last executing test programs:

11.460310278s ago: executing program 4 (id=5238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = dup2(r0, r0)
futex(0x0, 0x83, 0x102, 0x0, 0x0, 0x3)
r2 = openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x4001, 0x8, 0x2a}, 0x18)
r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_PEC(r3, 0x708, 0x10)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x1, "fd5a44512b7e1b0020ed2abb4301002700"}})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000680)={&(0x7f0000000600)=[{0x40, 0xc00, 0x95, &(0x7f0000000200)="b96ab394e7f7b299e03983bfcf4e1093daa69d49f907c91e1bde2e8ddaca7583c7f27f84e018a0a601356e828d14678fd892648843763c31f4a6e7b6b13a26037afb45b5dca774b408d5d35a3a0bfda146c12e108f052763b239d42ee145f7eddabbe9c65b0c4cd06e3a8f8d8347d32682e479960a9975a321eb75f6dced9302eb378575d33f5f6a9f9b94d1214e12220212ba5caa"}, {0x7614, 0x10, 0x6, &(0x7f00000002c0)="a62dc42a09bd"}, {0x0, 0x800, 0xa2, &(0x7f0000000300)="25cd06cbaa618e4172ced69d582184bde22a0c2de2b9566cd3fad7bf95c1821ab91e8b22195d8cc8f327e202695e56bde1e58ad6655d50f5689c0cc5d71496dba449da1e466279922635152fe3f7e4e1d33b00456f1bf35ded6e10a919a098bcc18b31b87a7dec18e902ad07edac7fe42e692078216df0e8c37d27f73de0933593a92b1ae610b2b46acd97567a2b4a744d8da960cf59935e99b674eef2244d4cc610"}, {0x8, 0x9e00, 0xf1, &(0x7f00000003c0)="afd62a814161774ed272af6613b167b13fcfcb4b6acdc2dcc5b5210ce3727c7ad186da4314fdf791c2963a86a3649115c295a1a9b83641636c970a8a5541a078ff37a3fa50b69a6e76990bf5654a7a65e9bbfb44f86dfb99bc0ecaa3fbf9917b01cde9e58705ac3f3b011eb12e895aeeb534aa781da321e2903160bc709567d452731212923cee0b44b22d0e8da597bee37bf8038d555b44b5a5e5eae924c871f947b362a857ab5591ff468e28ed5591f6e33144ec68d3bcecfb96c0a741e65910a4ade7f9f3fb4068874412355af822bc046b1ad99f73ce000d4a3c1e115f81c2a39b470066152f6f6413fe112d9e6ba1"}, {0x1, 0x800, 0x5e, &(0x7f00000004c0)="3f007b30b823a4b80a5dc735a6e053c2bba19255d860efc3ee8bb5614b42cb9bf5deed71c47133207efd03c82f1c52994f23ef858eaf166e37028e64ddfcb4b4f4973d2648da7ee618875b5972c5731c9cadc4cfa6de8ade3ae1429c1bef"}, {0x800, 0x1010, 0x71, &(0x7f0000000540)="cdd1db6b6d84795827fa515e04306c8b33e558fc17bc1f730aa274d7dc9784755c6e7b80373c1c5025a75babc8ae6c1a52dcb26e1e1dd0932006a644e758b8c0c221927e05958db4858d0fe76c1a8800aceb5378fdea62778bec1a79c38ae8894350b866618fcd84ca609eb87cacaf421f"}, {0x8, 0xe400, 0x0, &(0x7f00000005c0)}], 0x7})
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r4 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, &(0x7f0000000140)})
syz_usb_connect(0x0, 0x62, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d24060101030200010006000609240305050306058109240306010304050507240405"], 0x0)

8.291890694s ago: executing program 4 (id=5257):
unshare(0x24060400)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "4859330480e3ff01", "b8b7cab9d1190205214734129f9cc895", "497f9c91", "aa30a02fd2dc584e"}, 0x28)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x8000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r5, 0x0, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, &(0x7f0000000180)})
r7 = socket$unix(0x1, 0x5, 0x0)
dup2(r7, r6)
r8 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="66b8007000000f23c00f21f8663503000a000f23f80f01c3673e660f3a62f10e0f20c06635000000800f22c0f30f001c66b9800000c00f326635001000000f30d06443660f060f01fb0f0120", 0x4c}], 0x1, 0x45, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0)
write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8.240555758s ago: executing program 1 (id=5258):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xffff, 0xd}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.974171787s ago: executing program 4 (id=5260):
socket$alg(0x26, 0x5, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x48a, 0x40000)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x1)
landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
r4 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_io_uring_setup(0x497, &(0x7f0000000340)={0x0, 0x7079, 0x0, 0x3, 0x8000288}, &(0x7f0000000200), &(0x7f0000000240))
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41c5", 0x3}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f0000003440)=[{&(0x7f00000000c0)="c61221b68a8b", 0x6}], 0x1}}], 0x2, 0x0)
shutdown(r6, 0x1)
getsockopt$bt_hci(r6, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)

7.808002619s ago: executing program 1 (id=5261):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1)
fcntl$setpipe(r1, 0x407, 0x176)
vmsplice(r2, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)

6.588813745s ago: executing program 1 (id=5264):
r0 = syz_open_dev$video4linux(0x0, 0x6, 0x40800)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a", 0xd7}], 0x1}, 0x40080)
socket(0xa, 0x5, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd70a, 0x65}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000841)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x400102, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'tunl0\x00'})
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
vmsplice(r0, 0x0, 0x0, 0x2)
setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000005c0)=@assoc_value={r6, 0x933b}, 0x8)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32, @ANYBLOB="200001", @ANYRES32, @ANYBLOB], 0x38}}, 0x20044050)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1400000016000b43d27a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/70, 0x46}], 0x2}, 0x0)

6.506423044s ago: executing program 3 (id=5265):
syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r3, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
write$FUSE_NOTIFY_STORE(r3, 0x0, 0x28)
close(r3)
execve(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYRES32=r2], 0x50)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f00090582"], 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

6.208292643s ago: executing program 4 (id=5266):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffdc9}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3aa0}}, 0x0)

5.690233057s ago: executing program 4 (id=5269):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x1b, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c5"}, @pad1, @pad1, @padn, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x330}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5.184001945s ago: executing program 2 (id=5270):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept(r0, 0x0, 0x0)
socket(0x2b, 0x80801, 0x1)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000040)=0x3ff, 0xc, 0x0)
inotify_init()
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x5, 0x2})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

5.125238812s ago: executing program 4 (id=5271):
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)="b884", 0x2}], 0x1)

5.03182767s ago: executing program 2 (id=5272):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd2835090000330000010902240001000020080904140002030002000921fdff000122450009058103"], 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7fffffff, 0x2000)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000180))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_open_dev$dri(&(0x7f00000001c0), 0x3ff, 0x4800)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TCFLSH(r4, 0x540b, 0x2)
ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000200)=0xe)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, <r5=>0x0], &(0x7f0000000200), 0x2, r3})
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20)
ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r5], &(0x7f0000000200), 0x0, 0x200})
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000006, 0xb0331, 0xffffffffffffffff, 0x8000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000bf09000000000000550901000000000095000000000000008500000007000000bf910000000000ae5d5a761e40547e008500000085000000b700000000000000950000000000000000000000000000000000000000000000f33061582aac628f5cdda2c7fecefdbc5cbbc0293cb7006576853413a90fe4ad476bc1912ad287b078358c4e"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbb)
syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB='@#E'], 0x0, 0x0, 0x0, 0x0}, 0x0)

4.555909454s ago: executing program 1 (id=5274):
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_usb_connect(0x3, 0x36, &(0x7f0000002100)={{0x12, 0x1, 0x300, 0xcd, 0x97, 0x2c, 0x8, 0x3923, 0x718a, 0x9b2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0xa5, 0x81, 0x2, 0x1f, 0xc7, 0xfd, 0xf1, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x0, 0x10, 0x7f}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x3, 0x81, 0xf7}}]}}]}}]}}, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00'})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x305200, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80001, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0x7, 0x9}, {0xfff2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c9e0}, 0x4008080)
ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r12=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r11, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18)
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'})

3.853694422s ago: executing program 1 (id=5277):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a300000000014000000110001"], 0x118}}, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/ip_tables_matches\x00')
preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0xced}], 0x1, 0x6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={{0xfe, 0x1}, {0xe, 0x4}, 0x2005, 0xbfb5})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0x1000809d)
r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @stepwise={0x0, 0x400}})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0))
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000406030000000000000000000300000105000100e9ffffffe810030073797a31000000000900020073797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x1800}, 0x40004)
openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0)
ioctl$PTP_PIN_GETFUNC2(r7, 0xc0603d0f, &(0x7f0000000040)={'\x00', 0x1, 0x2, 0x3})
syz_usb_connect(0x2, 0x4ae, &(0x7f0000001280)=ANY=[@ANYRESDEC=r6, @ANYBLOB="8034e87447861dfe895fc8bf7e14e06d82b23100003cff2d901497140dff3df24eaab55a170f3baf3b86c96d8adc6a77c00ca812d6af7bcd4167f64d9a5ab7c8d721afed3ea867480c00009b010000000000", @ANYRES8=r5, @ANYRESHEX], 0x0)

3.134558474s ago: executing program 3 (id=5278):
mkdir(&(0x7f0000000400)='./file0\x00', 0x20) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4008000) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40002000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) (async)
sendmsg(r2, 0x0, 0x0) (async)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockname(r3, &(0x7f00000000c0)=@l2tp6, &(0x7f0000000000)=0x80) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}}, &(0x7f0000000280)=0x84) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) (async)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
shutdown(r3, 0x2) (async)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150fdf0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcb05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc28afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f2724f5024a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4a7e642fdc56d11c2ec87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b09ffd42a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3da452647e342e2591be4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a00", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000, 0x0, r6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50)

3.068168379s ago: executing program 2 (id=5279):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@can, 0x80, 0x0}}], 0x1, 0x40001)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x14, 0x8, 0x0, 0x0}}, 0x10)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0)
syz_emit_ethernet(0xa7, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac1414aa03009078032400004f0000000000000003010000ac1414bbac141436865c00080000000ce256b28c4cdfb7fd41fe04000000fb520009789607675ca6380006e706d30af005cfa11c0510c600000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c00000202359bdea14b9b616f51c3854064b9c33d13093d13caa68c8c3759bb3881d9cda963ed5bc95c91b2b4d58310cfcadeacf58b626c925f5bdf000000000000000000"], 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064d0, &(0x7f0000000140)={0x0})
socket(0x2, 0x805, 0x0)

3.014627507s ago: executing program 3 (id=5281):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000180)="86", 0x1, 0x20000100, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @private0, 0x2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r2, 0x3}, 0x8)

2.565741473s ago: executing program 0 (id=5283):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14)
ioctl$XFS_IOC_FREE_EOFBLOCKS(r0, 0x8080583a, &(0x7f0000000080)={0x5, 0x2, 0xa, 0x8000, 0x2, 0x0, 0x4})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000180)={0x20, 0x0, &(0x7f0000000100)=[{}, {0x1, 0x1}, {0x1}, {0x0, 0x3}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x1}], 0xdeadbeef, 0x8, 0x9})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x34, 0x66, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xffe0, 0x10}, {0x3, 0xc}, {0x7, 0x10}}, [{0x8}, {0x8, 0xb, 0x72d2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/25, 0x19, 0x0, &(0x7f0000000300)=""/230, 0xe6}, &(0x7f0000000440)=0x40)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000480), 0x10080, 0x0)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x7fffffffffffffff)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
write(r4, &(0x7f00000004c0)="62fd0e815c0b0aff67c0efd94d3a0372c94b0a564bf315068317ac7d4d4b7fbfba31c2dd2e7fd185402fb70a64927c9dd5b53c7c4c83c3a6db91f23ed20224a34a4c1b51a1732a6f57116405583f7534ec198f52b38dbb059a644b4ca31ed09542fadcd9c1bfb97514a85485a6a3f00e02516a9880ab6993493ffb27339226aedb65a0d8819f8502f0a7b643d6d8beda6905505ac16443f21abc582e346d57d74309457306f5b9cd96126c8e102e09e4ca3856c3335f44c710184d", 0xbb)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x591000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000005c0)={0x48, 0x2, 0x0, 0x0, <r6=>0x0})
ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f0000000640)={0x8, r6})
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000680)=0x848, 0x4)
recvmsg(r7, &(0x7f00000009c0)={&(0x7f00000006c0)=@isdn, 0x80, &(0x7f0000000980)=[{&(0x7f0000000740)=""/141, 0x8d}, {&(0x7f0000000800)=""/226, 0xe2}, {&(0x7f0000000900)=""/109, 0x6d}], 0x3}, 0x1)
r8 = io_uring_setup(0x320b, &(0x7f0000000a00)={0x0, 0x73c0, 0x1, 0x0, 0x356})
io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r8, 0x19, &(0x7f0000000a80)={0x5, 0xfffffff7, 0x1ff000000000000}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10080, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1c)
ioctl$FS_IOC_FSGETXATTR(r10, 0x801c581f, &(0x7f0000000b00)={0x2449, 0x392c4891, 0xe, 0x8, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x4058534c, 0xffffffffffffffff)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, <r11=>0x0})
ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000b80)={0x8, r11})
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000c00)={0xfff, 0x80000, <r12=>r7})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r12)
ioctl$DRM_IOCTL_GET_CLIENT(r12, 0xc0286405, &(0x7f0000000c40)={0x44c5, 0xfffffffc, {<r13=>0xffffffffffffffff}, {0xee01}, 0xa, 0x401})
ptrace$getregset(0x4204, r13, 0x4, &(0x7f0000001c80)={&(0x7f0000000c80)=""/4096, 0x1000})
r14 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(r14, 0x6609)

2.4565618s ago: executing program 0 (id=5284):
socket(0x10, 0x3, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00')
userfaultfd(0x1)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x74, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (fail_nth: 1)

2.031956511s ago: executing program 3 (id=5285):
unshare(0x24060400)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x304}, "4859330480e3ff01", "b8b7cab9d1190205214734129f9cc895", "497f9c91", "aa30a02fd2dc584e"}, 0x28)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x8000)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x0, &(0x7f0000000180)})
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r5)
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = dup(0xffffffffffffffff)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="66b8007000000f23c00f21f8663503000a000f23f80f01c3673e660f3a62f10e0f20c06635000000800f22c0f30f001c66b9800000c00f326635001000000f30d06443660f060f01fb0f0120", 0x4c}], 0x1, 0x45, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0)
write$tun(r1, &(0x7f00000000c0)=ANY=[], 0xffe)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r10, 0xe8, 0x0}, 0x10)

1.88328289s ago: executing program 2 (id=5286):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00', 0x6)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
syz_genetlink_get_family_id$devlink(&(0x7f0000000900), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000000080)=0x8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = dup2(r0, r5)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000001c0), 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r4}, 0x8)

1.736447389s ago: executing program 3 (id=5288):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
chroot(0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000240)={0x4, @raw_data="42a93de9aeb8b9ad3092ff126f8d65308aabc74a8a1fa4c655e693119ccf0ea1d69f9c53a29bdf55ccaadb07123b420a0c7ed675566fc485233a231c554e4a9af988366f9441b74cbae6228c7a63607037eb55a8973097dcc6b7449af4c88c03277f3ea9a0ebc53b50686ecf3e83abbfa2f105c96b4132c5b05578ca80538edc5096412f5e2c4f58d885341bff01af9e92e648df112638ae5bcbc64da7ecc5a4d5ed650212bdd954e0e86109fd10c500c6a2fbd43e031686c6ba9909885bb30bb33467df65b84586"})

1.619281646s ago: executing program 2 (id=5289):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x158, 0x29, 0x36, {0x5e, 0x27, '\x00', [@generic={0xff, 0x1b, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c5"}, @pad1, @pad1, @padn, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x330}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.474984282s ago: executing program 0 (id=5290):
socket$alg(0x26, 0x5, 0x0)
socket(0x2b, 0x80801, 0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
inotify_init()
r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x5, 0x2})
writev(r1, 0x0, 0x0)

1.161566979s ago: executing program 0 (id=5291):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r0], 0x119)

1.13694788s ago: executing program 2 (id=5292):
socket$alg(0x26, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x48a, 0x40000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x1)
landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41c5", 0x3}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @private1, 0x3}, 0x1c, &(0x7f0000003440)=[{&(0x7f00000000c0)="c61221b68a8b", 0x6}], 0x1}}], 0x2, 0x0)
shutdown(r4, 0x1)

850.986065ms ago: executing program 0 (id=5293):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
accept(r0, 0x0, 0x0)
socket(0x2b, 0x80801, 0x1)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x2, &(0x7f0000000040)=0x3ff, 0xc, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r2, 0xffffffffffffffff, 0x5, 0x2})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)

516.325972ms ago: executing program 0 (id=5294):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80000, 0x0, 0x12}, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5})
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, &(0x7f0000000280))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r1, r0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r6, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000008c0)={0x0, 0x200})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_rdma(0x10, 0x3, 0x14)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000)
r10 = syz_pidfd_open(r9, 0x0)
ioctl$FS_IOC_GETVERSION(r10, 0xc040ff0b, 0x0)

372.075351ms ago: executing program 3 (id=5295):
syz_usb_connect(0x0, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000018a2bae000824020100020000092402020000000000090585da"], 0x0)

0s ago: executing program 1 (id=5296):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
sendmmsg$sock(r1, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@can, 0x80, 0x0}}], 0x1, 0x40001)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x14, 0x8, 0x0, 0x0}}, 0x10)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x8c081, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0)
syz_emit_ethernet(0xa7, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac1414aa03009078032400004f0000000000000003010000ac1414bbac141436865c00080000000ce256b28c4cdfb7fd41fe04000000fb520009789607675ca6380006e706d30af005cfa11c0510c600000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c00000202359bdea14b9b616f51c3854064b9c33d13093d13caa68c8c3759bb3881d9cda963ed5bc95c91b2b4d58310cfcadeacf58b626c925f5bdf000000000000000000"], 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064d0, &(0x7f0000000140)={0x0})
socket(0x2, 0x805, 0x0)

kernel console output (not intermixed with test programs):

 audit(1772171406.855:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27887 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1775.288944][   T30] audit: type=1326 audit(1772171406.855:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27887 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1775.312180][   T30] audit: type=1326 audit(1772171406.855:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27887 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1775.335281][   T30] audit: type=1326 audit(1772171406.855:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27887 comm="syz.1.4778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1775.663923][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[ 1775.674596][T23281] usb 3-1: USB disconnect, device number 13
[ 1776.371174][T23281] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1776.435612][T27908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1776.459116][T27908] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1776.559426][T23281] usb 3-1: Using ep0 maxpacket: 32
[ 1776.573468][T23281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1776.605586][T23281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1776.641101][T23281] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1776.686999][T23281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1776.694420][T27912] program syz.3.4786 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1776.721803][T23281] usb 3-1: config 0 descriptor??
[ 1776.745517][T23281] hub 3-1:0.0: USB hub found
[ 1776.880188][T27910] random: crng reseeded on system resumption
[ 1776.907626][T27917] FAULT_INJECTION: forcing a failure.
[ 1776.907626][T27917] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1777.002760][T23281] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1777.051060][T27917] CPU: 0 UID: 0 PID: 27917 Comm: syz.4.4787 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1777.051088][T27917] Tainted: [L]=SOFTLOCKUP
[ 1777.051094][T27917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1777.051104][T27917] Call Trace:
[ 1777.051111][T27917]  <TASK>
[ 1777.051119][T27917]  dump_stack_lvl+0xe8/0x150
[ 1777.051147][T27917]  should_fail_ex+0x412/0x560
[ 1777.051182][T27917]  _copy_to_user+0x31/0xb0
[ 1777.051204][T27917]  simple_read_from_buffer+0xe1/0x170
[ 1777.051230][T27917]  proc_fail_nth_read+0x1bb/0x230
[ 1777.051258][T27917]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1777.051283][T27917]  ? rw_verify_area+0x2a6/0x4d0
[ 1777.051299][T27917]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1777.051320][T27917]  vfs_read+0x20c/0xa70
[ 1777.051334][T27917]  ? fdget_pos+0x246/0x320
[ 1777.051361][T27917]  ? __pfx___mutex_lock+0x10/0x10
[ 1777.051380][T27917]  ? __pfx_vfs_read+0x10/0x10
[ 1777.051399][T27917]  ? __fget_files+0x2a/0x420
[ 1777.051423][T27917]  ? __fget_files+0x3a0/0x420
[ 1777.051444][T27917]  ? __fget_files+0x2a/0x420
[ 1777.051475][T27917]  ksys_read+0x150/0x270
[ 1777.051494][T27917]  ? __pfx_ksys_read+0x10/0x10
[ 1777.051522][T27917]  do_syscall_64+0x14d/0xf80
[ 1777.051545][T27917]  ? trace_irq_disable+0x3b/0x150
[ 1777.051568][T27917]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1777.051586][T27917]  ? clear_bhb_loop+0x40/0x90
[ 1777.051608][T27917]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1777.051624][T27917] RIP: 0033:0x7f8b5675cfce
[ 1777.051640][T27917] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1777.051653][T27917] RSP: 002b:00007f8b575c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1777.051673][T27917] RAX: ffffffffffffffda RBX: 00007f8b575c96c0 RCX: 00007f8b5675cfce
[ 1777.051683][T27917] RDX: 000000000000000f RSI: 00007f8b575c90a0 RDI: 0000000000000005
[ 1777.051693][T27917] RBP: 00007f8b575c9090 R08: 0000000000000000 R09: 0000000000000000
[ 1777.051701][T27917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1777.051711][T27917] R13: 00007f8b56a16038 R14: 00007f8b56a15fa0 R15: 00007f8b56b3fa48
[ 1777.051738][T27917]  </TASK>
[ 1777.130372][T27921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4789'.
[ 1777.442062][    C0] raw-gadget.0 gadget.2: ignoring, device is not running
[ 1777.449340][T23281] usbhid 3-1:0.0: can't add hid device: -32
[ 1777.455354][T23281] usbhid 3-1:0.0: probe with driver usbhid failed with error -32
[ 1777.501664][T23281] usb 3-1: USB disconnect, device number 14
[ 1777.865120][T27930] netlink: 'syz.0.4791': attribute type 10 has an invalid length.
[ 1778.225070][T27912] bond1 (unregistering): Released all slaves
[ 1779.290333][T21150] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1779.457962][T21150] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1779.483662][T21150] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1779.520426][T21150] usb 3-1: config 0 has no interface number 0
[ 1779.526567][T21150] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 43520, setting to 64
[ 1779.564310][T21150] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1779.582220][T21150] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1779.592945][T21150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1779.610331][T21150] usb 3-1: Product: syz
[ 1779.614532][T21150] usb 3-1: Manufacturer: syz
[ 1779.619107][T21150] usb 3-1: SerialNumber: syz
[ 1779.632553][T21150] usb 3-1: config 0 descriptor??
[ 1779.840732][T21150] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1779.865687][T21150] usb 3-1: USB disconnect, device number 15
[ 1779.900364][T16079] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1780.061729][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1780.090476][T16079] usb 1-1: Using ep0 maxpacket: 8
[ 1780.095769][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1780.107688][T16079] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1780.132171][T16079] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1780.147889][T27969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1780.162821][T16079] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1780.173243][T16079] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1780.173511][T27969] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1780.190414][T16079] usb 1-1: SerialNumber: syz
[ 1780.198690][T16079] cdc_acm 1-1:1.0: skipping garbage
[ 1780.211473][T27969] dummy0: left promiscuous mode
[ 1780.220299][T16079] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 1780.230150][T27969] dummy0: left allmulticast mode
[ 1780.236358][T16079] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[ 1780.262768][T16079] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[ 1780.970406][T16079] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 1781.153424][T16079] usb 3-1: Using ep0 maxpacket: 32
[ 1781.173423][T16079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1781.200339][T16079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1781.225014][T16079] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1781.253806][T16079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1781.275906][T16079] usb 3-1: config 0 descriptor??
[ 1781.393194][T27985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1781.403557][T27985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1781.432361][T16079] hub 3-1:0.0: USB hub found
[ 1781.642867][T16079] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1781.660879][T15390] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 1781.713585][T15390] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 1781.815117][T15390] usb 4-1: USB disconnect, device number 14
[ 1781.887353][T27993] netlink: 'syz.4.4809': attribute type 1 has an invalid length.
[ 1781.913572][T27993] netlink: 'syz.4.4809': attribute type 2 has an invalid length.
[ 1782.064712][T16079] usbhid 3-1:0.0: can't add hid device: -71
[ 1782.081799][T16079] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1782.140751][T16079] usb 3-1: USB disconnect, device number 16
[ 1782.160899][T15390] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1782.316374][T28000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1782.327351][T28000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1782.338391][T15390] usb 4-1: config 4 has an invalid interface number: 3 but max is 0
[ 1782.347498][T15390] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1782.359098][T15390] usb 4-1: config 4 has no interface number 0
[ 1782.366816][T15390] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1782.380783][T15390] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1782.395620][T15390] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1782.892291][T28006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1782.901505][T23278] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 1782.910625][T28006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1783.080923][T23278] usb 3-1: Using ep0 maxpacket: 32
[ 1783.087395][T23278] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1783.096691][T23278] usb 3-1: config 0 has no interface number 0
[ 1783.105849][T23278] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1783.115805][T23278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.124771][T23278] usb 3-1: Product: syz
[ 1783.128934][T23278] usb 3-1: Manufacturer: syz
[ 1783.134501][T23278] usb 3-1: SerialNumber: syz
[ 1783.141480][T23278] usb 3-1: config 0 descriptor??
[ 1783.152731][T23278] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1783.165826][T23278] usb 3-1: selecting invalid altsetting 1
[ 1783.172585][T23278] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1783.183256][T23278] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1783.194557][T23278] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1783.203841][T23278] usb 3-1: media controller created
[ 1783.226886][T23278] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1783.266889][T16079] usb 1-1: USB disconnect, device number 16
[ 1783.420080][T28019] openvswitch: netlink: Flow key attr not present in new flow.
[ 1783.481264][T15390] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1783.495716][T15390] stv0680 4-1:4.3: STV(e): camera ping failed!!
[ 1783.505224][T15390] stv0680 4-1:4.3: last error: 0,  command = 0x0
[ 1783.555813][T23278] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1783.725883][T15390] usb 4-1: USB disconnect, device number 15
[ 1783.744305][T23278] usb 3-1: USB disconnect, device number 17
[ 1784.352298][T28031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4819'.
[ 1784.516261][T28034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1784.531742][T28034] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1784.621761][T28041] netlink: 'syz.0.4822': attribute type 1 has an invalid length.
[ 1784.630870][T28041] netlink: 'syz.0.4822': attribute type 2 has an invalid length.
[ 1784.730437][T21150] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[ 1784.769790][T16079] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1784.860383][T21150] usb 3-1: device descriptor read/64, error -71
[ 1784.920066][T16079] usb 4-1: Using ep0 maxpacket: 32
[ 1784.926689][T16079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1784.938469][T16079] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1784.948967][T16079] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1784.958811][T16079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1784.975530][T16079] usb 4-1: config 0 descriptor??
[ 1784.984176][T16079] hub 4-1:0.0: USB hub found
[ 1785.100353][T21150] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1785.172914][T28044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1785.203321][T28044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1785.230272][T21150] usb 3-1: device descriptor read/64, error -71
[ 1785.343557][T21150] usb usb3-port1: attempt power cycle
[ 1785.411453][T16079] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1785.520382][T23273] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1785.636131][T16079] usbhid 4-1:0.0: can't add hid device: -71
[ 1785.647198][T16079] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1785.671285][T23273] usb 1-1: Using ep0 maxpacket: 8
[ 1785.678156][T23273] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1785.688800][T23273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1785.700373][T21150] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[ 1785.708367][T16079] usb 4-1: USB disconnect, device number 16
[ 1785.732570][T23273] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1785.756217][T21150] usb 3-1: device descriptor read/8, error -71
[ 1785.774116][T23273] pvrusb2: **********
[ 1785.778140][T23273] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1785.792625][T23273] pvrusb2: Important functionality might not be entirely working.
[ 1785.812972][T23273] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1785.825531][T23273] pvrusb2: **********
[ 1785.931635][ T2345] pvrusb2: Invalid write control endpoint
[ 1786.017677][ T2345] pvrusb2: Invalid write control endpoint
[ 1786.029782][T21150] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[ 1786.037051][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1786.050074][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1786.057655][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1786.071393][ T2345] pvrusb2: Device being rendered inoperable
[ 1786.071573][T21150] usb 3-1: device descriptor read/8, error -71
[ 1786.077385][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1786.094062][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1786.174078][   T30] audit: type=1326 audit(1772171417.815:2996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.178695][T23280] usb 1-1: USB disconnect, device number 17
[ 1786.211471][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1786.217094][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1786.228577][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1786.247126][T28061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1786.252576][T21150] usb usb3-port1: unable to enumerate USB device
[ 1786.276142][   T30] audit: type=1326 audit(1772171417.815:2997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.332893][   T30] audit: type=1326 audit(1772171417.815:2998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.388845][   T30] audit: type=1326 audit(1772171417.815:2999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.472795][   T30] audit: type=1326 audit(1772171417.815:3000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.531115][   T30] audit: type=1326 audit(1772171417.815:3001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.620926][   T30] audit: type=1326 audit(1772171417.815:3002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.704711][T28059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1786.720778][   T30] audit: type=1326 audit(1772171417.815:3003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.745004][T28059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1786.768596][T18619] kworker/0:2 (18619) used greatest stack depth: 13192 bytes left
[ 1786.815809][   T30] audit: type=1326 audit(1772171417.815:3004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1786.842053][   T30] audit: type=1326 audit(1772171417.815:3005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28056 comm="syz.4.4828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1787.051157][T28070] kvm: user requested TSC rate below hardware speed
[ 1787.414912][T28073] ipvlan2: entered allmulticast mode
[ 1787.426906][T28073] batadv_slave_1: entered allmulticast mode
[ 1787.436258][T28073] batman_adv: batadv0: Adding interface: ipvlan2
[ 1787.440279][T21150] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1787.443731][T28073] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1787.488313][T28073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1787.529447][T28073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1787.579307][T28073] batman_adv: batadv0: Interface activated: ipvlan2
[ 1787.615292][T21150] usb 1-1: Using ep0 maxpacket: 8
[ 1787.691109][T21150] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1787.773901][T21150] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1787.801674][T21150] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1787.846987][T28079] macvlan0: entered promiscuous mode
[ 1787.861443][T21150] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1787.861496][T28080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1787.922934][T28080] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1787.952858][T21150] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1787.966140][T28079] netlink: 'syz.3.4834': attribute type 1 has an invalid length.
[ 1788.003173][T21150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1788.070805][T28079] netlink: 'syz.3.4834': attribute type 2 has an invalid length.
[ 1788.311263][T28091] random: crng reseeded on system resumption
[ 1788.351461][T21150] usb 1-1: GET_CAPABILITIES returned 0
[ 1788.357015][T21150] usbtmc 1-1:16.0: can't read capabilities
[ 1789.046250][T28069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1789.112743][T28069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1789.125181][T28078] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4833'.
[ 1789.143769][    C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1789.362384][T28100] fuse: Bad value for 'fd'
[ 1789.374784][T28098] xfrm0: entered allmulticast mode
[ 1790.267614][T23281] usb 1-1: USB disconnect, device number 18
[ 1790.360676][T23280] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1790.388976][T28114] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4843'.
[ 1790.533920][T23280] usb 4-1: Using ep0 maxpacket: 32
[ 1790.543014][T23280] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1790.556764][T23280] usb 4-1: config 0 has no interface number 0
[ 1790.567682][T23280] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1790.583844][T23280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1790.610558][T23280] usb 4-1: Product: syz
[ 1790.614798][T23280] usb 4-1: Manufacturer: syz
[ 1790.627285][T23280] usb 4-1: SerialNumber: syz
[ 1790.640384][T23280] usb 4-1: config 0 descriptor??
[ 1790.655313][T23273] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[ 1790.658611][T23280] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1790.685581][T23280] usb 4-1: selecting invalid altsetting 1
[ 1790.693546][T23280] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1790.705739][T23280] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1790.717801][T23280] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1790.729108][T23280] usb 4-1: media controller created
[ 1790.754888][T23280] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1790.800116][T23273] usb 3-1: device descriptor read/64, error -71
[ 1790.895414][T23280] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1790.917964][T23280] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1790.968294][T23280] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1790.981915][T28122] FAULT_INJECTION: forcing a failure.
[ 1790.981915][T28122] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1790.997330][T28122] CPU: 1 UID: 0 PID: 28122 Comm: syz.1.4845 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1790.997358][T28122] Tainted: [L]=SOFTLOCKUP
[ 1790.997365][T28122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1790.997376][T28122] Call Trace:
[ 1790.997383][T28122]  <TASK>
[ 1790.997392][T28122]  dump_stack_lvl+0xe8/0x150
[ 1790.997438][T28122]  should_fail_ex+0x412/0x560
[ 1790.997464][T28122]  _copy_from_user+0x2d/0xb0
[ 1790.997489][T28122]  do_handle_open+0x57b/0x970
[ 1790.997513][T28122]  ? __pfx_do_handle_open+0x10/0x10
[ 1790.997534][T28122]  ? ksys_write+0x242/0x270
[ 1790.997554][T28122]  ? __pfx_ksys_write+0x10/0x10
[ 1790.997569][T28122]  ? __task_pid_nr_ns+0x28/0x470
[ 1790.997596][T28122]  do_syscall_64+0x14d/0xf80
[ 1790.997620][T28122]  ? trace_irq_disable+0x3b/0x150
[ 1790.997643][T28122]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1790.997661][T28122]  ? clear_bhb_loop+0x40/0x90
[ 1790.997682][T28122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1790.997700][T28122] RIP: 0033:0x7fd20279c799
[ 1790.997718][T28122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1790.997745][T28122] RSP: 002b:00007fd20361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[ 1790.997766][T28122] RAX: ffffffffffffffda RBX: 00007fd202a15fa0 RCX: 00007fd20279c799
[ 1790.997779][T28122] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003
[ 1790.997791][T28122] RBP: 00007fd20361f090 R08: 0000000000000000 R09: 0000000000000000
[ 1790.997802][T28122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1790.997813][T28122] R13: 00007fd202a16038 R14: 00007fd202a15fa0 R15: 00007fd202b3fa48
[ 1790.997841][T28122]  </TASK>
[ 1791.194322][T23273] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[ 1791.284653][T23280] usb 4-1: USB disconnect, device number 17
[ 1791.351873][T23273] usb 3-1: device descriptor read/64, error -71
[ 1791.465836][T28127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1791.475530][T23273] usb usb3-port1: attempt power cycle
[ 1791.491113][   T30] kauditd_printk_skb: 71 callbacks suppressed
[ 1791.491131][   T30] audit: type=1326 audit(1772171423.155:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1791.542317][T28131] FAULT_INJECTION: forcing a failure.
[ 1791.542317][T28131] name failslab, interval 1, probability 0, space 0, times 0
[ 1791.688532][   T30] audit: type=1326 audit(1772171423.155:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1791.718312][T28131] CPU: 1 UID: 0 PID: 28131 Comm: syz.1.4847 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1791.718332][T28131] Tainted: [L]=SOFTLOCKUP
[ 1791.718336][T28131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1791.718342][T28131] Call Trace:
[ 1791.718347][T28131]  <TASK>
[ 1791.718352][T28131]  dump_stack_lvl+0xe8/0x150
[ 1791.718370][T28131]  should_fail_ex+0x412/0x560
[ 1791.718385][T28131]  should_failslab+0xa8/0x100
[ 1791.718399][T28131]  ? do_getname+0x2e/0x250
[ 1791.718412][T28131]  kmem_cache_alloc_noprof+0x87/0x650
[ 1791.718434][T28131]  do_getname+0x2e/0x250
[ 1791.718445][T28131]  ? getname_flags+0x11/0x20
[ 1791.718458][T28131]  vfs_fstatat+0x45/0x170
[ 1791.718471][T28131]  __x64_sys_newfstatat+0x151/0x200
[ 1791.718486][T28131]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[ 1791.718507][T28131]  ? __pfx_ksys_write+0x10/0x10
[ 1791.718522][T28131]  do_syscall_64+0x14d/0xf80
[ 1791.718537][T28131]  ? trace_irq_disable+0x3b/0x150
[ 1791.718551][T28131]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.718561][T28131]  ? clear_bhb_loop+0x40/0x90
[ 1791.718573][T28131]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1791.718583][T28131] RIP: 0033:0x7fd20279c799
[ 1791.718594][T28131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1791.718603][T28131] RSP: 002b:00007fd2035fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[ 1791.718615][T28131] RAX: ffffffffffffffda RBX: 00007fd202a16090 RCX: 00007fd20279c799
[ 1791.718622][T28131] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[ 1791.718628][T28131] RBP: 00007fd2035fe090 R08: 0000000000000000 R09: 0000000000000000
[ 1791.718634][T28131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1791.718640][T28131] R13: 00007fd202a16128 R14: 00007fd202a16090 R15: 00007fd202b3fa48
[ 1791.718654][T28131]  </TASK>
[ 1791.908126][   T30] audit: type=1326 audit(1772171423.155:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1791.931466][   T30] audit: type=1326 audit(1772171423.225:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1791.954412][   T30] audit: type=1326 audit(1772171423.225:3081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1791.977337][   T30] audit: type=1326 audit(1772171423.225:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1792.000797][   T30] audit: type=1326 audit(1772171423.225:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1792.023734][   T30] audit: type=1326 audit(1772171423.225:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1792.046712][   T30] audit: type=1326 audit(1772171423.225:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1792.070138][   T30] audit: type=1326 audit(1772171423.225:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28123 comm="syz.4.4846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8b5675cfce code=0x7ffc0000
[ 1792.129915][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1792.136546][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.152710][T23273] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 1792.229887][T23273] usb 3-1: device descriptor read/8, error -71
[ 1792.256708][T28135] netlink: 'syz.3.4848': attribute type 1 has an invalid length.
[ 1792.300418][T28135] netlink: 'syz.3.4848': attribute type 2 has an invalid length.
[ 1792.384056][T28136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4849'.
[ 1792.407418][T28136] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4849'.
[ 1792.433131][T28137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1792.468681][T28137] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1792.500809][T23273] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[ 1792.530738][T23273] usb 3-1: device descriptor read/8, error -71
[ 1792.640579][T23273] usb usb3-port1: unable to enumerate USB device
[ 1792.732159][T28139] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4850'.
[ 1792.824904][T28146] fuse: Bad value for 'fd'
[ 1793.182126][T28153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1793.210125][T28153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1793.386190][T28155] random: crng reseeded on system resumption
[ 1794.262688][T28164] input: syz0 as /devices/virtual/input/input127
[ 1794.990805][T28182] macvlan0: entered promiscuous mode
[ 1795.002535][T28182] netlink: 'syz.2.4864': attribute type 1 has an invalid length.
[ 1795.015243][T28182] netlink: 'syz.2.4864': attribute type 2 has an invalid length.
[ 1795.130180][T28174] netlink: 23 bytes leftover after parsing attributes in process `syz.3.4862'.
[ 1795.505406][T28189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4866'.
[ 1795.772751][   T24] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[ 1795.823309][T28201] wg0: entered allmulticast mode
[ 1795.836606][T28201] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[ 1795.924912][T28203] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4868'.
[ 1795.976294][   T24] usb 1-1: device descriptor read/64, error -71
[ 1796.230406][   T24] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[ 1796.369809][   T24] usb 1-1: device descriptor read/64, error -71
[ 1796.380368][T23278] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1796.488430][   T24] usb usb1-port1: attempt power cycle
[ 1796.560863][T23278] usb 3-1: Using ep0 maxpacket: 32
[ 1796.609383][T28218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4873'.
[ 1796.871324][T23278] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1796.880778][T23278] usb 3-1: config 0 has no interface number 0
[ 1796.901093][T23278] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1796.916655][T23278] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1796.932085][T23278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.950753][T23278] usb 3-1: Product: syz
[ 1796.958201][T23278] usb 3-1: Manufacturer: syz
[ 1796.960338][T23273] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1797.050904][T23278] usb 3-1: SerialNumber: syz
[ 1797.073248][T23278] usb 3-1: config 0 descriptor??
[ 1797.093562][T23278] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1797.120372][   T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 1797.120809][T23278] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[ 1797.130613][T23273] usb 4-1: Using ep0 maxpacket: 16
[ 1797.153592][T23273] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1797.164915][   T24] usb 1-1: device descriptor read/8, error -71
[ 1797.183776][T23273] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1797.220687][T23273] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1797.414368][T23278] usb 3-1: USB disconnect, device number 26
[ 1797.439819][T23273] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1797.450006][   T24] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[ 1797.468981][T23273] usb 4-1: Product: syz
[ 1797.474686][T23273] usb 4-1: Manufacturer: syz
[ 1797.480981][   T24] usb 1-1: device descriptor read/8, error -71
[ 1797.492748][T23273] usb 4-1: SerialNumber: syz
[ 1797.504369][T23273] usb 4-1: config 0 descriptor??
[ 1797.591136][   T24] usb usb1-port1: unable to enumerate USB device
[ 1798.365717][T28224] netlink: 23 bytes leftover after parsing attributes in process `syz.2.4875'.
[ 1798.737962][T28235] netlink: 'syz.4.4877': attribute type 1 has an invalid length.
[ 1798.757141][T28235] netlink: 'syz.4.4877': attribute type 2 has an invalid length.
[ 1798.921511][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1799.090383][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1799.099133][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1799.110933][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1799.122065][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1799.131828][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1799.145289][   T24] usb 1-1: config 0 descriptor??
[ 1799.159108][   T24] hub 1-1:0.0: USB hub found
[ 1799.357931][   T24] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 1799.629836][T23273] usb 4-1: USB disconnect, device number 18
[ 1799.796346][   T24] usbhid 1-1:0.0: can't add hid device: -71
[ 1799.803623][   T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1799.844503][   T24] usb 1-1: USB disconnect, device number 23
[ 1799.910327][T21150] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[ 1800.058364][T28256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4884'.
[ 1800.125352][T28257] kAFS: unable to lookup cell '�'
[ 1800.183912][T21150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1800.228382][T21150] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1800.238626][T21150] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1800.247812][T21150] usb 3-1: Product: syz
[ 1800.253572][T21150] usb 3-1: Manufacturer: syz
[ 1800.259849][T21150] usb 3-1: SerialNumber: syz
[ 1800.278063][T21150] usb 3-1: config 0 descriptor??
[ 1800.507912][T21150] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1800.561800][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1800.728224][T28264] random: crng reseeded on system resumption
[ 1801.120464][   T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1801.270316][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1801.277405][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1801.304657][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1801.342329][   T24] usb 1-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[ 1801.363042][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1801.388366][   T24] usb 1-1: Product: syz
[ 1801.400440][   T24] usb 1-1: Manufacturer: syz
[ 1801.423703][   T24] usb 1-1: SerialNumber: syz
[ 1801.463627][   T24] usb 1-1: config 0 descriptor??
[ 1801.563989][T28270] netlink: 23 bytes leftover after parsing attributes in process `syz.4.4887'.
[ 1801.708706][   T24] usb 1-1: USB disconnect, device number 24
[ 1801.728907][T28277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4888'.
[ 1801.772100][T28277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1801.781464][T28277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1801.838847][T28275] netlink: 'syz.3.4889': attribute type 1 has an invalid length.
[ 1801.847298][T28275] netlink: 'syz.3.4889': attribute type 2 has an invalid length.
[ 1802.504245][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1802.513122][T28288] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1802.533894][T28288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1802.557193][T28288] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1802.585122][T28288] batman_adv: batadv0: Interface deactivated: ipvlan2
[ 1802.599839][T23273] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1802.600200][T28288] batman_adv: batadv0: Removing interface: ipvlan2
[ 1802.757641][T23281] usb 3-1: USB disconnect, device number 27
[ 1802.790853][T23273] usb 1-1: Using ep0 maxpacket: 8
[ 1802.799091][T23273] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 1802.809118][T23273] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1802.820445][T23273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1802.837081][T23273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1802.848314][T23273] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1802.864651][T23273] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1802.882589][T23273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.108345][T23273] usb 1-1: usb_control_msg returned -32
[ 1803.114834][T23273] usbtmc 1-1:16.0: can't read capabilities
[ 1803.140359][   T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1803.240645][T23281] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1803.290348][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1803.297133][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1803.308858][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1803.322851][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1803.332642][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.345500][   T24] usb 4-1: config 0 descriptor??
[ 1803.354708][   T24] hub 4-1:0.0: USB hub found
[ 1803.400680][T23281] usb 3-1: Using ep0 maxpacket: 16
[ 1803.413414][T23281] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1803.432628][T23281] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1803.443045][T23281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1803.452363][T23281] usb 3-1: Product: syz
[ 1803.456676][T23281] usb 3-1: Manufacturer: syz
[ 1803.467518][T23281] usb 3-1: SerialNumber: syz
[ 1803.475579][T23281] usb 3-1: config 0 descriptor??
[ 1803.556564][   T24] hub 4-1:0.0: 1 port detected
[ 1803.881098][T28295] usbtmc 1-1:16.0: usb_control_msg returned -32
[ 1804.023832][T23281] usb 1-1: USB disconnect, device number 25
[ 1804.162610][   T24] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1804.171218][   T24] usb 4-1: USB disconnect, device number 19
[ 1804.178214][T20286] usb 4-1: Failed to suspend device, error -71
[ 1804.943326][T28311] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4899'.
[ 1805.186801][   T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1805.240734][T23281] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1805.388840][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1805.405415][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[ 1805.421985][T23281] usb 4-1: Using ep0 maxpacket: 16
[ 1805.434060][T23281] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1805.447196][   T24] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1805.447814][T23281] usb 4-1: config 8 has an invalid interface number: 1 but max is 0
[ 1805.468319][T23281] usb 4-1: config 8 has no interface number 0
[ 1805.476252][T23281] usb 4-1: config 8 interface 1 altsetting 6 bulk endpoint 0x5 has invalid maxpacket 1023
[ 1805.486456][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.486482][   T24] usb 1-1: Product: syz
[ 1805.486496][   T24] usb 1-1: Manufacturer: syz
[ 1805.486512][   T24] usb 1-1: SerialNumber: syz
[ 1805.514357][T23281] usb 4-1: config 8 interface 1 has no altsetting 0
[ 1805.515181][   T24] usb 1-1: config 0 descriptor??
[ 1805.531769][T23281] usb 4-1: New USB device found, idVendor=0742, idProduct=2008, bcdDevice=49.20
[ 1805.544348][T23281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1805.555036][T28303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1805.566333][T23281] usb 4-1: Product: syz
[ 1805.572160][T23281] usb 4-1: Manufacturer: syz
[ 1805.577223][T23281] usb 4-1: SerialNumber: syz
[ 1805.577413][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1805.586166][T28309] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1805.902446][T23273] usb 3-1: USB disconnect, device number 28
[ 1806.049147][   T24] usb 1-1: USB disconnect, device number 26
[ 1806.192570][   T30] kauditd_printk_skb: 345 callbacks suppressed
[ 1806.192588][   T30] audit: type=1326 audit(1772171437.855:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.298403][   T30] audit: type=1326 audit(1772171437.885:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.318761][T22743] udevd[22743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1806.410048][   T30] audit: type=1326 audit(1772171437.885:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.480831][   T30] audit: type=1326 audit(1772171437.885:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.515686][T28328] netlink: 'syz.4.4903': attribute type 1 has an invalid length.
[ 1806.545265][T28328] netlink: 'syz.4.4903': attribute type 2 has an invalid length.
[ 1806.590529][   T30] audit: type=1326 audit(1772171437.885:3436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.678462][   T30] audit: type=1326 audit(1772171437.885:3437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.778100][   T30] audit: type=1326 audit(1772171437.885:3438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.885059][   T30] audit: type=1326 audit(1772171437.885:3439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1806.926825][   T30] audit: type=1326 audit(1772171437.885:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1807.036410][   T30] audit: type=1326 audit(1772171437.885:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28321 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f221bf9c799 code=0x7ffc0000
[ 1807.507005][T28348] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4907'.
[ 1807.831207][T23280] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[ 1807.974587][T23280] usb 1-1: device descriptor read/64, error -71
[ 1808.252448][T28368] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4913'.
[ 1808.271834][T23280] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 1808.430840][T23280] usb 1-1: device descriptor read/64, error -71
[ 1808.546163][T23280] usb usb1-port1: attempt power cycle
[ 1808.890861][T23280] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[ 1808.946343][T23280] usb 1-1: device descriptor read/8, error -71
[ 1809.190691][T23280] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[ 1809.228598][T23280] usb 1-1: device descriptor read/8, error -71
[ 1809.350892][T23280] usb usb1-port1: unable to enumerate USB device
[ 1809.795506][T28383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'.
[ 1809.805911][T28383] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1809.880120][T28383] bridge1: entered promiscuous mode
[ 1809.892945][T28383] netlink: 'syz.1.4917': attribute type 2 has an invalid length.
[ 1810.001689][T28383] netlink: 'syz.1.4917': attribute type 12 has an invalid length.
[ 1810.701918][T28387] netlink: 'syz.2.4918': attribute type 1 has an invalid length.
[ 1810.860503][T28387] netlink: 'syz.2.4918': attribute type 2 has an invalid length.
[ 1810.876086][T23281] HFC-S_USB 4-1:8.1: probe with driver HFC-S_USB failed with error -5
[ 1813.800542][T23281] usb 4-1: USB disconnect, device number 20
[ 1814.272113][T28430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4929'.
[ 1814.770389][T21150] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[ 1814.910597][T21150] usb 4-1: device descriptor read/64, error -71
[ 1815.041046][T23278] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1815.160738][T21150] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[ 1815.200793][T23278] usb 1-1: Using ep0 maxpacket: 16
[ 1815.214315][T23278] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1815.253781][T23278] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1815.263773][T23278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1815.280648][T23278] usb 1-1: Product: syz
[ 1815.290644][T23278] usb 1-1: Manufacturer: syz
[ 1815.296142][T23278] usb 1-1: SerialNumber: syz
[ 1815.300295][T21150] usb 4-1: device descriptor read/64, error -71
[ 1815.315112][T23278] usb 1-1: config 0 descriptor??
[ 1815.410929][T21150] usb usb4-port1: attempt power cycle
[ 1815.588563][T28483] dummy0: entered promiscuous mode
[ 1815.595446][T28483] dummy0: entered allmulticast mode
[ 1815.626992][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1815.627013][   T30] audit: type=1326 audit(1772171447.265:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1815.697816][   T30] audit: type=1326 audit(1772171447.265:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1815.752878][T21150] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 1815.781973][   T30] audit: type=1326 audit(1772171447.265:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1815.791422][T21150] usb 4-1: device descriptor read/8, error -71
[ 1815.826769][T28486] kAFS: unable to lookup cell '�'
[ 1816.020311][   T30] audit: type=1326 audit(1772171447.265:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.103683][   T30] audit: type=1326 audit(1772171447.265:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.131624][T21150] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1816.175230][T21150] usb 4-1: device descriptor read/8, error -71
[ 1816.220553][   T30] audit: type=1326 audit(1772171447.265:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.274918][   T30] audit: type=1326 audit(1772171447.265:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.321189][T21150] usb usb4-port1: unable to enumerate USB device
[ 1816.337227][   T30] audit: type=1326 audit(1772171447.265:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.516704][   T30] audit: type=1326 audit(1772171447.275:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1816.590974][   T30] audit: type=1326 audit(1772171447.275:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28478 comm="syz.1.4935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1817.366220][T28502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1817.380920][T23281] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 1817.417511][T28502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1817.560799][T23281] usb 4-1: Using ep0 maxpacket: 32
[ 1817.577058][T23281] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[ 1817.607789][T23281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1817.640790][T23281] usb 4-1: config 0 descriptor??
[ 1817.761675][T23281] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[ 1817.776763][T15390] usb 1-1: USB disconnect, device number 31
[ 1818.012232][   T24] usb 4-1: USB disconnect, device number 25
[ 1818.330732][T28515] openvswitch: netlink: Flow key attr not present in new flow.
[ 1821.745540][T28541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4948'.
[ 1821.930817][T15390] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1821.966662][T28508] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[ 1822.147818][T15390] usb 4-1: Using ep0 maxpacket: 8
[ 1822.190601][T15390] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1822.212110][T15390] usb 4-1: config 7 has an invalid interface number: 142 but max is 0
[ 1822.221152][T28508] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1822.239265][T15390] usb 4-1: config 7 has no interface number 0
[ 1822.245437][T28508] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 1822.289671][T15390] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[ 1822.304780][T28508] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1822.316879][T15390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1822.337826][T28508] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1822.351450][T15390] usb 4-1: Product: syz
[ 1822.358711][T28508] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1822.367694][T15390] usb 4-1: Manufacturer: syz
[ 1822.379178][T15390] usb 4-1: SerialNumber: syz
[ 1822.390781][T28508] usb 1-1: Product: syz
[ 1822.394956][T28508] usb 1-1: Manufacturer: syz
[ 1822.410028][T28508] usb 1-1: SerialNumber: syz
[ 1822.441434][T28508] usb 1-1: config 0 descriptor??
[ 1822.462721][T28508] usb 1-1: selecting invalid altsetting 0
[ 1824.321347][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1824.480222][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1824.487284][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1824.498920][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1824.546698][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1824.560943][   T24] pvrusb2: **********
[ 1824.572554][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1824.603357][   T24] pvrusb2: Important functionality might not be entirely working.
[ 1824.639104][T15390] usb 4-1: USB disconnect, device number 26
[ 1824.672646][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1824.698065][   T24] pvrusb2: **********
[ 1824.804751][ T2345] pvrusb2: Invalid write control endpoint
[ 1825.026901][   T24] usb 3-1: USB disconnect, device number 29
[ 1825.070817][ T2345] pvrusb2: Invalid write control endpoint
[ 1825.090128][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1825.137627][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1825.176584][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1825.203451][ T2345] pvrusb2: Device being rendered inoperable
[ 1825.274799][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1825.284289][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1825.297131][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1825.304648][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1825.316314][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1825.600564][T23273] usb 1-1: USB disconnect, device number 32
[ 1827.317791][T28600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4966'.
[ 1827.328123][T23273] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[ 1827.505207][T23273] usb 1-1: Using ep0 maxpacket: 8
[ 1827.512056][T28600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1827.534537][T23273] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1827.561191][T28600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1827.584598][T23273] usb 1-1: config 7 has an invalid interface number: 142 but max is 0
[ 1827.616778][T23273] usb 1-1: config 7 has no interface number 0
[ 1827.642611][T23273] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[ 1827.663183][T23273] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.700222][T23273] usb 1-1: Product: syz
[ 1827.723074][T23273] usb 1-1: Manufacturer: syz
[ 1827.737853][T23273] usb 1-1: SerialNumber: syz
[ 1828.739230][T28614] kAFS: unable to lookup cell '�'
[ 1829.811443][T15390] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1829.970804][T15390] usb 4-1: Using ep0 maxpacket: 32
[ 1829.988755][T15390] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1830.023686][T15390] usb 4-1: config 0 has no interface number 0
[ 1830.042822][T15390] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1830.066981][T15390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1830.078618][T15390] usb 4-1: Product: syz
[ 1830.084519][T15390] usb 4-1: Manufacturer: syz
[ 1830.095621][T23273] usb 1-1: USB disconnect, device number 33
[ 1830.118401][T15390] usb 4-1: SerialNumber: syz
[ 1830.155897][T15390] usb 4-1: config 0 descriptor??
[ 1830.168321][T28628] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000)
[ 1830.184798][T15390] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1830.207691][T15390] usb 4-1: selecting invalid altsetting 1
[ 1830.226131][T15390] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1830.254630][T15390] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1830.280665][T15390] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1830.290975][T15390] usb 4-1: media controller created
[ 1830.313871][T15390] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1830.494939][T15390] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1830.515551][T15390] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1830.627502][T15390] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1830.659985][   T30] kauditd_printk_skb: 62 callbacks suppressed
[ 1830.659997][   T30] audit: type=1326 audit(1772171462.325:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1830.730337][   T30] audit: type=1326 audit(1772171462.325:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1830.843303][   T30] audit: type=1326 audit(1772171462.395:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1830.847172][T15390] usb 4-1: USB disconnect, device number 27
[ 1831.044556][   T30] audit: type=1326 audit(1772171462.395:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.154813][   T30] audit: type=1326 audit(1772171462.395:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.332421][T28653] kAFS: unable to lookup cell '�'
[ 1831.380753][   T30] audit: type=1326 audit(1772171462.395:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.545146][   T30] audit: type=1326 audit(1772171462.395:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.668247][   T30] audit: type=1326 audit(1772171462.395:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.764312][   T30] audit: type=1326 audit(1772171462.395:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1831.816305][   T30] audit: type=1326 audit(1772171462.395:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28637 comm="syz.1.4979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd20279c799 code=0x7ffc0000
[ 1832.435440][T28672] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4989'.
[ 1833.145250][T23273] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1833.193381][T28683] fuse: Bad value for 'fd'
[ 1833.310429][T23273] usb 4-1: device descriptor read/64, error -71
[ 1833.573917][T23273] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1833.770414][T23273] usb 4-1: device descriptor read/64, error -71
[ 1833.890776][T23273] usb usb4-port1: attempt power cycle
[ 1834.253259][T23273] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[ 1834.303292][T23273] usb 4-1: device descriptor read/8, error -71
[ 1834.560162][T23273] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[ 1834.615278][T23273] usb 4-1: device descriptor read/8, error -71
[ 1834.780821][T23273] usb usb4-port1: unable to enumerate USB device
[ 1834.900914][T28703] kAFS: unable to lookup cell '�'
[ 1835.704559][   T30] kauditd_printk_skb: 91 callbacks suppressed
[ 1835.704576][   T30] audit: type=1326 audit(1772171467.365:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1835.780333][   T30] audit: type=1326 audit(1772171467.405:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8b5679c502 code=0x7ffc0000
[ 1835.812110][T23278] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1835.892533][   T30] audit: type=1326 audit(1772171467.545:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8b5679c597 code=0x7ffc0000
[ 1835.904934][T28717] fuse: Unknown parameter 'grou00000000000000000000'
[ 1835.997258][   T30] audit: type=1326 audit(1772171467.545:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b56759491 code=0x7ffc0000
[ 1836.044807][   T30] audit: type=1326 audit(1772171467.545:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8b5679d589 code=0x7ffc0000
[ 1836.071547][T23278] usb 4-1: Using ep0 maxpacket: 32
[ 1836.090644][T23278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1836.109404][T23278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1836.140791][T23278] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1836.179332][   T30] audit: type=1326 audit(1772171467.545:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8b567594fb code=0x7ffc0000
[ 1836.212477][T23278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1836.243744][T23278] usb 4-1: config 0 descriptor??
[ 1836.251189][   T30] audit: type=1326 audit(1772171467.545:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1836.292009][T23278] hub 4-1:0.0: USB hub found
[ 1836.313176][   T30] audit: type=1326 audit(1772171467.545:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1836.380743][T15390] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1836.390774][   T30] audit: type=1326 audit(1772171467.555:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1836.459098][T23278] hub 4-1:0.0: 1 port detected
[ 1836.465143][   T30] audit: type=1326 audit(1772171467.555:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28708 comm="syz.4.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b5679c799 code=0x7ffc0000
[ 1836.573191][T15390] usb 3-1: Using ep0 maxpacket: 8
[ 1836.588642][T15390] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1836.609284][T15390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1836.650908][T15390] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1836.689064][T15390] pvrusb2: **********
[ 1836.725241][T15390] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1836.738714][T15390] pvrusb2: Important functionality might not be entirely working.
[ 1836.748570][T15390] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1836.785988][T15390] pvrusb2: **********
[ 1836.851346][ T2345] pvrusb2: Invalid write control endpoint
[ 1836.996546][ T2345] pvrusb2: Invalid write control endpoint
[ 1837.014145][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1837.026613][T28737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5010'.
[ 1837.042408][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1837.053591][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1837.066575][T23273] usb 3-1: USB disconnect, device number 30
[ 1837.083227][T23278] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[ 1837.097898][   T13] usb 4-1: Failed to suspend device, error -71
[ 1837.108955][T23278] usb 4-1: USB disconnect, device number 32
[ 1837.119260][ T2345] pvrusb2: Device being rendered inoperable
[ 1837.128820][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1837.144154][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1837.161931][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1837.167608][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1837.180629][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1837.754927][T28749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1837.775094][T28749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1838.131657][T28754] kAFS: unable to lookup cell '�'
[ 1839.460463][T15390] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1839.722713][T15390] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1839.742951][T15390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1839.756860][T15390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1839.768808][T15390] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1839.783839][T15390] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1839.800250][T15390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.832672][T15390] usb 3-1: config 0 descriptor??
[ 1840.262021][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.277050][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.288536][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.356750][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.366453][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.416294][T28778] bond51: entered promiscuous mode
[ 1840.430776][T28778] 8021q: adding VLAN 0 to HW filter on device bond51
[ 1840.437925][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.669002][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.678437][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.692763][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.701998][T15390] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0
[ 1840.736909][T15390] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1840.776524][T28789] kAFS: unable to lookup cell '�'
[ 1840.893462][T28791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1840.905802][T23278] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1840.925134][T28791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1841.071007][T23278] usb 1-1: Using ep0 maxpacket: 32
[ 1841.088775][T23278] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1841.115138][T23278] usb 1-1: string descriptor 0 read error: -22
[ 1841.125342][T23278] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1841.138998][T23278] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1841.155154][T23278] usb 1-1: config 0 descriptor??
[ 1841.172464][T28783] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1841.183068][T23278] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1841.192406][T23278] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1841.490956][T16079] usb 1-1: USB disconnect, device number 34
[ 1841.615378][T28803] fuse: Bad value for 'group_id'
[ 1841.622975][T28803] fuse: Bad value for 'group_id'
[ 1841.630812][T21150] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1841.716164][T28808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5033'.
[ 1841.744978][T28808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1841.755304][T28808] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1841.771547][T21150] usb 4-1: device descriptor read/64, error -71
[ 1842.010410][T21150] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1842.150377][T21150] usb 4-1: device descriptor read/64, error -71
[ 1842.263825][T21150] usb usb4-port1: attempt power cycle
[ 1842.294933][T15390] usb 3-1: USB disconnect, device number 31
[ 1842.341022][T23278] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1842.501161][T23278] usb 1-1: device descriptor read/64, error -71
[ 1842.558530][T28830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1842.568398][T28830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1842.680531][T21150] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1842.711933][T21150] usb 4-1: device descriptor read/8, error -71
[ 1842.780636][T28833] kAFS: unable to lookup cell '�'
[ 1842.820810][T23278] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1842.870707][T15390] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1842.950364][T21150] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1842.970333][T23278] usb 1-1: device descriptor read/64, error -71
[ 1842.977294][T21150] usb 4-1: device descriptor read/8, error -71
[ 1843.095019][T15390] usb 3-1: Using ep0 maxpacket: 32
[ 1843.101140][T23278] usb usb1-port1: attempt power cycle
[ 1843.108267][T15390] usb 3-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[ 1843.118559][T15390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1843.133665][T15390] usb 3-1: config 0 descriptor??
[ 1843.144319][T15390] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[ 1843.173992][T21150] usb usb4-port1: unable to enumerate USB device
[ 1843.380190][T21150] usb 3-1: USB disconnect, device number 32
[ 1843.440672][T23278] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1843.461042][T23278] usb 1-1: device descriptor read/8, error -71
[ 1843.710847][T23278] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[ 1843.733173][T23278] usb 1-1: device descriptor read/8, error -71
[ 1843.851167][T23278] usb usb1-port1: unable to enumerate USB device
[ 1844.240637][T23278] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 1844.390748][T23278] usb 3-1: Using ep0 maxpacket: 16
[ 1844.398696][T23278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1844.445920][T23278] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1844.458543][T23278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1844.470472][T23278] usb 3-1: Product: syz
[ 1844.474680][T23278] usb 3-1: Manufacturer: syz
[ 1844.481839][T23278] usb 3-1: SerialNumber: syz
[ 1844.492537][T23278] usb 3-1: config 0 descriptor??
[ 1844.501015][T23278] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1844.512030][T23278] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1844.654575][T28844] netlink: 'syz.3.5045': attribute type 1 has an invalid length.
[ 1844.706153][T28844] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[ 1844.718507][T28844] bond1: (slave vxcan3): Error -95 calling set_mac_address
[ 1845.105270][T23278] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1845.357836][T28852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5047'.
[ 1845.513718][T28854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1845.526195][T23278] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1845.536022][T28854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1845.546336][T23278] em28xx 3-1:0.0: board has no eeprom
[ 1845.611532][T23278] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1845.621706][T23278] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1845.627358][T15390] em28xx 3-1:0.0: Binding DVB extension
[ 1845.637645][T23278] usb 3-1: USB disconnect, device number 33
[ 1845.663519][T23278] em28xx 3-1:0.0: Disconnecting em28xx
[ 1845.703082][T15390] em28xx 3-1:0.0: Registering input extension
[ 1845.711132][T23278] em28xx 3-1:0.0: Closing input extension
[ 1845.725156][T23278] em28xx 3-1:0.0: Freeing device
[ 1846.352571][T28864] netlink: 'syz.0.5051': attribute type 10 has an invalid length.
[ 1846.657293][T28870] netlink: 'syz.1.5053': attribute type 21 has an invalid length.
[ 1846.675456][T28870] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1846.740695][T28868] kAFS: unable to lookup cell '�'
[ 1846.766985][T28870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1846.774330][T28870] IPv6: NLM_F_CREATE should be set when creating new route
[ 1846.781783][T28870] IPv6: NLM_F_CREATE should be set when creating new route
[ 1846.789029][T28870] IPv6: NLM_F_CREATE should be set when creating new route
[ 1847.013797][T28876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1847.042082][T28876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1847.735625][T28888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1847.751446][T28888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1847.780589][T16079] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1847.900390][T21150] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1847.930370][T16079] usb 4-1: Using ep0 maxpacket: 16
[ 1847.937001][T16079] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1847.944463][T16079] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00
[ 1847.954149][T16079] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1847.966925][T16079] usb 4-1: config 0 descriptor??
[ 1848.053107][T21150] usb 3-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00
[ 1848.063132][T21150] usb 3-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3
[ 1848.071881][T21150] usb 3-1: Product: syz
[ 1848.076061][T21150] usb 3-1: Manufacturer: syz
[ 1848.081781][T21150] usb 3-1: SerialNumber: syz
[ 1848.090733][T21150] usb 3-1: config 0 descriptor??
[ 1848.120394][   T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[ 1848.187421][T16079] usbhid 4-1:0.0: can't add hid device: -71
[ 1848.204041][T16079] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1848.231027][T16079] usb 4-1: USB disconnect, device number 37
[ 1848.281803][   T24] usb 1-1: Using ep0 maxpacket: 32
[ 1848.288463][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1848.300866][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1848.315610][T21150] usb 3-1: USB disconnect, device number 34
[ 1848.325142][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1848.336892][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1848.348045][   T24] usb 1-1: config 0 descriptor??
[ 1848.363058][   T24] hub 1-1:0.0: USB hub found
[ 1848.407264][T28898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1848.417172][T28898] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1848.564351][   T24] hub 1-1:0.0: 1 port detected
[ 1848.569907][T16079] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1848.720361][T16079] usb 4-1: Using ep0 maxpacket: 16
[ 1848.727548][T16079] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[ 1848.736409][T16079] usb 4-1: config 4 has no interface number 0
[ 1848.743206][T16079] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1848.753709][T16079] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1848.764407][T16079] usb 4-1: config 4 interface 9 has no altsetting 0
[ 1848.775760][T16079] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 1848.787044][T16079] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1848.795759][T16079] usb 4-1: Product: syz
[ 1848.800616][T16079] usb 4-1: Manufacturer: syz
[ 1848.805225][T16079] usb 4-1: SerialNumber: syz
[ 1848.813023][T28880] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1848.822616][T28880] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1848.866014][T16079] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1849.053051][T28880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1849.077163][T28880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1849.104078][T23278] usb 4-1: USB disconnect, device number 38
[ 1849.114887][T20300] usb 4-1: Failed to submit usb control message: -71
[ 1849.139796][T20300] usb 4-1: unable to send the bmi data to the device: -71
[ 1849.157317][T20300] usb 4-1: unable to get target info from device
[ 1849.178504][T20300] usb 4-1: could not get target info (-71)
[ 1849.186034][T20300] usb 4-1: could not probe fw (-71)
[ 1849.188461][T15390] usb 1-1: USB disconnect, device number 39
[ 1849.192498][   T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[ 1849.283717][T28915] kAFS: unable to lookup cell '�'
[ 1849.400700][T28508] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1849.564006][T28508] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1849.584376][T28508] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1849.604136][T28508] usb 3-1: config 0 descriptor??
[ 1849.622876][T28508] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1850.031221][T28508] gspca_spca508: reg_read err -71
[ 1850.037892][T28508] gspca_spca508: reg_read err -71
[ 1850.062772][T28508] gspca_spca508: reg_read err -71
[ 1850.088289][T28508] gspca_spca508: reg_read err -71
[ 1850.114172][T28508] gspca_spca508: reg write: error -71
[ 1850.131188][T28508] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[ 1850.188567][T28508] usb 3-1: USB disconnect, device number 35
[ 1850.330996][T28930] xt_hashlimit: size too large, truncated to 1048576
[ 1850.700496][   T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1850.861757][   T24] usb 4-1: config 4 has an invalid interface number: 3 but max is 0
[ 1850.870640][   T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1850.883593][   T24] usb 4-1: config 4 has no interface number 0
[ 1850.891520][   T24] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 1850.902339][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1851.102808][   T24] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 1851.188754][T28508] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[ 1851.360947][T28508] usb 1-1: Using ep0 maxpacket: 32
[ 1851.368876][T28508] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1851.382100][T28508] usb 1-1: config 0 has no interface number 0
[ 1851.393056][T28508] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1851.411283][T28508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1851.440983][T28508] usb 1-1: Product: syz
[ 1851.451619][T28508] usb 1-1: Manufacturer: syz
[ 1851.460725][T28508] usb 1-1: SerialNumber: syz
[ 1851.475202][T28508] usb 1-1: config 0 descriptor??
[ 1851.496545][T28508] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1851.706169][T28508] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1851.751679][T28508] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1851.900319][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[ 1852.098912][T28967] kAFS: unable to lookup cell '�'
[ 1852.106842][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1852.126338][T28508] usb 1-1: USB disconnect, device number 40
[ 1852.136644][T28508] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1852.152774][T28508] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1852.166029][T28508] quatech2 1-1:0.51: device disconnected
[ 1852.239056][   T24] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[ 1852.248269][   T24] stv0680 4-1:4.3: STV(e): camera ping failed!!
[ 1852.266876][   T24] stv0680 4-1:4.3: last error: 0,  command = 0x0
[ 1852.472386][   T24] usb 4-1: USB disconnect, device number 39
[ 1852.813484][T28973] kvm: user requested TSC rate below hardware speed
[ 1853.254447][T28508] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[ 1853.336249][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.343652][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.493185][T28508] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[ 1853.503036][T28508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1853.526658][T28508] usb 1-1: config 0 has no interface number 0
[ 1853.545365][T28508] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1853.585706][T28508] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1853.617776][T28508] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1853.631132][T28508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1853.642421][T28508] usb 1-1: Product: syz
[ 1853.647289][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5099'.
[ 1853.647464][T28508] usb 1-1: Manufacturer: syz
[ 1853.664683][T28508] usb 1-1: SerialNumber: syz
[ 1853.676372][T28508] usb 1-1: config 0 descriptor??
[ 1853.924224][T28978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1853.967261][T28978] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1854.226936][T28508] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1854.376012][T28508] usb 1-1: USB disconnect, device number 41
[ 1854.884739][T29045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1854.904469][T29045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1855.080833][T29054] kAFS: unable to lookup cell '�'
[ 1855.178776][T29056] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 5 out of range (51000000..2150000000)
[ 1855.216955][T29056] FAULT_INJECTION: forcing a failure.
[ 1855.216955][T29056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1855.250397][T29056] CPU: 1 UID: 0 PID: 29056 Comm: syz.0.5108 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1855.250427][T29056] Tainted: [L]=SOFTLOCKUP
[ 1855.250434][T29056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1855.250444][T29056] Call Trace:
[ 1855.250452][T29056]  <TASK>
[ 1855.250460][T29056]  dump_stack_lvl+0xe8/0x150
[ 1855.250488][T29056]  should_fail_ex+0x412/0x560
[ 1855.250515][T29056]  _copy_to_user+0x31/0xb0
[ 1855.250541][T29056]  simple_read_from_buffer+0xe1/0x170
[ 1855.250567][T29056]  proc_fail_nth_read+0x1bb/0x230
[ 1855.250593][T29056]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1855.250618][T29056]  ? rw_verify_area+0x2a6/0x4d0
[ 1855.250636][T29056]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1855.250659][T29056]  vfs_read+0x20c/0xa70
[ 1855.250675][T29056]  ? fdget_pos+0x246/0x320
[ 1855.250701][T29056]  ? __pfx___mutex_lock+0x10/0x10
[ 1855.250722][T29056]  ? __pfx_vfs_read+0x10/0x10
[ 1855.250741][T29056]  ? __fget_files+0x2a/0x420
[ 1855.250767][T29056]  ? __fget_files+0x3a0/0x420
[ 1855.250806][T29056]  ? __fget_files+0x2a/0x420
[ 1855.250835][T29056]  ksys_read+0x150/0x270
[ 1855.250863][T29056]  ? __pfx_ksys_read+0x10/0x10
[ 1855.250890][T29056]  do_syscall_64+0x14d/0xf80
[ 1855.250914][T29056]  ? trace_irq_disable+0x3b/0x150
[ 1855.250937][T29056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1855.250955][T29056]  ? clear_bhb_loop+0x40/0x90
[ 1855.250977][T29056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1855.250995][T29056] RIP: 0033:0x7fe36415cfce
[ 1855.251011][T29056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1855.251026][T29056] RSP: 002b:00007fe3650defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1855.251046][T29056] RAX: ffffffffffffffda RBX: 00007fe3650df6c0 RCX: 00007fe36415cfce
[ 1855.251059][T29056] RDX: 000000000000000f RSI: 00007fe3650df0a0 RDI: 0000000000000004
[ 1855.251070][T29056] RBP: 00007fe3650df090 R08: 0000000000000000 R09: 0000000000000000
[ 1855.251081][T29056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1855.251091][T29056] R13: 00007fe364416038 R14: 00007fe364415fa0 R15: 00007fe36453fa48
[ 1855.251119][T29056]  </TASK>
[ 1856.553596][T29085] netlink: 'syz.1.5115': attribute type 10 has an invalid length.
[ 1856.643929][T28508] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1856.780635][T28508] usb 3-1: device descriptor read/64, error -71
[ 1857.020978][T28508] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1857.180956][T28508] usb 3-1: device descriptor read/64, error -71
[ 1857.198604][T29107] tipc: Started in network mode
[ 1857.205367][T29107] tipc: Node identity 16c3d0e8db9c, cluster identity 4711
[ 1857.214887][T29107] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1857.227199][T29107] syzkaller0: entered promiscuous mode
[ 1857.234611][T29107] syzkaller0: entered allmulticast mode
[ 1857.291984][T28508] usb usb3-port1: attempt power cycle
[ 1857.321582][T29111] tipc: Resetting bearer <eth:syzkaller0>
[ 1857.500390][   T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 1857.641281][T28508] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1857.655261][   T24] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[ 1857.670313][   T24] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1857.671158][T28508] usb 3-1: device descriptor read/8, error -71
[ 1857.690506][   T24] usb 1-1: config 0 has no interface number 0
[ 1857.707188][   T24] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 43520, setting to 64
[ 1857.729836][   T24] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1857.752636][   T24] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1857.770325][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1857.787665][   T24] usb 1-1: Product: syz
[ 1857.793007][   T24] usb 1-1: Manufacturer: syz
[ 1857.797621][   T24] usb 1-1: SerialNumber: syz
[ 1857.806139][   T24] usb 1-1: config 0 descriptor??
[ 1857.950923][T28508] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1857.972241][T28508] usb 3-1: device descriptor read/8, error -71
[ 1858.000544][T29106] tipc: Resetting bearer <eth:syzkaller0>
[ 1858.033287][   T24] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1858.053454][T29106] tipc: Disabling bearer <eth:syzkaller0>
[ 1858.084408][   T24] usb 1-1: USB disconnect, device number 42
[ 1858.092400][T28508] usb usb3-port1: unable to enumerate USB device
[ 1858.331075][T29127] kAFS: unable to lookup cell '�'
[ 1860.336354][T29187] FAULT_INJECTION: forcing a failure.
[ 1860.336354][T29187] name failslab, interval 1, probability 0, space 0, times 0
[ 1860.381029][T29187] CPU: 0 UID: 0 PID: 29187 Comm: syz.3.5136 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1860.381060][T29187] Tainted: [L]=SOFTLOCKUP
[ 1860.381067][T29187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1860.381077][T29187] Call Trace:
[ 1860.381085][T29187]  <TASK>
[ 1860.381093][T29187]  dump_stack_lvl+0xe8/0x150
[ 1860.381122][T29187]  should_fail_ex+0x412/0x560
[ 1860.381148][T29187]  should_failslab+0xa8/0x100
[ 1860.381169][T29187]  ? skb_clone+0x212/0x3a0
[ 1860.381199][T29187]  kmem_cache_alloc_noprof+0x87/0x650
[ 1860.381224][T29187]  ? __netlink_lookup+0xc6/0x8b0
[ 1860.381253][T29187]  skb_clone+0x212/0x3a0
[ 1860.381280][T29187]  __netlink_deliver_tap+0x404/0x850
[ 1860.381311][T29187]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1860.381333][T29187]  netlink_deliver_tap+0x19c/0x1b0
[ 1860.381355][T29187]  netlink_unicast+0x7e3/0x9b0
[ 1860.381381][T29187]  ? __pfx_netlink_unicast+0x10/0x10
[ 1860.381402][T29187]  ? netlink_sendmsg+0x650/0xb40
[ 1860.381420][T29187]  ? skb_put+0x11b/0x210
[ 1860.381445][T29187]  netlink_sendmsg+0x813/0xb40
[ 1860.381475][T29187]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1860.381499][T29187]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1860.381523][T29187]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1860.381544][T29187]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1860.381570][T29187]  ____sys_sendmsg+0xa68/0xad0
[ 1860.381602][T29187]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1860.381634][T29187]  ? import_iovec+0x73/0xa0
[ 1860.381661][T29187]  ___sys_sendmsg+0x2a5/0x360
[ 1860.381690][T29187]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1860.381744][T29187]  ? __fget_files+0x2a/0x420
[ 1860.381766][T29187]  ? __fget_files+0x3a0/0x420
[ 1860.381798][T29187]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1860.381824][T29187]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1860.381857][T29187]  ? __pfx_ksys_write+0x10/0x10
[ 1860.381886][T29187]  do_syscall_64+0x14d/0xf80
[ 1860.381910][T29187]  ? trace_irq_disable+0x3b/0x150
[ 1860.381933][T29187]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1860.381951][T29187]  ? clear_bhb_loop+0x40/0x90
[ 1860.381972][T29187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1860.381990][T29187] RIP: 0033:0x7fef1059c799
[ 1860.382008][T29187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1860.382023][T29187] RSP: 002b:00007fef11521028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1860.382043][T29187] RAX: ffffffffffffffda RBX: 00007fef10815fa0 RCX: 00007fef1059c799
[ 1860.382056][T29187] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003
[ 1860.382067][T29187] RBP: 00007fef11521090 R08: 0000000000000000 R09: 0000000000000000
[ 1860.382079][T29187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1860.382089][T29187] R13: 00007fef10816038 R14: 00007fef10815fa0 R15: 00007fef1093fa48
[ 1860.382118][T29187]  </TASK>
[ 1860.401435][T29189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5137'.
[ 1861.050747][T29208] kAFS: unable to lookup cell '�'
[ 1861.187382][T29212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1861.200474][T21150] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 1861.211181][T29212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1861.509835][T16079] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[ 1861.571078][T21150] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1861.587541][T21150] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1861.626397][T21150] usb 3-1: config 0 has no interface number 0
[ 1861.651222][T21150] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 43520, setting to 64
[ 1861.680338][T16079] usb 1-1: device descriptor read/64, error -71
[ 1861.707709][T21150] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1861.771741][T21150] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1861.803052][T21150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1861.861619][T21150] usb 3-1: Product: syz
[ 1861.880407][T21150] usb 3-1: Manufacturer: syz
[ 1861.885728][T21150] usb 3-1: SerialNumber: syz
[ 1861.917043][T21150] usb 3-1: config 0 descriptor??
[ 1861.930372][T16079] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[ 1862.079853][T16079] usb 1-1: device descriptor read/64, error -71
[ 1862.080548][T29216] loop2: detected capacity change from 0 to 7
[ 1862.164218][T21150] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1862.176147][ T5191]  loop2:
[ 1862.195709][ T5191] loop2: partition table partially beyond EOD, truncated
[ 1862.208883][T29216]  loop2:
[ 1862.214357][T29216] loop2: partition table partially beyond EOD, truncated
[ 1862.231125][T21150] usb 3-1: USB disconnect, device number 40
[ 1862.264328][ T5191]  loop2:
[ 1862.268321][ T5191] loop2: partition table partially beyond EOD, truncated
[ 1862.301779][T16079] usb usb1-port1: attempt power cycle
[ 1862.670584][T16079] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[ 1862.693601][T16079] usb 1-1: device descriptor read/8, error -71
[ 1862.990608][T16079] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 1863.052157][T16079] usb 1-1: device descriptor read/8, error -71
[ 1863.200706][T16079] usb usb1-port1: unable to enumerate USB device
[ 1864.117430][T29252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1864.172397][T29252] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1864.388628][T29223] netlink: 23 bytes leftover after parsing attributes in process `syz.3.5147'.
[ 1864.640844][T23278] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1864.830237][T23278] usb 3-1: Using ep0 maxpacket: 16
[ 1864.854581][T23278] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1864.881035][T23278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1864.901952][T23278] usb 3-1: config 0 descriptor??
[ 1864.923987][T23278] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1865.034388][T29284] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[ 1865.098602][T29284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1865.109037][T29284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1866.873375][T29320] openvswitch: netlink: Flow key attr not present in new flow.
[ 1867.427875][T15390] usb 3-1: USB disconnect, device number 41
[ 1867.860966][T15390] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1868.030689][T15390] usb 3-1: device descriptor read/64, error -71
[ 1868.088451][T29346] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1868.104602][T29346] syzkaller0: entered promiscuous mode
[ 1868.112529][T29346] syzkaller0: entered allmulticast mode
[ 1868.215960][T29351] tipc: Resetting bearer <eth:syzkaller0>
[ 1868.310972][T15390] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1868.460675][T15390] usb 3-1: device descriptor read/64, error -71
[ 1868.572033][T15390] usb usb3-port1: attempt power cycle
[ 1868.891277][T29345] tipc: Resetting bearer <eth:syzkaller0>
[ 1869.069542][T15390] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1869.141394][T15390] usb 3-1: device descriptor read/8, error -71
[ 1869.154607][T29345] tipc: Disabling bearer <eth:syzkaller0>
[ 1869.286795][T29377] FAULT_INJECTION: forcing a failure.
[ 1869.286795][T29377] name failslab, interval 1, probability 0, space 0, times 0
[ 1869.306751][T29377] CPU: 0 UID: 0 PID: 29377 Comm: syz.1.5184 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1869.306781][T29377] Tainted: [L]=SOFTLOCKUP
[ 1869.306787][T29377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1869.306798][T29377] Call Trace:
[ 1869.306805][T29377]  <TASK>
[ 1869.306812][T29377]  dump_stack_lvl+0xe8/0x150
[ 1869.306839][T29377]  should_fail_ex+0x412/0x560
[ 1869.306863][T29377]  should_failslab+0xa8/0x100
[ 1869.306884][T29377]  __kmalloc_cache_noprof+0x88/0x660
[ 1869.306901][T29377]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1869.306925][T29377]  ? __request_module+0x2d0/0x660
[ 1869.306951][T29377]  __request_module+0x2d0/0x660
[ 1869.306975][T29377]  ? __pfx___request_module+0x10/0x10
[ 1869.306998][T29377]  ? __pfx___up_read+0x10/0x10
[ 1869.307025][T29377]  crypto_alg_mod_lookup+0xa5/0x5f0
[ 1869.307138][T29377]  crypto_alloc_tfm_node+0x13e/0x3f0
[ 1869.307163][T29377]  alg_bind+0x2fa/0x570
[ 1869.307188][T29377]  __sys_bind+0x2e3/0x410
[ 1869.307210][T29377]  ? __pfx___sys_bind+0x10/0x10
[ 1869.307237][T29377]  ? __pfx_ksys_write+0x10/0x10
[ 1869.307260][T29377]  __x64_sys_bind+0x7a/0x90
[ 1869.307279][T29377]  do_syscall_64+0x14d/0xf80
[ 1869.307300][T29377]  ? trace_irq_disable+0x3b/0x150
[ 1869.307324][T29377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.307342][T29377]  ? clear_bhb_loop+0x40/0x90
[ 1869.307362][T29377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1869.307378][T29377] RIP: 0033:0x7fd20279c799
[ 1869.307396][T29377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1869.307412][T29377] RSP: 002b:00007fd20361f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1869.307432][T29377] RAX: ffffffffffffffda RBX: 00007fd202a15fa0 RCX: 00007fd20279c799
[ 1869.307446][T29377] RDX: 0000000000000058 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1869.307457][T29377] RBP: 00007fd20361f090 R08: 0000000000000000 R09: 0000000000000000
[ 1869.307469][T29377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1869.307480][T29377] R13: 00007fd202a16038 R14: 00007fd202a15fa0 R15: 00007fd202b3fa48
[ 1869.307509][T29377]  </TASK>
[ 1869.657001][T15390] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1869.711706][T15390] usb 3-1: device descriptor read/8, error -71
[ 1869.721061][T28508] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1869.826512][T15390] usb usb3-port1: unable to enumerate USB device
[ 1869.879959][T28508] usb 1-1: Using ep0 maxpacket: 8
[ 1869.887875][T28508] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[ 1869.898088][T28508] usb 1-1: config 0 has no interface number 0
[ 1869.911955][T28508] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=38.34
[ 1869.925144][T28508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1869.941449][T28508] usb 1-1: config 0 descriptor??
[ 1870.012658][T29402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1870.683704][T28508] snd-usb-audio 1-1:0.255: probe with driver snd-usb-audio failed with error -71
[ 1870.721539][T28508] usb 1-1: USB disconnect, device number 47
[ 1871.270957][T16079] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1871.350332][T23273] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1871.430797][T16079] usb 3-1: Using ep0 maxpacket: 32
[ 1871.456637][T16079] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1871.478851][T16079] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1871.512071][T23273] usb 1-1: Using ep0 maxpacket: 32
[ 1871.523700][T23273] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[ 1871.541941][T16079] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1871.552336][T23273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1871.567170][T16079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.582184][T23273] usb 1-1: config 0 descriptor??
[ 1871.597479][T16079] usb 3-1: Product: syz
[ 1871.604433][T23273] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22
[ 1871.614603][T16079] usb 3-1: Manufacturer: syz
[ 1871.625650][T16079] usb 3-1: SerialNumber: syz
[ 1871.650655][T16079] usb 3-1: config 0 descriptor??
[ 1871.677726][T16079] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1871.773440][T16079] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1871.818146][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1871.882565][T16079] usb 1-1: USB disconnect, device number 48
[ 1871.909001][T23273] usb 3-1: USB disconnect, device number 46
[ 1872.555412][T29459] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2)
[ 1873.000921][T15390] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 1873.086821][T29471] fuse: Unknown parameter 'grou00000000000000000000'
[ 1873.216823][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1873.237864][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1873.241501][T29480] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5217'.
[ 1873.304988][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1873.333203][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1873.384901][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1873.405790][T15390] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1873.470606][T15390] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9
[ 1873.499518][T15390] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1873.511824][T15390] usb 1-1: Product: syz
[ 1873.517233][T15390] usb 1-1: Manufacturer: syz
[ 1873.533179][T15390] usb 1-1: SerialNumber: syz
[ 1873.551791][T15390] usb 1-1: config 0 descriptor??
[ 1873.585052][T15390] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected
[ 1873.617141][T15390] ti_usb_3410_5052 1-1:0.0: missing endpoints
[ 1874.079802][T16079] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[ 1874.484641][T16079] usb 3-1: not running at top speed; connect to a high speed hub
[ 1874.494783][T16079] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1874.504625][T16079] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1874.516056][T16079] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1874.541512][T29497] FAULT_INJECTION: forcing a failure.
[ 1874.541512][T29497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1874.555648][T29497] CPU: 1 UID: 0 PID: 29497 Comm: syz.4.5222 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1874.555677][T29497] Tainted: [L]=SOFTLOCKUP
[ 1874.555684][T29497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1874.555695][T29497] Call Trace:
[ 1874.555704][T29497]  <TASK>
[ 1874.555713][T29497]  dump_stack_lvl+0xe8/0x150
[ 1874.555741][T29497]  should_fail_ex+0x412/0x560
[ 1874.555766][T29497]  _copy_from_user+0x2d/0xb0
[ 1874.555791][T29497]  __sys_sendto+0x2af/0x7a0
[ 1874.555817][T29497]  ? __pfx___sys_sendto+0x10/0x10
[ 1874.555837][T29497]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1874.555866][T29497]  ? __fget_files+0x3a0/0x420
[ 1874.555899][T29497]  ? ksys_write+0x242/0x270
[ 1874.555919][T29497]  ? __pfx_ksys_write+0x10/0x10
[ 1874.555941][T29497]  __x64_sys_sendto+0xde/0x100
[ 1874.555967][T29497]  do_syscall_64+0x14d/0xf80
[ 1874.555991][T29497]  ? trace_irq_disable+0x3b/0x150
[ 1874.556015][T29497]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1874.556033][T29497]  ? clear_bhb_loop+0x40/0x90
[ 1874.556063][T29497]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1874.556081][T29497] RIP: 0033:0x7f8b5679c799
[ 1874.556099][T29497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1874.556113][T29497] RSP: 002b:00007f8b57587028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1874.556132][T29497] RAX: ffffffffffffffda RBX: 00007f8b56a16180 RCX: 00007f8b5679c799
[ 1874.556145][T29497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000d
[ 1874.556156][T29497] RBP: 00007f8b57587090 R08: 0000200000b63fe4 R09: 000000000000001c
[ 1874.556168][T29497] R10: 0000000022004001 R11: 0000000000000246 R12: 0000000000000001
[ 1874.556179][T29497] R13: 00007f8b56a16218 R14: 00007f8b56a16180 R15: 00007f8b56b3fa48
[ 1874.556206][T29497]  </TASK>
[ 1874.767094][T16079] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1874.776651][T16079] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1874.785133][T16079] usb 3-1: Product: 趲량駾ᄇ펰飌ḧ⃇蔰萆瞖訏轿␃쁝㩟阵蹮⎓ﾼꑵ䨣ﾎ獉➤阖۽꿂䘦
[ 1874.797521][T16079] usb 3-1: SerialNumber: 脧䂮嬐畏＀햞㻙昂隵ጹ蔑⋮ﾒ膊钤符ꋜ粙楰䫭廄懶컫펻쒻婝저좬⮧堥赺ꉩ蚡絠㇏鵵ᚭ壇⽵口೘褶㒶ꠡ狞㹼꧋쉄嬻ώ㓄穻ꓗ䧕⣽ꓽ唿먽厅஫‫㦙풮䇁㙵㞽琨㩛㪥逝ήᄎ딳埯湣跢헓鿙㾕嫪壄હ◉璬歷ො꽴
[ 1875.637847][T16079] usb 3-1: 0:2 : does not exist
[ 1875.675513][T28508] usb 1-1: USB disconnect, device number 49
[ 1875.746186][T16079] usb 3-1: USB disconnect, device number 47
[ 1875.806238][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1876.284799][T29518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5226'.
[ 1876.580831][T15390] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[ 1876.600903][T28508] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1876.638878][T29527] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5229'.
[ 1876.710101][   T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1876.740602][T15390] usb 1-1: device descriptor read/64, error -71
[ 1876.770777][T28508] usb 3-1: Using ep0 maxpacket: 16
[ 1876.782369][T28508] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1876.805345][T28508] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1876.875927][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1876.884759][   T24] usb 4-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64
[ 1876.902956][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.911794][T28508] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1876.911826][T28508] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1876.944780][T28508] usb 3-1: Product: syz
[ 1876.948987][T28508] usb 3-1: Manufacturer: syz
[ 1876.962136][   T24] usb 4-1: config 0 descriptor??
[ 1876.968195][T28508] usb 3-1: SerialNumber: syz
[ 1876.986296][   T24] uvcvideo 4-1:0.0: probe with driver uvcvideo failed with error -22
[ 1877.012162][T15390] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[ 1877.150785][T15390] usb 1-1: device descriptor read/64, error -71
[ 1877.193250][T23278] usb 4-1: USB disconnect, device number 40
[ 1877.266800][T15390] usb usb1-port1: attempt power cycle
[ 1877.408974][T28508] usb 3-1: 0:2 : does not exist
[ 1877.538966][T29540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5232'.
[ 1877.620996][T15390] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[ 1877.689142][T15390] usb 1-1: device descriptor read/8, error -71
[ 1877.821184][T28508] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1877.943110][T28508] usb 3-1: USB disconnect, device number 48
[ 1877.971107][T15390] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 1877.985522][T29545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1877.996644][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1878.022172][T29545] syzkaller0: entered promiscuous mode
[ 1878.028602][T15390] usb 1-1: device descriptor read/8, error -71
[ 1878.028615][T29545] syzkaller0: entered allmulticast mode
[ 1878.124773][T29546] tipc: Resetting bearer <eth:syzkaller0>
[ 1878.170930][T15390] usb usb1-port1: unable to enumerate USB device
[ 1878.502508][T29549] FAULT_INJECTION: forcing a failure.
[ 1878.502508][T29549] name failslab, interval 1, probability 0, space 0, times 0
[ 1878.508842][T29550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1878.528713][T29549] CPU: 0 UID: 0 PID: 29549 Comm: syz.2.5236 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1878.528742][T29549] Tainted: [L]=SOFTLOCKUP
[ 1878.528749][T29549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1878.528760][T29549] Call Trace:
[ 1878.528766][T29549]  <TASK>
[ 1878.528775][T29549]  dump_stack_lvl+0xe8/0x150
[ 1878.528802][T29549]  should_fail_ex+0x412/0x560
[ 1878.528826][T29549]  should_failslab+0xa8/0x100
[ 1878.528847][T29549]  ? skb_clone+0x212/0x3a0
[ 1878.528869][T29549]  kmem_cache_alloc_noprof+0x87/0x650
[ 1878.528892][T29549]  ? __netlink_lookup+0xc6/0x8b0
[ 1878.528919][T29549]  skb_clone+0x212/0x3a0
[ 1878.528946][T29549]  __netlink_deliver_tap+0x404/0x850
[ 1878.528975][T29549]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1878.528996][T29549]  netlink_deliver_tap+0x19c/0x1b0
[ 1878.529017][T29549]  netlink_unicast+0x7e3/0x9b0
[ 1878.529043][T29549]  ? __pfx_netlink_unicast+0x10/0x10
[ 1878.529063][T29549]  ? netlink_sendmsg+0x650/0xb40
[ 1878.529082][T29549]  ? skb_put+0x11b/0x210
[ 1878.529107][T29549]  netlink_sendmsg+0x813/0xb40
[ 1878.529134][T29549]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1878.529156][T29549]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1878.529177][T29549]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1878.529201][T29549]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1878.529217][T29549]  ____sys_sendmsg+0xa68/0xad0
[ 1878.529237][T29549]  ? __lock_acquire+0x6b5/0x2cf0
[ 1878.529265][T29549]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1878.529297][T29549]  ? import_iovec+0x73/0xa0
[ 1878.529325][T29549]  ___sys_sendmsg+0x2a5/0x360
[ 1878.529353][T29549]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1878.529382][T29549]  ? kstrtouint+0x6e/0xe0
[ 1878.529427][T29549]  ? __fget_files+0x2a/0x420
[ 1878.529449][T29549]  ? __fget_files+0x3a0/0x420
[ 1878.529488][T29549]  __sys_sendmmsg+0x27c/0x4e0
[ 1878.529518][T29549]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1878.529539][T29549]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1878.529580][T29549]  ? ksys_write+0x242/0x270
[ 1878.529600][T29549]  ? __pfx_ksys_write+0x10/0x10
[ 1878.529624][T29549]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1878.529650][T29549]  do_syscall_64+0x14d/0xf80
[ 1878.529673][T29549]  ? trace_irq_disable+0x3b/0x150
[ 1878.529697][T29549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.529716][T29549]  ? clear_bhb_loop+0x40/0x90
[ 1878.529736][T29549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1878.529754][T29549] RIP: 0033:0x7f221bf9c799
[ 1878.529771][T29549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1878.529786][T29549] RSP: 002b:00007f221cf3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1878.529807][T29549] RAX: ffffffffffffffda RBX: 00007f221c215fa0 RCX: 00007f221bf9c799
[ 1878.529820][T29549] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1878.529832][T29549] RBP: 00007f221cf3e090 R08: 0000000000000000 R09: 0000000000000000
[ 1878.529843][T29549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1878.529854][T29549] R13: 00007f221c216038 R14: 00007f221c215fa0 R15: 00007f221c33fa48
[ 1878.529883][T29549]  </TASK>
[ 1878.532399][T29550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1878.836869][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5236'.
[ 1878.847279][T29549] netlink: 'syz.2.5236': attribute type 30 has an invalid length.
[ 1878.895127][T29544] tipc: Resetting bearer <eth:syzkaller0>
[ 1878.928690][T29544] tipc: Disabling bearer <eth:syzkaller0>
[ 1878.935928][T29549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5236'.
[ 1878.945775][T29549] netlink: 'syz.2.5236': attribute type 30 has an invalid length.
[ 1879.414054][T29572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5245'.
[ 1880.137110][T29582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1880.158800][T29582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1880.270290][   T24] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1880.420425][   T24] usb 1-1: Using ep0 maxpacket: 16
[ 1880.427999][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1880.453379][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1880.466065][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1880.480432][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1880.488708][   T24] usb 1-1: Product: syz
[ 1880.547225][   T24] usb 1-1: Manufacturer: syz
[ 1880.567208][   T24] usb 1-1: SerialNumber: syz
[ 1881.002481][T29598] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5252'.
[ 1881.028742][   T24] usb 1-1: 0:2 : does not exist
[ 1881.300700][T15390] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1881.446380][   T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1881.490381][T16079] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 1881.501402][T15390] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[ 1881.530868][T15390] usb 4-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[ 1881.565396][   T24] usb 1-1: USB disconnect, device number 54
[ 1881.572902][T15390] usb 4-1: config 0 has no interface number 0
[ 1881.614996][T15390] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 43520, setting to 64
[ 1881.633599][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1881.652805][T16079] usb 3-1: device descriptor read/64, error -71
[ 1881.661253][T15390] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1881.714591][T15390] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1881.760504][T15390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1881.902536][T15390] usb 4-1: Product: syz
[ 1881.912207][T16079] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[ 1881.917080][T29609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5256'.
[ 1881.934494][T15390] usb 4-1: Manufacturer: syz
[ 1881.980702][T15390] usb 4-1: SerialNumber: syz
[ 1882.042655][T15390] usb 4-1: config 0 descriptor??
[ 1882.080331][T16079] usb 3-1: device descriptor read/64, error -71
[ 1882.138056][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'.
[ 1882.180214][T29611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'.
[ 1882.206818][T16079] usb usb3-port1: attempt power cycle
[ 1882.320896][T15390] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1882.362715][T29611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5258'.
[ 1882.394574][T15390] usb 4-1: USB disconnect, device number 41
[ 1882.430388][T29611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5258'.
[ 1882.571129][T16079] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[ 1882.614472][T16079] usb 3-1: device descriptor read/8, error -71
[ 1883.069826][T16079] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1883.104468][T16079] usb 3-1: device descriptor read/8, error -71
[ 1883.226975][T16079] usb usb3-port1: unable to enumerate USB device
[ 1884.064402][T16079] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1884.240355][T16079] usb 1-1: Using ep0 maxpacket: 32
[ 1884.261836][T16079] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1884.271443][T16079] usb 1-1: config 255 has an invalid interface number: 193 but max is 1
[ 1884.281975][T16079] usb 1-1: config 255 has no interface number 1
[ 1884.288287][T16079] usb 1-1: config 255 interface 0 has no altsetting 0
[ 1884.375106][T16079] usb 1-1: config 255 interface 193 has no altsetting 0
[ 1884.417120][T16079] usb 1-1: New USB device found, idVendor=1199, idProduct=68a9, bcdDevice=9d.4a
[ 1884.430888][T16079] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1884.494396][T16079] usb 1-1: Product: syz
[ 1884.494421][T23277] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[ 1884.498617][T16079] usb 1-1: Manufacturer: syz
[ 1884.546920][T16079] usb 1-1: SerialNumber: syz
[ 1884.572543][T29645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1884.581362][T29645] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[ 1884.588881][T29645] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[ 1884.604845][T29645] tipc: Resetting bearer <eth:syzkaller0>
[ 1884.993598][T23277] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[ 1885.006059][T23277] usb 4-1: config 0 has no interface number 0
[ 1885.031593][T23277] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1885.094312][T16079] usb 1-1: bad CDC descriptors
[ 1885.153695][T23277] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[ 1885.209138][T23277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1885.249026][T23277] usb 4-1: Product: syz
[ 1885.260920][T16079] usb 1-1: USB disconnect, device number 55
[ 1885.282802][T23277] usb 4-1: Manufacturer: syz
[ 1885.308974][T23277] usb 4-1: SerialNumber: syz
[ 1885.371366][T23277] usb 4-1: config 0 descriptor??
[ 1885.751569][T28508] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1885.812432][T29662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1885.835800][T29662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1885.912920][T28508] usb 3-1: config 0 has an invalid interface number: 20 but max is 0
[ 1885.921916][T28508] usb 3-1: config 0 has no interface number 0
[ 1885.928213][T28508] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1885.941635][T28508] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1885.953253][T28508] usb 3-1: config 0 interface 20 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1886.001114][T28508] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[ 1886.012241][T28508] usb 3-1: New USB device strings: Mfr=51, Product=0, SerialNumber=0
[ 1886.026992][T28508] usb 3-1: Manufacturer: syz
[ 1886.045140][T28508] usb 3-1: config 0 descriptor??
[ 1886.667320][T29675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5277'.
[ 1886.686566][T28508] usbhid 3-1:0.20: can't add hid device: -71
[ 1886.699581][T28508] usbhid 3-1:0.20: probe with driver usbhid failed with error -71
[ 1886.832070][T29675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1886.842566][T29675] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1886.927015][T28508] usb 3-1: USB disconnect, device number 53
[ 1887.183363][T23277] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[ 1887.237904][T23277] keyspan 4-1:0.133: unsupported endpoint type 0
[ 1887.274492][T23277] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[ 1887.326937][T23277] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[ 1887.348664][T23277] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[ 1887.396947][T29684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5280'.
[ 1887.417270][T23277] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1887.525254][T29696] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5279'.
[ 1887.736269][T23277] usb 4-1: USB disconnect, device number 42
[ 1887.815050][T23277] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1887.844198][T23277] keyspan 4-1:0.133: device disconnected
[ 1888.001363][T29705] FAULT_INJECTION: forcing a failure.
[ 1888.001363][T29705] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1888.015090][T29705] CPU: 1 UID: 0 PID: 29705 Comm: syz.0.5284 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1888.015109][T29705] Tainted: [L]=SOFTLOCKUP
[ 1888.015113][T29705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1888.015119][T29705] Call Trace:
[ 1888.015125][T29705]  <TASK>
[ 1888.015131][T29705]  dump_stack_lvl+0xe8/0x150
[ 1888.015152][T29705]  should_fail_ex+0x412/0x560
[ 1888.015168][T29705]  _copy_from_user+0x2d/0xb0
[ 1888.015183][T29705]  ___sys_sendmsg+0x1c6/0x360
[ 1888.015202][T29705]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1888.015231][T29705]  ? __fget_files+0x2a/0x420
[ 1888.015246][T29705]  ? __fget_files+0x3a0/0x420
[ 1888.015263][T29705]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1888.015278][T29705]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1888.015296][T29705]  ? __pfx_ksys_write+0x10/0x10
[ 1888.015312][T29705]  do_syscall_64+0x14d/0xf80
[ 1888.015327][T29705]  ? trace_irq_disable+0x3b/0x150
[ 1888.015343][T29705]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.015354][T29705]  ? clear_bhb_loop+0x40/0x90
[ 1888.015366][T29705]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.015376][T29705] RIP: 0033:0x7fe36419c799
[ 1888.015387][T29705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1888.015396][T29705] RSP: 002b:00007fe3650be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1888.015408][T29705] RAX: ffffffffffffffda RBX: 00007fe364416090 RCX: 00007fe36419c799
[ 1888.015415][T29705] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 000000000000000e
[ 1888.015421][T29705] RBP: 00007fe3650be090 R08: 0000000000000000 R09: 0000000000000000
[ 1888.015428][T29705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1888.015435][T29705] R13: 00007fe364416128 R14: 00007fe364416090 R15: 00007fe36453fa48
[ 1888.015450][T29705]  </TASK>
[ 1889.268152][T16511] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1889.287400][T16511] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1889.297995][T16511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1889.307879][T16511] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1889.319015][T16511] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1889.348904][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1889.408153][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1889.416694][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1889.426244][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1889.435409][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1890.263809][T28508] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1890.451913][T28508] usb 4-1: Using ep0 maxpacket: 32
[ 1890.476137][T29725] chnl_net:caif_netlink_parms(): no params data found
[ 1890.481598][   T31] INFO: task kworker/0:10:23279 blocked for more than 143 seconds.
[ 1890.490015][T28508] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1890.506302][T28508] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1890.640315][   T31]       Tainted: G             L      syzkaller #0
[ 1890.682105][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1890.695134][T28508] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[ 1890.716236][T29745] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5296'.
[ 1890.765524][   T31] task:kworker/0:10    state:D stack:22112 pid:23279 tgid:23279 ppid:2      task_flags:0x4288060 flags:0x00080000
[ 1890.795539][T28508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1890.833315][T28508] usb 4-1: Product: syz
[ 1890.837496][T28508] usb 4-1: Manufacturer: syz
[ 1890.861281][T28508] usb 4-1: SerialNumber: syz
[ 1890.886847][T28508] usb 4-1: config 0 descriptor??
[ 1890.953180][   T31] Workqueue: usb_hub_wq hub_event
[ 1890.958415][   T31] Call Trace:
[ 1890.976412][T23277] usb 2-1: USB disconnect, device number 25
[ 1891.038795][   T31]  <TASK>
[ 1891.049832][   T31]  __schedule+0x1585/0x5340
[ 1891.054427][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1891.080518][   T31]  ? __pfx___schedule+0x10/0x10
[ 1891.085460][   T31]  ? schedule+0x90/0x360
[ 1891.097112][   T31]  schedule+0x164/0x360
[ 1891.102331][   T31]  schedule_timeout+0x158/0x2c0
[ 1891.107232][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1891.120864][   T31]  ? usb_control_msg+0x2bf/0x3e0
[ 1891.130243][   T31]  ? __pfx_process_timeout+0x10/0x10
[ 1891.135577][   T31]  ? hub_ext_port_status+0x52d/0x820
[ 1891.150636][   T31]  ? msleep+0x39/0x100
[ 1891.164338][   T31]  msleep+0xa1/0x100
[ 1891.168240][   T31]  hub_port_debounce+0x204/0x330
[ 1891.174148][   T31]  ? kcov_remote_stop+0x488/0x6b0
[ 1891.180321][   T31]  ? trace_rpm_usage+0x80/0x220
[ 1891.185318][   T31]  ? kcov_remote_stop+0x69/0x6b0
[ 1891.191617][   T31]  hub_event+0x4991/0x4f30
[ 1891.196070][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1891.210967][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[ 1891.215980][   T31]  ? __pfx_hub_event+0x10/0x10
[ 1891.222176][   T31]  ? process_scheduled_works+0xa25/0x1830
[ 1891.230097][   T31]  ? process_scheduled_works+0xa25/0x1830
[ 1891.245662][   T31]  ? __pfx___schedule+0x10/0x10
[ 1891.251923][   T31]  ? schedule+0x90/0x360
[ 1891.256196][   T31]  ? schedule+0x164/0x360
[ 1891.270783][   T31]  ? worker_thread+0xc1e/0xfc0
[ 1891.275649][   T31]  ? kthread+0x388/0x470
[ 1891.290716][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1891.298569][   T31]  ? __pfx_kthread+0x10/0x10
[ 1891.304759][   T31]  ? ret_from_fork+0x51e/0xb90
[ 1891.310826][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1891.315983][   T31]  ? __switch_to+0xc7d/0x1450
[ 1891.321972][   T31]  ? __pfx_kthread+0x10/0x10
[ 1891.326599][   T31]  ? ret_from_fork_asm+0x1a/0x30
[ 1891.332570][   T31]  </TASK>
[ 1891.335834][   T31] 
[ 1891.335834][   T31] Showing all locks held in the system:
[ 1891.390302][   T31] 1 lock held by rcu_exp_gp_kthr/18:
[ 1891.395641][   T31] 1 lock held by khungtaskd/31:
[ 1891.483309][   T51] Bluetooth: hci5: command tx timeout
[ 1891.492056][   T31]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1891.510337][   T31] 2 locks held by getty/5582:
[ 1891.515062][   T31]  #0: ffff8880354f30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1891.526205][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[ 1891.541477][   T31] 4 locks held by udevd/5823:
[ 1891.546177][   T31]  #0: ffff88804d7680a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[ 1891.556288][   T31]  #1: ffff88803b1c8088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 1891.566650][   T31]  #2: ffff8880532a53c8 (kn->active#17){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1891.577390][   T31]  #3: ffff88807b0cb198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1891.588226][   T31] 2 locks held by kworker/u8:11/20286:
[ 1891.610232][   T31]  #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150
[ 1891.630485][   T31]  #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[ 1891.660363][   T31] 5 locks held by syz.4.3093/21771:
[ 1891.665606][   T31] 4 locks held by kworker/0:8/23277:
[ 1891.700323][   T31] 3 locks held by kworker/0:10/23279:
[ 1891.705741][   T31]  #0: ffff88813fe0f548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1891.760275][   T31]  #1: ffffc9000644fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1891.800234][   T31]  #2: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1891.840435][   T31] 5 locks held by kworker/0:1/28508:
[ 1891.845764][   T31]  #0: ffff8880222cd548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1891.882897][   T31]  #1: ffffc90004987c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1891.920297][   T31]  #2: ffff888029ac6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30
[ 1891.950235][   T31]  #3: ffff88807b0cb198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[ 1891.999802][   T31]  #4: ffff8880298c3568 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x53e/0x2110
[ 1892.041054][   T31] 1 lock held by syz-executor/29725:
[ 1892.046389][   T31] 1 lock held by syz.3.5295/29735:
[ 1892.060282][   T31]  #0: ffffffff8fbcc908 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[ 1892.100657][   T31] 1 lock held by syz.1.5296/29745:
[ 1892.105813][   T31]  #0: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1892.133080][   T31] 
[ 1892.135456][   T31] =============================================
[ 1892.135456][   T31] 
[ 1892.144696][   T31] NMI backtrace for cpu 1
[ 1892.144716][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1892.144734][   T31] Tainted: [L]=SOFTLOCKUP
[ 1892.144739][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1892.144747][   T31] Call Trace:
[ 1892.144754][   T31]  <TASK>
[ 1892.144761][   T31]  dump_stack_lvl+0xe8/0x150
[ 1892.144787][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1892.144889][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1892.144917][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1892.144935][   T31]  sys_info+0x135/0x170
[ 1892.144948][   T31]  watchdog+0xfd9/0x1030
[ 1892.144971][   T31]  ? watchdog+0x21a/0x1030
[ 1892.144994][   T31]  kthread+0x388/0x470
[ 1892.145008][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1892.145024][   T31]  ? __pfx_kthread+0x10/0x10
[ 1892.145036][   T31]  ret_from_fork+0x51e/0xb90
[ 1892.145055][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1892.145070][   T31]  ? __switch_to+0xc7d/0x1450
[ 1892.145088][   T31]  ? __pfx_kthread+0x10/0x10
[ 1892.145102][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1892.145132][   T31]  </TASK>
[ 1892.145139][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1892.272296][    C0] NMI backtrace for cpu 0
[ 1892.272316][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1892.272336][    C0] Tainted: [L]=SOFTLOCKUP
[ 1892.272342][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1892.272351][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1892.272378][    C0] Code: 7e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 1d 1c 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1892.272391][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246
[ 1892.272406][    C0] RAX: 000000000327dc39 RBX: ffffffff819a80dd RCX: 0000000080000001
[ 1892.272417][    C0] RDX: 0000000000000001 RSI: ffffffff8def2b4b RDI: ffffffff8c27aa00
[ 1892.272428][    C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b
[ 1892.272438][    C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff901185b0
[ 1892.272449][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[ 1892.272459][    C0] FS:  0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000
[ 1892.272471][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1892.272482][    C0] CR2: 0000200000404030 CR3: 000000000e54c000 CR4: 00000000003526f0
[ 1892.272495][    C0] DR0: 0000000000000003 DR1: 0000000000000000 DR2: 000000000000008e
[ 1892.272504][    C0] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1892.272514][    C0] Call Trace:
[ 1892.272522][    C0]  <TASK>
[ 1892.272529][    C0]  default_idle+0x9/0x20
[ 1892.272544][    C0]  default_idle_call+0x72/0xb0
[ 1892.272560][    C0]  do_idle+0x1bd/0x500
[ 1892.272579][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1892.272600][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1892.272622][    C0]  cpu_startup_entry+0x43/0x60
[ 1892.272640][    C0]  rest_init+0x2de/0x300
[ 1892.272657][    C0]  start_kernel+0x385/0x3d0
[ 1892.272773][    C0]  x86_64_start_reservations+0x24/0x30
[ 1892.272816][    C0]  x86_64_start_kernel+0x143/0x1c0
[ 1892.272833][    C0]  common_startup_64+0x13e/0x147
[ 1892.272855][    C0]  </TASK>
[ 1892.506905][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1892.513819][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1892.524491][   T31] Tainted: [L]=SOFTLOCKUP
[ 1892.528800][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1892.538849][   T31] Call Trace:
[ 1892.542145][   T31]  <TASK>
[ 1892.545070][   T31]  vpanic+0x56c/0xa60
[ 1892.549058][   T31]  ? __pfx___schedule+0x10/0x10
[ 1892.553914][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1892.558442][   T31]  ? __pfx_console_unlock+0x10/0x10
[ 1892.563661][   T31]  panic+0xc5/0xd0
[ 1892.567396][   T31]  ? __pfx_panic+0x10/0x10
[ 1892.571805][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1892.577221][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1892.583383][   T31]  watchdog+0x1023/0x1030
[ 1892.587715][   T31]  ? watchdog+0x21a/0x1030
[ 1892.592159][   T31]  kthread+0x388/0x470
[ 1892.596220][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1892.600904][   T31]  ? __pfx_kthread+0x10/0x10
[ 1892.605489][   T31]  ret_from_fork+0x51e/0xb90
[ 1892.610076][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1892.615201][   T31]  ? __switch_to+0xc7d/0x1450
[ 1892.619891][   T31]  ? __pfx_kthread+0x10/0x10
[ 1892.624468][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1892.629240][   T31]  </TASK>
[ 1892.632655][   T31] Kernel Offset: disabled
[ 1892.636969][   T31] Rebooting in 86400 seconds..