded9798dbd78af07990aa8d607254194256c1c662479a881f8bb6e6ecc4cb92aacd919fef13e78b58ad44ef3a3e7e0145950706e762c1ac44e78249cd1a29c5dd1f635c596c8046cc432024079ac0eb4b7376d89ac60485300594ce3a2498a374e0ef103a6aa5e0c42df5cbdb6da478bcfece47ff79e79cc2abaa7678a2d6f5f26bf3702d3b07cc5cdf5f402b2b5801c7d5489ecdef4477d111a5040f65cf7ba8586509151890a0a1ff2a093b1b969a4d01fbb29de063138d5407ff358d7c98a8ec79a424d3080d5b9b4533f23dc80ad3fd9baef5d1895576a8af9479c65f772874b9f7b0379d9212f386af9fbe816179316290746a973b5178601b861c1054e9d8f38426edfbe8206765314c723f262fe0e32950f68f00a45582e6e72d0140614035f58e3527eba96d29363f966bda6a29b4453285ad94b3eb51ebfbf5afba8bd6a89fc54e8cfc1d8b91555282e27ebcba8b2aa7f4d397b6b017bbcd80d30fc0180cd93b97541a0b127925d609baae79e4243c34b9660a17ff066c4b906ba554655dc30e47cca38f18e5190ff861dc3cb2bf777052da48bcac3925db0b9e9ce401c1cb2c2a1c51d0c420d357af3c939166cc01759d50f9e65fb04957c7c5c5ac46433e064ec563233d8dc7eea97d9f5c12b4a03a46ce306550f3bd4c7166dea3d4876f7a83b39b207654e6fd2a01abadfb2a3f19436c065088ea49859d5dbc8fdfcf1e0c4857cc512870795fe74989f674f40875a5104713ad3560ee1ce61df8fa6b97937703c7434fbf81009890d98f327954c3f7800e39fe5269e5b030b6cd8312bff2c0c44eb435ab1a3d861a0aaf01e992776d135d33e0b02fb28ca2d06c545366f222f55d28514d883e11aa255681ee7f20d61f73a5c20955ea919c557c1b7403401c34ceb76cde309ab991a13a5b6c3535dff4118b1162a22329be3efba01f08d3f0a9a68becd040c09bf6da005aea6c8120af5c6775925af7e042a1847087067c1b8e1527dc2b9ba6fc3082b47a9e42a7eddb980ecda3f66ab5af600b5f92d1db42032b1fb4a11ed8a4732ea3ec73454ebf0b84acd58a545ccc95b9f413044f47b9e40df58a8225651c379ace7b826cfe7f5bd5205917b606cc7fe266702918eb7da26be268e137aea627ba1b849961692ccc8a6fe2d42957601fc95e393a399c6199a2f1c0adf2187711b9e82023872a99fc25c7144131364ddb03d392961080734533c49911fc91e1a2d2b14f7db46d8133a9b2ab3824b53f620b659c877ca458c1c8d0cef838ec467bf67f2060b688fdb0f8ba0948da364a742d87e2eb2173b2cc019d1c76b53505a87ae986cab70db7885056a3989dd1a3abb6f21d3415f3e53aba7ed09b6864a", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.749063981s ago: executing program 2 (id=1579):
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x7)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
r4 = dup3(0xffffffffffffffff, r3, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000002440)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000480)=""/86, 0x56, 0x0, 0x3e}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file3\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x66)
r5 = inotify_init1(0x800)
inotify_add_watch(r5, &(0x7f0000000040)='./file0\x00', 0x910008eb)
renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15)

8.532531306s ago: executing program 2 (id=1587):
socket$inet(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000080)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x38, 0x0, 0x0, 0x4}) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) (async)
sched_setattr(0x0, 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8, 0x1b, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (async)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x1, 0x6, [@multicast1, @multicast1, @private=0xa010100, @rand_addr=0x64010100, @rand_addr=0x64010100, @broadcast]}, 0x28) (async)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', <r8=>0x0}) (async)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', '\x00\x00\x00', 0x20, 0x3}, 0x2a, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0x8000, 0x4) (async)
sendto$packet(r7, &(0x7f0000000180)='\v', 0x1, 0xd8d94c8c679ec55d, &(0x7f0000000400)={0x11, 0x5, r8, 0x1, 0xff}, 0x14)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)

7.699817643s ago: executing program 5 (id=1591):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00'})
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x140c5)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000240)='cubic', 0x5)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
r5 = socket$kcm(0xa, 0x1, 0x106)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200), 0x2, 0x0)
sendmsg$kcm(r5, 0x0, 0xe07e872420dfefca)
close(r5)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cff", 0xa}], 0x1}, 0x2400c000)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)

7.13704802s ago: executing program 4 (id=1592):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x0, 0x1, 0x1000}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, 0x0, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
sendmmsg$inet(r8, &(0x7f0000001040)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000780)=[{&(0x7f00000004c0)="6cc8e0da415e000f41d4e63b7bb668bb1929ff7a86050a95e7c4e7f35ba1e961dfbb367209ba65b659fe1713fddfa4d669ecb4c72113e5fe675a02d7680866c16c7b8819769056b0dad5a5382c5963ad390f8089aa75d12835f583b8a32974e49c7756ceb1723222f9e8b4d0ab32bb5fbdc263237f00e639524d0c1a60bdba4e301603724e996f8c464c9e4d8ddb00c314e396cdd8cbafaf62e4571eb0cfea10d05fc976ac2f14afa8e287c8b21bf5a24a23fd5acc9dffc794c6f891b8fd54b77b74ee917c3e1b4014ce25b4f4035c97bfae29faff", 0xd5}, {&(0x7f00000005c0)="9b22b1dce28a720bed7287692c2b6c5d00a3ab9fb0f73a8a640f3c8519a9bc4ec42d16cca2762ced76e36fe3000727999af6c62935816497c16c5728ec3bca9449378fdb53e0469a1b4765d3a0cf6395b2cf3784a3c56260d170c0489478e0eb4a74ba2ebee896d32bba3eb15f61450ed445b53a2d396487286c6e86c86cd2517fed366b1fe0cf4ae5b7fb89d3d370a500dc568343b7e8885abdf744ae007b0d810cf46d246eb218986d970dccf68902bd68e9203439f9d80d7cbfbee6ab0f884b55ed35e7eb29d58cfbae52a89be00c4029903e277916bf8dc89191351b33e48e4722598391eea4", 0xe8}, {&(0x7f00000006c0)="7e3e5ed1b7d91d0e9ba98ce60c86062707081c468e4cad9c4c936aa2cc8bb411d616e1a70a7a1ce6ce3d70724aeee2c3ba7fe635b343833b57080a3715d6e49c33f202f6659566288c35e3e519cd319f745ce9b485ebd987b66d6dd3ed3749ef358822dd38b509013d32573e020b0b4599764854a7db1c64d2dbb525525fc388125a1548d7053190b67903d4a41b7c2383431a7a579df9e346abff0ed04f0846afe5c87b13266628b1", 0xa9}, {&(0x7f0000000840)="e874e531818fdd69586ae7cfb1252c19c743902f00ff14b7d40b9920f14cc8441c044d35b821b1f5f15dc03f52299bfa65549595364e3c5bea5ef18d198e4a9862e40c8459c77ac41602c4e234679c5db337e4964304673d2dcd4317ce8c3ff0ac66b4a6287e24972304e5386f5863db1723897875a078a88ddaeafb2928932eb6af2182eaa2c6900aefd23a969d288043aab7596fe99496de96ca4c", 0x9c}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000001140)="e80e0b3c488e8b55d58c4266010fab3473c0312e5d324a1d792526b823d07f61a1fd05e2517dc7a2a9a3a93a29a16c71972167b4c3cc37f9077677f05e21e75c969047ac385ad0bef78595403524543aef510f384df458fb96e8d985ddc51e012c166efdd03ba4b27bfa732da9331612beae7c26ffbd0c3ff09fefd51b91869afccf182cddb955c8e812ce4cf273d3d16a2ec276732e1aa59a4e388b7447299cdaedaec11634d9c1b70532d97b41e1ae86b7edf9c642ae95bd5ec31a58a56c9a5e722b18", 0xc4}], 0x6, &(0x7f00000010c0)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x4}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @timestamp={0x44, 0x10, 0xa1, 0x0, 0x1, [0x6, 0x4, 0x2]}, @end, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x54, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1e}, 0x1}, {@multicast2}, {@broadcast, 0x859}]}, @cipso={0x86, 0x6, 0x2}, @end]}}}], 0x58}}, {{&(0x7f00000007c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000b40)="7d9a0868a83688efd92cb2267350c3cb8465eaad66a22e6e3da7886a0d34bdb1734b7a3f41b235360944b17d52d55b8b2c97305c1cf4a66041427ab530ba1836fddfc137e83811bffbe4d5f59f3d5e69273b89f762d24a3ecebc222f0ca8e6d2f90d424d1d51ac62ab0bc2e73420b5036a9b1a5c4a5db283e37f69837dd8e6584d77e31b1eb318a9b1b72c183581f5dff04f6d2264a70859fb9e4521388de0a1f231a0d5e3d14ae5dd2f971038ccbd2ac688539b87bbb8295873f4421ddc0cc12bce2e5e8ee373c40e8b2ddd3ba0c82425d74d1b", 0xd4}, {&(0x7f0000000cc0)="6a8884091979c3ef67fa2706751d2ad8cab5529c904e52d342301d9cf33f4b1445d469aa80542ed71dd0c5a425f31c5df331fc676832e78735e389d651f73354021400e5d6f6f2b264c989473b2b2e45d812e6e1b10c7aa555d2db003e0c79ac3cad80340f9e3932f11b744468b6ecb29ee6d683afd984f407880c170e2c4133a8a7d46ab3babe3f8a7f95395a330784c63941eacb6323bba4917634410b2a919d019ae1dd78bbbab1d282c8f715a0259a96b1cb5cf751a9518610ed574a3858b3f8ea42a05f5e1ecfcc9e11", 0xcc}, {&(0x7f0000000c40)="69bf5f2e78c1621a3c6658df2b661791660743a14af0b6a5671c9df1a0c69eadd9eddd9a743bc0547252cb8e1a9084c479034fba4d384a8da6df8d6e777d", 0x3e}, {&(0x7f0000000dc0)="21eae1ddbd167d444ac4d176bd59413ed24fca1eddc056f58ad3af47b68adbc8afa5b9da8c2f81dc8b6b98fc5b60985cc2ffe76568ee9055ef54d52b559dedfc9f487c3d6b870563c06d7c34520cce8e0b869cc88b3311c22e0f7dbb02005059341e0ef24e96534f4637cd3ddb42d74d7b853ea65b83265872a19075c045b5300dd45afadd047d8ac3f06a43a0fd6176c16ec1acf8ff21d52ef00bb676f440609ae1b31833b3d346e74903dee5ebbb0067dd1067fb161087a7304848d6", 0xbd}, {&(0x7f0000000e80)="5497cedfe2debec7460b56957456a17c387c815e846948ec36749b2d48b8c4f4121305887e106ba9d1b8b74deb235031bc6c461ef113a7acc0caafaa39439d6e2bba7bd282ba406c962ffb90db254b9bb8bf3003164bf61e367b64a6598fa3261c01e7db57aa7e81bb12274bcf71430520229afcf7683b43075a99f68a3ed35d7482f6a34fbda9567ac7a2f013186a5785235295b62e766d5de774f1587ce598435e222d16dd0653f34cac71fb76b6962d9dc98e477d6e70200cdbf231f8a0cb7f78eda7d9420b5b3bfb77e26cf399b7450db931f0d0b6e2534c37a56ece423989a84f72b873a576a80af04ac2efa17d0d1b16c3b66ce6", 0xf7}, {&(0x7f0000000f80)="8e6b95d29e59e73d60c0407f0b1710b348567418c2049f2802819aa11d4947db44b0c87bda67b57a674dc1a824ed7daca9dc38724a62f6acf4e30039cb1c7c5480ae628b48ebc76e38a31642bdf833d1b806f5719c506716fd1c32", 0x5b}], 0x6}}], 0x3, 0x44041)
sendto$inet(r8, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0xfffffffffffffd96)
read$FUSE(r7, &(0x7f0000003040)={0x2020}, 0x2020)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r9 = socket$can_raw(0x1d, 0x3, 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r9, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000002c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18)

6.867605429s ago: executing program 2 (id=1593):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1})
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc)

6.15884275s ago: executing program 1 (id=1595):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffffffffff60, 0x6})

6.144968979s ago: executing program 0 (id=1596):
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
socket(0x1f, 0xa, 0x3a) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) (async)
close_range(0xffffffffffffffff, r4, 0x0) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r6 = dup(r5) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r6, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async)
r7 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r7, 0x0) (async)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00003fe000/0x4000)=nil, 0x4000}, 0x1})
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)

6.021451115s ago: executing program 4 (id=1597):
pipe(&(0x7f0000000040))
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
r0 = socket(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write(r0, &(0x7f0000000100)="240060005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24)

5.820855148s ago: executing program 4 (id=1598):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r3=>0x0)
r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x2658, 0x1)
ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000140))
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
io_submit(r3, 0x6, &(0x7f0000000880)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffb, r5, &(0x7f0000000180), 0x0, 0x5, 0x0, 0x0, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f00000002c0)="0b2d81286eda73f008b0034a52b0cdc96b7de4af2f", 0x15, 0xffff, 0x0, 0x1}, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000000480)="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", 0xfc, 0x7000000000000000, 0x0, 0x0, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x7, 0x97cf, r2, &(0x7f00000005c0)="c2baa20c52103d00d677cdcec0bac54441e2e3f8aa905a16cf022a36656a57feeb2baed817f3181157ec749fbc86b1780bc53a79d1811c55a13ec74bac395d761223b41bf38870fb1587260b211cffdd3826a46c4efee7ba08b700e9b32355e729f321250d08a51735e52bf0538a305d55434c96562d589defac1409a6c88129812e9949d617777a756dd298bc439eb196dbec2862d7e0c103c1e28cb02f48711164840000fc02d162abe28fea73d06120e364023d0fb3c5a4b62cd0eac66764235e0700cdfb6fefc90e09843bd0f3c9dc406deeb27746b3b9999365886d3ca569e0cd", 0xe3, 0x0, 0x0, 0x3, r5}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x7794, r5, &(0x7f0000000780)="be681e43285d7100bf09425f6578f01e0a0a97ce728c6cde222e3a97b36f70ab3f61b5036017c34a043ede6d119e7c456a9290b617d1b167ff68a1445baa01e441522a781dc16a85d2bb082c216947ab2ee1561c131065af0a5cb5fe8f7911fe749d741175171fc75e81c8845c73eb970eefab51f53aa6b50915a42315b893964736f3e6c716b0b9168286022be2fb8c7d956b91bd2ae3eeaba82ccc7dcd18b17ba2", 0xa2, 0x2, 0x0, 0x0, r5}])
recvfrom$inet6(r5, &(0x7f0000000000)=""/50, 0x32, 0x40000002, &(0x7f00000000c0)={0xa, 0x4e20, 0x5, @local, 0x4000000}, 0x1c)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ftruncate(0xffffffffffffffff, 0x200004)
shmdt(0x0)

5.804186616s ago: executing program 5 (id=1599):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f00000005c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="000c1c"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x14, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x7a, &(0x7f00000014c0)=ANY=[@ANYBLOB="aaaaaaaaaaaae462e98700000800458e006c0064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60100007907800e71e420288391a84ed441d2486917d411bdd858b3945eb7b104049c25287cdf6564600b902e2e7d74b3c7698494b8b50fa2b86bdbac1836a70ce2e08de17956124b8260000"], 0x0)

5.746798584s ago: executing program 1 (id=1600):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000300)={0x3, {{0xa, 0x4e23, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}}, 0x0, 0x3, [{{0xa, 0x8001, 0x2, @loopback, 0x30004}}, {{0xa, 0x4e21, 0x6, @loopback, 0x2}}, {{0xa, 0x4e22, 0x73, @local, 0x9}}]}, 0x20c)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = epoll_create1(0x0)
r4 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0)
write$sequencer(r5, &(0x7f0000000080)=[@l={0x92, 0xe, 0xe0, 0x1e, 0x2a, 0xe, 0x8}], 0x8)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)={0x10000001})
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e24, 0x20, @loopback, 0xfffffe01}}}, 0x108)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1})
fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7})
fcntl$lock(r6, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x300})
syz_usb_control_io$printer(r0, 0x0, 0x0)

4.850037126s ago: executing program 0 (id=1601):
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/21, 0x15}, 0x102)
socket(0x1e, 0x805, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000140))
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
setrlimit(0xc, &(0x7f00000022c0)={0xfffffffd, 0x3})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x149a82, 0x38)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f015, 0x4})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

4.526458281s ago: executing program 2 (id=1602):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r1, 0xfffffffc)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x40010, r1, 0x411df000)
r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280040012000500160001000000"], 0x40}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r6 = getpid()
sched_setattr(r6, 0x0, 0x0)
setrlimit(0xf, 0x0)
gettid()
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000040)})
fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r2, 0x0, 0x0)
r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="2b72646d61202d6370757365742000006a3844fc26bd"], 0xe)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d)
syz_emit_ethernet(0x42, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0)

3.972596618s ago: executing program 4 (id=1603):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea)

3.83248553s ago: executing program 0 (id=1604):
openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x420001, 0x112, 0x9}, 0x18)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r0 = dup(0xffffffffffffffff)
listen(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fsopen(&(0x7f0000000000)='smb3\x00', 0x1)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020a00000200000000000000000000001921298ebad97a2d5ffdd885d597e1cf02a28548b6372c9ad9a3fb54187cad61389a9927da888f98d7f036f60267dac9d7457f9ac0d5e6594c311a1f3ed66ee8878cf7e83ebee010a15655f87933169ad0b1a9120cb7be8a06bf4e3aa7c373e00433d7068819b7c9a7000000000000000000000000000000006b06c4fc4c6c1cb0a59dc2b8cf09dbb5436812f2dd36c9172492a1fdee2aa167dc987fdbd25c647b235a85101af3a738d2f182635391cfc106e3cd"], 0x10}}, 0x0)
close(r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x73ed238935396a26, 0xa, 0x0)
r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r4], 0x2b)

3.345502109s ago: executing program 5 (id=1605):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x4244, 0x3ea01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0x4018042)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0)
open$dir(0x0, 0x800, 0x100)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
syz_pidfd_open(0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, 0x0, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x14, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"])
socket$nl_netfilter(0x10, 0x3, 0xc)

3.102811743s ago: executing program 1 (id=1606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)

2.35888756s ago: executing program 1 (id=1607):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000020c0)={0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)

2.249934486s ago: executing program 5 (id=1608):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000e6044d564b"])
io_setup(0x0, &(0x7f0000000000)=<r3=>0x0)
r4 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100), 0x80, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00')
pread64(r5, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009)
io_submit(r3, 0x5, &(0x7f0000000540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3, r2, &(0x7f0000000080)="8a49ee8b4e1df3ed6b65ce493c5b929b5dde5a54f626cfdcc05be4a719e5f08f45c7c104fd297fbb1e51aeb3680092ced8256f7579f0d2288270f0558724801d3c5ad2654a774733bae518d10edee4fc54e943fdfbc966e5522d375c1a2a517d95d4d83b3d6070bc0167ace31d1d68", 0x6f, 0x37a5, 0x0, 0x2, r4}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5042208b90eb3d8, 0x7, r2, &(0x7f00000001c0), 0x0, 0xfffffffffffffffd, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0x3ff, r2, &(0x7f0000000240), 0x0, 0xfffffffffffffff7, 0x0, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x80, r0, &(0x7f00000002c0)="02f3fcbcca710c30f150af8ca4ba207b303808cfd173c1b23266f604e8b5cf87ababc654ecae83b07e137fa556a00a495450b447f72a4d8854e62144bf200bc5b383fd06f33105f9d10f2003d3210a260f4949c3a9a6c8b695e652fbba114525e3a387c5c9c4dbcf8ec77213eb7db23b2e6b4e0502bc4e0dca4ae30595f44746eef6f29964c7e6c81de1f936f8d6c9777b657454baf0246708226182e9e63574737eb90e4d99ad9bc99015d7a9cf9186e8b4c4770426b855ee4e6fe73a56a8e1ab3fd7a8fb95295c5b342b", 0xcb, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x6, 0xffffffffffffffff, &(0x7f0000000400)="e2fa87ccea267469f032a6185a349b352ea9dea2f15555e98b2fcb76a56bfe6c36324eacd4896b5e288a377f5571683ac22057c5f9d2160a2e8226d71e6339488e1698ba33d35e3c4f284d745a4440ab7a869f5e3c447c93fc64e15ec2d9686508c0b2f65d97fa5cdd998c9931a7f5c2b99fa28642f9459219b7b8a6917092b9aa58f96787a9115de6ca228284532dd0b35413f8c37b32d7e134ba0dcecac82d6057b374dda60b3ee93d0d2c367d3cba5b68c50f47d9ff4ae5ac3ec9094a3e9ac42f6a153a31a4d2733f6d5af591", 0xce, 0x0, 0x0, 0x3, r5}])

2.100108369s ago: executing program 4 (id=1609):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}, 0xff00}})

1.952578146s ago: executing program 1 (id=1610):
r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157)
syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) (fail_nth: 3)

1.849348341s ago: executing program 4 (id=1611):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000002c0)={{0xa, 0x4e22, 0x1, @remote, 0x4}, {0xa, 0x4e24, 0x1, @remote, 0x9}, 0x1, {[0x0, 0x7, 0x800, 0xa48, 0x6, 0x2bd9c7fe, 0x5, 0x2]}}, 0x5c)
socket$kcm(0x10, 0x2, 0x4)
openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000240)={'gre0\x00', <r2=>0x0, 0x80, 0x4, 0x0, 0x4, {{0xd, 0x4, 0x0, 0x35, 0x34, 0x64, 0x0, 0x1, 0x29, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x7, 0xaf, [@remote]}, @ssrr={0x89, 0x13, 0xe5, [@loopback, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, @end, @noop, @end]}}}}})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x1, r2}, 0xc)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xd, 0x3})
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f00000000c0)={'vlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x25, 0x0, 0x0, 0xfff6, 0x0, 0x0, 0x0, 0xf, 0x6, 0x1, 0x0, 0x0, 0x2, 0x0, 0x44, 0xfffffffc, [0x0, 0x1]}})

1.791310019s ago: executing program 0 (id=1612):
r0 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1000}, 0xc)

1.583748095s ago: executing program 5 (id=1613):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a80)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x4003, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x7, 0x1, 0x6}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/21, 0x15, 0x1, 0x27}, @fda={0x66646185, 0x6, 0x0, 0x3}}, &(0x7f0000000300)={0x0, 0x1c, 0x44}}, 0x40}], 0x1, 0x0, &(0x7f00000001c0)="a1"})
syz_clone(0x300d000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unshare(0x5a070880)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x40, 0x42, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x146}, @nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x11f, 0x0, 0x1, [@typed={0x4, 0xcf}, @typed={0x8, 0xf3, 0x0, 0x0, @fd=r4}, @nested={0x14, 0x90, 0x0, 0x1, [@nested={0x4, 0x5f}, @typed={0x9, 0xaa, 0x0, 0x0, @binary="48d21a5510"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048808}, 0xc000)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x22c, 0x0, 0xa, 0x148, 0x100, 0x60, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00'}, 0x0, 0x94, 0x100, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x24}, {0xc}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x20, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x288)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x7, 0x0, 0x3}, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000480))
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = getpid()
write$FUSE_STATX(0xffffffffffffffff, &(0x7f0000000600)={0x130, 0xffffffffffffffda, 0x0, {0x870, 0x3, 0x0, '\x00', {0x4000, 0x9, 0xfffffffffffffff7, 0x90e, 0x0, 0x0, 0x8000, '\x00', 0xffff, 0x81, 0x2, 0x3, {0x9, 0x8}, {0x5987000, 0x81ff}, {0xfffffffffffffffc, 0x2}, {0x3, 0x100}, 0x7, 0x80, 0x1b76, 0x400}}}, 0x130)
process_vm_readv(r6, &(0x7f0000008400), 0x0, &(0x7f0000008640)=[{&(0x7f0000000400)=""/104, 0x68}], 0x1, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, 0x0)

1.036539939s ago: executing program 0 (id=1614):
recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/21, 0x15}, 0x102)
socket(0x1e, 0x805, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020}, 0x2020)
syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f00000001c0))
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000000), &(0x7f0000000140))
r1 = dup(0xffffffffffffffff)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
setrlimit(0xc, &(0x7f00000022c0)={0xfffffffd, 0x3})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/image_size', 0x149a82, 0x38)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4541b6bf, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f015, 0x4})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4)
bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4)
recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)

877.481086ms ago: executing program 2 (id=1615):
r0 = socket$tipc(0x1e, 0x2, 0x0)
unshare(0x22020400)
bind$tipc(r0, 0x0, 0x0)
r1 = gettid()
io_setup(0xf2, &(0x7f0000000000)=<r2=>0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = dup(r3)
syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r4}, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1})
r7 = eventfd2(0x7, 0x80000)
rt_tgsigqueueinfo(r1, r1, 0x3b, &(0x7f00000190c0)={0xd, 0x9, 0xffffffff})
r8 = socket(0xa, 0x3, 0x3a)
getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f0000019180)={<r9=>0x0, @broadcast, @empty}, &(0x7f00000191c0)=0xc)
sendmsg$nl_route(r3, &(0x7f00000192c0)={&(0x7f0000019140)={0x10, 0x0, 0x0, 0x2b802004}, 0xc, &(0x7f0000019280)={&(0x7f0000019200)=@bridge_getlink={0x48, 0x12, 0x800, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r9, 0x11085, 0x2}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x20}, @IFLA_MAP={0x20, 0xe, {0xb, 0x0, 0x18, 0x3, 0x0, 0xc0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x20001090)
setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT6_DONE(r8, 0x29, 0xc9, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')
r11 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r11, &(0x7f00000006c0)={0x10, 0x0, 0x25dfdbfb, 0x80}, 0xc)
pread64(r10, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
syz_io_uring_setup(0x24f7, &(0x7f00000002c0)={0x0, 0xcb3d, 0x8000, 0x100000, 0x0, 0x0, r10}, &(0x7f0000000240), &(0x7f0000019080)=<r12=>0x0)
io_submit(r2, 0x3, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x5, r0, &(0x7f00000000c0)="37275fec4b908a5b2caf4ffa5c9d87a781bbae0d4c835334487aecd567bf5ab8360be8220193c0009911143c4c5bf7b2dfdd79565e84aacf109099309d09d9b8698c3e7390cfafd84d30a50ac7406c099e8a1f4e5e", 0x55, 0x4f9, 0x0, 0x0, r4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000180)="0f23a5f267aa8a8579cf5929fe5e2e94860972fc4521f6a24f3454b1ece9fc8e23d5ebaa5340c6fe410fe9efcb6a047d59b85d746914c9097bf0d75b2a06321a08f99d5d4ca5da69c62c83407d4e25df9b32bf3ab06e7c59b5acbf5d48caf39aa610230b5f880b38f0ef68b5514a79c8fa56f9fdeed0390a4f03cfab0406d47ec91f1d24c61ddcc3b042883bd84690f2b636ec5fcc9562a1", 0x98, 0x3, 0x0, 0x0, r7}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r8, &(0x7f0000000280)="887c4a09f6e8f0d1c30f4874ec43f6b0766227e1ad2e639a7311dbdefcd5bf173f7206a383686badaff315f4cd3e570ebfb25823304b4d973712d40a3a53273a3b3e990a9844e72f128c0a2f6ee99ca9cac8d89c2f522a3b14904a1e183f98b8cecf8b6dd1c144e8a43d8b50bd0abdf349d78bc5388ed8e55c359ef38d29bd681eb4ea8bc3fa00922e54aba99f78723f7b35", 0x92, 0x7, 0x0, 0x1, r10}])
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r12, @ANYRESOCT=r0], 0x0)

421.101709ms ago: executing program 1 (id=1616):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'veth0_to_bridge\x00', <r3=>0x0})
r4 = openat$vimc2(0xffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000007840)={0x5})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003000000000904020000ff4f9b000904b000003a3846000904", @ANYRES8=r5, @ANYRES32], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)
syz_open_dev$dri(0x0, 0xfffffffd, 0x8001)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000001c0))
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0x10000, 0xd, 0x0, "fcca965aba1f2cb50329975530ef853144313cc6954ac731a9fbb91ef55f684b", 0x50565559})
bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
r8 = accept4(r6, 0x0, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="0c00000000000000030001c0"])
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4)
sendmmsg$unix(r8, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0xfffffdef}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0xeffd)
bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r3, 0x1, {0x0, 0xff, 0x2}, 0x2}, 0x18)

26.449252ms ago: executing program 0 (id=1617):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket(0x10, 0x80002, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802f"], 0x1c}], 0x1}, 0x310)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00')
preadv(r3, &(0x7f0000004300)=[{&(0x7f0000000040)=""/130, 0x82}], 0x1, 0x78, 0xc)

0s ago: executing program 5 (id=1618):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300))
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
fanotify_init(0x10, 0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x115440)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={<r4=>0x0}, &(0x7f00000001c0)=0xffffffffffffffe7)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r4)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x1, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffd7c)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(hmac(sha256))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x2f)
accept4(r6, 0x0, 0x0, 0x80000)

kernel console output (not intermixed with test programs):

535.688094][   T30] audit: type=1326 audit(1760948762.060:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  535.762302][   T30] audit: type=1326 audit(1760948762.070:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703d539 code=0x7ffc0000
[  535.872841][T10784] binder: 10780:10784 ioctl 4018620d 0 returned -22
[  535.888618][T10784] binder: 10780:10784 ioctl c0306201 80000080 returned -14
[  535.949881][   T30] audit: type=1326 audit(1760948762.070:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  536.498204][T10786] FAULT_INJECTION: forcing a failure.
[  536.498204][T10786] name failslab, interval 1, probability 0, space 0, times 0
[  536.727192][   T30] audit: type=1326 audit(1760948762.070:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000
[  536.777157][   T30] audit: type=1326 audit(1760948762.070:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  536.821082][T10786] CPU: 0 UID: 0 PID: 10786 Comm: syz.0.1315 Not tainted syzkaller #0 PREEMPT(full) 
[  536.821106][T10786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  536.821117][T10786] Call Trace:
[  536.821123][T10786]  <TASK>
[  536.821131][T10786]  dump_stack_lvl+0x189/0x250
[  536.821152][T10786]  ? __pfx____ratelimit+0x10/0x10
[  536.821185][T10786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  536.821200][T10786]  ? __pfx__printk+0x10/0x10
[  536.821220][T10786]  ? __pfx___might_resched+0x10/0x10
[  536.821247][T10786]  ? fs_reclaim_acquire+0x7d/0x100
[  536.821269][T10786]  should_fail_ex+0x414/0x560
[  536.821298][T10786]  should_failslab+0xa8/0x100
[  536.821319][T10786]  __kmalloc_noprof+0xcb/0x7f0
[  536.821335][T10786]  ? tomoyo_encode+0x28b/0x550
[  536.821358][T10786]  tomoyo_encode+0x28b/0x550
[  536.821380][T10786]  tomoyo_realpath_from_path+0x58d/0x5d0
[  536.821399][T10786]  ? tomoyo_domain+0xd9/0x130
[  536.821422][T10786]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  536.821446][T10786]  tomoyo_path_number_perm+0x1e8/0x5a0
[  536.821472][T10786]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  536.821509][T10786]  ? __lock_acquire+0xab9/0xd20
[  536.821543][T10786]  ? __fget_files+0x2a/0x420
[  536.821573][T10786]  ? __fget_files+0x3a0/0x420
[  536.821597][T10786]  ? __fget_files+0x2a/0x420
[  536.821634][T10786]  security_file_ioctl_compat+0xcb/0x2d0
[  536.821668][T10786]  __ia32_compat_sys_ioctl+0x128/0x840
[  536.821694][T10786]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  536.821717][T10786]  ? __fget_files+0x3a0/0x420
[  536.821751][T10786]  ? fput+0xa0/0xd0
[  536.821781][T10786]  ? ksys_write+0x22a/0x250
[  536.821801][T10786]  ? exc_page_fault+0x82/0x100
[  536.821824][T10786]  ? __pfx_ksys_write+0x10/0x10
[  536.821850][T10786]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  536.821874][T10786]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.821901][T10786]  __do_fast_syscall_32+0xb6/0x2b0
[  536.821926][T10786]  ? lockdep_hardirqs_on+0x9c/0x150
[  536.821953][T10786]  do_fast_syscall_32+0x34/0x80
[  536.821976][T10786]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  536.822003][T10786] RIP: 0023:0xf7f71539
[  536.822021][T10786] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  536.822040][T10786] RSP: 002b:00000000f546655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  536.822063][T10786] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80
[  536.822077][T10786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  536.822089][T10786] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  536.822101][T10786] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  536.822113][T10786] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  536.822145][T10786]  </TASK>
[  537.104847][   T30] audit: type=1326 audit(1760948762.070:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf703d539 code=0x7ffc0000
[  537.127401][   T30] audit: type=1326 audit(1760948762.080:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  537.149748][   T30] audit: type=1326 audit(1760948762.080:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000
[  537.171994][   T30] audit: type=1326 audit(1760948762.080:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.5.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  537.468604][T10786] ERROR: Out of memory at tomoyo_realpath_from_path.
[  538.206544][T10797] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  538.578196][   T44] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  538.767141][   T44] usb 2-1: Using ep0 maxpacket: 32
[  538.802919][   T44] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  538.817122][   T44] usb 2-1: config 0 has no interface number 0
[  538.834610][T10805] xt_CT: You must specify a L4 protocol and not use inversions on it
[  538.837216][   T44] usb 2-1: config 0 interface 12 has no altsetting 0
[  538.856575][T10807] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1322'.
[  538.919261][   T44] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  538.931547][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.962280][   T44] usb 2-1: Product: syz
[  538.966511][   T44] usb 2-1: Manufacturer: syz
[  538.981640][   T44] usb 2-1: SerialNumber: syz
[  539.043276][   T44] usb 2-1: config 0 descriptor??
[  539.182536][T10811] IPVS: length: 4096 != 24
[  539.457104][ T5955] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  539.677073][ T5955] usb 3-1: Using ep0 maxpacket: 32
[  539.693266][ T5955] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  539.701831][ T5955] usb 3-1: config 0 has no interface number 0
[  539.730222][ T5955] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  539.753278][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.795724][ T5955] usb 3-1: Product: syz
[  539.812427][ T5955] usb 3-1: Manufacturer: syz
[  539.832903][ T5955] usb 3-1: SerialNumber: syz
[  539.860675][ T5955] usb 3-1: config 0 descriptor??
[  540.084666][ T5955] radio-si470x 3-1:0.35: this is not a si470x device.
[  540.143380][ T5955] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  540.154765][ T5955] usb 3-1: USB disconnect, device number 66
[  540.324150][   T44] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  540.331788][   T44] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  540.349966][   T44] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  540.376744][   T44] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  540.416769][   T44] usb 2-1: USB disconnect, device number 69
[  540.711099][T10827] FAULT_INJECTION: forcing a failure.
[  540.711099][T10827] name failslab, interval 1, probability 0, space 0, times 0
[  540.724884][T10827] CPU: 0 UID: 0 PID: 10827 Comm: syz.5.1328 Not tainted syzkaller #0 PREEMPT(full) 
[  540.724913][T10827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  540.724926][T10827] Call Trace:
[  540.724935][T10827]  <TASK>
[  540.724944][T10827]  dump_stack_lvl+0x189/0x250
[  540.724971][T10827]  ? __pfx____ratelimit+0x10/0x10
[  540.725004][T10827]  ? __pfx_dump_stack_lvl+0x10/0x10
[  540.725025][T10827]  ? __pfx__printk+0x10/0x10
[  540.725051][T10827]  ? __pfx___might_resched+0x10/0x10
[  540.725079][T10827]  ? fs_reclaim_acquire+0x7d/0x100
[  540.725109][T10827]  should_fail_ex+0x414/0x560
[  540.725149][T10827]  should_failslab+0xa8/0x100
[  540.725178][T10827]  kmem_cache_alloc_node_noprof+0x77/0x710
[  540.725201][T10827]  ? __alloc_skb+0x112/0x2d0
[  540.725231][T10827]  ? netlink_autobind+0xdb/0x300
[  540.725267][T10827]  __alloc_skb+0x112/0x2d0
[  540.725300][T10827]  netlink_sendmsg+0x5c6/0xb30
[  540.725339][T10827]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.725371][T10827]  ? __import_iovec+0x5d4/0x7f0
[  540.725397][T10827]  ? aa_sock_msg_perm+0xf1/0x1d0
[  540.725423][T10827]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  540.725449][T10827]  ? __pfx_netlink_sendmsg+0x10/0x10
[  540.725482][T10827]  __sock_sendmsg+0x21c/0x270
[  540.725511][T10827]  ____sys_sendmsg+0x52d/0x830
[  540.725537][T10827]  ? __pfx_____sys_sendmsg+0x10/0x10
[  540.725576][T10827]  ___sys_sendmsg+0x21f/0x2a0
[  540.725599][T10827]  ? __pfx____sys_sendmsg+0x10/0x10
[  540.725620][T10827]  ? __lock_acquire+0xab9/0xd20
[  540.725681][T10827]  ? __fget_files+0x2a/0x420
[  540.725706][T10827]  ? __fget_files+0x3a0/0x420
[  540.725741][T10827]  __sys_sendmmsg+0x28e/0x430
[  540.725767][T10827]  ? __pfx___sys_sendmmsg+0x10/0x10
[  540.725786][T10827]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  540.725837][T10827]  ? ksys_write+0x22a/0x250
[  540.725862][T10827]  ? exc_page_fault+0x82/0x100
[  540.725890][T10827]  ? __pfx_ksys_write+0x10/0x10
[  540.725919][T10827]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  540.725954][T10827]  __do_fast_syscall_32+0xb6/0x2b0
[  540.725978][T10827]  ? lockdep_hardirqs_on+0x9c/0x150
[  540.726004][T10827]  do_fast_syscall_32+0x34/0x80
[  540.726026][T10827]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  540.726052][T10827] RIP: 0023:0xf703d539
[  540.726070][T10827] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  540.726088][T10827] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  540.726110][T10827] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  540.726125][T10827] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000
[  540.726138][T10827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  540.726150][T10827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  540.726162][T10827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  540.726192][T10827]  </TASK>
[  541.369199][   T44] hid_parser_main: 218 callbacks suppressed
[  541.369223][   T44] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  541.447431][   T44] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  541.651769][T10833] C: renamed from team_slave_0 (while UP)
[  541.685450][T10833] netlink: 'syz.2.1330': attribute type 1 has an invalid length.
[  541.707083][T10833] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1330'.
[  541.717588][T10833] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  542.408355][T10858] pimreg1: tun_chr_ioctl cmd 1074025673
[  542.432057][T10858] pimreg1: tun_chr_ioctl cmd 1074025677
[  542.467740][T10858] pimreg1: linktype set to 804
[  542.547116][  T938] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  542.587162][   T44] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  542.727177][  T938] usb 6-1: config 0 has an invalid interface number: 113 but max is 0
[  542.735641][  T938] usb 6-1: config 0 has no interface number 0
[  542.742806][  T938] usb 6-1: config 0 interface 113 has no altsetting 0
[  542.776037][   T44] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  542.787487][   T44] usb 3-1: config 0 has no interface number 0
[  542.795610][   T44] usb 3-1: config 0 interface 113 has no altsetting 0
[  542.797331][  T938] usb 6-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  542.822833][  T938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.867972][   T44] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  542.868786][  T938] usb 6-1: Product: syz
[  542.886116][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.899802][  T938] usb 6-1: Manufacturer: syz
[  542.917040][  T938] usb 6-1: SerialNumber: syz
[  542.919692][   T44] usb 3-1: Product: syz
[  542.956487][  T938] usb 6-1: config 0 descriptor??
[  542.962288][   T44] usb 3-1: Manufacturer: syz
[  542.977099][   T44] usb 3-1: SerialNumber: syz
[  542.994031][  T938] pn533_usb 6-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  543.003571][   T44] usb 3-1: config 0 descriptor??
[  543.029993][T10869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1342'.
[  543.031123][   T44] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  543.069667][T10869] netlink: 'syz.1.1342': attribute type 1 has an invalid length.
[  545.013529][   T30] kauditd_printk_skb: 58 callbacks suppressed
[  545.013552][   T30] audit: type=1326 audit(1760948771.490:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.086704][   T30] audit: type=1326 audit(1760948771.490:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.196386][   T30] audit: type=1326 audit(1760948771.490:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.246310][   T30] audit: type=1326 audit(1760948771.490:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.282452][   T30] audit: type=1326 audit(1760948771.490:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.460371][T10889] netlink: 'syz.1.1347': attribute type 4 has an invalid length.
[  545.477361][   T30] audit: type=1326 audit(1760948771.490:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.501306][   T30] audit: type=1326 audit(1760948771.490:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.527254][   T30] audit: type=1326 audit(1760948771.490:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.565647][   T30] audit: type=1326 audit(1760948771.490:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.594091][   T30] audit: type=1326 audit(1760948771.490:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10880 comm="syz.4.1346" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  545.630625][T10890] netlink: 'syz.1.1347': attribute type 4 has an invalid length.
[  545.796773][T10889] fuse: Bad value for 'group_id'
[  545.801897][T10889] fuse: Bad value for 'group_id'
[  546.683244][ T5828] usb 6-1: USB disconnect, device number 11
[  546.927762][ T5828] usb 3-1: USB disconnect, device number 67
[  547.043361][T10898] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  547.070346][T10898] fuse: Bad value for 'fd'
[  547.413825][T10909] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  547.446879][T10909] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  547.484207][T10909] openvswitch: netlink: IP tunnel TTL not specified.
[  547.516591][T10914] binder: 10906:10914 ioctl 4018620d 0 returned -22
[  547.527741][T10914] binder: 10906:10914 ioctl c0306201 80000080 returned -14
[  548.570402][T10923] FAULT_INJECTION: forcing a failure.
[  548.570402][T10923] name failslab, interval 1, probability 0, space 0, times 0
[  548.625417][T10923] CPU: 0 UID: 0 PID: 10923 Comm: syz.5.1357 Not tainted syzkaller #0 PREEMPT(full) 
[  548.625448][T10923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  548.625462][T10923] Call Trace:
[  548.625473][T10923]  <TASK>
[  548.625481][T10923]  dump_stack_lvl+0x189/0x250
[  548.625502][T10923]  ? __pfx____ratelimit+0x10/0x10
[  548.625527][T10923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.625543][T10923]  ? __pfx__printk+0x10/0x10
[  548.625562][T10923]  ? __pfx___might_resched+0x10/0x10
[  548.625582][T10923]  ? fs_reclaim_acquire+0x7d/0x100
[  548.625604][T10923]  should_fail_ex+0x414/0x560
[  548.625631][T10923]  should_failslab+0xa8/0x100
[  548.625653][T10923]  kmem_cache_alloc_node_noprof+0x77/0x710
[  548.625669][T10923]  ? __alloc_skb+0x112/0x2d0
[  548.625691][T10923]  ? netlink_autobind+0xdb/0x300
[  548.625717][T10923]  __alloc_skb+0x112/0x2d0
[  548.625741][T10923]  netlink_sendmsg+0x5c6/0xb30
[  548.625771][T10923]  ? __pfx_netlink_sendmsg+0x10/0x10
[  548.625795][T10923]  ? __import_iovec+0x5d4/0x7f0
[  548.625813][T10923]  ? aa_sock_msg_perm+0xf1/0x1d0
[  548.625840][T10923]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  548.625860][T10923]  ? __pfx_netlink_sendmsg+0x10/0x10
[  548.625883][T10923]  __sock_sendmsg+0x21c/0x270
[  548.625904][T10923]  ____sys_sendmsg+0x505/0x830
[  548.625922][T10923]  ? __pfx_____sys_sendmsg+0x10/0x10
[  548.625949][T10923]  ___sys_sendmsg+0x21f/0x2a0
[  548.625965][T10923]  ? __pfx____sys_sendmsg+0x10/0x10
[  548.626004][T10923]  ? __fget_files+0x2a/0x420
[  548.626022][T10923]  ? __fget_files+0x3a0/0x420
[  548.626048][T10923]  __sys_sendmsg+0x164/0x220
[  548.626063][T10923]  ? __pfx___sys_sendmsg+0x10/0x10
[  548.626086][T10923]  ? __pfx_ksys_write+0x10/0x10
[  548.626105][T10923]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  548.626123][T10923]  ? lockdep_hardirqs_on+0x9c/0x150
[  548.626140][T10923]  __do_fast_syscall_32+0xb6/0x2b0
[  548.626157][T10923]  ? lockdep_hardirqs_on+0x9c/0x150
[  548.626175][T10923]  do_fast_syscall_32+0x34/0x80
[  548.626191][T10923]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  548.626210][T10923] RIP: 0023:0xf703d539
[  548.626223][T10923] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  548.626236][T10923] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  548.626252][T10923] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200
[  548.626262][T10923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  548.626271][T10923] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  548.626280][T10923] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  548.626288][T10923] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  548.626310][T10923]  </TASK>
[  549.629961][T10927] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1358'.
[  549.857354][  T916] usb 2-1: new full-speed USB device number 70 using dummy_hcd
[  550.048793][  T916] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  550.059497][  T916] usb 2-1: config 0 has no interface number 0
[  550.097061][  T916] usb 2-1: config 0 interface 113 has no altsetting 0
[  550.156141][  T916] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  550.166204][  T916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.206524][  T916] usb 2-1: Product: syz
[  550.207829][T10939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1361'.
[  550.216562][  T916] usb 2-1: Manufacturer: syz
[  550.237581][  T916] usb 2-1: SerialNumber: syz
[  550.244687][  T916] usb 2-1: config 0 descriptor??
[  550.274095][  T916] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  550.373739][T10939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1361'.
[  551.363636][T10947] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1363'.
[  552.002586][T10953] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  552.276221][T10958] IPVS: length: 4096 != 24
[  552.356225][ T5955] usb 2-1: USB disconnect, device number 70
[  552.765396][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  552.765415][   T30] audit: type=1326 audit(1760948779.410:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  552.796926][  T916] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  552.827363][   T30] audit: type=1326 audit(1760948779.450:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  552.851094][   T30] audit: type=1326 audit(1760948779.450:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706d539 code=0x7ffc0000
[  552.932119][   T30] audit: type=1326 audit(1760948779.450:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  552.957190][  T916] usb 3-1: device descriptor read/64, error -71
[  552.977470][ T5828] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  553.069011][   T30] audit: type=1326 audit(1760948779.460:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.140875][T10975] tipc: Started in network mode
[  553.157647][ T5828] usb 1-1: Using ep0 maxpacket: 16
[  553.174261][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.212490][  T916] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  553.221194][T10975] tipc: Node identity 924f921a410a, cluster identity 4711
[  553.224051][ T5828] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  553.247252][   T30] audit: type=1326 audit(1760948779.460:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.293518][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.306640][T10975] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  553.317753][ T5828] usb 1-1: config 0 descriptor??
[  553.326145][   T30] audit: type=1326 audit(1760948779.460:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.397520][T10976] syzkaller0: entered promiscuous mode
[  553.430186][  T916] usb 3-1: device descriptor read/64, error -71
[  553.465770][T10976] syzkaller0: entered allmulticast mode
[  553.477406][T10979] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  553.490208][   T30] audit: type=1326 audit(1760948779.460:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.514073][T10978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  553.530519][   T30] audit: type=1326 audit(1760948779.460:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.554416][  T916] usb usb3-port1: attempt power cycle
[  553.585161][T10975] tipc: Resetting bearer <eth:syzkaller0>
[  553.591954][   T30] audit: type=1326 audit(1760948779.460:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10966 comm="syz.1.1371" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  553.626032][T10974] tipc: Resetting bearer <eth:syzkaller0>
[  553.665601][T10974] tipc: Disabling bearer <eth:syzkaller0>
[  553.826259][ T5828] usbhid 1-1:0.0: can't add hid device: -71
[  553.868328][ T5828] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  553.907117][  T916] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  553.915082][ T5828] usb 1-1: USB disconnect, device number 69
[  553.937933][  T916] usb 3-1: device descriptor read/8, error -71
[  554.022801][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'.
[  554.069337][T10990] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1376'.
[  554.187153][  T916] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  554.228459][  T916] usb 3-1: device descriptor read/8, error -71
[  554.349057][  T916] usb usb3-port1: unable to enumerate USB device
[  554.677092][  T916] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  555.249432][T11004] futex_wake_op: syz.5.1380 tries to shift op by 32; fix this program
[  555.928078][ T5912] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  556.114298][ T5912] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  556.125790][ T5912] usb 5-1: config 0 has no interface number 0
[  556.137701][ T5912] usb 5-1: config 0 interface 113 has no altsetting 0
[  556.180417][ T5912] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  556.190050][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.199780][ T5912] usb 5-1: Product: syz
[  556.204120][ T5912] usb 5-1: Manufacturer: syz
[  556.209498][ T5912] usb 5-1: SerialNumber: syz
[  556.225453][ T5912] usb 5-1: config 0 descriptor??
[  556.259964][ T5912] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  556.696881][T11014] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1382'.
[  557.353035][  T916] usb 1-1: unable to get BOS descriptor or descriptor too short
[  557.391598][  T916] usb 1-1: unable to read config index 0 descriptor/start: -71
[  557.419506][  T916] usb 1-1: can't read configurations, error -71
[  557.794565][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  557.794586][   T30] audit: type=1326 audit(1760948784.440:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  557.876533][   T30] audit: type=1326 audit(1760948784.440:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.0.1388" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  557.898795][    C1] vkms_vblank_simulate: vblank timer overrun
[  558.287525][   T30] audit: type=1326 audit(1760948784.880:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  558.497280][   T30] audit: type=1326 audit(1760948784.880:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=165 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  558.647287][   T30] audit: type=1326 audit(1760948784.880:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  558.787262][   T30] audit: type=1326 audit(1760948784.880:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  558.815915][  T916] usb 5-1: USB disconnect, device number 72
[  558.870293][   T30] audit: type=1326 audit(1760948784.880:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  559.177440][   T30] audit: type=1326 audit(1760948784.880:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  559.487153][   T30] audit: type=1326 audit(1760948784.880:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  559.561269][   T30] audit: type=1326 audit(1760948784.880:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11036 comm="syz.2.1389" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  559.957151][ T5912] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  560.260528][ T5912] usb 5-1: device descriptor read/64, error -71
[  560.507082][ T5912] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  560.567619][  T938] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  560.678575][T11061] binder: 11058:11061 ioctl 4018620d 0 returned -22
[  560.688233][ T5912] usb 5-1: device descriptor read/64, error -71
[  560.688731][T11061] binder: 11058:11061 ioctl c0306201 80000080 returned -14
[  560.800231][  T938] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  560.809872][ T5912] usb usb5-port1: attempt power cycle
[  560.816620][  T938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.835424][  T938] usb 1-1: Product: syz
[  560.884341][  T938] usb 1-1: Manufacturer: syz
[  560.900036][  T938] usb 1-1: SerialNumber: syz
[  560.919865][  T938] usb 1-1: config 0 descriptor??
[  561.073528][T11064] IPVS: sh: FWM 3 0x00000003 - no destination available
[  561.101565][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'.
[  561.152690][  T938] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  561.161567][ T5912] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  561.188099][ T5912] usb 5-1: device descriptor read/8, error -71
[  561.362279][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1401'.
[  561.389909][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'.
[  561.600635][ T5912] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  561.637897][ T5912] usb 5-1: device descriptor read/8, error -71
[  561.747707][ T5912] usb usb5-port1: unable to enumerate USB device
[  562.118694][T11077] syzkaller0: entered promiscuous mode
[  562.124302][T11077] syzkaller0: entered allmulticast mode
[  562.270755][T11079] trusted_key: syz.5.1405 sent an empty control message without MSG_MORE.
[  562.284750][T11079] FAULT_INJECTION: forcing a failure.
[  562.284750][T11079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  562.298456][T11079] CPU: 1 UID: 0 PID: 11079 Comm: syz.5.1405 Not tainted syzkaller #0 PREEMPT(full) 
[  562.298484][T11079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  562.298498][T11079] Call Trace:
[  562.298507][T11079]  <TASK>
[  562.298517][T11079]  dump_stack_lvl+0x189/0x250
[  562.298544][T11079]  ? __pfx____ratelimit+0x10/0x10
[  562.298580][T11079]  ? __pfx_dump_stack_lvl+0x10/0x10
[  562.298602][T11079]  ? __pfx__printk+0x10/0x10
[  562.298638][T11079]  should_fail_ex+0x414/0x560
[  562.298677][T11079]  _copy_to_user+0x31/0xb0
[  562.298707][T11079]  simple_read_from_buffer+0xe1/0x170
[  562.298733][T11079]  proc_fail_nth_read+0x1b3/0x220
[  562.298770][T11079]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  562.298807][T11079]  ? rw_verify_area+0x2a6/0x4d0
[  562.298827][T11079]  ? __lock_acquire+0xab9/0xd20
[  562.298852][T11079]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  562.298887][T11079]  vfs_read+0x200/0xa30
[  562.298909][T11079]  ? fdget_pos+0x247/0x320
[  562.298939][T11079]  ? __pfx___mutex_lock+0x10/0x10
[  562.298963][T11079]  ? __pfx_vfs_read+0x10/0x10
[  562.298987][T11079]  ? __fget_files+0x2a/0x420
[  562.299018][T11079]  ? __fget_files+0x3a0/0x420
[  562.299044][T11079]  ? __fget_files+0x2a/0x420
[  562.299080][T11079]  ksys_read+0x145/0x250
[  562.299101][T11079]  ? exc_page_fault+0x82/0x100
[  562.299123][T11079]  ? __pfx_ksys_read+0x10/0x10
[  562.299149][T11079]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  562.299174][T11079]  ? lockdep_hardirqs_on+0x9c/0x150
[  562.299199][T11079]  __do_fast_syscall_32+0xb6/0x2b0
[  562.299222][T11079]  ? lockdep_hardirqs_on+0x9c/0x150
[  562.299249][T11079]  do_fast_syscall_32+0x34/0x80
[  562.299272][T11079]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  562.299297][T11079] RIP: 0023:0xf703d539
[  562.299315][T11079] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  562.299334][T11079] RSP: 002b:00000000f542d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  562.299354][T11079] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d620
[  562.299369][T11079] RDX: 000000000000000f RSI: 00000000f73d5ff4 RDI: 0000000000000000
[  562.299381][T11079] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  562.299392][T11079] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  562.299404][T11079] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  562.299438][T11079]  </TASK>
[  562.552517][ T5939] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  562.733235][ T5939] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  562.742167][ T5939] usb 3-1: config 1 has no interface number 0
[  562.748443][ T5939] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32
[  562.758349][ T5939] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8
[  562.768153][ T5939] usb 3-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  562.786728][ T5939] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  562.796871][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.806253][ T5939] usb 3-1: Product: syz
[  562.810551][ T5939] usb 3-1: Manufacturer: syz
[  562.815201][ T5939] usb 3-1: SerialNumber: syz
[  562.825364][T11075] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  562.853490][T11075] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  562.888162][ T5939] usb 3-1: Expected 3 endpoints, found: 2
[  563.000179][T11091] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1407'.
[  563.100655][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1403'.
[  563.113440][ T5934] usb 3-1: USB disconnect, device number 72
[  563.187152][  T938] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  563.199726][  T938] usb 1-1: USB disconnect, device number 72
[  563.267112][ T5912] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  563.427171][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  563.434330][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  563.450721][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  563.471873][ T5912] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  563.481621][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.490121][ T5912] usb 2-1: Product: syz
[  563.494467][ T5912] usb 2-1: Manufacturer: syz
[  563.505709][ T5912] usb 2-1: SerialNumber: syz
[  563.514190][ T5912] usb 2-1: config 0 descriptor??
[  563.523747][ T5912] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  563.533713][ T5912] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  563.940854][T11098] FAULT_INJECTION: forcing a failure.
[  563.940854][T11098] name failslab, interval 1, probability 0, space 0, times 0
[  564.053083][T11098] CPU: 1 UID: 0 PID: 11098 Comm: syz.4.1412 Not tainted syzkaller #0 PREEMPT(full) 
[  564.053116][T11098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  564.053131][T11098] Call Trace:
[  564.053140][T11098]  <TASK>
[  564.053150][T11098]  dump_stack_lvl+0x189/0x250
[  564.053180][T11098]  ? __pfx____ratelimit+0x10/0x10
[  564.053214][T11098]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.053237][T11098]  ? __pfx__printk+0x10/0x10
[  564.053265][T11098]  ? __pfx___might_resched+0x10/0x10
[  564.053294][T11098]  ? fs_reclaim_acquire+0x7d/0x100
[  564.053335][T11098]  should_fail_ex+0x414/0x560
[  564.053374][T11098]  should_failslab+0xa8/0x100
[  564.053404][T11098]  kmem_cache_alloc_node_noprof+0x77/0x710
[  564.053428][T11098]  ? __alloc_skb+0x112/0x2d0
[  564.053466][T11098]  __alloc_skb+0x112/0x2d0
[  564.053500][T11098]  netlink_sendmsg+0x5c6/0xb30
[  564.053543][T11098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.053578][T11098]  ? __import_iovec+0x5d4/0x7f0
[  564.053605][T11098]  ? aa_sock_msg_perm+0xf1/0x1d0
[  564.053631][T11098]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  564.053659][T11098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  564.053691][T11098]  __sock_sendmsg+0x21c/0x270
[  564.053721][T11098]  ____sys_sendmsg+0x505/0x830
[  564.053748][T11098]  ? __pfx_____sys_sendmsg+0x10/0x10
[  564.053786][T11098]  ___sys_sendmsg+0x21f/0x2a0
[  564.053810][T11098]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.053874][T11098]  ? __fget_files+0x2a/0x420
[  564.053900][T11098]  ? __fget_files+0x3a0/0x420
[  564.053935][T11098]  __sys_sendmsg+0x164/0x220
[  564.053958][T11098]  ? __pfx___sys_sendmsg+0x10/0x10
[  564.053989][T11098]  ? __pfx_ksys_write+0x10/0x10
[  564.054016][T11098]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  564.054042][T11098]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.054067][T11098]  __do_fast_syscall_32+0xb6/0x2b0
[  564.054092][T11098]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.054118][T11098]  do_fast_syscall_32+0x34/0x80
[  564.054142][T11098]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  564.054168][T11098] RIP: 0023:0xf70bd539
[  564.054187][T11098] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  564.054204][T11098] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  564.054228][T11098] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000
[  564.054243][T11098] RDX: 0000000004000010 RSI: 0000000000000000 RDI: 0000000000000000
[  564.054256][T11098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  564.054268][T11098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  564.054281][T11098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  564.054320][T11098]  </TASK>
[  564.411908][ T5912] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  564.420977][ T5912] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  564.659059][ T5939] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  564.972305][ T5939] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  564.980772][ T5939] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  564.997456][ T5939] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  565.132167][ T5939] usb 3-1: config 220 has no interface number 2
[  565.151954][ T5939] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  565.413784][ T5939] usb 3-1: config 220 interface 0 has no altsetting 0
[  565.467834][T11107] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1413'.
[  565.514940][ T5912] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  565.533408][ T5912] em28xx 2-1:0.0: No AC97 audio processor
[  565.557348][ T5939] usb 3-1: config 220 interface 76 has no altsetting 0
[  565.576419][ T5939] usb 3-1: config 220 interface 1 has no altsetting 0
[  565.587354][ T5939] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  565.597113][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.610648][ T5939] usb 3-1: Product: syz
[  565.616203][ T5939] usb 3-1: Manufacturer: syz
[  565.624579][ T5939] usb 3-1: SerialNumber: syz
[  565.850316][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  565.860025][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  565.997256][ T5939] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  566.349522][T11114] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1414'.
[  566.371984][ T5939] uvcvideo 3-1:220.0: No valid video chain found.
[  566.402374][ T5939] usb 3-1: selecting invalid altsetting 0
[  566.453938][ T5912] usb 2-1: USB disconnect, device number 71
[  566.498407][ T5939] usb 3-1: selecting invalid altsetting 0
[  566.508376][ T5912] em28xx 2-1:0.0: Disconnecting em28xx
[  566.545691][ T5939] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  566.605498][ T5912] em28xx 2-1:0.0: Freeing device
[  566.748046][ T5939] usb 3-1: USB disconnect, device number 73
[  566.997654][T11117] IPVS: length: 4096 != 24
[  567.197579][ T5934] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  567.270133][ T5828] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  567.418165][ T5934] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  567.427780][ T5828] usb 2-1: Using ep0 maxpacket: 32
[  567.442883][ T5828] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[  567.477015][ T5828] usb 2-1: config 0 has no interface number 0
[  567.492276][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.507879][ T5828] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  567.529752][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.550538][ T5828] usb 2-1: Product: syz
[  567.551972][ T5934] usb 1-1: Product: syz
[  567.581437][ T5828] usb 2-1: Manufacturer: syz
[  567.592543][ T5934] usb 1-1: Manufacturer: syz
[  567.618219][ T5934] usb 1-1: SerialNumber: syz
[  567.630992][ T5828] usb 2-1: SerialNumber: syz
[  567.638022][ T5934] usb 1-1: config 0 descriptor??
[  567.655093][ T5934] gspca_main: sq905c-2.14.0 probing 2770:9052
[  567.728797][ T5828] usb 2-1: config 0 descriptor??
[  567.985477][ T5828] radio-si470x 2-1:0.35: this is not a si470x device.
[  568.059365][ T5828] radio-raremono 2-1:0.35: this is not Thanko's Raremono.
[  568.110937][ T5828] usb 2-1: USB disconnect, device number 72
[  568.200162][ T5934] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  568.222760][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  568.229758][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  568.247021][ T5934] sq905c 1-1:0.0: Get version command failed
[  568.267755][ T5934] sq905c 1-1:0.0: probe with driver sq905c failed with error -71
[  568.324433][ T5934] usb 1-1: USB disconnect, device number 73
[  568.626194][T11149] input: syz0 as /devices/virtual/input/input52
[  568.866836][T11154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1426'.
[  568.964568][ T5934] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  569.485732][T11174] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1429'.
[  569.587254][ T5934] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  569.595219][ T5828] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  570.020025][ T5934] usb 2-1: Using ep0 maxpacket: 32
[  570.027066][ T5828] usb 6-1: Using ep0 maxpacket: 32
[  570.027188][ T5934] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  570.041086][ T5934] usb 2-1: config 0 has no interface number 0
[  570.099809][ T5828] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  570.100458][ T5934] usb 2-1: config 0 interface 12 has no altsetting 0
[  570.108522][ T5828] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  570.135651][ T5934] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  570.149568][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.164909][ T5934] usb 2-1: Product: syz
[  570.171443][ T5934] usb 2-1: Manufacturer: syz
[  570.175881][ T5828] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  570.176092][ T5934] usb 2-1: SerialNumber: syz
[  570.237084][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  570.283085][ T5828] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  570.302456][ T5934] usb 2-1: config 0 descriptor??
[  570.333223][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  570.396548][ T5828] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  570.434749][ T5828] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  570.460927][ T5828] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.494466][ T5828] usb 6-1: config 0 descriptor??
[  570.728152][ T5912] usb 6-1: USB disconnect, device number 12
[  571.177256][   T44] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  571.339704][   T44] usb 6-1: Using ep0 maxpacket: 32
[  571.355750][   T44] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  571.378584][   T44] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  571.397180][   T44] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  571.406530][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  571.437004][   T44] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  571.446818][   T44] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  571.479071][   T44] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  571.508987][   T44] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  571.528923][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.547344][ T5934] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  571.557470][ T5934] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  571.565036][ T5934] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  571.574083][ T5934] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  571.576224][   T44] usb 6-1: config 0 descriptor??
[  571.588842][ T5934] usb 2-1: USB disconnect, device number 73
[  572.012575][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'.
[  572.538379][T11208] IPVS: length: 4096 != 24
[  572.787304][ T5912] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  572.957054][ T5912] usb 3-1: Using ep0 maxpacket: 32
[  572.966802][ T5912] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  572.975834][ T5912] usb 3-1: config 0 has no interface number 0
[  572.987903][ T5912] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  572.997770][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.024855][ T5912] usb 3-1: Product: syz
[  573.047836][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'.
[  573.072948][ T5912] usb 3-1: Manufacturer: syz
[  573.112352][ T5912] usb 3-1: SerialNumber: syz
[  573.129203][ T5912] usb 3-1: config 0 descriptor??
[  573.225449][   T44] usb 6-1: USB disconnect, device number 13
[  573.349218][ T5912] radio-si470x 3-1:0.35: this is not a si470x device.
[  573.406066][ T5912] radio-raremono 3-1:0.35: this is not Thanko's Raremono.
[  573.453979][ T5912] usb 3-1: USB disconnect, device number 74
[  573.937192][   T44] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  574.196129][   T44] usb 1-1: unable to get BOS descriptor or descriptor too short
[  574.267899][   T44] usb 1-1: not running at top speed; connect to a high speed hub
[  574.283426][   T44] usb 1-1: config 9 has an invalid interface number: 87 but max is 0
[  574.301914][   T44] usb 1-1: config 9 has no interface number 0
[  574.317131][   T44] usb 1-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  574.317156][  T938] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  574.367278][   T44] usb 1-1: config 9 interface 87 has no altsetting 0
[  574.439632][   T44] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0
[  574.449188][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.494463][   T44] usb 1-1: Product: syz
[  574.499003][  T938] usb 6-1: Using ep0 maxpacket: 32
[  574.504313][   T44] usb 1-1: Manufacturer: syz
[  574.534985][   T44] usb 1-1: SerialNumber: syz
[  574.538066][  T938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  574.570614][  T938] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  574.623161][  T938] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  574.667109][ T5828] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  574.691853][  T938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.758941][T11248] binder: 11241:11248 ioctl 4018620d 0 returned -22
[  574.768732][T11248] binder: 11241:11248 ioctl c0306201 80000080 returned -14
[  574.838042][  T938] usb 6-1: config 0 descriptor??
[  574.861333][ T5828] usb 3-1: config 1 interface 0 has no altsetting 0
[  574.894965][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  574.913556][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.939276][  T938] hub 6-1:0.0: bad descriptor, ignoring hub
[  574.953196][  T938] hub 6-1:0.0: probe with driver hub failed with error -5
[  574.967234][ T5939] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  574.997826][  T938] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  575.136153][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1444'.
[  575.145416][ T5828] usb 3-1: Product: syz
[  575.161737][ T5828] usb 3-1: Manufacturer: syz
[  575.185529][ T5828] usb 3-1: SerialNumber: syz
[  575.207134][ T5939] usb 5-1: Using ep0 maxpacket: 8
[  575.294863][ T5939] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  575.355629][   T44] usb 1-1: USB disconnect, device number 74
[  575.407123][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.491101][ T5939] pvrusb2: Hardware description: Terratec Grabster AV400
[  575.509287][ T5939] pvrusb2: **********
[  575.513499][ T5939] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  575.526372][ T5939] pvrusb2: Important functionality might not be entirely working.
[  575.537398][ T5939] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  575.557344][ T5939] pvrusb2: **********
[  575.767739][ T2346] pvrusb2: Invalid write control endpoint
[  576.041236][ T5828] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  576.087589][T11244] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61)
[  576.275676][ T5939] usb 5-1: USB disconnect, device number 77
[  576.320121][ T2346] pvrusb2: Invalid write control endpoint
[  576.349852][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  576.394474][T11255] syzkaller1: entered promiscuous mode
[  576.498193][ T5828] usb 3-1: USB disconnect, device number 75
[  576.525620][ T5828] usblp0: removed
[  576.533374][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  576.551537][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  576.564535][ T2346] pvrusb2: Device being rendered inoperable
[  576.580958][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  576.594152][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  576.620517][ T2346] pvrusb2: Attached sub-driver cx25840
[  576.635818][T11255] syzkaller1: entered allmulticast mode
[  576.639525][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  576.686077][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  578.327382][   T44] usb 6-1: USB disconnect, device number 14
[  578.757051][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  578.757071][   T30] audit: type=1326 audit(1760948805.370:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  578.822462][   T30] audit: type=1326 audit(1760948805.370:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  578.897842][T11279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1456'.
[  578.936468][   T30] audit: type=1326 audit(1760948805.370:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.150859][   T30] audit: type=1326 audit(1760948805.370:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.156190][T11284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'.
[  579.197078][   T30] audit: type=1326 audit(1760948805.380:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.242440][   T30] audit: type=1326 audit(1760948805.380:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.264523][    C1] vkms_vblank_simulate: vblank timer overrun
[  579.802753][   T30] audit: type=1326 audit(1760948805.380:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.875414][   T30] audit: type=1326 audit(1760948805.380:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.897768][    C1] vkms_vblank_simulate: vblank timer overrun
[  579.945204][   T30] audit: type=1326 audit(1760948805.380:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000
[  579.967346][    C1] vkms_vblank_simulate: vblank timer overrun
[  579.997590][   T30] audit: type=1326 audit(1760948805.380:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11270 comm="syz.5.1454" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  581.457654][ T5955] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  581.637261][ T5955] usb 2-1: Using ep0 maxpacket: 32
[  582.458395][ T5955] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  582.466523][ T5955] usb 2-1: config 0 has no interface number 0
[  582.535689][T11306] pim6reg: entered allmulticast mode
[  582.547416][ T5955] usb 2-1: config 0 interface 89 has no altsetting 0
[  582.620177][ T5955] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  582.669817][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.714085][ T5955] usb 2-1: Product: syz
[  582.742490][ T5955] usb 2-1: Manufacturer: syz
[  582.774416][ T5955] usb 2-1: SerialNumber: syz
[  583.268755][T11313] binder: 11310:11313 ioctl 4018620d 0 returned -22
[  583.280533][T11313] binder: 11310:11313 ioctl c0306201 80000080 returned -14
[  583.327802][ T5955] usb 2-1: config 0 descriptor??
[  583.697820][T11297] pim6reg: left allmulticast mode
[  584.100176][ T5955] usb 2-1: can't set config #0, error -71
[  584.271050][ T5955] usb 2-1: USB disconnect, device number 74
[  585.717100][   T44] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  585.901705][T11329] binder: 11323:11329 ioctl 4018620d 0 returned -22
[  585.910773][T11329] binder: 11323:11329 ioctl c0306201 80000080 returned -14
[  586.150799][   T44] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  586.159202][   T44] usb 5-1: config 0 has no interface number 0
[  586.165365][   T44] usb 5-1: config 0 interface 113 has no altsetting 0
[  586.200738][   T44] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  586.444762][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.483141][   T44] usb 5-1: Product: syz
[  586.504829][   T44] usb 5-1: Manufacturer: syz
[  586.523800][   T44] usb 5-1: SerialNumber: syz
[  586.546272][   T44] usb 5-1: config 0 descriptor??
[  586.889538][   T44] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  588.597133][ T5939] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  588.789233][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short
[  588.797926][ T5939] usb 1-1: not running at top speed; connect to a high speed hub
[  588.838617][ T5939] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  588.922675][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  588.987381][   T44] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  589.010034][ T5939] usb 1-1: string descriptor 0 read error: -22
[  589.016700][ T5939] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  589.076173][ T5955] usb 5-1: USB disconnect, device number 78
[  589.142440][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.205288][ T5939] usb 1-1: 0:2 : does not exist
[  589.397042][ T5912] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  589.426872][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  589.433882][   T30] audit: type=1326 audit(1760948816.060:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.518236][ T5934] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  589.532919][   T30] audit: type=1326 audit(1760948816.070:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.589150][   T30] audit: type=1326 audit(1760948816.070:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.589604][   T44] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  589.624326][   T30] audit: type=1326 audit(1760948816.070:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.685484][ T5934] usb 6-1: device descriptor read/64, error -71
[  589.724981][   T30] audit: type=1326 audit(1760948816.080:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.729502][   T44] usb 2-1: config 0 has no interface number 0
[  589.747441][ T5912] usb 3-1: device descriptor read/64, error -71
[  589.786513][ T5939] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  589.842980][   T30] audit: type=1326 audit(1760948816.080:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  589.857652][ T5939] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  589.877792][   T44] usb 2-1: config 0 interface 113 has no altsetting 0
[  589.904807][ T5939] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  589.935634][   T44] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  589.946474][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.955133][ T5939] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  589.964156][   T44] usb 2-1: Product: syz
[  589.964169][ T5934] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  589.987518][   T44] usb 2-1: Manufacturer: syz
[  590.000283][ T5912] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  590.054440][   T30] audit: type=1326 audit(1760948816.080:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  590.067374][   T44] usb 2-1: SerialNumber: syz
[  590.092618][ T5939] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  590.122527][ T5939] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  590.152332][ T5934] usb 6-1: device descriptor read/64, error -71
[  590.168234][   T30] audit: type=1326 audit(1760948816.080:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  590.168963][   T44] usb 2-1: config 0 descriptor??
[  590.202495][ T5939] usb 1-1: USB disconnect, device number 75
[  590.207091][ T5912] usb 3-1: device descriptor read/64, error -71
[  590.267995][   T44] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  590.277743][ T5934] usb usb6-port1: attempt power cycle
[  590.327093][   T30] audit: type=1326 audit(1760948816.080:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  590.351719][ T5912] usb usb3-port1: attempt power cycle
[  590.445423][   T30] audit: type=1326 audit(1760948816.080:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11365 comm="syz.4.1479" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  590.757082][ T5934] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  590.764742][ T5912] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  590.858326][ T5934] usb 6-1: device descriptor read/8, error -71
[  590.864591][ T5912] usb 3-1: device descriptor read/8, error -71
[  591.197052][ T5912] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  591.208705][ T5934] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  591.327609][ T5912] usb 3-1: device descriptor read/8, error -71
[  591.418051][ T5934] usb 6-1: device descriptor read/8, error -71
[  591.538411][ T5912] usb usb3-port1: unable to enumerate USB device
[  591.547849][ T5934] usb usb6-port1: unable to enumerate USB device
[  592.781692][ T5939] usb 2-1: USB disconnect, device number 75
[  592.936480][T11387] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1483'.
[  593.465938][T11394] IPVS: length: 4096 != 24
[  593.727072][ T5912] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  593.902316][ T5912] usb 6-1: Using ep0 maxpacket: 32
[  593.916508][ T5912] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  593.932479][ T5912] usb 6-1: config 0 has no interface number 0
[  594.135734][ T5912] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  594.155795][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.174999][ T5912] usb 6-1: Product: syz
[  594.242631][ T5912] usb 6-1: Manufacturer: syz
[  594.259132][ T5912] usb 6-1: SerialNumber: syz
[  594.415372][ T5912] usb 6-1: config 0 descriptor??
[  594.721415][ T5912] radio-si470x 6-1:0.35: this is not a si470x device.
[  594.822349][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1492'.
[  594.928414][ T5912] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  595.120298][ T5912] usb 6-1: USB disconnect, device number 19
[  595.357672][ T5955] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  595.519058][ T5955] usb 3-1: device descriptor read/64, error -71
[  596.016480][T11430] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1497'.
[  596.087931][ T5955] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  596.186036][T11435] FAULT_INJECTION: forcing a failure.
[  596.186036][T11435] name failslab, interval 1, probability 0, space 0, times 0
[  596.265707][T11435] CPU: 1 UID: 0 PID: 11435 Comm: syz.4.1498 Not tainted syzkaller #0 PREEMPT(full) 
[  596.265736][T11435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  596.265749][T11435] Call Trace:
[  596.265759][T11435]  <TASK>
[  596.265768][T11435]  dump_stack_lvl+0x189/0x250
[  596.265794][T11435]  ? __pfx____ratelimit+0x10/0x10
[  596.265820][T11435]  ? __pfx_dump_stack_lvl+0x10/0x10
[  596.265838][T11435]  ? __pfx__printk+0x10/0x10
[  596.265859][T11435]  ? __pfx___might_resched+0x10/0x10
[  596.265884][T11435]  should_fail_ex+0x414/0x560
[  596.265912][T11435]  should_failslab+0xa8/0x100
[  596.265933][T11435]  __kmalloc_noprof+0xcb/0x7f0
[  596.265949][T11435]  ? ethnl_default_notify+0x1af/0xb70
[  596.265968][T11435]  ethnl_default_notify+0x1af/0xb70
[  596.265986][T11435]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  596.266014][T11435]  ? __pfx_ethnl_default_notify+0x10/0x10
[  596.266041][T11435]  ? mutex_is_locked+0x17/0x50
[  596.266062][T11435]  ? rtnl_is_locked+0x15/0x20
[  596.266080][T11435]  ethnl_default_set_doit+0x4f8/0x890
[  596.266103][T11435]  genl_family_rcv_msg_doit+0x215/0x300
[  596.266128][T11435]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  596.266156][T11435]  ? bpf_lsm_capable+0x9/0x20
[  596.266170][T11435]  ? security_capable+0x7e/0x2e0
[  596.266190][T11435]  genl_rcv_msg+0x60e/0x790
[  596.266212][T11435]  ? __pfx_genl_rcv_msg+0x10/0x10
[  596.266228][T11435]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  596.266245][T11435]  ? __asan_memcpy+0x40/0x70
[  596.266267][T11435]  ? __pfx_ref_tracker_free+0x10/0x10
[  596.266289][T11435]  netlink_rcv_skb+0x208/0x470
[  596.266310][T11435]  ? __lock_acquire+0xab9/0xd20
[  596.266331][T11435]  ? __pfx_genl_rcv_msg+0x10/0x10
[  596.266349][T11435]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  596.266385][T11435]  ? down_read+0x1ad/0x2e0
[  596.266406][T11435]  genl_rcv+0x28/0x40
[  596.266420][T11435]  netlink_unicast+0x82f/0x9e0
[  596.266447][T11435]  ? __pfx_netlink_unicast+0x10/0x10
[  596.266469][T11435]  ? netlink_sendmsg+0x642/0xb30
[  596.266490][T11435]  ? skb_put+0x11b/0x210
[  596.266515][T11435]  netlink_sendmsg+0x805/0xb30
[  596.266545][T11435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.266569][T11435]  ? __import_iovec+0x5d4/0x7f0
[  596.266588][T11435]  ? aa_sock_msg_perm+0xf1/0x1d0
[  596.266607][T11435]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  596.266626][T11435]  ? __pfx_netlink_sendmsg+0x10/0x10
[  596.266649][T11435]  __sock_sendmsg+0x21c/0x270
[  596.266669][T11435]  ____sys_sendmsg+0x505/0x830
[  596.266688][T11435]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.266715][T11435]  ___sys_sendmsg+0x21f/0x2a0
[  596.266732][T11435]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.266775][T11435]  ? __fget_files+0x2a/0x420
[  596.266793][T11435]  ? __fget_files+0x3a0/0x420
[  596.266819][T11435]  __sys_sendmsg+0x164/0x220
[  596.266835][T11435]  ? __pfx___sys_sendmsg+0x10/0x10
[  596.266857][T11435]  ? __pfx_ksys_write+0x10/0x10
[  596.266876][T11435]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  596.266894][T11435]  ? lockdep_hardirqs_on+0x9c/0x150
[  596.266911][T11435]  __do_fast_syscall_32+0xb6/0x2b0
[  596.266941][T11435]  ? lockdep_hardirqs_on+0x9c/0x150
[  596.266964][T11435]  do_fast_syscall_32+0x34/0x80
[  596.266987][T11435]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  596.267011][T11435] RIP: 0023:0xf70bd539
[  596.267030][T11435] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  596.267048][T11435] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  596.267070][T11435] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540
[  596.267085][T11435] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  596.267098][T11435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  596.267111][T11435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  596.267125][T11435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  596.267149][T11435]  </TASK>
[  596.737145][ T5955] usb 3-1: device descriptor read/64, error -71
[  596.807471][  T938] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  596.874320][ T5955] usb usb3-port1: attempt power cycle
[  597.127933][  T938] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  597.165564][  T938] usb 2-1: config 0 has no interface number 0
[  597.294374][  T938] usb 2-1: config 0 interface 113 has no altsetting 0
[  597.487079][ T5955] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  597.531043][ T5955] usb 3-1: device descriptor read/8, error -71
[  597.705604][  T938] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  597.730791][  T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.752906][  T938] usb 2-1: Product: syz
[  598.086346][  T938] usb 2-1: Manufacturer: syz
[  598.105151][  T938] usb 2-1: SerialNumber: syz
[  598.140168][  T938] usb 2-1: config 0 descriptor??
[  598.164063][  T938] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  599.225316][   T30] kauditd_printk_skb: 263 callbacks suppressed
[  599.225336][   T30] audit: type=1326 audit(1760948825.870:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.333846][   T30] audit: type=1326 audit(1760948825.870:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.381352][   T30] audit: type=1326 audit(1760948825.910:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=45 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.407105][   T30] audit: type=1326 audit(1760948825.910:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.429511][   T30] audit: type=1326 audit(1760948825.910:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.452550][   T30] audit: type=1326 audit(1760948825.910:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=184 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.474996][   T30] audit: type=1326 audit(1760948825.910:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.497690][   T30] audit: type=1326 audit(1760948825.910:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.564980][T11467] bond0: (slave batadv0): Device is not bonding slave
[  599.578923][T11467] bond0: option active_slave: invalid value (batadv0)
[  599.624143][T11467] bond0 (unregistering): Released all slaves
[  599.658720][T11471] IPVS: length: 4096 != 24
[  599.673251][   T30] audit: type=1326 audit(1760948825.910:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.769308][   T30] audit: type=1326 audit(1760948825.910:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11461 comm="syz.0.1507" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f71539 code=0x7ffc0000
[  599.812224][ T5939] usb 2-1: USB disconnect, device number 76
[  599.927319][  T938] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  600.089271][  T938] usb 6-1: Using ep0 maxpacket: 32
[  600.096117][  T938] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  600.108482][  T938] usb 6-1: config 0 has no interface number 0
[  600.127071][ T5955] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  600.150713][  T938] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  600.161249][  T938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.179845][  T938] usb 6-1: Product: syz
[  600.196845][  T938] usb 6-1: Manufacturer: syz
[  600.217661][  T938] usb 6-1: SerialNumber: syz
[  600.224695][  T938] usb 6-1: config 0 descriptor??
[  600.232704][T11483] binder: 11482:11483 unknown command 1074291478
[  600.257105][T11483] binder: 11482:11483 ioctl c0306201 80000540 returned -22
[  600.264694][ T5939] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  600.279439][ T5955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.311277][ T5955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  600.328165][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.357114][ T5955] usb 3-1: Product: syz
[  600.361378][ T5955] usb 3-1: Manufacturer: syz
[  600.366138][ T5955] usb 3-1: SerialNumber: syz
[  600.437054][ T5939] usb 2-1: Using ep0 maxpacket: 32
[  600.444512][  T938] radio-si470x 6-1:0.35: this is not a si470x device.
[  600.444779][ T5939] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  600.494417][ T5939] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  600.497601][  T938] radio-raremono 6-1:0.35: this is not Thanko's Raremono.
[  600.543512][  T938] usb 6-1: USB disconnect, device number 20
[  600.561459][ T5939] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  600.592038][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  600.654057][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  600.674133][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  600.706719][ T5939] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  600.720230][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.733493][ T5939] usb 2-1: config 0 descriptor??
[  600.945141][ T5939] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  600.964129][ T5939] usb 2-1: USB disconnect, device number 77
[  600.981680][ T5939] usblp0: removed
[  601.117158][ T5828] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  601.365757][T11496] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1518'.
[  601.512662][ T5828] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  601.545070][ T5828] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204
[  601.682443][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  601.693664][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  601.705648][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  601.719100][ T5828] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  601.728586][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.747144][ T5828] usb 5-1: config 0 descriptor??
[  601.757110][ T5939] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  601.907307][ T5939] usb 2-1: Using ep0 maxpacket: 32
[  601.916027][ T5939] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  601.959285][ T5939] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  602.021870][ T5939] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  602.054753][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  602.075149][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  602.087387][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  602.102278][ T5939] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  602.113092][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.151676][ T5939] usb 2-1: config 0 descriptor??
[  602.191328][ T5828] input: HID 28bd:0909 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0909.000D/input/input55
[  602.322964][ T5828] uclogic 0003:28BD:0909.000D: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.4-1/input0
[  602.489111][ T5939] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 78 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  602.510478][ T5828] usb 5-1: USB disconnect, device number 79
[  602.612217][  T938] usb 2-1: USB disconnect, device number 78
[  602.708791][  T938] usblp0: removed
[  603.202936][ T5955] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  603.237200][ T5955] cdc_ncm 3-1:1.0: bind() failure
[  603.270222][ T5955] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  603.313255][ T5955] cdc_ncm 3-1:1.1: bind() failure
[  603.378401][ T5955] usb 3-1: USB disconnect, device number 84
[  603.703813][T11521] binder: 11512:11521 ioctl 4018620d 0 returned -22
[  604.697201][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1521'.
[  604.762915][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  605.362640][T11541] fuseblk: Bad value for 'user_id'
[  605.367918][T11541] fuseblk: Bad value for 'user_id'
[  605.542617][  T938] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  605.551433][   T30] kauditd_printk_skb: 29 callbacks suppressed
[  605.551453][   T30] audit: type=1326 audit(1760948832.140:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.594048][   T30] audit: type=1326 audit(1760948832.140:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.637199][   T30] audit: type=1326 audit(1760948832.140:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.663014][   T30] audit: type=1326 audit(1760948832.140:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.688582][ T5939] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  605.723430][   T30] audit: type=1326 audit(1760948832.140:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.746127][  T938] usb 3-1: Using ep0 maxpacket: 32
[  605.769598][  T938] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  605.841327][  T938] usb 3-1: config 0 has no interface number 0
[  605.857323][  T938] usb 3-1: config 0 interface 12 has no altsetting 0
[  605.866195][   T30] audit: type=1326 audit(1760948832.150:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.910179][   T30] audit: type=1326 audit(1760948832.150:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf706d539 code=0x7ffc0000
[  605.971950][  T938] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  605.973627][ T5939] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  605.987091][  T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.003285][   T30] audit: type=1326 audit(1760948832.150:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  606.127065][  T938] usb 3-1: Product: syz
[  606.131840][  T938] usb 3-1: Manufacturer: syz
[  606.136482][  T938] usb 3-1: SerialNumber: syz
[  606.154009][ T5939] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  606.157094][ T5912] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  606.191995][ T5939] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  606.441287][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  606.450700][  T938] usb 3-1: config 0 descriptor??
[  606.455887][   T30] audit: type=1326 audit(1760948832.150:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[  606.472883][ T5939] usb 6-1: SerialNumber: syz
[  606.497611][   T30] audit: type=1326 audit(1760948832.150:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[  606.597102][ T5912] usb 5-1: Using ep0 maxpacket: 32
[  606.605027][ T5912] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  606.613735][ T5912] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  606.635255][ T5912] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  606.670442][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  606.701090][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  606.715643][ T5939] usb 6-1: 0:2 : does not exist
[  606.731459][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  606.737178][ T5939] usb 6-1: unit 5 not found!
[  606.771283][ T5912] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  606.810155][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.813571][ T5939] usb 6-1: USB disconnect, device number 21
[  606.849384][ T5912] usb 5-1: config 0 descriptor??
[  607.082181][ T5912] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 80 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  607.127819][ T5912] usb 5-1: USB disconnect, device number 80
[  607.148162][ T5912] usblp0: removed
[  607.687059][ T5939] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  607.774334][  T938] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  607.802850][  T938] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  607.845501][  T938] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  607.854482][  T938] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  607.857063][ T5939] usb 5-1: Using ep0 maxpacket: 32
[  607.881208][ T5939] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  607.890276][ T5939] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  607.973734][  T938] usb 3-1: USB disconnect, device number 85
[  607.983382][ T5939] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  608.237027][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  608.246836][ T5939] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  608.387074][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  608.487086][ T5939] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  608.534403][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.575201][ T5939] usb 5-1: config 0 descriptor??
[  608.831451][ T5939] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 81 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  609.037077][ T5939] usb 5-1: USB disconnect, device number 81
[  609.067341][ T5939] usblp0: removed
[  611.064090][ T5828] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  611.290216][ T5828] usb 3-1: Using ep0 maxpacket: 8
[  611.340274][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -61
[  611.348276][ T5828] usb 3-1: can't read configurations, error -61
[  611.507149][ T5828] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  611.681486][ T5828] usb 3-1: Using ep0 maxpacket: 8
[  611.706821][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -61
[  611.716406][ T5828] usb 3-1: can't read configurations, error -61
[  611.724805][ T5828] usb usb3-port1: attempt power cycle
[  612.177342][ T5828] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  612.203912][ T5828] usb 3-1: Using ep0 maxpacket: 8
[  612.214209][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -61
[  612.236864][ T5828] usb 3-1: can't read configurations, error -61
[  612.404519][ T5828] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  612.467893][ T5828] usb 3-1: Using ep0 maxpacket: 8
[  612.475950][ T5828] usb 3-1: unable to read config index 0 descriptor/start: -61
[  612.507094][ T5828] usb 3-1: can't read configurations, error -61
[  612.552272][T11620] binder: 11617:11620 ioctl 4018620d 0 returned -22
[  612.579135][ T5828] usb usb3-port1: unable to enumerate USB device
[  613.347671][T11624] netlink: 'syz.5.1554': attribute type 4 has an invalid length.
[  613.355599][T11624] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1554'.
[  613.366527][T11624] FAULT_INJECTION: forcing a failure.
[  613.366527][T11624] name failslab, interval 1, probability 0, space 0, times 0
[  613.551138][T11624] CPU: 0 UID: 0 PID: 11624 Comm: syz.5.1554 Not tainted syzkaller #0 PREEMPT(full) 
[  613.551167][T11624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  613.551181][T11624] Call Trace:
[  613.551190][T11624]  <TASK>
[  613.551199][T11624]  dump_stack_lvl+0x189/0x250
[  613.551228][T11624]  ? __pfx____ratelimit+0x10/0x10
[  613.551260][T11624]  ? __pfx_dump_stack_lvl+0x10/0x10
[  613.551283][T11624]  ? __pfx__printk+0x10/0x10
[  613.551309][T11624]  ? __pfx___might_resched+0x10/0x10
[  613.551342][T11624]  should_fail_ex+0x414/0x560
[  613.551379][T11624]  should_failslab+0xa8/0x100
[  613.551409][T11624]  kmem_cache_alloc_node_noprof+0x77/0x710
[  613.551433][T11624]  ? __alloc_skb+0x112/0x2d0
[  613.551468][T11624]  __alloc_skb+0x112/0x2d0
[  613.551502][T11624]  netlink_ack+0x146/0xa50
[  613.551539][T11624]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  613.551567][T11624]  ? ref_tracker_free+0x63a/0x7d0
[  613.551590][T11624]  ? __asan_memcpy+0x40/0x70
[  613.551610][T11624]  ? __pfx_ref_tracker_free+0x10/0x10
[  613.551642][T11624]  netlink_rcv_skb+0x28c/0x470
[  613.551675][T11624]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  613.551707][T11624]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  613.551749][T11624]  ? netlink_deliver_tap+0x2e/0x1b0
[  613.551788][T11624]  netlink_unicast+0x82f/0x9e0
[  613.551826][T11624]  ? __pfx_netlink_unicast+0x10/0x10
[  613.551855][T11624]  ? netlink_sendmsg+0x642/0xb30
[  613.551883][T11624]  ? skb_put+0x11b/0x210
[  613.551917][T11624]  netlink_sendmsg+0x805/0xb30
[  613.551958][T11624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.551992][T11624]  ? __import_iovec+0x5d4/0x7f0
[  613.552019][T11624]  ? aa_sock_msg_perm+0xf1/0x1d0
[  613.552045][T11624]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  613.552072][T11624]  ? __pfx_netlink_sendmsg+0x10/0x10
[  613.552104][T11624]  __sock_sendmsg+0x21c/0x270
[  613.552134][T11624]  ____sys_sendmsg+0x505/0x830
[  613.552165][T11624]  ? __pfx_____sys_sendmsg+0x10/0x10
[  613.552204][T11624]  ___sys_sendmsg+0x21f/0x2a0
[  613.552227][T11624]  ? __pfx____sys_sendmsg+0x10/0x10
[  613.552286][T11624]  ? __fget_files+0x2a/0x420
[  613.552313][T11624]  ? __fget_files+0x3a0/0x420
[  613.552350][T11624]  __sys_sendmsg+0x164/0x220
[  613.552373][T11624]  ? __pfx___sys_sendmsg+0x10/0x10
[  613.552403][T11624]  ? __pfx_ksys_write+0x10/0x10
[  613.552431][T11624]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  613.552456][T11624]  ? lockdep_hardirqs_on+0x9c/0x150
[  613.552482][T11624]  __do_fast_syscall_32+0xb6/0x2b0
[  613.552507][T11624]  ? lockdep_hardirqs_on+0x9c/0x150
[  613.552541][T11624]  do_fast_syscall_32+0x34/0x80
[  613.552565][T11624]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.552591][T11624] RIP: 0023:0xf703d539
[  613.552609][T11624] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  613.552628][T11624] RSP: 002b:00000000f542d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  613.552651][T11624] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  613.552666][T11624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  613.552679][T11624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  613.552691][T11624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  613.552704][T11624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  613.552736][T11624]  </TASK>
[  613.699150][T11629] FAULT_INJECTION: forcing a failure.
[  613.699150][T11629] name failslab, interval 1, probability 0, space 0, times 0
[  613.909043][T11630] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1548'.
[  613.964362][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.0.1552 Not tainted syzkaller #0 PREEMPT(full) 
[  613.964392][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  613.964406][T11629] Call Trace:
[  613.964415][T11629]  <TASK>
[  613.964425][T11629]  dump_stack_lvl+0x189/0x250
[  613.964453][T11629]  ? __pfx____ratelimit+0x10/0x10
[  613.964487][T11629]  ? __pfx_dump_stack_lvl+0x10/0x10
[  613.964508][T11629]  ? __pfx__printk+0x10/0x10
[  613.964535][T11629]  ? __pfx___might_resched+0x10/0x10
[  613.964561][T11629]  ? fs_reclaim_acquire+0x7d/0x100
[  613.964600][T11629]  should_fail_ex+0x414/0x560
[  613.964638][T11629]  should_failslab+0xa8/0x100
[  613.964671][T11629]  __kmalloc_noprof+0xcb/0x7f0
[  613.964693][T11629]  ? alloc_pipe_info+0x1fd/0x4d0
[  613.964725][T11629]  alloc_pipe_info+0x1fd/0x4d0
[  613.964752][T11629]  splice_direct_to_actor+0xa5d/0xcc0
[  613.964796][T11629]  ? __pfx_aa_file_perm+0x10/0x10
[  613.964821][T11629]  ? __lock_acquire+0xab9/0xd20
[  613.964847][T11629]  ? __pfx_direct_splice_actor+0x10/0x10
[  613.964873][T11629]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  613.964910][T11629]  do_splice_direct+0x181/0x270
[  613.964939][T11629]  ? __pfx_do_splice_direct+0x10/0x10
[  613.964961][T11629]  ? common_file_perm+0x1b5/0x230
[  613.964984][T11629]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  613.965015][T11629]  ? bpf_lsm_file_permission+0x9/0x20
[  613.965043][T11629]  ? security_file_permission+0x75/0x290
[  613.965075][T11629]  ? rw_verify_area+0x255/0x4d0
[  613.965101][T11629]  do_sendfile+0x4da/0x7e0
[  613.965139][T11629]  ? __pfx_do_sendfile+0x10/0x10
[  613.965167][T11629]  ? __pfx_ksys_write+0x10/0x10
[  613.965192][T11629]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  613.965215][T11629]  ? __ia32_compat_sys_sendfile+0x180/0x1d0
[  613.965243][T11629]  ? lockdep_hardirqs_on+0x9c/0x150
[  613.965268][T11629]  __do_fast_syscall_32+0xb6/0x2b0
[  613.965292][T11629]  ? lockdep_hardirqs_on+0x9c/0x150
[  613.965317][T11629]  do_fast_syscall_32+0x34/0x80
[  613.965347][T11629]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  613.965372][T11629] RIP: 0023:0xf7f71539
[  613.965390][T11629] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  613.965408][T11629] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb
[  613.965431][T11629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000004
[  613.965445][T11629] RDX: 0000000000000000 RSI: 000000008000002b RDI: 0000000000000000
[  613.965459][T11629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  613.965470][T11629] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  613.965483][T11629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  613.965514][T11629]  </TASK>
[  614.279660][T11634] bridge7: entered allmulticast mode
[  614.313432][T11641] program syz.5.1557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  614.346510][T11635] FAULT_INJECTION: forcing a failure.
[  614.346510][T11635] name failslab, interval 1, probability 0, space 0, times 0
[  614.402580][T11635] CPU: 0 UID: 0 PID: 11635 Comm: syz.4.1555 Not tainted syzkaller #0 PREEMPT(full) 
[  614.402612][T11635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  614.402626][T11635] Call Trace:
[  614.402636][T11635]  <TASK>
[  614.402645][T11635]  dump_stack_lvl+0x189/0x250
[  614.402674][T11635]  ? __pfx____ratelimit+0x10/0x10
[  614.402708][T11635]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.402731][T11635]  ? __pfx__printk+0x10/0x10
[  614.402759][T11635]  ? __pfx___might_resched+0x10/0x10
[  614.402787][T11635]  ? fs_reclaim_acquire+0x7d/0x100
[  614.402819][T11635]  should_fail_ex+0x414/0x560
[  614.402858][T11635]  should_failslab+0xa8/0x100
[  614.402886][T11635]  __kmalloc_noprof+0xcb/0x7f0
[  614.402908][T11635]  ? tomoyo_encode+0x28b/0x550
[  614.402939][T11635]  tomoyo_encode+0x28b/0x550
[  614.402970][T11635]  tomoyo_realpath_from_path+0x58d/0x5d0
[  614.402997][T11635]  ? tomoyo_domain+0xd9/0x130
[  614.403032][T11635]  tomoyo_path_perm+0x213/0x4b0
[  614.403065][T11635]  ? tomoyo_path_perm+0x1e3/0x4b0
[  614.403097][T11635]  ? __pfx_tomoyo_path_perm+0x10/0x10
[  614.403138][T11635]  ? __lock_acquire+0xab9/0xd20
[  614.403188][T11635]  ? __fget_files+0x2a/0x420
[  614.403220][T11635]  ? __fget_files+0x3a0/0x420
[  614.403260][T11635]  security_inode_getattr+0x12f/0x330
[  614.403292][T11635]  __ia32_sys_fstat+0xfb/0x200
[  614.403325][T11635]  ? __pfx___ia32_sys_fstat+0x10/0x10
[  614.403379][T11635]  ? __secure_computing+0xe2/0x2a0
[  614.403419][T11635]  ? asm_int80_emulation+0x1a/0x20
[  614.403440][T11635]  do_int80_emulation+0x126/0x390
[  614.403465][T11635]  ? clear_bhb_loop+0x60/0xb0
[  614.403485][T11635]  ? clear_bhb_loop+0x60/0xb0
[  614.403510][T11635]  asm_int80_emulation+0x1a/0x20
[  614.403535][T11635] RIP: 0023:0x80000006
[  614.403558][T11635] Code: Unable to access opcode bytes at 0x7fffffdc.
[  614.403569][T11635] RSP: 002b:00000000f548c07c EFLAGS: 00000202 ORIG_RAX: 000000000000001c
[  614.403591][T11635] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f548c10c
[  614.403605][T11635] RDX: 00000000f548c08c RSI: 0000000000000000 RDI: 0000000000000000
[  614.403617][T11635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  614.403629][T11635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  614.403640][T11635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  614.403673][T11635]  </TASK>
[  614.403732][T11635] ERROR: Out of memory at tomoyo_realpath_from_path.
[  614.656780][T11635] VFS: Warning: syz.4.1555 using old stat() call. Recompile your binary.
[  615.443099][T11656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1562'.
[  615.456595][T11656] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'.
[  615.476087][ T5828] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  615.569706][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1565'.
[  615.641619][ T5828] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  615.650128][ T5828] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  615.706273][ T5828] usb 1-1: config 220 has no interface number 2
[  616.039310][ T5828] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  616.116778][ T5828] usb 1-1: config 220 interface 0 has no altsetting 0
[  616.163510][ T5828] usb 1-1: config 220 interface 76 has no altsetting 0
[  616.191961][ T5828] usb 1-1: config 220 interface 1 has no altsetting 0
[  616.208348][  T938] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  616.474823][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  616.474843][   T30] audit: type=1326 audit(1760948843.030:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  616.517319][ T5828] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  616.534361][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.549422][  T938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.551094][ T5828] usb 1-1: Product: syz
[  616.601054][ T5828] usb 1-1: Manufacturer: syz
[  616.609601][  T938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  616.609608][ T5828] usb 1-1: SerialNumber: syz
[  616.609651][  T938] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  616.780976][   T30] audit: type=1326 audit(1760948843.030:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  616.856582][  T938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.876492][   T30] audit: type=1326 audit(1760948843.030:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  616.912241][  T938] usb 5-1: config 0 descriptor??
[  616.942242][   T30] audit: type=1326 audit(1760948843.030:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.155913][   T30] audit: type=1326 audit(1760948843.030:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.387144][   T30] audit: type=1326 audit(1760948843.030:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.497342][   T30] audit: type=1326 audit(1760948843.040:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.526142][   T30] audit: type=1326 audit(1760948843.040:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=261 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.552723][   T30] audit: type=1326 audit(1760948843.040:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  617.589894][   T30] audit: type=1326 audit(1760948843.040:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11668 comm="syz.2.1566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000
[  618.060937][  T916] usb 5-1: USB disconnect, device number 82
[  620.387802][ T5828] usb 1-1: selecting invalid altsetting 0
[  620.398134][ T5912] usb 2-1: new low-speed USB device number 79 using dummy_hcd
[  620.457624][ T5943] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  620.460822][ T5828] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  620.628109][ T5828] uvcvideo 1-1:220.0: No valid video chain found.
[  620.651158][ T5828] usb 1-1: selecting invalid altsetting 0
[  620.660315][ T5943] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  620.667030][ T5828] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  620.669134][ T5943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.690849][ T5828] usb 1-1: USB disconnect, device number 76
[  620.838468][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  620.847845][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.859290][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.891419][ T5943] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  620.917351][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  620.970631][ T5939] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  620.993116][ T5943] usb 5-1: Product: syz
[  620.997790][ T5943] usb 5-1: Manufacturer: syz
[  621.034778][ T5943] cdc_wdm 5-1:1.0: skipping garbage
[  621.056403][ T5943] cdc_wdm 5-1:1.0: skipping garbage
[  621.091837][ T5943] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  621.119150][ T5943] cdc_wdm 5-1:1.0: Unknown control protocol
[  621.150298][ T5939] usb 6-1: config 0 has an invalid interface number: 160 but max is 0
[  621.160453][ T5939] usb 6-1: config 0 has no interface number 0
[  621.166625][ T5939] usb 6-1: config 0 interface 160 has no altsetting 0
[  621.218280][ T5828] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  621.335881][ T5939] usb 6-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4
[  621.346140][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.354275][ T5939] usb 6-1: Product: syz
[  621.368909][ T5939] usb 6-1: Manufacturer: syz
[  621.387764][ T5828] usb 1-1: Using ep0 maxpacket: 32
[  621.393039][ T5939] usb 6-1: SerialNumber: syz
[  621.412452][ T5828] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  621.426695][ T5828] usb 1-1: config 0 has no interface number 0
[  621.438397][ T5939] usb 6-1: config 0 descriptor??
[  621.458626][ T5828] usb 1-1: config 0 interface 12 has no altsetting 0
[  621.472959][ T5939] usb-storage 6-1:0.160: USB Mass Storage device detected
[  621.496115][ T5943] usb 5-1: USB disconnect, device number 83
[  621.502215][ T5828] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  621.502248][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.502269][ T5828] usb 1-1: Product: syz
[  621.502284][ T5828] usb 1-1: Manufacturer: syz
[  621.502301][ T5828] usb 1-1: SerialNumber: syz
[  621.569615][T11716] fuse: Bad value for 'fd'
[  621.579539][ T5828] usb 1-1: config 0 descriptor??
[  622.201887][T11724] binder: 11721:11724 ioctl 4018620d 0 returned -22
[  623.376146][ T5828] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  623.383787][ T5828] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  623.407374][ T5828] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  623.452563][ T5912] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  623.461833][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.581695][ T5912] usb 2-1: config 0 descriptor??
[  623.624936][ T5912] usb 2-1: can't set config #0, error -71
[  623.658419][ T5912] usb 2-1: USB disconnect, device number 79
[  623.796285][ T5828] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  623.991336][ T5828] usb 1-1: USB disconnect, device number 77
[  624.242911][ T5939] usb 6-1: USB disconnect, device number 23
[  624.566609][T11740] syzkaller0: entered promiscuous mode
[  624.633393][T11740] syzkaller0: entered allmulticast mode
[  625.730697][T11760] fuse: Bad value for 'fd'
[  625.966163][T11766] FAULT_INJECTION: forcing a failure.
[  625.966163][T11766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.007507][T11764] netlink: 'syz.1.1588': attribute type 8 has an invalid length.
[  626.015469][T11766] CPU: 0 UID: 0 PID: 11766 Comm: syz.0.1590 Not tainted syzkaller #0 PREEMPT(full) 
[  626.015490][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  626.015500][T11766] Call Trace:
[  626.015508][T11766]  <TASK>
[  626.015515][T11766]  dump_stack_lvl+0x189/0x250
[  626.015536][T11766]  ? __pfx____ratelimit+0x10/0x10
[  626.015561][T11766]  ? __pfx_dump_stack_lvl+0x10/0x10
[  626.015577][T11766]  ? __pfx__printk+0x10/0x10
[  626.015592][T11766]  ? __might_fault+0xb0/0x130
[  626.015617][T11766]  should_fail_ex+0x414/0x560
[  626.015645][T11766]  _copy_from_user+0x2d/0xb0
[  626.015666][T11766]  snd_rawmidi_kernel_write1+0x3ab/0x650
[  626.015701][T11766]  snd_rawmidi_write+0x5a8/0xbc0
[  626.015734][T11766]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  626.015756][T11766]  ? __pfx_default_wake_function+0x10/0x10
[  626.015777][T11766]  ? common_file_perm+0x1b5/0x230
[  626.015799][T11766]  ? bpf_lsm_file_permission+0x9/0x20
[  626.015828][T11766]  ? security_file_permission+0x75/0x290
[  626.015861][T11766]  ? rw_verify_area+0x255/0x4d0
[  626.015882][T11766]  ? __lock_acquire+0xab9/0xd20
[  626.015907][T11766]  ? __pfx_snd_rawmidi_write+0x10/0x10
[  626.015935][T11766]  vfs_write+0x27e/0xb30
[  626.015957][T11766]  ? __pfx_vfs_write+0x10/0x10
[  626.015975][T11766]  ? __fget_files+0x2a/0x420
[  626.015995][T11766]  ? __fget_files+0x2a/0x420
[  626.016030][T11766]  ? __fget_files+0x3a0/0x420
[  626.016051][T11766]  ? __fget_files+0x2a/0x420
[  626.016075][T11766]  ksys_write+0x145/0x250
[  626.016091][T11766]  ? exc_page_fault+0x82/0x100
[  626.016107][T11766]  ? __pfx_ksys_write+0x10/0x10
[  626.016125][T11766]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  626.016142][T11766]  ? lockdep_hardirqs_on+0x9c/0x150
[  626.016160][T11766]  __do_fast_syscall_32+0xb6/0x2b0
[  626.016177][T11766]  ? lockdep_hardirqs_on+0x9c/0x150
[  626.016195][T11766]  do_fast_syscall_32+0x34/0x80
[  626.016211][T11766]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  626.016230][T11766] RIP: 0023:0xf7f71539
[  626.016243][T11766] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  626.016256][T11766] RSP: 002b:00000000f544555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[  626.016271][T11766] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  626.016282][T11766] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000
[  626.016297][T11766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  626.016306][T11766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  626.016315][T11766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  626.016337][T11766]  </TASK>
[  626.319700][T11764] fuse: Bad value for 'fd'
[  627.497701][ T5828] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  627.677104][ T5828] usb 3-1: Using ep0 maxpacket: 8
[  627.683954][ T5828] usb 3-1: config index 0 descriptor too short (expected 5924, got 36)
[  627.696253][ T5828] usb 3-1: config 250 has an invalid interface number: 228 but max is -1
[  627.724854][ T5828] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0
[  627.747053][ T5828] usb 3-1: config 250 has no interface number 0
[  627.794105][ T5828] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  627.831163][ T5828] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  627.857040][ T5828] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  627.882528][ T5828] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  627.907170][ T5828] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  627.958641][ T5828] usb 3-1: config 250 interface 228 has no altsetting 0
[  627.990664][ T5828] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  628.048568][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  628.122808][ T5828] usb 3-1: Product: syz
[  628.152244][ T5828] usb 3-1: SerialNumber: syz
[  628.237362][ T5943] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  628.242839][ T5828] hub 3-1:250.228: bad descriptor, ignoring hub
[  628.245150][ T5912] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  628.259437][ T5828] hub 3-1:250.228: probe with driver hub failed with error -5
[  628.427179][ T5943] usb 6-1: Using ep0 maxpacket: 32
[  628.435139][ T5943] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  628.444666][ T5943] usb 6-1: config 0 has no interface number 0
[  628.451103][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  628.464910][ T5828] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 90 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  628.484911][ T5912] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  628.509485][ T5943] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  628.530870][ T5912] usb 2-1: config 0 has no interface number 0
[  628.531082][ T5828] usb 3-1: USB disconnect, device number 90
[  628.595181][ T5828] usblp0: removed
[  628.604153][ T5912] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  628.615692][ T5943] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  628.670450][ T5912] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  628.681775][ T5943] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  628.691193][ T5912] usb 2-1: config 0 interface 41 has no altsetting 0
[  628.712566][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.763577][ T5912] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  628.773265][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.786854][ T5943] usb 6-1: config 0 descriptor??
[  628.792339][ T5912] usb 2-1: Product: syz
[  628.827085][ T5912] usb 2-1: Manufacturer: syz
[  628.831805][ T5912] usb 2-1: SerialNumber: syz
[  628.862082][ T5912] usb 2-1: config 0 descriptor??
[  628.882096][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  628.891733][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  629.139836][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  629.148604][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  629.411773][ T5943] uclogic 0003:28BD:0094.000E: pen parameters not found
[  629.423525][ T5943] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring
[  629.577342][ T5912] Error reading MAC address
[  629.586089][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  629.595616][T11796] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  629.625200][ T5828] usb 6-1: USB disconnect, device number 24
[  629.667273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  629.673932][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  629.825502][ T5912] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  629.844818][ T5912] usb 2-1: USB disconnect, device number 80
[  631.075162][T11816] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.719195][T11831] FAULT_INJECTION: forcing a failure.
[  631.719195][T11831] name failslab, interval 1, probability 0, space 0, times 0
[  631.754980][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.1.1610 Not tainted syzkaller #0 PREEMPT(full) 
[  631.755012][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  631.755025][T11831] Call Trace:
[  631.755033][T11831]  <TASK>
[  631.755042][T11831]  dump_stack_lvl+0x189/0x250
[  631.755070][T11831]  ? __pfx____ratelimit+0x10/0x10
[  631.755103][T11831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  631.755125][T11831]  ? __pfx__printk+0x10/0x10
[  631.755152][T11831]  ? __pfx___might_resched+0x10/0x10
[  631.755181][T11831]  ? fs_reclaim_acquire+0x7d/0x100
[  631.755211][T11831]  should_fail_ex+0x414/0x560
[  631.755249][T11831]  should_failslab+0xa8/0x100
[  631.755278][T11831]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  631.755304][T11831]  ? __get_vm_area_node+0x13f/0x300
[  631.755332][T11831]  __get_vm_area_node+0x13f/0x300
[  631.755358][T11831]  __vmalloc_node_range_noprof+0x30c/0x12d0
[  631.755382][T11831]  ? copy_process+0x54b/0x3c00
[  631.755420][T11831]  ? percpu_ref_get_many+0x19/0x140
[  631.755475][T11831]  ? __memcg_slab_post_alloc_hook+0x517/0x7d0
[  631.755504][T11831]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  631.755532][T11831]  ? memcpy_and_pad+0x48/0x80
[  631.755556][T11831]  __vmalloc_node_noprof+0xc2/0x110
[  631.755579][T11831]  ? copy_process+0x54b/0x3c00
[  631.755605][T11831]  ? copy_process+0x54b/0x3c00
[  631.755634][T11831]  dup_task_struct+0x3d4/0x830
[  631.755664][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  631.755688][T11831]  copy_process+0x54b/0x3c00
[  631.755741][T11831]  ? __might_fault+0xb0/0x130
[  631.755772][T11831]  ? __pfx_copy_process+0x10/0x10
[  631.755815][T11831]  kernel_clone+0x21e/0x840
[  631.755854][T11831]  ? __pfx_kernel_clone+0x10/0x10
[  631.755882][T11831]  ? rcu_read_lock_any_held+0xb3/0x120
[  631.755936][T11831]  __se_sys_clone3+0x256/0x2d0
[  631.755964][T11831]  ? __pfx___se_sys_clone3+0x10/0x10
[  631.755983][T11831]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  631.756019][T11831]  ? __fget_files+0x3a0/0x420
[  631.756063][T11831]  ? __pfx_ksys_write+0x10/0x10
[  631.756091][T11831]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  631.756115][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  631.756140][T11831]  __do_fast_syscall_32+0xb6/0x2b0
[  631.756165][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  631.756191][T11831]  do_fast_syscall_32+0x34/0x80
[  631.756215][T11831]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  631.756241][T11831] RIP: 0023:0xf706d539
[  631.756260][T11831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  631.756279][T11831] RSP: 002b:00000000f545d42c EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  631.756302][T11831] RAX: ffffffffffffffda RBX: 00000000f545d460 RCX: 0000000000000058
[  631.756317][T11831] RDX: 0000000000000000 RSI: 00000000a0000080 RDI: 0000000000000003
[  631.756331][T11831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  631.756344][T11831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  631.756356][T11831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  631.756388][T11831]  </TASK>
[  632.027838][T11831] syz.1.1610: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  632.074216][ T5943] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  632.112227][T11831] ,cpuset=/,mems_allowed=0-1
[  632.118093][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.1.1610 Not tainted syzkaller #0 PREEMPT(full) 
[  632.118119][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  632.118132][T11831] Call Trace:
[  632.118141][T11831]  <TASK>
[  632.118150][T11831]  dump_stack_lvl+0x189/0x250
[  632.118182][T11831]  ? __pfx_dump_stack_lvl+0x10/0x10
[  632.118205][T11831]  ? __pfx__printk+0x10/0x10
[  632.118226][T11831]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  632.118248][T11831]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  632.118272][T11831]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  632.118295][T11831]  warn_alloc+0x214/0x310
[  632.118326][T11831]  ? __pfx_warn_alloc+0x10/0x10
[  632.118358][T11831]  ? __get_vm_area_node+0x2b5/0x300
[  632.118387][T11831]  __vmalloc_node_range_noprof+0x331/0x12d0
[  632.118420][T11831]  ? percpu_ref_get_many+0x19/0x140
[  632.118456][T11831]  ? __memcg_slab_post_alloc_hook+0x517/0x7d0
[  632.118485][T11831]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  632.118513][T11831]  ? memcpy_and_pad+0x48/0x80
[  632.118537][T11831]  __vmalloc_node_noprof+0xc2/0x110
[  632.118561][T11831]  ? copy_process+0x54b/0x3c00
[  632.118589][T11831]  ? copy_process+0x54b/0x3c00
[  632.118620][T11831]  dup_task_struct+0x3d4/0x830
[  632.118649][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  632.118674][T11831]  copy_process+0x54b/0x3c00
[  632.118729][T11831]  ? __might_fault+0xb0/0x130
[  632.118761][T11831]  ? __pfx_copy_process+0x10/0x10
[  632.118805][T11831]  kernel_clone+0x21e/0x840
[  632.118843][T11831]  ? __pfx_kernel_clone+0x10/0x10
[  632.118871][T11831]  ? rcu_read_lock_any_held+0xb3/0x120
[  632.118924][T11831]  __se_sys_clone3+0x256/0x2d0
[  632.118947][T11831]  ? __pfx___se_sys_clone3+0x10/0x10
[  632.118965][T11831]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  632.119002][T11831]  ? __fget_files+0x3a0/0x420
[  632.119045][T11831]  ? __pfx_ksys_write+0x10/0x10
[  632.119073][T11831]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  632.119097][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  632.119122][T11831]  __do_fast_syscall_32+0xb6/0x2b0
[  632.119146][T11831]  ? lockdep_hardirqs_on+0x9c/0x150
[  632.119172][T11831]  do_fast_syscall_32+0x34/0x80
[  632.119196][T11831]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  632.119221][T11831] RIP: 0023:0xf706d539
[  632.119240][T11831] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  632.119257][T11831] RSP: 002b:00000000f545d42c EFLAGS: 00000206 ORIG_RAX: 00000000000001b3
[  632.119280][T11831] RAX: ffffffffffffffda RBX: 00000000f545d460 RCX: 0000000000000058
[  632.119295][T11831] RDX: 0000000000000000 RSI: 00000000a0000080 RDI: 0000000000000003
[  632.119307][T11831] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  632.119319][T11831] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  632.119332][T11831] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  632.119363][T11831]  </TASK>
[  632.119373][T11831] Mem-Info:
[  632.422779][T11831] active_anon:6106 inactive_anon:0 isolated_anon:0
[  632.422779][T11831]  active_file:19014 inactive_file:40107 isolated_file:0
[  632.422779][T11831]  unevictable:768 dirty:261 writeback:0
[  632.422779][T11831]  slab_reclaimable:13001 slab_unreclaimable:101273
[  632.422779][T11831]  mapped:38279 shmem:1364 pagetables:1386
[  632.422779][T11831]  sec_pagetables:0 bounce:0
[  632.422779][T11831]  kernel_misc_reclaimable:0
[  632.422779][T11831]  free:1288582 free_pcp:13210 free_cma:0
[  632.471914][T11831] Node 0 active_anon:24424kB inactive_anon:0kB active_file:76056kB inactive_file:160228kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153116kB dirty:1044kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12308kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  632.516618][T11831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  632.547173][ T5943] usb 5-1: Using ep0 maxpacket: 32
[  632.572483][ T5943] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  632.580894][T11831] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  632.597210][ T5943] usb 5-1: config 0 has no interface number 0
[  632.611492][T11831] lowmem_reserve[]: 0 2501 2503 2503 2503
[  632.627861][T11831] Node 0 DMA32 free:1239840kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24424kB inactive_anon:0kB active_file:76056kB inactive_file:160228kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2561596kB mlocked:0kB bounce:0kB free_pcp:37060kB local_pcp:15668kB free_cma:0kB
[  632.684869][T11831] lowmem_reserve[]: 0 0 1 1 1
[  632.690052][T11840] netlink: zone id is out of range
[  632.695454][T11840] netlink: zone id is out of range
[  632.695470][T11831] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  632.717251][ T5943] usb 5-1: config 0 interface 12 has no altsetting 0
[  632.773055][ T5943] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  632.782477][T11831] lowmem_reserve[]: 0 0 0 0 0
[  632.782536][T11831] Node 1 Normal free:3900096kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15412kB local_pcp:6224kB free_cma:0kB
[  632.782601][T11831] lowmem_reserve[]: 0 0
[  632.788574][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  632.821888][T11831]  0 0 0
[  632.840828][T11831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  632.854187][T11831] Node 0 DMA32: 1134*4kB (UM) 676*8kB (UME) 858*16kB (UME) 767*32kB (UME) 310*64kB (UME) 172*128kB (UME) 101*256kB (UM) 58*512kB (UM) 16*1024kB (UME) 6*2048kB (UME) 260*4096kB (UM) = 1239256kB
[  632.874594][T11831] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  632.886457][ T5943] usb 5-1: Product: syz
[  632.892986][ T5943] usb 5-1: Manufacturer: syz
[  632.898836][ T5943] usb 5-1: SerialNumber: syz
[  632.906630][ T5943] usb 5-1: config 0 descriptor??
[  632.912211][T11831] Node 1 Normal: 178*4kB (UE) 41*8kB (UME) 35*16kB (UME) 112*32kB (UME) 32*64kB (UME) 5*128kB (UM) 4*256kB (UME) 4*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3900096kB
[  632.934105][T11831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  632.936340][T11840] binder: 11836:11840 ioctl 8008f513 80000480 returned -22
[  632.949730][T11831] Node 0 hugepages_total=8 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB
[  632.961184][T11831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  632.981416][T11831] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  632.991736][T11831] 60481 total pagecache pages
[  632.996526][T11831] 0 pages in swap cache
[  633.001595][T11831] Free swap  = 124996kB
[  633.007343][T11831] Total swap = 124996kB
[  633.012470][T11831] 2097051 pages RAM
[  633.016511][T11831] 0 pages HighMem/MovableOnly
[  633.028469][ T5939] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  633.031556][T11831] 424562 pages reserved
[  633.045174][T11831] 0 pages cma reserved
[  633.167234][ T5939] usb 3-1: device descriptor read/64, error -71
[  633.397763][  T938] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  633.437169][ T5939] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  633.497380][   T31] INFO: task syz.3.1126:10108 blocked for more than 143 seconds.
[  633.507068][   T31]       Not tainted syzkaller #0
[  633.512911][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  633.541920][   T31] task:syz.3.1126      state:D stack:25192 pid:10108 tgid:10107 ppid:5845   task_flags:0x400140 flags:0x10080002
[  633.568175][   T31] Call Trace:
[  633.580558][  T938] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  633.591376][   T31]  <TASK>
[  633.596760][   T31]  __schedule+0x1798/0x4cc0
[  633.603893][  T938] usb 2-1: config 0 has an invalid interface number: 6 but max is 2
[  633.607212][   T31]  ? __pfx___schedule+0x10/0x10
[  633.617402][ T5939] usb 3-1: device descriptor read/64, error -71
[  633.621671][  T938] usb 2-1: config 0 has no interface number 0
[  633.631352][   T31]  ? schedule+0x91/0x360
[  633.635669][   T31]  schedule+0x165/0x360
[  633.640595][  T938] usb 2-1: config 0 has no interface number 1
[  633.645580][   T31]  schedule_preempt_disabled+0x13/0x30
[  633.646852][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  633.646868][   T30] audit: type=1326 audit(1760948860.290:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  633.653914][   T31]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  633.696198][  T938] usb 2-1: too many endpoints for config 0 interface 6 altsetting 255: 255, using maximum allowed: 30
[  633.726731][T11853] ieee80211 !: Selected rate control algorithm 'minstrel_ht'
[  633.736610][  T938] usb 2-1: config 0 interface 6 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  633.767639][T11854] x_tables: duplicate underflow at hook 3
[  634.072748][ T5939] usb usb3-port1: attempt power cycle
[  634.089350][  T938] usb 2-1: config 0 interface 6 has no altsetting 0
[  634.100163][   T31]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  634.108890][   T30] audit: type=1326 audit(1760948860.290:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  634.111094][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  634.138516][  T938] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  634.138557][  T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  634.157615][T11853] debugfs: '!' already exists in 'ieee80211'
[  634.199788][  T938] usb 2-1: config 0 descriptor??
[  634.208652][   T30] audit: type=1326 audit(1760948860.290:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf703d539 code=0x7ffc0000
[  634.313150][   T30] audit: type=1326 audit(1760948860.290:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  634.338335][ T5943] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  634.362370][   T31]  ? __pfx_down_read_trylock+0x10/0x10
[  634.366889][ T5943] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  634.376862][   T31]  down_read+0x98/0x2e0
[  634.384867][ T5943] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  634.397961][   T31]  __rmap_walk_file+0x227/0x620
[  634.410354][ T5943] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  634.428363][   T30] audit: type=1326 audit(1760948860.290:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf703d539 code=0x7ffc0000
[  634.430712][   T31]  ? rmap_walk_file+0x19f/0x250
[  634.487618][ T5939] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  634.575494][ T5939] usb 3-1: device descriptor read/8, error -71
[  634.590830][ T5943] usb 5-1: USB disconnect, device number 84
[  634.628622][   T31]  migrate_pages+0xc98/0x2930
[  634.643746][   T31]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  634.852365][   T30] audit: type=1326 audit(1760948860.290:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  634.888946][   T31]  ? __pfx_migrate_pages+0x10/0x10
[  634.907087][ T5939] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  634.922859][   T31]  ? mas_next_node+0xafd/0xd60
[  634.936646][   T31]  ? __pfx_remove_migration_pte+0x10/0x10
[  634.943486][ T5939] usb 3-1: device descriptor read/8, error -71
[  634.972290][   T30] audit: type=1326 audit(1760948860.290:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf703d539 code=0x7ffc0000
[  635.063998][   T31]  ? up_write+0x1c4/0x420
[  635.084329][   T30] audit: type=1326 audit(1760948860.290:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  635.086534][   T31]  __se_sys_mbind+0xa47/0xc40
[  635.158355][   T31]  ? up_write+0x1c4/0x420
[  635.167561][ T5939] usb usb3-port1: unable to enumerate USB device
[  635.179785][   T31]  ? __pfx___se_sys_mbind+0x10/0x10
[  635.202048][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.215402][   T31]  ? rcu_is_watching+0x15/0xb0
[  635.226075][   T30] audit: type=1326 audit(1760948860.290:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf703d539 code=0x7ffc0000
[  635.227284][   T31]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  635.290667][   T30] audit: type=1326 audit(1760948860.290:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11848 comm="syz.5.1618" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000
[  635.339756][   T31]  ? __ia32_sys_mbind+0x21/0xf0
[  635.348279][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[  635.353601][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.359632][   T31]  do_fast_syscall_32+0x34/0x80
[  635.368664][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  635.380066][   T31] RIP: 0023:0xf70bd539
[  635.384352][   T31] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000112
[  635.393637][   T31] RAX: ffffffffffffffda RBX: 0000000080400000 RCX: 0000000000c00000
[  635.404319][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009
[  635.413286][   T31] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  635.422196][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  635.430750][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  635.440766][   T31]  </TASK>
[  635.445304][   T31] INFO: task syz.3.1126:10110 blocked for more than 145 seconds.
[  635.492832][   T31]       Not tainted syzkaller #0
[  635.517652][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  635.527250][   T31] task:syz.3.1126      state:D stack:24936 pid:10110 tgid:10107 ppid:5845   task_flags:0x400040 flags:0x10080002
[  635.539694][   T31] Call Trace:
[  635.543153][   T31]  <TASK>
[  635.546242][   T31]  __schedule+0x1798/0x4cc0
[  635.551307][   T31]  ? __pfx___schedule+0x10/0x10
[  635.556434][   T31]  ? schedule+0x91/0x360
[  635.561115][   T31]  schedule+0x165/0x360
[  635.565666][   T31]  io_schedule+0x80/0xd0
[  635.570211][   T31]  folio_wait_bit_common+0x6b0/0xb80
[  635.575901][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  635.582618][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  635.588923][   T31]  __filemap_get_folio+0x139/0xaf0
[  635.596474][   T31]  ? up_write+0x1c4/0x420
[  635.601920][   T31]  hugetlbfs_zero_partial_page+0xae/0x610
[  635.608326][   T31]  hugetlbfs_fallocate+0xb91/0x1100
[  635.619436][   T31]  ? aa_file_perm+0x13a/0x1550
[  635.630078][   T31]  ? mas_next_slot+0xc27/0xcf0
[  635.635248][   T31]  ? __pfx_hugetlbfs_fallocate+0x10/0x10
[  635.641716][   T31]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  635.649502][   T31]  vfs_fallocate+0x669/0x7e0
[  635.656452][   T31]  ? __pfx_vfs_fallocate+0x10/0x10
[  635.662643][   T31]  madvise_vma_behavior+0x31b3/0x3a10
[  635.671675][   T31]  ? __pfx_madvise_vma_behavior+0x10/0x10
[  635.696162][   T31]  ? __lock_acquire+0xab9/0xd20
[  635.713383][   T31]  ? finish_task_switch+0x18b/0x950
[  635.731187][   T31]  ? finish_task_switch+0x266/0x950
[  635.747088][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  635.760512][   T31]  ? finish_task_switch+0x266/0x950
[  635.779510][   T31]  ? mas_prev_node+0xb32/0xdb0
[  635.796614][   T31]  ? mas_prev_slot+0xb31/0xbb0
[  635.813091][   T31]  ? find_vma_prev+0xe3/0x150
[  635.829460][   T31]  ? __pfx_find_vma_prev+0x10/0x10
[  635.849567][   T31]  madvise_walk_vmas+0x51c/0xa30
[  635.866614][   T31]  ? __pfx_madvise_walk_vmas+0x10/0x10
[  635.874083][   T31]  ? blk_start_plug+0x6f/0x1b0
[  635.879532][   T31]  madvise_do_behavior+0x38e/0x550
[  635.884804][   T31]  ? __pfx_madvise_do_behavior+0x10/0x10
[  635.890694][   T31]  ? down_read+0x1ad/0x2e0
[  635.895266][   T31]  do_madvise+0x1bc/0x270
[  635.900140][   T31]  ? __pfx_do_madvise+0x10/0x10
[  635.906250][   T31]  ? __se_sys_futex_time32+0x360/0x3e0
[  635.914849][   T31]  ? rcu_is_watching+0x15/0xb0
[  635.920116][   T31]  ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0
[  635.926513][   T31]  __ia32_sys_madvise+0xa7/0xc0
[  635.931994][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[  635.937579][   T31]  do_fast_syscall_32+0x34/0x80
[  635.942581][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  635.949538][   T31] RIP: 0023:0xf70bd539
[  635.953736][   T31] RSP: 002b:00000000f546b55c EFLAGS: 00000206 ORIG_RAX: 00000000000000db
[  635.962730][   T31] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600002
[  635.971367][   T31] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000
[  635.981943][   T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  635.990410][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  635.999418][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  636.009033][   T31]  </TASK>
[  636.061177][   T31] 
[  636.061177][   T31] Showing all locks held in the system:
[  636.062714][  T938] usb 2-1: Could not set interface, error -71
[  636.069032][   T31] 1 lock held by khungtaskd/31:
[  636.069054][   T31]  #0: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  636.102647][   T31] 5 locks held by kworker/0:2/938:
[  636.109474][   T31] 6 locks held by kworker/u8:8/1341:
[  636.115355][   T31]  #0: ffff8880b863a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  636.125785][   T31]  #1: ffff8880b8624048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  636.128093][  T938] usb 2-1: selecting invalid altsetting 0
[  636.135472][   T31]  #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390
[  636.154407][   T31]  #3: ffffffff99cb4d70 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  636.165375][   T31]  #4: ffffffff8dfe87a8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[  636.174709][  T938] usb 2-1: Could not set interface, error -22
[  636.176626][   T31]  #5: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250
[  636.192324][   T31] 1 lock held by udevd/5197:
[  636.198100][   T31] 2 locks held by getty/5587:
[  636.200293][  T938] usb 2-1: USB disconnect, device number 81
[  636.202819][   T31]  #0: ffff888033c770a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  636.224370][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  636.234961][   T31] 1 lock held by syz.3.1126/10108:
[  636.240526][   T31]  #0: ffff8881442f6218 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: __rmap_walk_file+0x227/0x620
[  636.251845][   T31] 3 locks held by syz.3.1126/10110:
[  636.260365][   T31]  #0: ffff8880226a2420 (sb_writers#16){.+.+}-{0:0}, at: vfs_fallocate+0x5f0/0x7e0
[  636.270196][   T31]  #1: ffff8881442f5f48 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: hugetlbfs_fallocate+0x3cc/0x1100
[  636.281822][   T31]  #2: ffff8881442f6218 (&hugetlbfs_i_mmap_rwsem_key){++++}-{4:4}, at: hugetlbfs_fallocate+0x4b5/0x1100
[  636.293468][   T31] 2 locks held by syz.1.1616/11845:
[  636.299164][   T31]  #0: ffff888044816f48 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  636.310712][   T31]  #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  636.323181][   T31] 1 lock held by dhcpcd/11864:
[  636.329479][   T31]  #0: ffff88805a6ac708 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  636.340349][   T31] 2 locks held by dhcpcd/11865:
[  636.345370][   T31]  #0: ffff88805a6ade08 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  636.356307][   T31]  #1: ffffffff8e142d78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  636.387699][   T31] 
[  636.420086][   T31] =============================================
[  636.420086][   T31] 
[  636.444767][   T31] NMI backtrace for cpu 1
[  636.444788][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  636.444812][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  636.444825][   T31] Call Trace:
[  636.444834][   T31]  <TASK>
[  636.444844][   T31]  dump_stack_lvl+0x189/0x250
[  636.444876][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  636.444899][   T31]  ? __pfx__printk+0x10/0x10
[  636.444934][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  636.444967][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  636.444997][   T31]  ? __pfx__printk+0x10/0x10
[  636.445024][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  636.445053][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  636.445085][   T31]  watchdog+0xf60/0xfa0
[  636.445119][   T31]  ? watchdog+0x1e2/0xfa0
[  636.445152][   T31]  kthread+0x711/0x8a0
[  636.445178][   T31]  ? __pfx_watchdog+0x10/0x10
[  636.445204][   T31]  ? __pfx_kthread+0x10/0x10
[  636.445228][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  636.445267][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.445286][   T31]  ? __pfx_kthread+0x10/0x10
[  636.445309][   T31]  ret_from_fork+0x4bc/0x870
[  636.445339][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  636.445375][   T31]  ? __switch_to_asm+0x39/0x70
[  636.445398][   T31]  ? __switch_to_asm+0x33/0x70
[  636.445421][   T31]  ? __pfx_kthread+0x10/0x10
[  636.445443][   T31]  ret_from_fork_asm+0x1a/0x30
[  636.445485][   T31]  </TASK>
[  636.445494][   T31] Sending NMI from CPU 1 to CPUs 0:
[  636.593150][    C0] NMI backtrace for cpu 0
[  636.593169][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  636.593189][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  636.593201][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  636.593225][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 a1 1b 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  636.593241][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6
[  636.593257][    C0] RAX: 002eab578e3d7200 RBX: ffffffff8196bb87 RCX: 002eab578e3d7200
[  636.593277][    C0] RDX: 0000000000000001 RSI: ffffffff8d7e8114 RDI: ffffffff8bc073e0
[  636.593290][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb
[  636.593303][    C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8f9dfc70
[  636.593317][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a40
[  636.593333][    C0] FS:  0000000000000000(0000) GS:ffff888125d0d000(0000) knlGS:0000000000000000
[  636.593347][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  636.593359][    C0] CR2: 00000000f74089b4 CR3: 000000007ecb2000 CR4: 00000000003526f0
[  636.593375][    C0] Call Trace:
[  636.593384][    C0]  <TASK>
[  636.593391][    C0]  default_idle+0x13/0x20
[  636.593413][    C0]  default_idle_call+0x73/0xb0
[  636.593435][    C0]  do_idle+0x1e7/0x510
[  636.593464][    C0]  ? __pfx_do_idle+0x10/0x10
[  636.593496][    C0]  cpu_startup_entry+0x44/0x60
[  636.593520][    C0]  rest_init+0x2de/0x300
[  636.593543][    C0]  start_kernel+0x3ae/0x410
[  636.593564][    C0]  x86_64_start_reservations+0x24/0x30
[  636.593590][    C0]  x86_64_start_kernel+0x143/0x1c0
[  636.593615][    C0]  common_startup_64+0x13e/0x147
[  636.593642][    C0]  </TASK>
[  636.595037][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  636.776655][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  636.786167][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  636.796326][   T31] Call Trace:
[  636.799623][   T31]  <TASK>
[  636.802569][   T31]  dump_stack_lvl+0x99/0x250
[  636.807207][   T31]  ? __asan_memcpy+0x40/0x70
[  636.811901][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  636.817114][   T31]  ? __pfx__printk+0x10/0x10
[  636.821725][   T31]  vpanic+0x237/0x6d0
[  636.825728][   T31]  ? __pfx_vpanic+0x10/0x10
[  636.830449][   T31]  ? preempt_schedule_common+0x83/0xd0
[  636.835930][   T31]  panic+0xb9/0xc0
[  636.839672][   T31]  ? __pfx_panic+0x10/0x10
[  636.844104][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  636.849499][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  636.855673][   T31]  watchdog+0xf9f/0xfa0
[  636.859849][   T31]  ? watchdog+0x1e2/0xfa0
[  636.864243][   T31]  kthread+0x711/0x8a0
[  636.868370][   T31]  ? __pfx_watchdog+0x10/0x10
[  636.873250][   T31]  ? __pfx_kthread+0x10/0x10
[  636.877859][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  636.883081][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  636.888300][   T31]  ? __pfx_kthread+0x10/0x10
[  636.892909][   T31]  ret_from_fork+0x4bc/0x870
[  636.897525][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  636.902668][   T31]  ? __switch_to_asm+0x39/0x70
[  636.907469][   T31]  ? __switch_to_asm+0x33/0x70
[  636.912276][   T31]  ? __pfx_kthread+0x10/0x10
[  636.916878][   T31]  ret_from_fork_asm+0x1a/0x30
[  636.921689][   T31]  </TASK>
[  636.925104][   T31] Kernel Offset: disabled
[  636.929438][   T31] Rebooting in 86400 seconds..