last executing test programs:

6m50.872935578s ago: executing program 3 (id=548):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x8003a, [0x8000, 0xc95a, 0xf, 0x401, 0x83, 0x2, 0x100, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff, 0x6, 0x1, 0x7, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x3, 0x7, 0x4, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x400006, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x4da5, 0x8100, 0x1, 0x40], [0x80, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x7, 0x2, 0xfffffff8, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0x2, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0xd, 0x1, 0xfe000000, 0x8, 0xfffff274, 0x4, 0x9, 0x3, 0x3, 0x80000000, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0x1, 0x100, 0x3, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x10002, 0x8001ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x5, 0x2950bfaf, 0xb, 0xa2, 0x4, 0x1002, 0x8, 0xb1, 0xac8, 0xbf, 0x1, 0x3, 0x9, 0x12b, 0x4, 0xfffffffd, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807fb, 0x2006, 0x80a2ed, 0x5, 0x40000025], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0xd, 0x4183, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x10, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x4000100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x224, 0x2, 0x5, 0x4, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x1fe, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

6m49.992775438s ago: executing program 3 (id=559):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x800000, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc)
socket$netlink(0x10, 0x3, 0x2)
r7 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0x8)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc)
socket$netlink(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r10, 0x0, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x4)
writev(r11, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

6m49.898397903s ago: executing program 3 (id=561):
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

6m49.793319281s ago: executing program 3 (id=563):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chmod(&(0x7f00000002c0)='./file1/file0\x00', 0x7)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

6m49.529709814s ago: executing program 3 (id=565):
r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
r1 = epoll_create(0xff9)
socket$inet6_tcp(0xa, 0x1, 0x0)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10)
dup3(r0, r2, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x2, 0x2000000})

6m49.307182314s ago: executing program 3 (id=566):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

6m49.17510353s ago: executing program 32 (id=566):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

5m54.187091807s ago: executing program 2 (id=879):
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x5b, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80040, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x7, 0x401, 0x3, 0x2, 0x7e, 0x7}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000e], 0x80a0000, 0x2018d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m53.52986083s ago: executing program 2 (id=885):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x0, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x8, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x80001, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xfffb, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0xee4a, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3431, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x7, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xffffff7f, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x6, 0x80000001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10001, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0xa, 0x13ffd, 0x1, 0x1b18]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f0000000300)=ANY=[@ANYBLOB="9851000000000000a849e8699752"])
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

5m53.167936823s ago: executing program 2 (id=888):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r5], 0x0)

5m51.777773213s ago: executing program 2 (id=900):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
listxattr(&(0x7f00000000c0)='./file1/file0\x00', 0x0, 0x0)
chmod(&(0x7f00000002c0)='./file1/file0\x00', 0x7)
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

5m51.554581555s ago: executing program 2 (id=903):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'sit0\x00', 0x0})
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
dup(r1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

5m51.293636113s ago: executing program 2 (id=905):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x80db, 0xabf4, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

5m51.142166741s ago: executing program 33 (id=905):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x80db, 0xabf4, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)

10.714124247s ago: executing program 0 (id=3685):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x90, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x2301}, @fda={0x66646185, 0x1, 0x0, 0x16}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000003c0)={0x0, 0x18, 0x38}}, 0x1440}], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x17)
close_range(r0, 0xffffffffffffffff, 0x0)

10.651706574s ago: executing program 0 (id=3686):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0})
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000bc0)=[{0x22, 0x0, [0x5, 0xb, 0x9, 0x2, 0xfffffffd, 0x1, 0x3ff, 0x0, 0x0, 0x400, 0x9, 0x5, 0x0, 0x5, 0xfffffff8]}, {0x1, 0x0, [0x7, 0x7ff, 0xfffffff3, 0x2, 0x0, 0xfffffffc, 0x2, 0x81, 0x8, 0xf, 0x8, 0xc, 0x80, 0x5e, 0x80, 0x7]}, {0x3, 0x0, [0x1bb, 0x3, 0xf1d, 0x10001, 0x7, 0x7fff, 0xf833, 0x7, 0xfffffffc, 0x1f53, 0x0, 0x7, 0x7, 0x1, 0x200, 0x5]}, {0x0, 0x0, [0x6, 0x6, 0x10000, 0x3, 0x9a, 0x6, 0x681, 0x0, 0x49, 0x6, 0x9, 0xa, 0x4, 0x4, 0x27, 0x6]}, {0x2, 0x0, [0x3, 0x4a8d2598, 0x9, 0x10, 0x7, 0x8, 0x1, 0xffff, 0x6, 0x9, 0x6, 0x2393, 0x2, 0xd8, 0x101]}, {0x5, 0x0, [0x7, 0x7, 0x1d4, 0x0, 0x6, 0xecb, 0x64d8, 0x3, 0x9, 0x1ff, 0x8, 0x10000000, 0x5d8, 0x2, 0xfffffffe, 0x6]}, {0x25, 0x0, [0x5458, 0x5, 0x80000000, 0x10001, 0x1000, 0x4, 0x1, 0x44, 0x800, 0xb467, 0x10000, 0xe4, 0x80000000, 0xfffffffa, 0x1, 0xffffff00]}, {0x1a, 0x0, [0x2, 0x0, 0x5, 0x6, 0x3, 0x10000, 0x9, 0x7, 0x0, 0x2, 0xe7ca, 0x8, 0xfffffffa, 0x3, 0x3, 0x2]}], 0xffffffffffffffff, 0x1, 0x1, 0x240}}, 0x20)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54", @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYBLOB=','])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

10.37053689s ago: executing program 0 (id=3689):
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000))
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x41432e62eea49d86, 0x0)
read$nci(r0, &(0x7f0000000100)=""/107, 0x6b)
write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4)
write$P9_RLERRORu(r0, 0x0, 0xe)

10.27848934s ago: executing program 0 (id=3690):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="200b03009081de6208"], 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106d041bc700000000000109022400010000100009047b6501030001000921050000012205000905810300"], 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x4, 0x1b, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x4a, 0xfb, 0xb8, 0x40, 0x166a, 0x301, 0x515d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x90}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0) (async)
syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) (async)
syz_usb_connect(0x3, 0x7d, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x81) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(r1, &(0x7f00000003c0)={0xfffffffffffffe48, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)

9.188257067s ago: executing program 0 (id=3693):
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1)

8.589441843s ago: executing program 0 (id=3696):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x3ac, r1, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x50}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb08f}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd5}]}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff801}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1e, 0x3, "e81afe6e394433dc3d243964d32dd93fa3067593038470ebbaa3"}, @TIPC_NLA_NODE_ID={0x8c, 0x3, "a50d57c7b7b3b28046d1a732b6c4a39f088cd0003d75d3b049b1267b73e7c4309029c270de0ccf0986e70276d3c211df7d9bbfa75a30e084ba9ddb49191166164d41b8bae17b358248784862ea768ab7277633a0896fcd4c04b4c003050137b8a9422cd5c64e6a90cad9dc7db8fbbfa641d05c061a8c7dfdc9a737bf70aa102f309b8e3f9114fa22"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff6d97}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "c6938e2ecf4012840e6407996bffd201d18e8c8c6966d01b8bec6afa4e"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb261}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}]}]}, 0x3ac}, 0x1, 0x0, 0x0, 0x40180}, 0x40084)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
msgget$private(0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={<r4=>0x0}, &(0x7f0000000040)=0x8)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000003040)=[{&(0x7f00000001c0)="05", 0x1}], 0x1}}], 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r4, 0x1}, 0x8)
syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224000100000000090400"], 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x7, 0x57, 0x6}, &(0x7f0000000240)=0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="01000000000000000000010000000000000001410f0000000017"], 0x34}}, 0x0)

1.513685405s ago: executing program 4 (id=3735):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000380)={0x1c, 0x1c}, 0x1c)

1.337910191s ago: executing program 1 (id=3738):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)

1.325499478s ago: executing program 1 (id=3740):
r0 = socket$inet6_udp(0x1c, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000280)={0x7, 0x3}, 0x10)

1.221908228s ago: executing program 4 (id=3741):
r0 = socket$inet6(0x1c, 0x3, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x53, &(0x7f0000000100)={0x0, {{0x1c, 0x1c}}, {{0x1c, 0x1c, 0x1}}}, 0x108)

1.166090096s ago: executing program 5 (id=3742):
setuid(0xffffffffffffffff)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0xffff, 0x10000, &(0x7f0000000340)=0xff, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
bind$inet(r1, &(0x7f0000000000)={0x10, 0x2}, 0x10)

1.087498641s ago: executing program 1 (id=3743):
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f00000001c0)=0x72cd, 0xfd4f)

1.029828032s ago: executing program 4 (id=3744):
r0 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x4a, &(0x7f0000003600)="aa28c4cacb4e87b348498e492916ef0eec4449222ea48033d984539af6d41221f8a31eb9e1c2104f1e437a2de541290ca1ddb84f6ae5739948903758c3750d78874d4ab66625f5257f7e38140ac43d8d16e92af5e4ef578517dd591463a4bb548544cfdf243f8113f0c5e05c64eb8898fd240f9549c0054aa00856a9941d55dbf9ea7760f0d0a6f754b851459d568069123ba3aa398107b1", 0x98)

1.029630196s ago: executing program 5 (id=3745):
r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x40000400000002c2, 0x0)
r1 = open$dir(&(0x7f0000000840)='./file1\x00', 0x40000400000002c2, 0x0)
pwritev(r1, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0, 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffffffffff, 0x0)
r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000400001803c1, 0x3f)
copy_file_range(r0, 0x0, r2, 0x0, 0xffffffffffffffff, 0x0)

929.593024ms ago: executing program 4 (id=3746):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x1010, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udplite(0x1c, 0x2, 0x88)
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000040)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14)
getsockopt$inet6_int(r0, 0x29, 0x2e, 0x0, 0x0)

898.039576ms ago: executing program 5 (id=3747):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0xffff, 0x8000, &(0x7f0000002300)=0x200000fd, 0x13)

829.568217ms ago: executing program 1 (id=3748):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = dup3(r3, r2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x17)
close_range(r0, 0xffffffffffffffff, 0x0)

789.358846ms ago: executing program 5 (id=3749):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100003500010000000000000000"], 0x114}], 0x1}, 0x0)

713.445464ms ago: executing program 4 (id=3750):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r0 = socket(0x10, 0x3, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r3=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="01726f01746d6f64653d17e0200e7d92f47430343030303030300030343030300339757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3d, &(0x7f0000000040)=0x10, 0x4)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r6=>r0, {0x80000000, 0xa}}, './file0\x00'})
ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0xbdb, 0x0, 0x8}, {0x383, 0x0, 0x3}]})
setxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='s'], 0x0, 0x0, 0x1)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00')
syz_fuse_handle_req(r4, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0xd, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0xffff, {0x7, 0x29, 0x7, 0x1021900, 0x5c9, 0x1, 0x8001, 0x5, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000240)={0x4, 0x0, 0x0, r3}, 0xc)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1, 0x0, r3}, 0xc)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)

657.469763ms ago: executing program 5 (id=3751):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x21, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x5, 0x1, 0x3000000, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x395, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xffffeadb, 0x3, 0x1003c, 0x8, 0x80000001, 0x8000000, 0x5]})

424.639471ms ago: executing program 1 (id=3752):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f00003ce000/0x1000)=nil, 0x1000, 0x200000c, 0x20010, r1, 0x2000) (async, rerun: 32)
r2 = dup(r1) (async, rerun: 32)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f00000003c0))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0xc05c5340, &(0x7f0000000180)={0xb586}) (async)
write$binfmt_aout(r2, 0x0, 0xffffffdb) (async)
r4 = socket$alg(0x26, 0x5, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r5, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x63}, 0xffff22cb}], 0x2, 0x2, 0x0) (async)
bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000040)={0x1, 0x7f, 0x1f}) (async)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
read$midi(r6, 0x0, 0x0) (async, rerun: 64)
ioctl$SNDCTL_SEQ_PANIC(r7, 0x5100) (async, rerun: 64)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x120002)
syz_usb_connect$hid(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') (async)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x3, 0x7, 0x7, 0x9}, {0x3e, 0x7, 0x8b, 0x48}, {0x5, 0x3, 0x6, 0x17}]})
close_range(r9, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000200)={0x14, 0x6, 0x4})
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r8, 0x40045402, &(0x7f0000000240)=0x20000009) (async, rerun: 64)
read(r8, 0x0, 0x0) (async, rerun: 64)
syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x1000) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f0", 0x8) (async, rerun: 32)
accept$alg(r4, 0x0, 0x0) (rerun: 32)

197.650958ms ago: executing program 5 (id=3753):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x38, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x38}, 0x4, 0x700000000000000}, 0x40)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40})
r3 = dup(r1)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
ioctl$COMEDI_CHANINFO(r5, 0x80306403, &(0x7f00000002c0)={0xd, &(0x7f0000002840), &(0x7f0000000280), &(0x7f0000011940)})
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

92.821721ms ago: executing program 1 (id=3754):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x3c}, 0x4, 0x700000000000000}, 0x40)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1)

0s ago: executing program 4 (id=3755):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) (async)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r0, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0, 0x3f}], 0x2}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)
mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
mmap$dsp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0)
syz_clone(0x2081e300, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

fx____ratelimit+0x10/0x10
[  510.487361][T15913]  ? __pfx_dump_stack_lvl+0x10/0x10
[  510.487379][T15913]  ? __pfx__printk+0x10/0x10
[  510.487407][T15913]  ? __pfx___might_resched+0x10/0x10
[  510.487429][T15913]  ? fs_reclaim_acquire+0x7d/0x100
[  510.487456][T15913]  should_fail_ex+0x414/0x560
[  510.487482][T15913]  should_failslab+0xa8/0x100
[  510.487506][T15913]  kmem_cache_alloc_node_noprof+0x8c/0x710
[  510.487527][T15913]  ? __alloc_skb+0x112/0x2d0
[  510.487561][T15913]  __alloc_skb+0x112/0x2d0
[  510.487581][T15913]  alloc_skb_with_frags+0xca/0x890
[  510.487613][T15913]  sock_alloc_send_pskb+0x84d/0x980
[  510.487652][T15913]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  510.487674][T15913]  ? is_bpf_text_address+0x26/0x2b0
[  510.487704][T15913]  ? iov_iter_advance+0x8b/0x1c0
[  510.487732][T15913]  tun_get_user+0xa43/0x3e90
[  510.487769][T15913]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  510.487788][T15913]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.487809][T15913]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  510.487828][T15913]  ? __pfx_tun_get_user+0x10/0x10
[  510.487860][T15913]  ? save_netdev_trace_buffer+0x4cd/0x5e0
[  510.487880][T15913]  ? __lock_acquire+0xab9/0xd20
[  510.487904][T15913]  ? ref_tracker_alloc+0x318/0x460
[  510.487923][T15913]  ? tun_get+0x157/0x2f0
[  510.487941][T15913]  ? tun_chr_write_iter+0x60/0x210
[  510.487961][T15913]  ? ksys_write+0x145/0x250
[  510.487980][T15913]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  510.488006][T15913]  ? tun_get+0x1c/0x2f0
[  510.488031][T15913]  ? tun_get+0x1c/0x2f0
[  510.488052][T15913]  ? tun_get+0x1c/0x2f0
[  510.488078][T15913]  tun_chr_write_iter+0x113/0x210
[  510.488102][T15913]  vfs_write+0x5c9/0xb30
[  510.488126][T15913]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  510.488149][T15913]  ? __pfx_vfs_write+0x10/0x10
[  510.488177][T15913]  ? __fget_files+0x2a/0x420
[  510.488207][T15913]  ksys_write+0x145/0x250
[  510.488229][T15913]  ? __pfx_ksys_write+0x10/0x10
[  510.488252][T15913]  ? do_syscall_64+0xbe/0xfa0
[  510.488276][T15913]  do_syscall_64+0xfa/0xfa0
[  510.488295][T15913]  ? lockdep_hardirqs_on+0x9c/0x150
[  510.488314][T15913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.488332][T15913]  ? clear_bhb_loop+0x60/0xb0
[  510.488353][T15913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.488371][T15913] RIP: 0033:0x7f334258eec9
[  510.488395][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.488410][T15913] RSP: 002b:00007f33433a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  510.488430][T15913] RAX: ffffffffffffffda RBX: 00007f33427e5fa0 RCX: 00007f334258eec9
[  510.488443][T15913] RDX: 000000000000340a RSI: 0000200000000480 RDI: 0000000000000005
[  510.488455][T15913] RBP: 00007f33433a6090 R08: 0000000000000000 R09: 0000000000000000
[  510.488467][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.488478][T15913] R13: 00007f33427e6038 R14: 00007f33427e5fa0 R15: 00007ffc89367488
[  510.488503][T15913]  </TASK>
[  511.223130][T10097] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  511.343072][ T5891] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  511.373624][T10097] usb 2-1: Using ep0 maxpacket: 8
[  511.380288][T10097] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  511.392068][T10097] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  511.401449][T10097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.409943][T10097] usb 2-1: Product: syz
[  511.414530][T10097] usb 2-1: Manufacturer: syz
[  511.419139][T10097] usb 2-1: SerialNumber: syz
[  511.427671][T10097] usb 2-1: config 0 descriptor??
[  511.441958][T10097] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  511.506494][ T5891] usb 6-1: config 0 has an invalid interface number: 248 but max is 0
[  511.515094][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  511.525629][ T5891] usb 6-1: config 0 has no interface number 0
[  511.531777][ T5891] usb 6-1: config 0 interface 248 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  511.541837][ T5891] usb 6-1: config 0 interface 248 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  511.557601][ T5891] usb 6-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice=ec.d3
[  511.566937][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.575112][ T5891] usb 6-1: Product: syz
[  511.579401][ T5891] usb 6-1: Manufacturer: syz
[  511.585851][ T5891] usb 6-1: SerialNumber: syz
[  511.595402][ T5891] usb 6-1: config 0 descriptor??
[  511.602736][ T5891] usb 6-1: Could not find all expected endpoints
[  511.713107][   T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  511.743094][ T5930] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  511.863225][   T43] usb 1-1: Using ep0 maxpacket: 16
[  511.871172][   T43] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  511.879676][   T43] usb 1-1: config 0 has no interface number 0
[  511.886083][   T43] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  511.896568][   T43] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  511.906573][ T5930] usb 5-1: Using ep0 maxpacket: 32
[  511.911786][   T43] usb 1-1: config 0 interface 41 has no altsetting 0
[  511.920292][ T5930] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  511.928674][ T5930] usb 5-1: config 0 has no interface number 0
[  511.936348][   T43] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  511.945847][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.954225][   T43] usb 1-1: Product: syz
[  511.958639][   T43] usb 1-1: Manufacturer: syz
[  511.963364][   T43] usb 1-1: SerialNumber: syz
[  511.968626][ T5930] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  511.978730][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.988149][   T43] usb 1-1: config 0 descriptor??
[  511.993352][ T5930] usb 5-1: Product: syz
[  511.997580][ T5930] usb 5-1: Manufacturer: syz
[  511.997876][T15940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  512.002223][ T5930] usb 5-1: SerialNumber: syz
[  512.009948][T15940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  512.018528][ T5930] usb 5-1: config 0 descriptor??
[  512.030404][ T5930] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  512.041543][T15925] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3315'.
[  512.050918][T15925] netlink: 'syz.1.3315': attribute type 5 has an invalid length.
[  512.230336][T15943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  512.236756][T15940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  512.239700][T15943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.248338][T15940] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  512.266416][ T5930] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  512.280298][ T5930] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  512.467514][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  512.476049][ T5930] usb 5-1: USB disconnect, device number 120
[  512.480003][T15940] sctp: [Deprecated]: syz.0.3320 (pid 15940) Use of struct sctp_assoc_value in delayed_ack socket option.
[  512.480003][T15940] Use struct sctp_sack_info instead
[  512.502742][ T5930] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  512.519121][T10097] gspca_zc3xx: reg_w_i err -71
[  512.540758][ T5930] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  512.559399][ T5930] quatech2 5-1:0.51: device disconnected
[  512.708407][   T43] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[  512.732341][   T43] usb 1-1: USB disconnect, device number 21
[  513.123257][T10097] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  513.129767][T10097] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  513.146618][T10097] usb 2-1: USB disconnect, device number 127
[  513.225895][   T52] Bluetooth: hci1: unexpected event for opcode 0x0c5b
[  513.455302][T10097] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  513.584723][T15966] tmpfs: Bad value for 'mpol'
[  513.613136][T10097] usb 2-1: Using ep0 maxpacket: 8
[  513.620352][T10097] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  513.631119][T10097] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  513.640487][T10097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.648549][T10097] usb 2-1: Product: syz
[  513.652711][T10097] usb 2-1: Manufacturer: syz
[  513.657373][T10097] usb 2-1: SerialNumber: syz
[  513.664043][T10097] usb 2-1: config 0 descriptor??
[  513.671718][T10097] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  513.723166][ T5891] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  513.833184][ T5930] usb 5-1: new full-speed USB device number 121 using dummy_hcd
[  513.854936][ T5891] usb 1-1: device descriptor read/64, error -71
[  513.985338][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short
[  513.993620][ T5930] usb 5-1: not running at top speed; connect to a high speed hub
[  514.002586][ T5930] usb 5-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config
[  514.013580][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  514.024636][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  514.033790][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.041823][ T5930] usb 5-1: Product: syz
[  514.046083][ T5930] usb 5-1: Manufacturer: syz
[  514.050922][ T5930] usb 5-1: SerialNumber: syz
[  514.082455][T10097] gspca_zc3xx: reg_w_i err -71
[  514.103075][ T5891] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  514.125253][   T43] usb 6-1: USB disconnect, device number 71
[  514.233597][ T5891] usb 1-1: device descriptor read/64, error -71
[  514.284783][ T5930] usb 5-1: 0:2 : does not exist
[  514.299558][ T5930] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  514.327664][ T5930] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  514.338570][ T5930] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  514.349591][ T5930] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  514.365653][ T5891] usb usb1-port1: attempt power cycle
[  514.375640][ T5930] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  514.391756][ T5930] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  514.423499][ T5930] usb 5-1: USB disconnect, device number 121
[  514.458016][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  514.673346][ T5827] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  514.683272][T10097] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  514.689671][T10097] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  514.700598][T10097] usb 2-1: USB disconnect, device number 2
[  514.743187][ T5891] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  514.763658][ T5891] usb 1-1: device descriptor read/8, error -71
[  514.826423][ T5827] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  514.838705][ T5827] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  514.850434][ T5827] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  514.861957][ T5827] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  514.871501][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.885828][T15973] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  515.003261][ T5891] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  515.013135][T10097] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  515.025131][ T5891] usb 1-1: device descriptor read/8, error -71
[  515.133408][ T5891] usb usb1-port1: unable to enumerate USB device
[  515.175337][T10097] usb 2-1: Using ep0 maxpacket: 16
[  515.185118][T10097] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  515.194485][T10097] usb 2-1: config 0 has no interface number 0
[  515.200988][T10097] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  515.211938][T10097] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  515.223119][T10097] usb 2-1: config 0 interface 41 has no altsetting 0
[  515.235213][T10097] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  515.244514][T10097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.252524][T10097] usb 2-1: Product: syz
[  515.256859][T10097] usb 2-1: Manufacturer: syz
[  515.261685][T10097] usb 2-1: SerialNumber: syz
[  515.282567][T10097] usb 2-1: config 0 descriptor??
[  515.289879][T15975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  515.297966][T15975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  515.514823][T15975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  515.522195][T15975] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  515.544933][T15991] netlink: 'syz.4.3340': attribute type 5 has an invalid length.
[  515.564530][T15991] netlink: zone id is out of range
[  515.569721][T15991] netlink: zone id is out of range
[  515.575089][T15991] netlink: zone id is out of range
[  515.580243][T15991] netlink: zone id is out of range
[  515.585638][T15991] netlink: zone id is out of range
[  515.590765][T15991] netlink: zone id is out of range
[  515.596031][T15991] netlink: zone id is out of range
[  515.602044][T15991] netlink: zone id is out of range
[  515.607316][T15991] netlink: zone id is out of range
[  515.612463][T15991] netlink: zone id is out of range
[  515.707035][ T5827] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  515.718155][ T5827] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input67
[  515.962666][T10097] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  515.981861][T10097] usb 2-1: USB disconnect, device number 3
[  517.394396][T10097] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  517.563103][T10097] usb 5-1: Using ep0 maxpacket: 32
[  517.616005][   T43] usb 6-1: USB disconnect, device number 72
[  517.616037][    C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  517.632870][T10097] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  517.656172][T10097] usb 5-1: config 0 has no interface number 0
[  517.680532][T10097] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  517.711614][T10097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.742673][T10097] usb 5-1: Product: syz
[  517.748706][T10097] usb 5-1: Manufacturer: syz
[  517.764889][T10097] usb 5-1: SerialNumber: syz
[  517.786280][T10097] usb 5-1: config 0 descriptor??
[  517.800574][T10097] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  518.008430][T10097] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  518.040814][T10097] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  518.094914][T16070] netlink: 592 bytes leftover after parsing attributes in process `syz.1.3365'.
[  518.244240][  T797] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  518.395967][  T797] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  518.405935][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  518.414247][  T797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.426472][ T5891] usb 5-1: USB disconnect, device number 122
[  518.435837][  T797] usb 1-1: config 0 descriptor??
[  518.456104][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  518.469999][  T797] cp210x 1-1:0.0: cp210x converter detected
[  518.486848][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  518.503606][ T5891] quatech2 5-1:0.51: device disconnected
[  518.803671][ T5827] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  518.870924][  T797] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  518.894089][  T797] usb 1-1: cp210x converter now attached to ttyUSB0
[  518.977289][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  518.989950][ T5827] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.002472][ T5827] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  519.015481][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.025550][ T5827] usb 2-1: config 0 descriptor??
[  519.084105][   T24] usb 1-1: USB disconnect, device number 26
[  519.097187][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  519.105348][   T43] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  519.118573][   T24] cp210x 1-1:0.0: device disconnected
[  519.243115][T10097] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  519.274886][   T43] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  519.286412][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  519.297591][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  519.307496][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  519.321787][   T43] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  519.330987][   T43] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  519.339142][   T43] usb 6-1: Manufacturer: syz
[  519.346288][   T43] usb 6-1: config 0 descriptor??
[  519.394930][T10097] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.405376][T10097] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  519.414761][T10097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.432710][T10097] usb 5-1: config 0 descriptor??
[  519.445591][T10097] pwc: Askey VC010 type 2 USB webcam detected.
[  519.639152][ T5827] hid-led 0003:1D34:000A.001D: probe with driver hid-led failed with error -71
[  519.668354][ T5827] usb 2-1: USB disconnect, device number 4
[  519.760030][   T43] appleir 0003:05AC:8243.001E: unknown main item tag 0x0
[  519.781223][   T43] appleir 0003:05AC:8243.001E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  519.845019][T10097] pwc: recv_control_msg error -32 req 02 val 2b00
[  519.863199][T10097] pwc: recv_control_msg error -32 req 02 val 2700
[  519.873823][T10097] pwc: recv_control_msg error -32 req 02 val 2c00
[  519.891155][T10097] pwc: recv_control_msg error -32 req 04 val 1000
[  519.904820][T10097] pwc: recv_control_msg error -32 req 04 val 1300
[  519.922254][T10097] pwc: recv_control_msg error -32 req 04 val 1400
[  519.933671][T10097] pwc: recv_control_msg error -32 req 02 val 2000
[  519.952200][T10097] pwc: recv_control_msg error -32 req 02 val 2100
[  519.972399][T10097] pwc: recv_control_msg error -32 req 04 val 1500
[  519.979549][T10097] pwc: recv_control_msg error -32 req 02 val 2500
[  519.993070][T10097] pwc: recv_control_msg error -32 req 02 val 2400
[  520.000252][T10097] pwc: recv_control_msg error -32 req 02 val 2600
[  520.013057][T10097] pwc: recv_control_msg error -32 req 02 val 2900
[  520.023200][T10097] pwc: recv_control_msg error -32 req 02 val 2800
[  520.027343][ T5827] usb 6-1: USB disconnect, device number 73
[  520.035993][T10097] pwc: recv_control_msg error -32 req 04 val 1100
[  520.052183][T10097] pwc: recv_control_msg error -32 req 04 val 1200
[  520.068853][T10097] pwc: Registered as video103.
[  520.087459][T10097] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input68
[  520.623183][   T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  520.771231][T10097] usb 5-1: USB disconnect, device number 123
[  520.785857][   T43] usb 2-1: Using ep0 maxpacket: 16
[  520.822659][   T43] usb 2-1: unable to get BOS descriptor or descriptor too short
[  520.845474][   T43] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  520.864376][   T43] usb 2-1: config 13 has no interface number 0
[  520.870606][   T43] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  520.885567][   T43] usb 2-1: config 13 interface 50 has no altsetting 0
[  520.895618][   T43] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  520.922506][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.938789][   T43] usb 2-1: Product: syz
[  520.943310][   T43] usb 2-1: Manufacturer: syz
[  520.947924][   T43] usb 2-1: SerialNumber: syz
[  520.973408][T16105] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  521.183163][T10097] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  521.209478][   T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  521.218392][   T43] usb 2-1: MIDIStreaming interface descriptor not found
[  521.255008][   T43] usb 2-1: USB disconnect, device number 5
[  521.334702][T10097] usb 5-1: device descriptor read/64, error -71
[  521.351597][T16128] FAULT_INJECTION: forcing a failure.
[  521.351597][T16128] name failslab, interval 1, probability 0, space 0, times 0
[  521.367446][T16128] CPU: 0 UID: 0 PID: 16128 Comm: syz.5.3386 Not tainted syzkaller #0 PREEMPT(full) 
[  521.367471][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  521.367481][T16128] Call Trace:
[  521.367490][T16128]  <TASK>
[  521.367498][T16128]  dump_stack_lvl+0x189/0x250
[  521.367522][T16128]  ? __pfx____ratelimit+0x10/0x10
[  521.367543][T16128]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.367561][T16128]  ? __pfx__printk+0x10/0x10
[  521.367580][T16128]  ? __pfx___might_resched+0x10/0x10
[  521.367603][T16128]  ? fs_reclaim_acquire+0x7d/0x100
[  521.367631][T16128]  should_fail_ex+0x414/0x560
[  521.367655][T16128]  should_failslab+0xa8/0x100
[  521.367679][T16128]  __kmalloc_cache_noprof+0x84/0x700
[  521.367701][T16128]  ? nfnetlink_rcv+0xf97/0x2590
[  521.367729][T16128]  nfnetlink_rcv+0xf97/0x2590
[  521.367808][T16128]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  521.367841][T16128]  ? __pfx_save_netdev_trace_buffer+0x10/0x10
[  521.367863][T16128]  ? ref_tracker_free+0x63a/0x7d0
[  521.367884][T16128]  ? netlink_unicast+0x7fa/0x9e0
[  521.367905][T16128]  ? netlink_sendmsg+0x805/0xb30
[  521.367955][T16128]  ? __netlink_deliver_tap+0x866/0x8b0
[  521.367973][T16128]  ? netlink_deliver_tap+0x2e/0x1b0
[  521.368006][T16128]  netlink_unicast+0x82f/0x9e0
[  521.368038][T16128]  ? __pfx_netlink_unicast+0x10/0x10
[  521.368063][T16128]  ? netlink_sendmsg+0x642/0xb30
[  521.368079][T16128]  ? skb_put+0x11b/0x210
[  521.368099][T16128]  netlink_sendmsg+0x805/0xb30
[  521.368126][T16128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.368148][T16128]  ? aa_sock_msg_perm+0xf1/0x1d0
[  521.368170][T16128]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.368192][T16128]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.368211][T16128]  __sock_sendmsg+0x21c/0x270
[  521.368237][T16128]  ____sys_sendmsg+0x505/0x830
[  521.368262][T16128]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.368291][T16128]  ? import_iovec+0x74/0xa0
[  521.368312][T16128]  ___sys_sendmsg+0x21f/0x2a0
[  521.368333][T16128]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.368387][T16128]  ? __fget_files+0x2a/0x420
[  521.368408][T16128]  ? __fget_files+0x3a0/0x420
[  521.368443][T16128]  __x64_sys_sendmsg+0x19b/0x260
[  521.368463][T16128]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  521.368487][T16128]  ? __pfx_ksys_write+0x10/0x10
[  521.368511][T16128]  ? do_syscall_64+0xbe/0xfa0
[  521.368532][T16128]  do_syscall_64+0xfa/0xfa0
[  521.368550][T16128]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.368570][T16128]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.368587][T16128]  ? clear_bhb_loop+0x60/0xb0
[  521.368609][T16128]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  521.368627][T16128] RIP: 0033:0x7f2952b8eec9
[  521.368644][T16128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  521.368659][T16128] RSP: 002b:00007f2953a50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  521.368678][T16128] RAX: ffffffffffffffda RBX: 00007f2952de5fa0 RCX: 00007f2952b8eec9
[  521.368692][T16128] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  521.368704][T16128] RBP: 00007f2953a50090 R08: 0000000000000000 R09: 0000000000000000
[  521.368716][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  521.368728][T16128] R13: 00007f2952de6038 R14: 00007f2952de5fa0 R15: 00007ffee95595c8
[  521.368755][T16128]  </TASK>
[  521.593197][T10097] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  521.835789][T10097] usb 5-1: device descriptor read/64, error -71
[  521.963382][T10097] usb usb5-port1: attempt power cycle
[  521.994069][T16146] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3393'.
[  522.168487][T16151] FAULT_INJECTION: forcing a failure.
[  522.168487][T16151] name failslab, interval 1, probability 0, space 0, times 0
[  522.181357][T16151] CPU: 0 UID: 0 PID: 16151 Comm: syz.1.3395 Not tainted syzkaller #0 PREEMPT(full) 
[  522.181372][T16151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  522.181379][T16151] Call Trace:
[  522.181384][T16151]  <TASK>
[  522.181389][T16151]  dump_stack_lvl+0x189/0x250
[  522.181405][T16151]  ? __pfx____ratelimit+0x10/0x10
[  522.181417][T16151]  ? __pfx_dump_stack_lvl+0x10/0x10
[  522.181427][T16151]  ? __pfx__printk+0x10/0x10
[  522.181440][T16151]  ? __pfx___might_resched+0x10/0x10
[  522.181453][T16151]  ? fs_reclaim_acquire+0x7d/0x100
[  522.181467][T16151]  should_fail_ex+0x414/0x560
[  522.181482][T16151]  should_failslab+0xa8/0x100
[  522.181496][T16151]  __kmalloc_noprof+0xdf/0x800
[  522.181507][T16151]  ? rcu_is_watching+0x15/0xb0
[  522.181520][T16151]  ? security_sk_alloc+0x52/0x390
[  522.181537][T16151]  security_sk_alloc+0x52/0x390
[  522.181551][T16151]  sk_prot_alloc+0x101/0x220
[  522.181564][T16151]  sk_alloc+0x3a/0x370
[  522.181576][T16151]  inet_create+0x7a0/0x1000
[  522.181586][T16151]  ? inet_create+0x9c/0x1000
[  522.181598][T16151]  __sock_create+0x4b3/0x9f0
[  522.181616][T16151]  __sys_socket+0xd7/0x1b0
[  522.181632][T16151]  __x64_sys_socket+0x7a/0x90
[  522.181645][T16151]  do_syscall_64+0xfa/0xfa0
[  522.181656][T16151]  ? lockdep_hardirqs_on+0x9c/0x150
[  522.181668][T16151]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.181678][T16151]  ? clear_bhb_loop+0x60/0xb0
[  522.181690][T16151]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.181699][T16151] RIP: 0033:0x7f30b138eec9
[  522.181710][T16151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.181719][T16151] RSP: 002b:00007f30af5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  522.181730][T16151] RAX: ffffffffffffffda RBX: 00007f30b15e5fa0 RCX: 00007f30b138eec9
[  522.181738][T16151] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  522.181744][T16151] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[  522.181750][T16151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  522.181756][T16151] R13: 00007f30b15e6038 R14: 00007f30b15e5fa0 R15: 00007ffe18182258
[  522.181772][T16151]  </TASK>
[  522.410901][ T5827] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  522.419834][ T5909] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  522.486629][T10097] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  522.518489][T10097] usb 5-1: device descriptor read/8, error -71
[  522.593641][ T5909] usb 6-1: device descriptor read/64, error -71
[  522.621966][ T5827] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  522.631799][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.639992][ T5827] usb 1-1: Product: syz
[  522.644847][ T5827] usb 1-1: Manufacturer: syz
[  522.649462][ T5827] usb 1-1: SerialNumber: syz
[  522.657217][ T5827] usb 1-1: config 0 descriptor??
[  522.763218][T10097] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  522.793650][T10097] usb 5-1: device descriptor read/8, error -71
[  522.853205][ T5909] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  522.865697][ T5827] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  522.903318][T10097] usb usb5-port1: unable to enumerate USB device
[  523.005452][ T5909] usb 6-1: device descriptor read/64, error -71
[  523.113448][ T5909] usb usb6-port1: attempt power cycle
[  523.213080][T10097] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  523.364550][T10097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.374839][T10097] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  523.386477][T10097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  523.397716][T10097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  523.407635][T10097] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  523.422554][T10097] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  523.431743][T10097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  523.439982][T10097] usb 2-1: Product: syz
[  523.444540][T10097] usb 2-1: Manufacturer: syz
[  523.449150][T10097] usb 2-1: SerialNumber: syz
[  523.456580][T10097] usb 2-1: config 0 descriptor??
[  523.463719][ T5909] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  523.493898][ T5909] usb 6-1: device descriptor read/8, error -71
[  523.666262][T10097] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  523.673155][T10097] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  523.733188][ T5909] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  523.753856][ T5909] usb 6-1: device descriptor read/8, error -71
[  523.863728][ T5909] usb usb6-port1: unable to enumerate USB device
[  523.873157][T10097] radio-si470x 2-1:0.0: software version 135, hardware version 216
[  523.881580][T10097] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  524.032329][T16169] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3403'.
[  524.074039][T10097] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  524.086179][T10097] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  524.094466][T10097] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  524.106449][T10097] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  524.125131][T10097] usb 2-1: USB disconnect, device number 6
[  524.496780][ T5827] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  524.511270][ T5827] usb 1-1: USB disconnect, device number 27
[  524.686561][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'.
[  525.362459][T16215] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3421'.
[  525.397689][T16217] overlayfs: unescaped trailing colons in lowerdir mount option.
[  525.774705][ T5827] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  525.853666][T10097] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  525.907858][ T3510] Bluetooth: (null): Invalid header checksum
[  525.954748][ T5827] usb 6-1: config 0 has an invalid interface number: 208 but max is 0
[  525.966085][ T5827] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  525.976615][ T5827] usb 6-1: config 0 has no interface number 0
[  525.982744][ T5827] usb 6-1: config 0 interface 208 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  525.993458][ T5827] usb 6-1: config 0 interface 208 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  526.006723][ T5827] usb 6-1: config 0 interface 208 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  526.013116][T10097] usb 2-1: Using ep0 maxpacket: 32
[  526.016794][ T5827] usb 6-1: config 0 interface 208 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  526.035950][ T5827] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=ff.b1
[  526.040828][T10097] usb 2-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config
[  526.047847][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.056794][T10097] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  526.072770][T10097] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.073053][ T5827] usb 6-1: Product: syz
[  526.091485][T10097] usb 2-1: config 0 interface 0 has no altsetting 1
[  526.099648][ T5827] usb 6-1: Manufacturer: syz
[  526.104664][ T5827] usb 6-1: SerialNumber: syz
[  526.112475][ T5827] usb 6-1: config 0 descriptor??
[  526.118528][T10097] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c
[  526.132487][T10097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.139329][ T5827] kvaser_usb 6-1:0.208: error -ENODEV: Cannot get usb endpoint(s)
[  526.140625][T10097] usb 2-1: Product: syz
[  526.153273][T10097] usb 2-1: Manufacturer: syz
[  526.161122][T10097] usb 2-1: SerialNumber: syz
[  526.169640][T10097] usb 2-1: config 0 descriptor??
[  526.351689][ T5827] usb 6-1: USB disconnect, device number 78
[  526.466825][T16252] netlink: 'syz.0.3434': attribute type 1 has an invalid length.
[  526.713167][ T5891] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  526.843122][ T5891] usb 1-1: device descriptor read/64, error -71
[  527.083129][ T5891] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  527.153117][   T43] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  527.213060][ T5891] usb 1-1: device descriptor read/64, error -71
[  527.305326][   T43] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  527.317666][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.331788][   T43] usb 6-1: config 0 descriptor??
[  527.338494][ T5891] usb usb1-port1: attempt power cycle
[  527.340291][   T43] cp210x 6-1:0.0: cp210x converter detected
[  527.684206][ T5891] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  527.703800][ T5891] usb 1-1: device descriptor read/8, error -71
[  527.764928][   T43] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  527.787953][   T43] usb 6-1: cp210x converter now attached to ttyUSB0
[  527.947556][ T5891] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  527.969292][T10097] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  527.985261][ T5891] usb 1-1: device descriptor read/8, error -71
[  528.004002][ T5909] usb 6-1: USB disconnect, device number 79
[  528.007886][T10097] usb 2-1: USB disconnect, device number 7
[  528.026795][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  528.058548][ T5909] cp210x 6-1:0.0: device disconnected
[  528.103468][ T5891] usb usb1-port1: unable to enumerate USB device
[  528.651564][T16290] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3448'.
[  528.833099][T10097] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  528.903103][   T43] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  528.963123][T10097] usb 6-1: device descriptor read/64, error -71
[  529.053089][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  529.194814][   T43] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  529.204315][T10097] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  529.333175][T10097] usb 6-1: device descriptor read/64, error -71
[  529.343423][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  529.349190][   T43] usb usb5-port1: attempt power cycle
[  529.443414][T10097] usb usb6-port1: attempt power cycle
[  529.542258][T16308] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3456'.
[  529.693537][   T43] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  529.724019][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  529.783158][T10097] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  529.804971][T16323] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.3462'.
[  529.815133][T10097] usb 6-1: device descriptor read/8, error -71
[  529.853619][   T43] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[  529.873784][   T43] usb 5-1: Invalid ep0 maxpacket: 64
[  529.879539][   T43] usb usb5-port1: unable to enumerate USB device
[  529.983108][ T5930] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  530.054376][T10097] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  530.081916][T16331] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3465'.
[  530.092100][T10097] usb 6-1: device descriptor read/8, error -71
[  530.147355][ T5930] usb 1-1: config index 0 descriptor too short (expected 2843, got 27)
[  530.155883][ T5930] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  530.166641][ T5930] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 9
[  530.180305][ T5930] usb 1-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice= 0.00
[  530.191108][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.203883][T10097] usb usb6-port1: unable to enumerate USB device
[  530.227512][ T5930] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  530.430036][T16320] 9pnet_fd: Insufficient options for proto=fd
[  530.505692][ T5930] gspca_sn9c2028: read1 error -71
[  530.512490][ T5930] gspca_sn9c2028: read1 error -71
[  530.517970][ T5930] gspca_sn9c2028: read1 error -71
[  530.523211][ T5930] sn9c2028 1-1:17.0: probe with driver sn9c2028 failed with error -71
[  530.534887][ T5930] usb 1-1: USB disconnect, device number 32
[  530.553153][ T5891] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  530.683095][ T5891] usb 2-1: device descriptor read/64, error -71
[  530.933159][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  531.074708][ T5891] usb 2-1: device descriptor read/64, error -71
[  531.195604][ T5891] usb usb2-port1: attempt power cycle
[  531.543103][ T5891] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  531.543103][T10097] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  531.573788][ T5891] usb 2-1: device descriptor read/8, error -71
[  531.695871][T10097] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  531.708017][T10097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.725586][T10097] usb 1-1: config 0 descriptor??
[  531.813255][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  531.814872][T16357] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3475'.
[  531.845052][ T5891] usb 2-1: device descriptor read/8, error -71
[  531.943255][T10097] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  531.963525][ T5891] usb usb2-port1: unable to enumerate USB device
[  532.137633][T10097] [drm:udl_init] *ERROR* Selecting channel failed
[  532.175324][T10097] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  532.182199][T10097] [drm] Initialized udl on minor 2
[  532.199277][T16370] syzkaller1: entered promiscuous mode
[  532.204058][T10097] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  532.213267][T16370] syzkaller1: entered allmulticast mode
[  532.214455][T10097] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  532.238783][   T43] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  532.250280][T10097] usb 1-1: USB disconnect, device number 33
[  532.256532][   T43] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  532.420985][T16376] netlink: 'syz.5.3482': attribute type 1 has an invalid length.
[  532.721443][T16391] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3486'.
[  533.054041][   T43] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[  533.066368][T16404] syzkaller1: entered promiscuous mode
[  533.071967][T16404] syzkaller1: entered allmulticast mode
[  533.079289][T16404] FAULT_INJECTION: forcing a failure.
[  533.079289][T16404] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  533.092440][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.0.3492 Not tainted syzkaller #0 PREEMPT(full) 
[  533.092464][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  533.092476][T16404] Call Trace:
[  533.092485][T16404]  <TASK>
[  533.092490][T16404]  dump_stack_lvl+0x189/0x250
[  533.092506][T16404]  ? __pfx____ratelimit+0x10/0x10
[  533.092518][T16404]  ? __pfx_dump_stack_lvl+0x10/0x10
[  533.092528][T16404]  ? __pfx__printk+0x10/0x10
[  533.092538][T16404]  ? __might_fault+0xb0/0x130
[  533.092554][T16404]  should_fail_ex+0x414/0x560
[  533.092569][T16404]  _copy_from_iter+0x1de/0x1790
[  533.092583][T16404]  ? skb_set_owner_w+0x26c/0x3e0
[  533.092597][T16404]  ? sock_alloc_send_pskb+0x86b/0x980
[  533.092611][T16404]  ? __pfx__copy_from_iter+0x10/0x10
[  533.092629][T16404]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  533.092642][T16404]  skb_copy_datagram_from_iter+0xf5/0x720
[  533.092660][T16404]  ? skb_put+0x11b/0x210
[  533.092672][T16404]  tun_get_user+0x1691/0x3e90
[  533.092693][T16404]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  533.092704][T16404]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.092716][T16404]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  533.092727][T16404]  ? __pfx_tun_get_user+0x10/0x10
[  533.092744][T16404]  ? save_netdev_trace_buffer+0x4cd/0x5e0
[  533.092761][T16404]  ? __lock_acquire+0xab9/0xd20
[  533.092777][T16404]  ? ref_tracker_alloc+0x318/0x460
[  533.092788][T16404]  ? tun_get+0x157/0x2f0
[  533.092799][T16404]  ? tun_chr_write_iter+0x60/0x210
[  533.092811][T16404]  ? ksys_write+0x145/0x250
[  533.092822][T16404]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  533.092837][T16404]  ? tun_get+0x1c/0x2f0
[  533.092853][T16404]  ? tun_get+0x1c/0x2f0
[  533.092865][T16404]  ? tun_get+0x1c/0x2f0
[  533.092879][T16404]  tun_chr_write_iter+0x113/0x210
[  533.092893][T16404]  vfs_write+0x5c9/0xb30
[  533.092912][T16404]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  533.092926][T16404]  ? __pfx_vfs_write+0x10/0x10
[  533.092957][T16404]  ? __fget_files+0x2a/0x420
[  533.092986][T16404]  ksys_write+0x145/0x250
[  533.093007][T16404]  ? __pfx_ksys_write+0x10/0x10
[  533.093027][T16404]  ? do_syscall_64+0xbe/0xfa0
[  533.093048][T16404]  do_syscall_64+0xfa/0xfa0
[  533.093064][T16404]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.093082][T16404]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.093098][T16404]  ? clear_bhb_loop+0x60/0xb0
[  533.093116][T16404]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.093120][T10097] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  533.093135][T16404] RIP: 0033:0x7f2f1358eec9
[  533.093153][T16404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  533.093166][T16404] RSP: 002b:00007f2f143d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  533.093184][T16404] RAX: ffffffffffffffda RBX: 00007f2f137e5fa0 RCX: 00007f2f1358eec9
[  533.093197][T16404] RDX: 00000000000000dd RSI: 0000200000000380 RDI: 0000000000000003
[  533.093209][T16404] RBP: 00007f2f143d9090 R08: 0000000000000000 R09: 0000000000000000
[  533.093221][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  533.093232][T16404] R13: 00007f2f137e6038 R14: 00007f2f137e5fa0 R15: 00007ffdd8f7f2c8
[  533.093262][T16404]  </TASK>
[  533.485340][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  533.499617][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  533.511047][   T43] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  533.521196][   T43] usb 6-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  533.539929][   T43] usb 6-1: Manufacturer: syz
[  533.554092][   T43] usb 6-1: config 0 descriptor??
[  533.563388][T10097] usb 5-1: Using ep0 maxpacket: 16
[  533.571844][   T43] uvcvideo 6-1:0.0: Found UVC 0.00 device <unnamed> (18ec:3288)
[  533.595273][T10097] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  533.606061][   T43] uvcvideo 6-1:0.0: No valid video chain found.
[  533.615651][T10097] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  533.624993][T10097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.635504][T10097] usb 5-1: Product: syz
[  533.639789][T10097] usb 5-1: Manufacturer: syz
[  533.644509][T10097] usb 5-1: SerialNumber: syz
[  533.651750][T10097] usb 5-1: config 0 descriptor??
[  533.666330][T10097] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  533.678084][T10097] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  533.789359][ T5827] usb 6-1: USB disconnect, device number 84
[  534.266892][T10097] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  534.536020][T16423] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  534.536020][T16423]    program syz.5.3499 not setting count and/or reply_len properly
[  534.672660][T16428] binder: 16427:16428 ioctl 4018620d 0 returned -22
[  534.692927][T10097] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  534.716015][T10097] em28xx 5-1:0.0: board has no eeprom
[  534.803179][T10097] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  534.815041][T10097] em28xx 5-1:0.0: dvb set to bulk mode.
[  534.823245][   T43] em28xx 5-1:0.0: Binding DVB extension
[  534.834404][T16436] fuse: Bad value for 'group_id'
[  534.854375][T10097] usb 5-1: USB disconnect, device number 6
[  534.861166][T16436] fuse: Bad value for 'group_id'
[  534.869778][T10097] em28xx 5-1:0.0: Disconnecting em28xx
[  534.880341][T16436] overlayfs: failed to resolve './file1': -2
[  534.976338][   T43] em28xx 5-1:0.0: Registering input extension
[  534.996174][T10097] em28xx 5-1:0.0: Closing input extension
[  535.012147][T10097] em28xx 5-1:0.0: Freeing device
[  535.357326][T16457] FAULT_INJECTION: forcing a failure.
[  535.357326][T16457] name failslab, interval 1, probability 0, space 0, times 0
[  535.357434][T16457] CPU: 1 UID: 0 PID: 16457 Comm: syz.0.3511 Not tainted syzkaller #0 PREEMPT(full) 
[  535.357455][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  535.357466][T16457] Call Trace:
[  535.357474][T16457]  <TASK>
[  535.357483][T16457]  dump_stack_lvl+0x189/0x250
[  535.357507][T16457]  ? __pfx____ratelimit+0x10/0x10
[  535.357528][T16457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.357546][T16457]  ? __pfx__printk+0x10/0x10
[  535.357571][T16457]  ? __pfx___might_resched+0x10/0x10
[  535.357600][T16457]  should_fail_ex+0x414/0x560
[  535.357629][T16457]  should_failslab+0xa8/0x100
[  535.357653][T16457]  __kmalloc_noprof+0xdf/0x800
[  535.357669][T16457]  ? __kasan_kmalloc+0x93/0xb0
[  535.357689][T16457]  ? drm_atomic_state_init+0x106/0x310
[  535.357715][T16457]  drm_atomic_state_init+0x106/0x310
[  535.357739][T16457]  drm_atomic_state_alloc+0xbc/0x100
[  535.357761][T16457]  drm_client_modeset_commit_atomic+0xe2/0x760
[  535.357785][T16457]  ? trace_contention_end+0x39/0x120
[  535.357815][T16457]  ? trace_contention_end+0x39/0x120
[  535.357842][T16457]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  535.357888][T16457]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  535.357922][T16457]  drm_client_modeset_commit_locked+0xcb/0x4d0
[  535.357950][T16457]  drm_fb_helper_pan_display+0x3e7/0xbd0
[  535.357985][T16457]  fb_pan_display+0x39e/0x680
[  535.358011][T16457]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  535.358036][T16457]  bit_update_start+0x4c/0x1e0
[  535.358064][T16457]  fbcon_switch+0x12d6/0x1c90
[  535.358101][T16457]  ? __pfx_fbcon_switch+0x10/0x10
[  535.358143][T16457]  ? __pfx_hide_cursor+0x10/0x10
[  535.358172][T16457]  ? is_console_locked+0x9/0x20
[  535.358187][T16457]  ? set_origin+0x346/0x480
[  535.358215][T16457]  redraw_screen+0x56d/0xe90
[  535.358248][T16457]  ? do_raw_spin_lock+0x121/0x290
[  535.358266][T16457]  ? __pfx_redraw_screen+0x10/0x10
[  535.358296][T16457]  ? is_console_locked+0x9/0x20
[  535.358311][T16457]  ? fbcon_clear_margins+0x24c/0x3d0
[  535.358337][T16457]  fbcon_do_set_font+0xb3d/0x1120
[  535.358386][T16457]  con_font_op+0x810/0xfd0
[  535.358412][T16457]  ? __lock_acquire+0xab9/0xd20
[  535.358441][T16457]  ? __pfx_con_font_op+0x10/0x10
[  535.358497][T16457]  vt_ioctl+0x1a89/0x1f20
[  535.358529][T16457]  ? __pfx_vt_ioctl+0x10/0x10
[  535.358572][T16457]  ? __fget_files+0x2a/0x420
[  535.358598][T16457]  ? tty_jobctrl_ioctl+0x369/0xb70
[  535.358614][T16457]  ? __fget_files+0x3a0/0x420
[  535.358635][T16457]  ? __fget_files+0x2a/0x420
[  535.358659][T16457]  tty_ioctl+0x929/0xde0
[  535.358680][T16457]  ? __pfx_tty_ioctl+0x10/0x10
[  535.358700][T16457]  __se_sys_ioctl+0xfc/0x170
[  535.358721][T16457]  do_syscall_64+0xfa/0xfa0
[  535.358740][T16457]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.358761][T16457]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.358779][T16457]  ? clear_bhb_loop+0x60/0xb0
[  535.358801][T16457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.358818][T16457] RIP: 0033:0x7f2f1358eec9
[  535.358835][T16457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.358851][T16457] RSP: 002b:00007f2f143d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  535.358871][T16457] RAX: ffffffffffffffda RBX: 00007f2f137e5fa0 RCX: 00007f2f1358eec9
[  535.358884][T16457] RDX: 00002000000000c0 RSI: 0000000000004b72 RDI: 0000000000000003
[  535.358897][T16457] RBP: 00007f2f143d9090 R08: 0000000000000000 R09: 0000000000000000
[  535.358908][T16457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  535.358920][T16457] R13: 00007f2f137e6038 R14: 00007f2f137e5fa0 R15: 00007ffdd8f7f2c8
[  535.358954][T16457]  </TASK>
[  535.566401][   T43] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[  535.726168][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  535.726212][   T43] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  535.726254][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.729656][   T43] usb 6-1: config 0 descriptor??
[  535.965650][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  536.031289][T16479] tmpfs: Bad value for 'mpol'
[  536.084279][T16481] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3521'.
[  536.123350][ T5891] usb 2-1: Using ep0 maxpacket: 32
[  536.134195][ T5891] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  536.142403][ T5891] usb 2-1: config 0 has no interface number 0
[  536.152548][ T5891] usb 2-1: config 0 interface 12 has no altsetting 0
[  536.170554][ T5891] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  536.184181][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.192287][ T5891] usb 2-1: Product: syz
[  536.196977][ T5891] usb 2-1: Manufacturer: syz
[  536.201592][ T5891] usb 2-1: SerialNumber: syz
[  536.214054][ T5891] usb 2-1: config 0 descriptor??
[  536.331027][   T43] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0
[  536.338575][   T43] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0
[  536.349167][   T43] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0
[  536.357461][   T43] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0
[  536.364824][   T43] lenovo 0003:17EF:6047.001F: unknown main item tag 0x0
[  536.378876][   T43] lenovo 0003:17EF:6047.001F: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  536.413333][T10097] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  536.485660][T16492] binder: 16491:16492 ioctl 4018620d 0 returned -22
[  536.531131][T16455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  536.544025][T16455] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  536.575058][T10097] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  536.590556][   T43] lenovo 0003:17EF:6047.001F: Failed to switch F7/9/11 mode: -71
[  536.610747][T10097] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  536.631808][   T43] lenovo 0003:17EF:6047.001F: Failed to switch middle button: -71
[  536.647204][T10097] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  536.663875][   T43] lenovo 0003:17EF:6047.001F: Fn-lock setting failed: -71
[  536.674831][   T43] lenovo 0003:17EF:6047.001F: Sensitivity setting failed: -71
[  536.683071][T10097] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  536.713548][   T43] usb 6-1: USB disconnect, device number 85
[  536.725123][T10097] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  536.734326][T10097] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  536.747090][T10097] usb 1-1: Product: syz
[  536.751328][T10097] usb 1-1: Manufacturer: syz
[  536.772087][T10097] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  536.863924][ T5827] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[  536.923368][ T5146] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  536.975585][ T5909] usb 1-1: USB disconnect, device number 34
[  537.015251][ T5827] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  537.025381][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.036482][ T5827] usb 5-1: config 0 descriptor??
[  537.793196][   T43] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  537.844587][ T5891] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  537.852360][ T5891] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  537.860429][ T5891] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  537.868654][ T5891] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  537.887219][ T5891] usb 2-1: USB disconnect, device number 12
[  537.932675][T16509] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3531'.
[  537.943988][   T43] usb 1-1: Using ep0 maxpacket: 32
[  537.956156][   T43] usb 1-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  537.969030][   T43] usb 1-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.979401][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  537.987265][   T43] usb 1-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00
[  537.997653][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.016502][   T43] usb 1-1: config 0 descriptor??
[  538.082703][T16511] tipc: Started in network mode
[  538.088750][T16511] tipc: Node identity c6e4516f138b, cluster identity 4711
[  538.096719][T16511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  538.148460][T16511] syzkaller0: entered promiscuous mode
[  538.154029][T16511] syzkaller0: entered allmulticast mode
[  538.160494][T16511] tipc: Resetting bearer <eth:syzkaller0>
[  538.229340][T16512] tipc: Resetting bearer <eth:syzkaller0>
[  538.454611][   T43] apple 0003:05AC:027C.0020: hidraw0: USB HID v0.07 Device [HID 05ac:027c] on usb-dummy_hcd.0-1/input0
[  538.652737][T16505] fuse: Bad value for 'group_id'
[  538.659436][T16505] fuse: Bad value for 'group_id'
[  538.668596][T16521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.675623][T16505] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3529'.
[  538.682888][T16521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.688178][ T5891] usb 1-1: USB disconnect, device number 35
[  538.709747][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  538.720172][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  538.735309][ T5827] asix 5-1:0.0: probe with driver asix failed with error -71
[  538.770586][ T5827] usb 5-1: USB disconnect, device number 7
[  538.895145][   T43] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  539.233669][ T5827] tipc: Node number set to 3580842351
[  539.553241][ T5827] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  539.733192][ T5827] usb 5-1: Using ep0 maxpacket: 32
[  539.740493][ T5827] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  539.750225][ T5827] usb 5-1: config 0 has no interface number 0
[  539.771892][ T5827] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  539.791007][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.808073][ T5827] usb 5-1: Product: syz
[  539.820418][ T5827] usb 5-1: Manufacturer: syz
[  539.825519][ T5827] usb 5-1: SerialNumber: syz
[  539.842193][ T5827] usb 5-1: config 0 descriptor??
[  539.858625][ T5827] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  539.859195][T16535] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3540'.
[  540.062595][ T5827] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  540.082571][ T5827] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  540.464127][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  540.473689][ T5891] usb 5-1: USB disconnect, device number 8
[  540.525521][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  540.539562][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  540.540055][T16512] tipc: Disabling bearer <eth:syzkaller0>
[  540.551906][ T5891] quatech2 5-1:0.51: device disconnected
[  540.663105][ T5827] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  540.835415][ T5827] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  540.847789][ T5827] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  540.857008][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.865118][ T5827] usb 1-1: Product: syz
[  540.869337][ T5827] usb 1-1: Manufacturer: syz
[  540.873972][ T5827] usb 1-1: SerialNumber: syz
[  540.973061][ T5909] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[  541.090734][T16543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  541.103884][T16543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  541.132493][ T5909] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.138313][T16553] binder: 16552:16553 ioctl 4018620d 0 returned -22
[  541.155621][T16553] binder: 16552:16553 ioctl c0306201 0 returned -14
[  541.165901][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  541.176831][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.185283][ T5909] usb 6-1: Product: syz
[  541.189722][ T5909] usb 6-1: Manufacturer: syz
[  541.194560][   T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  541.205857][ T5909] usb 6-1: SerialNumber: syz
[  541.343197][   T43] usb 2-1: Using ep0 maxpacket: 32
[  541.352302][   T43] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b
[  541.361927][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.371667][   T43] usb 2-1: Product: syz
[  541.376153][   T43] usb 2-1: Manufacturer: syz
[  541.380753][   T43] usb 2-1: SerialNumber: syz
[  541.388545][   T43] usb 2-1: config 0 descriptor??
[  541.431995][ T5909] cdc_ncm 6-1:1.0: bind() failure
[  541.445814][ T5909] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  541.453268][ T5909] cdc_ncm 6-1:1.1: bind() failure
[  541.469777][ T5909] usb 6-1: USB disconnect, device number 86
[  541.595790][   T43] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71
[  541.617395][   T43] usb 2-1: USB disconnect, device number 14
[  541.793077][  T797] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  541.946121][T16546] Process accounting paused
[  541.964543][  T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  541.992281][  T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  542.003264][  T797] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  542.020430][  T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.045974][  T797] usb 5-1: config 0 descriptor??
[  542.268825][T16562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.299181][T16562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.310930][T16562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.328058][T16562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.580148][  T797] usbhid 5-1:0.0: can't add hid device: -71
[  542.596187][  T797] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  542.619466][T16585] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3561'.
[  542.626158][  T797] usb 5-1: USB disconnect, device number 9
[  542.953105][   T43] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  543.127147][   T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.147268][   T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  543.174792][   T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  543.184786][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  543.192819][   T43] usb 2-1: SerialNumber: syz
[  543.419251][   T43] usb 2-1: 0:2 : does not exist
[  543.424597][   T43] usb 2-1: unit 255 not found!
[  543.435754][  T797] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  543.444524][ T5827] comedi comedi5: Wrong number of endpoints
[  543.450535][   T43] usb 2-1: unit 6 not found!
[  543.450709][ T5827] ni6501 1-1:5.0: driver 'ni6501' failed to auto-configure device.
[  543.496269][   T43] usb 2-1: USB disconnect, device number 15
[  543.512313][ T5827] usb 1-1: USB disconnect, device number 36
[  543.562040][ T6119] udevd[6119]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  543.579242][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3570'.
[  543.637547][  T797] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  543.647873][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.662258][  T797] usb 5-1: Product: syz
[  543.666528][  T797] usb 5-1: Manufacturer: syz
[  543.671140][  T797] usb 5-1: SerialNumber: syz
[  543.679759][  T797] usb 5-1: config 0 descriptor??
[  543.887830][  T797] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  543.963291][ T5827] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  544.028768][T16624] comedi comedi0: mpc624: I/O port conflict (0x3,16)
[  544.041285][T16626] FAULT_INJECTION: forcing a failure.
[  544.041285][T16626] name failslab, interval 1, probability 0, space 0, times 0
[  544.055335][T16626] CPU: 1 UID: 0 PID: 16626 Comm: syz.1.3576 Not tainted syzkaller #0 PREEMPT(full) 
[  544.055362][T16626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  544.055375][T16626] Call Trace:
[  544.055384][T16626]  <TASK>
[  544.055394][T16626]  dump_stack_lvl+0x189/0x250
[  544.055420][T16626]  ? __pfx____ratelimit+0x10/0x10
[  544.055444][T16626]  ? __pfx_dump_stack_lvl+0x10/0x10
[  544.055476][T16626]  ? __pfx__printk+0x10/0x10
[  544.055501][T16626]  ? __pfx___might_resched+0x10/0x10
[  544.055530][T16626]  should_fail_ex+0x414/0x560
[  544.055561][T16626]  should_failslab+0xa8/0x100
[  544.055587][T16626]  __kmalloc_noprof+0xdf/0x800
[  544.055608][T16626]  ? kfree+0x4d/0x6d0
[  544.055626][T16626]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  544.055655][T16626]  tomoyo_realpath_from_path+0xe3/0x5d0
[  544.055682][T16626]  ? tomoyo_domain+0xd9/0x130
[  544.055710][T16626]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  544.055730][T16626]  tomoyo_path_number_perm+0x1e8/0x5a0
[  544.055754][T16626]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  544.055812][T16626]  ? __fget_files+0x2a/0x420
[  544.055842][T16626]  ? __fget_files+0x3a0/0x420
[  544.055865][T16626]  ? __fget_files+0x2a/0x420
[  544.055894][T16626]  security_file_ioctl+0xcb/0x2d0
[  544.055914][T16626]  __se_sys_ioctl+0x47/0x170
[  544.055937][T16626]  do_syscall_64+0xfa/0xfa0
[  544.055959][T16626]  ? lockdep_hardirqs_on+0x9c/0x150
[  544.055982][T16626]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.056001][T16626]  ? clear_bhb_loop+0x60/0xb0
[  544.056025][T16626]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  544.056043][T16626] RIP: 0033:0x7f30b138eec9
[  544.056061][T16626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  544.056079][T16626] RSP: 002b:00007f30af5f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  544.056100][T16626] RAX: ffffffffffffffda RBX: 00007f30b15e5fa0 RCX: 00007f30b138eec9
[  544.056115][T16626] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003
[  544.056128][T16626] RBP: 00007f30af5f6090 R08: 0000000000000000 R09: 0000000000000000
[  544.056142][T16626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  544.056153][T16626] R13: 00007f30b15e6038 R14: 00007f30b15e5fa0 R15: 00007ffe18182258
[  544.056186][T16626]  </TASK>
[  544.056688][T16626] ERROR: Out of memory at tomoyo_realpath_from_path.
[  544.133089][ T5827] usb 1-1: device descriptor read/64, error -71
[  544.553105][ T5827] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  544.703259][ T5827] usb 1-1: device descriptor read/64, error -71
[  544.823535][ T5827] usb usb1-port1: attempt power cycle
[  544.887814][T16637] binder: 16636:16637 ioctl 4018620d 0 returned -22
[  545.058489][T16640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3580'.
[  545.203213][ T5827] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  545.225150][ T5827] usb 1-1: device descriptor read/8, error -71
[  545.493938][ T5827] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  545.524926][ T5827] usb 1-1: device descriptor read/8, error -71
[  545.538187][  T797] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  545.550934][  T797] usb 5-1: USB disconnect, device number 10
[  545.643345][ T5827] usb usb1-port1: unable to enumerate USB device
[  545.810640][T16651] netlink: 'syz.5.3584': attribute type 3 has an invalid length.
[  545.820125][T16651] netlink: 766 bytes leftover after parsing attributes in process `syz.5.3584'.
[  545.906044][T16655] binder: 16654:16655 ioctl c0306201 0 returned -14
[  546.089962][T16662] FAULT_INJECTION: forcing a failure.
[  546.089962][T16662] name failslab, interval 1, probability 0, space 0, times 0
[  546.104846][T16662] CPU: 1 UID: 0 PID: 16662 Comm: syz.4.3589 Not tainted syzkaller #0 PREEMPT(full) 
[  546.104871][T16662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  546.104882][T16662] Call Trace:
[  546.104890][T16662]  <TASK>
[  546.104898][T16662]  dump_stack_lvl+0x189/0x250
[  546.104922][T16662]  ? __pfx____ratelimit+0x10/0x10
[  546.104942][T16662]  ? __pfx_dump_stack_lvl+0x10/0x10
[  546.104960][T16662]  ? __pfx__printk+0x10/0x10
[  546.104980][T16662]  ? __pfx___might_resched+0x10/0x10
[  546.105003][T16662]  ? fs_reclaim_acquire+0x7d/0x100
[  546.105029][T16662]  should_fail_ex+0x414/0x560
[  546.105056][T16662]  should_failslab+0xa8/0x100
[  546.105080][T16662]  __kmalloc_cache_noprof+0x84/0x700
[  546.105124][T16662]  ? sctp_datamsg_from_user+0x88/0xef0
[  546.105151][T16662]  sctp_datamsg_from_user+0x88/0xef0
[  546.105172][T16662]  ? __sk_mem_raise_allocated+0x7ef/0x11a0
[  546.105205][T16662]  ? sctp_primitive_ASSOCIATE+0x95/0xc0
[  546.105235][T16662]  sctp_sendmsg_to_asoc+0xffe/0x1810
[  546.105258][T16662]  ? __asan_memcpy+0x40/0x70
[  546.105283][T16662]  ? sctp_assoc_add_peer+0xcfa/0x13b0
[  546.105322][T16662]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  546.105346][T16662]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  546.105372][T16662]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  546.105396][T16662]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  546.105418][T16662]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  546.105442][T16662]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  546.105464][T16662]  ? security_sctp_bind_connect+0x7e/0x2e0
[  546.105493][T16662]  sctp_sendmsg+0x1941/0x2810
[  546.105536][T16662]  ? __pfx_sctp_sendmsg+0x10/0x10
[  546.105564][T16662]  ? aa_sk_perm+0x81e/0x950
[  546.105590][T16662]  ? __pfx_aa_sk_perm+0x10/0x10
[  546.105613][T16662]  ? sock_rps_record_flow+0x19/0x410
[  546.105642][T16662]  ? inet_sendmsg+0x2f4/0x370
[  546.105666][T16662]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  546.105691][T16662]  __sock_sendmsg+0x19c/0x270
[  546.105717][T16662]  __sys_sendto+0x3bd/0x520
[  546.105738][T16662]  ? __pfx___sys_sendto+0x10/0x10
[  546.105753][T16662]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  546.105787][T16662]  ? __fget_files+0x3a0/0x420
[  546.105820][T16662]  ? ksys_write+0x22a/0x250
[  546.105843][T16662]  ? __pfx_ksys_write+0x10/0x10
[  546.105866][T16662]  __x64_sys_sendto+0xde/0x100
[  546.105888][T16662]  do_syscall_64+0xfa/0xfa0
[  546.105907][T16662]  ? lockdep_hardirqs_on+0x9c/0x150
[  546.105928][T16662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.105946][T16662]  ? clear_bhb_loop+0x60/0xb0
[  546.105968][T16662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.105985][T16662] RIP: 0033:0x7f334258eec9
[  546.106002][T16662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  546.106017][T16662] RSP: 002b:00007f33433a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  546.106036][T16662] RAX: ffffffffffffffda RBX: 00007f33427e5fa0 RCX: 00007f334258eec9
[  546.106050][T16662] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003
[  546.106062][T16662] RBP: 00007f33433a6090 R08: 0000200000000040 R09: 0000000000000010
[  546.106074][T16662] R10: 00000000240080d0 R11: 0000000000000246 R12: 0000000000000002
[  546.106086][T16662] R13: 00007f33427e6038 R14: 00007f33427e5fa0 R15: 00007ffc89367488
[  546.106116][T16662]  </TASK>
[  546.695521][T16677] binder: BINDER_SET_CONTEXT_MGR already set
[  546.701573][T16677] binder: 16676:16677 ioctl 4018620d 200000004a80 returned -16
[  546.713473][T16677] binder: 16676:16677 ioctl c0306201 0 returned -14
[  547.017502][T16691] FAULT_INJECTION: forcing a failure.
[  547.017502][T16691] name failslab, interval 1, probability 0, space 0, times 0
[  547.031638][T16691] CPU: 1 UID: 0 PID: 16691 Comm: syz.0.3600 Not tainted syzkaller #0 PREEMPT(full) 
[  547.031663][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  547.031674][T16691] Call Trace:
[  547.031682][T16691]  <TASK>
[  547.031690][T16691]  dump_stack_lvl+0x189/0x250
[  547.031713][T16691]  ? __pfx____ratelimit+0x10/0x10
[  547.031739][T16691]  ? __pfx_dump_stack_lvl+0x10/0x10
[  547.031758][T16691]  ? __pfx__printk+0x10/0x10
[  547.031779][T16691]  ? __pfx___might_resched+0x10/0x10
[  547.031807][T16691]  should_fail_ex+0x414/0x560
[  547.031833][T16691]  should_failslab+0xa8/0x100
[  547.031859][T16691]  __kmalloc_noprof+0xdf/0x800
[  547.031879][T16691]  ? video_usercopy+0x18d/0x1450
[  547.031907][T16691]  video_usercopy+0x18d/0x1450
[  547.031937][T16691]  ? __pfx___video_do_ioctl+0x10/0x10
[  547.031959][T16691]  ? __pfx_video_usercopy+0x10/0x10
[  547.031996][T16691]  ? __fget_files+0x3a0/0x420
[  547.032022][T16691]  v4l2_ioctl+0x18d/0x1e0
[  547.032044][T16691]  ? __pfx_v4l2_ioctl+0x10/0x10
[  547.032064][T16691]  __se_sys_ioctl+0xfc/0x170
[  547.032085][T16691]  do_syscall_64+0xfa/0xfa0
[  547.032104][T16691]  ? lockdep_hardirqs_on+0x9c/0x150
[  547.032124][T16691]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.032143][T16691]  ? clear_bhb_loop+0x60/0xb0
[  547.032163][T16691]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  547.032181][T16691] RIP: 0033:0x7f2f1358eec9
[  547.032197][T16691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  547.032212][T16691] RSP: 002b:00007f2f143d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  547.032232][T16691] RAX: ffffffffffffffda RBX: 00007f2f137e5fa0 RCX: 00007f2f1358eec9
[  547.032245][T16691] RDX: 0000200000000100 RSI: 00000000c0d05640 RDI: 0000000000000003
[  547.032257][T16691] RBP: 00007f2f143d9090 R08: 0000000000000000 R09: 0000000000000000
[  547.032269][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  547.032280][T16691] R13: 00007f2f137e6038 R14: 00007f2f137e5fa0 R15: 00007ffdd8f7f2c8
[  547.032310][T16691]  </TASK>
[  547.484035][T16704] binder: 16703:16704 ioctl c0306201 0 returned -14
[  547.559027][T16706] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3606'.
[  548.073124][ T5931] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  548.170198][T16743] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3618'.
[  548.209904][ T5931] usb 5-1: device descriptor read/64, error -71
[  548.223379][   T43] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  548.294866][T16749] comedi comedi0: mpc624: I/O port conflict (0x3,16)
[  548.340410][T16752] binder: 16751:16752 ioctl 4018620d 0 returned -22
[  548.373100][   T43] usb 2-1: Using ep0 maxpacket: 16
[  548.385196][   T43] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  548.400310][   T43] usb 2-1: config 0 has no interface number 0
[  548.406979][   T43] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  548.419014][   T43] usb 2-1: config 0 interface 41 has no altsetting 0
[  548.429187][   T43] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  548.445776][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.454125][ T5931] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  548.533991][   T43] usb 2-1: Product: syz
[  548.538223][   T43] usb 2-1: Manufacturer: syz
[  548.542929][   T43] usb 2-1: SerialNumber: syz
[  548.550521][   T43] usb 2-1: config 0 descriptor??
[  548.561243][T16735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  548.572092][   T43] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -22
[  548.663091][ T5931] usb 5-1: device descriptor read/64, error -71
[  548.753076][  T797] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  548.778326][ T5931] usb usb5-port1: attempt power cycle
[  548.923095][  T797] usb 6-1: Using ep0 maxpacket: 8
[  548.930369][  T797] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  548.938862][  T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.949322][  T797] usb 6-1: config 0 has no interface number 0
[  548.955538][  T797] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  548.967278][  T797] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  548.977191][  T797] usb 6-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[  548.988352][  T797] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  549.002924][  T797] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  549.012417][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  549.020527][  T797] usb 6-1: SerialNumber: syz
[  549.029363][  T797] usb 6-1: config 0 descriptor??
[  549.053759][  T797] hso 6-1:0.1: Failed to find BULK OUT ep
[  549.155000][ T5931] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  549.183679][ T5931] usb 5-1: device descriptor read/8, error -71
[  549.246320][T16755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  549.259397][T16755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  549.271796][   T43] usb 6-1: USB disconnect, device number 87
[  549.433089][ T5931] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  549.465172][ T5931] usb 5-1: device descriptor read/8, error -71
[  549.574515][ T5931] usb usb5-port1: unable to enumerate USB device
[  549.964036][ T5931] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  550.123091][ T5931] usb 1-1: Using ep0 maxpacket: 8
[  550.129823][ T5931] usb 1-1: unable to get BOS descriptor or descriptor too short
[  550.138645][ T5931] usb 1-1: config 4 interface 0 has no altsetting 0
[  550.148475][ T5931] usb 1-1: string descriptor 0 read error: -22
[  550.154866][ T5931] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  550.164130][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.179656][ T5931] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  550.183199][  T797] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  550.190024][ T5931] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  550.211674][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  550.219085][ T5931] usb 1-1: media controller created
[  550.235682][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  550.353222][  T797] usb 6-1: Using ep0 maxpacket: 16
[  550.360077][  T797] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  550.371451][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  550.382475][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  550.392217][  T797] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  550.402293][  T797] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  550.424701][  T797] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  550.433885][  T797] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  550.441909][  T797] usb 6-1: Manufacturer: syz
[  550.449014][  T797] usb 6-1: config 0 descriptor??
[  550.713109][  T797] rc_core: IR keymap rc-hauppauge not found
[  550.719086][  T797] Registered IR keymap rc-empty
[  550.727797][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.753190][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.775520][  T797] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  550.790140][  T797] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input71
[  550.808200][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.833367][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.853194][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.866881][T16763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.876661][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.891858][T16763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.906061][T16774] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3628'.
[  550.915493][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.933667][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.953574][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.973216][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  550.993136][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  551.013725][  T797] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  551.032680][ T5930] usb 2-1: USB disconnect, device number 16
[  551.060203][  T797] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  551.078966][  T797] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  551.283389][ T5931] zl10353_read_register: readreg error (reg=127, ret==0)
[  552.006756][T16797] FAULT_INJECTION: forcing a failure.
[  552.006756][T16797] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.020115][T16797] CPU: 0 UID: 0 PID: 16797 Comm: syz.4.3636 Not tainted syzkaller #0 PREEMPT(full) 
[  552.020139][T16797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  552.020150][T16797] Call Trace:
[  552.020158][T16797]  <TASK>
[  552.020165][T16797]  dump_stack_lvl+0x189/0x250
[  552.020189][T16797]  ? __pfx____ratelimit+0x10/0x10
[  552.020206][T16797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.020223][T16797]  ? __pfx__printk+0x10/0x10
[  552.020237][T16797]  ? __might_fault+0xb0/0x130
[  552.020260][T16797]  should_fail_ex+0x414/0x560
[  552.020280][T16797]  _copy_from_iter+0x1de/0x1790
[  552.020300][T16797]  ? skb_set_owner_w+0x26c/0x3e0
[  552.020318][T16797]  ? sock_alloc_send_pskb+0x86b/0x980
[  552.020338][T16797]  ? __pfx__copy_from_iter+0x10/0x10
[  552.020364][T16797]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  552.020382][T16797]  skb_copy_datagram_from_iter+0xf5/0x720
[  552.020402][T16797]  ? skb_put+0x11b/0x210
[  552.020418][T16797]  tun_get_user+0x1691/0x3e90
[  552.020445][T16797]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  552.020460][T16797]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.020477][T16797]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  552.020491][T16797]  ? __pfx_tun_get_user+0x10/0x10
[  552.020516][T16797]  ? save_netdev_trace_buffer+0x4cd/0x5e0
[  552.020533][T16797]  ? __lock_acquire+0xab9/0xd20
[  552.020554][T16797]  ? ref_tracker_alloc+0x318/0x460
[  552.020571][T16797]  ? tun_get+0x157/0x2f0
[  552.020586][T16797]  ? tun_chr_write_iter+0x60/0x210
[  552.020603][T16797]  ? ksys_write+0x145/0x250
[  552.020620][T16797]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  552.020642][T16797]  ? tun_get+0x1c/0x2f0
[  552.020663][T16797]  ? tun_get+0x1c/0x2f0
[  552.020680][T16797]  ? tun_get+0x1c/0x2f0
[  552.020701][T16797]  tun_chr_write_iter+0x113/0x210
[  552.020721][T16797]  vfs_write+0x5c9/0xb30
[  552.020739][T16797]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  552.020758][T16797]  ? __pfx_vfs_write+0x10/0x10
[  552.020780][T16797]  ? __fget_files+0x2a/0x420
[  552.020804][T16797]  ksys_write+0x145/0x250
[  552.020821][T16797]  ? __pfx_ksys_write+0x10/0x10
[  552.020839][T16797]  ? do_syscall_64+0xbe/0xfa0
[  552.020870][T16797]  do_syscall_64+0xfa/0xfa0
[  552.020885][T16797]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.020900][T16797]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.020914][T16797]  ? clear_bhb_loop+0x60/0xb0
[  552.020930][T16797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.020944][T16797] RIP: 0033:0x7f334258eec9
[  552.020957][T16797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.020969][T16797] RSP: 002b:00007f33433a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  552.020985][T16797] RAX: ffffffffffffffda RBX: 00007f33427e5fa0 RCX: 00007f334258eec9
[  552.020996][T16797] RDX: 000000000000340a RSI: 0000200000000480 RDI: 0000000000000005
[  552.021005][T16797] RBP: 00007f33433a6090 R08: 0000000000000000 R09: 0000000000000000
[  552.021014][T16797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.021022][T16797] R13: 00007f33427e6038 R14: 00007f33427e5fa0 R15: 00007ffc89367488
[  552.021045][T16797]  </TASK>
[  552.673149][T10097] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  552.738911][ T5931] usb 1-1: USB disconnect, device number 41
[  552.823107][T10097] usb 5-1: Using ep0 maxpacket: 16
[  552.829983][T10097] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  552.832924][T16808] FAULT_INJECTION: forcing a failure.
[  552.832924][T16808] name failslab, interval 1, probability 0, space 0, times 0
[  552.839175][T10097] usb 5-1: config 0 has no interface number 0
[  552.851306][T16808] CPU: 0 UID: 0 PID: 16808 Comm: syz.0.3641 Not tainted syzkaller #0 PREEMPT(full) 
[  552.851330][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  552.851341][T16808] Call Trace:
[  552.851356][T16808]  <TASK>
[  552.851365][T16808]  dump_stack_lvl+0x189/0x250
[  552.851390][T16808]  ? __pfx____ratelimit+0x10/0x10
[  552.851410][T16808]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.851428][T16808]  ? __pfx__printk+0x10/0x10
[  552.851450][T16808]  ? __pfx___might_resched+0x10/0x10
[  552.851477][T16808]  should_fail_ex+0x414/0x560
[  552.851502][T16808]  should_failslab+0xa8/0x100
[  552.851526][T16808]  __kmalloc_noprof+0xdf/0x800
[  552.851544][T16808]  ? kfree+0x4d/0x6d0
[  552.851560][T16808]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  552.851586][T16808]  tomoyo_realpath_from_path+0xe3/0x5d0
[  552.851610][T16808]  ? tomoyo_domain+0xd9/0x130
[  552.851636][T16808]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  552.851654][T16808]  tomoyo_path_number_perm+0x1e8/0x5a0
[  552.851675][T16808]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  552.851729][T16808]  ? __fget_files+0x2a/0x420
[  552.851762][T16808]  ? __fget_files+0x3a0/0x420
[  552.851783][T16808]  ? __fget_files+0x2a/0x420
[  552.851808][T16808]  security_file_ioctl+0xcb/0x2d0
[  552.851827][T16808]  __se_sys_ioctl+0x47/0x170
[  552.851849][T16808]  do_syscall_64+0xfa/0xfa0
[  552.851867][T16808]  ? lockdep_hardirqs_on+0x9c/0x150
[  552.851887][T16808]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.851904][T16808]  ? clear_bhb_loop+0x60/0xb0
[  552.851925][T16808]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.851944][T16808] RIP: 0033:0x7f2f1358eec9
[  552.851960][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.851975][T16808] RSP: 002b:00007f2f143d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  552.851994][T16808] RAX: ffffffffffffffda RBX: 00007f2f137e5fa0 RCX: 00007f2f1358eec9
[  552.852008][T16808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  552.852019][T16808] RBP: 00007f2f143d9090 R08: 0000000000000000 R09: 0000000000000000
[  552.852030][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.852040][T16808] R13: 00007f2f137e6038 R14: 00007f2f137e5fa0 R15: 00007ffdd8f7f2c8
[  552.852070][T16808]  </TASK>
[  552.852100][T16808] ERROR: Out of memory at tomoyo_realpath_from_path.
[  552.860784][T10097] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  552.978938][  T797] usb 6-1: USB disconnect, device number 88
[  552.980074][T10097] usb 5-1: config 0 interface 41 has no altsetting 0
[  553.118592][T16811] input: syz0 as /devices/virtual/input/input72
[  553.176237][T10097] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  553.214245][T10097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.245595][T10097] usb 5-1: Product: syz
[  553.249801][T10097] usb 5-1: Manufacturer: syz
[  553.261081][T10097] usb 5-1: SerialNumber: syz
[  553.303487][T16819] netlink: 'syz.5.3642': attribute type 64 has an invalid length.
[  553.321061][T10097] usb 5-1: config 0 descriptor??
[  553.321571][T16819] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3642'.
[  553.333478][T16804] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  553.348390][T10097] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  553.653075][  T797] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  553.705889][T16834] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  553.723613][T16834] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  553.730135][T16834] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  553.753262][T16834] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  553.763972][T16834] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  553.770457][T16834] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  553.807919][T16834] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  553.828166][T16834] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  553.845961][T16834] FAULT_INJECTION: forcing a failure.
[  553.845961][T16834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  553.863929][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.889975][T16834] CPU: 1 UID: 0 PID: 16834 Comm: syz.0.3646 Not tainted syzkaller #0 PREEMPT(full) 
[  553.890003][T16834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  553.890016][T16834] Call Trace:
[  553.890024][T16834]  <TASK>
[  553.890033][T16834]  dump_stack_lvl+0x189/0x250
[  553.890058][T16834]  ? __pfx____ratelimit+0x10/0x10
[  553.890080][T16834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  553.890095][T16834]  ? __pfx__printk+0x10/0x10
[  553.890126][T16834]  should_fail_ex+0x414/0x560
[  553.890154][T16834]  _copy_to_user+0x31/0xb0
[  553.890176][T16834]  simple_read_from_buffer+0xe1/0x170
[  553.890204][T16834]  proc_fail_nth_read+0x1b3/0x220
[  553.890227][T16834]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  553.890249][T16834]  ? rw_verify_area+0x2a6/0x4d0
[  553.890270][T16834]  ? __lock_acquire+0xab9/0xd20
[  553.890292][T16834]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  553.890312][T16834]  vfs_read+0x200/0xa30
[  553.890332][T16834]  ? fdget_pos+0x247/0x320
[  553.890359][T16834]  ? __pfx___mutex_lock+0x10/0x10
[  553.890381][T16834]  ? __pfx_vfs_read+0x10/0x10
[  553.890402][T16834]  ? __fget_files+0x2a/0x420
[  553.890428][T16834]  ? __fget_files+0x3a0/0x420
[  553.890448][T16834]  ? __fget_files+0x2a/0x420
[  553.890478][T16834]  ksys_read+0x145/0x250
[  553.890500][T16834]  ? __pfx_ksys_read+0x10/0x10
[  553.890524][T16834]  ? do_syscall_64+0xbe/0xfa0
[  553.890547][T16834]  do_syscall_64+0xfa/0xfa0
[  553.890566][T16834]  ? lockdep_hardirqs_on+0x9c/0x150
[  553.890586][T16834]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.890604][T16834]  ? clear_bhb_loop+0x60/0xb0
[  553.890625][T16834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.890650][T16834] RIP: 0033:0x7f2f1358d8dc
[  553.890666][T16834] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  553.890682][T16834] RSP: 002b:00007f2f143d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  553.890701][T16834] RAX: ffffffffffffffda RBX: 00007f2f137e5fa0 RCX: 00007f2f1358d8dc
[  553.890715][T16834] RDX: 000000000000000f RSI: 00007f2f143d90a0 RDI: 0000000000000004
[  553.890726][T16834] RBP: 00007f2f143d9090 R08: 0000000000000000 R09: 0000000000000000
[  553.890738][T16834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  553.890750][T16834] R13: 00007f2f137e6038 R14: 00007f2f137e5fa0 R15: 00007ffdd8f7f2c8
[  553.890780][T16834]  </TASK>
[  553.891112][  T797] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.092393][T16503] Bluetooth: hci2: command 0x0c1a tx timeout
[  554.321135][  T797] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  554.346795][  T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.403225][  T797] usb 6-1: config 0 descriptor??
[  554.428693][  T797] usbhid 6-1:0.0: can't add hid device: -22
[  554.439126][  T797] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  554.623869][T10097] usb 6-1: USB disconnect, device number 89
[  554.776395][   T43] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  554.953070][   T43] usb 1-1: unable to get BOS descriptor or descriptor too short
[  554.962378][   T43] usb 1-1: not running at top speed; connect to a high speed hub
[  554.972283][   T43] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  554.986328][   T43] usb 1-1: config 1 interface 0 has no altsetting 0
[  554.995909][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.40
[  555.005656][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.014031][   T43] usb 1-1: Product: syz
[  555.018389][   T43] usb 1-1: Manufacturer: syz
[  555.023466][   T43] usb 1-1: SerialNumber: syz
[  555.256935][   T43] usbhid 1-1:1.0: can't add hid device: -71
[  555.266515][   T43] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  555.287083][   T43] usb 1-1: USB disconnect, device number 42
[  555.453249][  T797] usb 5-1: USB disconnect, device number 15
[  555.563418][   T24] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  555.735209][   T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  555.763152][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.780402][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  555.813105][   T24] usb 6-1: config 1 has no interface number 0
[  555.820207][   T24] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  555.850365][   T24] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  555.883276][T10097] IPVS: starting estimator thread 0...
[  555.901332][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  555.912640][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.941996][   T24] usb 6-1: Product: syz
[  555.947417][   T24] usb 6-1: Manufacturer: syz
[  555.962343][   T24] usb 6-1: SerialNumber: syz
[  555.983538][T16911] IPVS: using max 36 ests per chain, 86400 per kthread
[  556.243102][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  556.250709][ T5931] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  556.270798][ T5931] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  556.473674][  T797] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  556.623626][  T797] usb 5-1: Using ep0 maxpacket: 16
[  556.630537][  T797] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  556.638765][  T797] usb 5-1: config 0 has no interface number 0
[  556.644902][  T797] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  556.654756][  T797] usb 5-1: config 0 interface 41 has no altsetting 0
[  556.663978][  T797] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  556.673208][  T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.681274][  T797] usb 5-1: Product: syz
[  556.685562][ T5827] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  556.693185][  T797] usb 5-1: Manufacturer: syz
[  556.698222][  T797] usb 5-1: SerialNumber: syz
[  556.706737][  T797] usb 5-1: config 0 descriptor??
[  556.712579][T16931] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  556.722670][  T797] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22
[  556.853140][ T5827] usb 1-1: device descriptor read/64, error -71
[  556.893324][   T52] block nbd5: Receive control failed (result -32)
[  556.907352][T16946] block nbd5: shutting down sockets
[  557.103067][ T5827] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  557.253082][ T5827] usb 1-1: device descriptor read/64, error -71
[  557.375551][ T5827] usb usb1-port1: attempt power cycle
[  557.723098][ T5827] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  557.756229][ T5827] usb 1-1: device descriptor read/8, error -71
[  558.023203][ T5827] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  558.047135][ T5827] usb 1-1: device descriptor read/8, error -71
[  558.166668][ T5827] usb usb1-port1: unable to enumerate USB device
[  558.265930][ T5827] usb 6-1: USB disconnect, device number 90
[  558.403119][   T52] Bluetooth: hci1: command 0x0405 tx timeout
[  558.409204][ T5931] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  558.423151][ T5931] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  558.598501][T16955] net_ratelimit: 20 callbacks suppressed
[  558.598515][T16955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.667163][T16957] ptrace attach of ""[16958] was attempted by "./syz-executor exec"[16957]
[  558.856844][T16963] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  559.026187][T16968] binder: 16967:16968 ioctl 4018620d 0 returned -22
[  559.246640][T10097] usb 5-1: USB disconnect, device number 16
[  559.363824][   T24] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  559.513495][   T24] usb 6-1: Using ep0 maxpacket: 8
[  559.524200][   T24] usb 6-1: config 162 has an invalid interface number: 3 but max is 0
[  559.532482][   T24] usb 6-1: config 162 has an invalid descriptor of length 1, skipping remainder of the config
[  559.544067][   T24] usb 6-1: config 162 has no interface number 0
[  559.550401][   T24] usb 6-1: too many endpoints for config 162 interface 3 altsetting 3: 255, using maximum allowed: 30
[  559.561541][   T24] usb 6-1: config 162 interface 3 altsetting 3 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  559.573206][   T24] usb 6-1: config 162 interface 3 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  559.586768][   T24] usb 6-1: config 162 interface 3 has no altsetting 0
[  559.595785][   T24] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  559.605153][T10097] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  559.612842][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.621149][   T24] usb 6-1: Product: syz
[  559.626050][   T24] usb 6-1: Manufacturer: syz
[  559.631102][   T24] usb 6-1: SerialNumber: syz
[  559.753193][T10097] usb 5-1: device descriptor read/64, error -71
[  559.844497][   T24] metro_usb 6-1:162.3: interrupt-out endpoint missing
[  559.855460][   T24] usb 6-1: USB disconnect, device number 91
[  559.993886][T10097] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  560.003692][   T43] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  560.123219][T10097] usb 5-1: device descriptor read/64, error -71
[  560.133176][   T43] usb 1-1: device descriptor read/64, error -71
[  560.234573][T10097] usb usb5-port1: attempt power cycle
[  560.383096][   T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  560.483299][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  560.491189][ T5931] Bluetooth: hci4: Opcode 0x0c1a failed: -110
[  560.497385][ T5931] Bluetooth: hci4: Error when powering off device on rfkill (-110)
[  560.514738][   T43] usb 1-1: device descriptor read/64, error -71
[  560.550553][T16986] netlink: 'syz.5.3675': attribute type 5 has an invalid length.
[  560.583070][T10097] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  560.618529][T16503] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  560.629950][T16503] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  560.641755][   T43] usb usb1-port1: attempt power cycle
[  560.647844][T16503] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  560.667180][T16503] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  560.677836][T10097] usb 5-1: device descriptor read/8, error -71
[  560.684185][T16503] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  560.703017][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  560.710958][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  560.723434][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  560.738705][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  560.754657][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  560.806175][   T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.809187][T16991] binder: 16990:16991 ioctl 4018620d 0 returned -22
[  560.932573][T10097] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  560.947884][   T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.965008][T10097] usb 5-1: device descriptor read/8, error -71
[  561.004166][   T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  561.037011][   T43] usb 1-1: device descriptor read/8, error -71
[  561.042314][   T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.074476][T10097] usb usb5-port1: unable to enumerate USB device
[  561.186162][   T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.221402][T16845] chnl_net:caif_netlink_parms(): no params data found
[  561.293072][   T43] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  561.313766][   T43] usb 1-1: device descriptor read/8, error -71
[  561.348467][T16845] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.356514][T16845] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.364874][T16845] bridge_slave_0: entered allmulticast mode
[  561.372042][T16845] bridge_slave_0: entered promiscuous mode
[  561.380529][T16845] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.388801][T16845] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.396364][T16845] bridge_slave_1: entered allmulticast mode
[  561.404034][T16845] bridge_slave_1: entered promiscuous mode
[  561.424373][   T43] usb usb1-port1: unable to enumerate USB device
[  561.453118][ T5891] usb 6-1: new low-speed USB device number 92 using dummy_hcd
[  561.472719][T16845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.482399][   T50] bridge_slave_1: left allmulticast mode
[  561.488550][   T50] bridge_slave_1: left promiscuous mode
[  561.494769][   T50] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.506035][   T50] bridge_slave_0: left allmulticast mode
[  561.511726][   T50] bridge_slave_0: left promiscuous mode
[  561.518458][   T50] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.617603][ T5891] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  561.642370][ T5891] usb 6-1: config 0 has no interface number 0
[  561.648916][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  561.678864][ T5891] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  561.694109][ T5891] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  561.723468][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.749503][ T5891] usb 6-1: config 0 descriptor??
[  561.766390][ T5891] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  561.884537][   T50] dvmrp1 (unregistering): left allmulticast mode
[  561.965442][T17001] iowarrior 6-1:0.1: Error -90 while submitting URB
[  561.987742][ T5931] usb 6-1: USB disconnect, device number 92
[  562.139250][   T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  562.150546][   T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  562.161820][   T50] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  562.173531][   T50] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  562.182250][   T50] bond0 (unregistering): Released all slaves
[  562.196784][T16845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.268400][T16845] team0: Port device team_slave_0 added
[  562.278409][T16845] team0: Port device team_slave_1 added
[  562.285100][   T50] tipc: Left network mode
[  562.358073][T16845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.367056][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.393907][T16845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.409450][T16845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.416791][T16845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  562.443189][T16845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.561215][T16845] hsr_slave_0: entered promiscuous mode
[  562.578092][T16845] hsr_slave_1: entered promiscuous mode
[  562.588121][T16845] debugfs: 'hsr0' already exists in 'hsr'
[  562.594844][T16845] Cannot create hsr debugfs directory
[  562.637557][   T50] hsr_slave_0: left promiscuous mode
[  562.644089][   T50] hsr_slave_1: left promiscuous mode
[  562.650326][   T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  562.658742][   T50] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.683988][   T50] veth1_macvtap: left promiscuous mode
[  562.689738][   T50] veth0_macvtap: left promiscuous mode
[  562.707625][ T5827] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  562.803114][T16503] Bluetooth: hci3: command tx timeout
[  562.851986][ T5827] usb 5-1: device descriptor read/64, error -71
[  563.103062][ T5827] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  563.253143][ T5827] usb 5-1: device descriptor read/64, error -71
[  563.363567][ T5827] usb usb5-port1: attempt power cycle
[  563.400050][T17047] binder: 17046:17047 ioctl 4018620d 0 returned -22
[  563.586558][   T50] team0 (unregistering): Port device team_slave_1 removed
[  563.617645][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  563.624100][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  563.693420][   T50] team0 (unregistering): Port device team_slave_0 removed
[  563.725168][ T5827] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  563.763831][ T5827] usb 5-1: device descriptor read/8, error -71
[  563.788679][T17057] new mount options do not match the existing superblock, will be ignored
[  563.818221][T17057] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  564.003571][ T5827] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  564.024007][ T5827] usb 5-1: device descriptor read/8, error -71
[  564.133103][ T5931] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  564.135135][ T5827] usb usb5-port1: unable to enumerate USB device
[  564.313950][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  564.333331][ T5931] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  564.342511][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  564.357173][ T5931] usb 1-1: config 0 descriptor??
[  564.371936][ T5931] pwc: Askey VC010 type 2 USB webcam detected.
[  564.774902][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00
[  564.788305][ T5931] pwc: recv_control_msg error -32 req 02 val 2700
[  564.825239][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00
[  564.832527][ T5931] pwc: recv_control_msg error -32 req 04 val 1000
[  564.849705][ T5931] pwc: recv_control_msg error -32 req 04 val 1300
[  564.863768][ T5931] pwc: recv_control_msg error -32 req 04 val 1400
[  564.884430][T16503] Bluetooth: hci3: command tx timeout
[  564.913801][ T5931] pwc: recv_control_msg error -71 req 02 val 2000
[  564.941295][ T5931] pwc: recv_control_msg error -71 req 02 val 2100
[  564.967598][ T5931] pwc: recv_control_msg error -71 req 04 val 1500
[  565.002279][ T5931] pwc: recv_control_msg error -71 req 02 val 2500
[  565.047353][ T5931] pwc: recv_control_msg error -71 req 02 val 2400
[  565.056875][ T5931] pwc: recv_control_msg error -71 req 02 val 2600
[  565.073949][ T5931] pwc: recv_control_msg error -71 req 02 val 2900
[  565.116968][T17087] FAULT_INJECTION: forcing a failure.
[  565.116968][T17087] name failslab, interval 1, probability 0, space 0, times 0
[  565.130232][ T5931] pwc: recv_control_msg error -71 req 02 val 2800
[  565.144507][T17087] CPU: 1 UID: 0 PID: 17087 Comm: syz.0.3693 Not tainted syzkaller #0 PREEMPT(full) 
[  565.144532][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  565.144541][T17087] Call Trace:
[  565.144549][T17087]  <TASK>
[  565.144556][T17087]  dump_stack_lvl+0x189/0x250
[  565.144579][T17087]  ? __pfx____ratelimit+0x10/0x10
[  565.144602][T17087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  565.144618][T17087]  ? __pfx__printk+0x10/0x10
[  565.144639][T17087]  ? __pfx___might_resched+0x10/0x10
[  565.144664][T17087]  should_fail_ex+0x414/0x560
[  565.144687][T17087]  should_failslab+0xa8/0x100
[  565.144709][T17087]  __kmalloc_noprof+0xdf/0x800
[  565.144724][T17087]  ? kfree+0x4d/0x6d0
[  565.144737][T17087]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  565.144763][T17087]  tomoyo_realpath_from_path+0xe3/0x5d0
[  565.144783][T17087]  ? tomoyo_domain+0xd9/0x130
[  565.144807][T17087]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  565.144824][T17087]  tomoyo_path_number_perm+0x1e8/0x5a0
[  565.144843][T17087]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  565.144893][T17087]  ? __fget_files+0x2a/0x420
[  565.144922][T17087]  ? __fget_files+0x3a0/0x420
[  565.144940][T17087]  ? __fget_files+0x2a/0x420
[  565.144963][T17087]  security_file_ioctl+0xcb/0x2d0
[  565.144981][T17087]  __se_sys_ioctl+0x47/0x170
[  565.145000][T17087]  do_syscall_64+0xfa/0xfa0
[  565.145017][T17087]  ? lockdep_hardirqs_on+0x9c/0x150
[  565.145035][T17087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.145050][T17087]  ? clear_bhb_loop+0x60/0xb0
[  565.145069][T17087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  565.145085][T17087] RIP: 0033:0x7f2f1358eec9
[  565.145100][T17087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  565.145114][T17087] RSP: 002b:00007f2f143b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  565.145131][T17087] RAX: ffffffffffffffda RBX: 00007f2f137e6090 RCX: 00007f2f1358eec9
[  565.145143][T17087] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  565.145153][T17087] RBP: 00007f2f143b8090 R08: 0000000000000000 R09: 0000000000000000
[  565.145163][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  565.145173][T17087] R13: 00007f2f137e6128 R14: 00007f2f137e6090 R15: 00007ffdd8f7f2c8
[  565.145200][T17087]  </TASK>
[  565.145353][ T5931] pwc: recv_control_msg error -71 req 04 val 1100
[  565.211552][T17087] ERROR: Out of memory at tomoyo_realpath_from_path.
[  565.282592][T16845] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  565.300346][ T5931] pwc: recv_control_msg error -71 req 04 val 1200
[  565.463416][T16845] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  565.505789][ T5931] pwc: Registered as video103.
[  565.527912][T16845] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  565.552036][T17098] binder: 17097:17098 ioctl 4018620d 0 returned -22
[  565.559489][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input73
[  565.604871][T17096] sctp: [Deprecated]: syz.0.3696 (pid 17096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  565.604871][T17096] Use struct sctp_sack_info instead
[  565.630520][T16845] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  565.633946][ T5931] usb 1-1: USB disconnect, device number 51
[  565.934271][T16845] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.982094][T16845] 8021q: adding VLAN 0 to HW filter on device team0
[  565.990007][T17119] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  565.990818][T17118] syzkaller1: entered promiscuous mode
[  566.013670][T17118] syzkaller1: entered allmulticast mode
[  566.028541][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.035798][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.049120][T17121] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  566.068639][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.075880][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.156154][ T5931] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  566.283104][T10097] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  566.339964][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  566.353253][ T5931] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  566.382764][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.407048][ T5931] usb 1-1: config 0 descriptor??
[  566.422398][ T5931] hdpvr 1-1:0.0: Could not find bulk-in endpoint
[  566.434654][ T5931] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  566.454889][T10097] usb 6-1: Using ep0 maxpacket: 16
[  566.466012][T10097] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  566.467742][T16845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  566.488019][T10097] usb 6-1: config 0 interface 0 has no altsetting 0
[  566.496098][T10097] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.00
[  566.505602][T10097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.526071][T10097] usb 6-1: config 0 descriptor??
[  566.593260][T16845] veth0_vlan: entered promiscuous mode
[  566.612832][T16845] veth1_vlan: entered promiscuous mode
[  566.642536][ T5931] usb 1-1: USB disconnect, device number 52
[  566.740978][T16845] veth0_macvtap: entered promiscuous mode
[  566.752678][T16845] veth1_macvtap: entered promiscuous mode
[  566.789058][T16845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  566.831542][T16845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  566.873399][ T3510] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  566.891757][T17145] syzkaller1: entered promiscuous mode
[  566.898345][T17145] syzkaller1: entered allmulticast mode
[  566.911966][ T3510] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  566.959782][ T3510] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  566.969791][T16503] Bluetooth: hci3: command tx timeout
[  567.007330][ T3510] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  567.084745][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.102889][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.141425][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.151909][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.275905][T17156] program syz.1.3645 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  567.287500][T10097] usbhid 6-1:0.0: can't add hid device: -71
[  567.317381][T10097] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  567.335720][T10097] usb 6-1: USB disconnect, device number 93
[  567.367705][   T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  567.533057][ T5884] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  567.553163][   T43] usb 5-1: Using ep0 maxpacket: 32
[  567.560644][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  567.578784][   T43] usb 5-1: can't read configurations, error -61
[  567.706049][ T5884] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  567.722472][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  567.733267][   T43] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  567.742018][ T5884] usb 2-1: Product: syz
[  567.763614][ T5884] usb 2-1: SerialNumber: syz
[  567.778807][ T5884] usb 2-1: config 0 descriptor??
[  567.893115][   T43] usb 5-1: Using ep0 maxpacket: 32
[  567.915387][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  567.938649][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  567.951470][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  567.960570][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  567.970007][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  567.979557][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  567.992710][   T43] usb 5-1: can't read configurations, error -61
[  568.008924][   T43] usb usb5-port1: attempt power cycle
[  568.034762][ T5884] ldusb 2-1:0.0: Interrupt in endpoint not found
[  568.048368][ T5884] usb 2-1: USB disconnect, device number 17
[  568.083442][T17170] binder: 17169:17170 ioctl 4018620d 0 returned -22
[  568.160784][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.342327][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.382227][   T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  568.421388][T17179] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3708'.
[  568.431301][   T43] usb 5-1: Using ep0 maxpacket: 32
[  568.438769][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  568.448601][   T43] usb 5-1: can't read configurations, error -61
[  568.456222][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3708'.
[  568.471566][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.554073][T17179] ubi: mtd0 is already attached to ubi31
[  568.582365][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  568.603328][   T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  568.645753][   T43] usb 5-1: Using ep0 maxpacket: 32
[  568.663543][   T43] usb 5-1: unable to read config index 0 descriptor/start: -61
[  568.671185][   T43] usb 5-1: can't read configurations, error -61
[  568.733184][   T43] usb usb5-port1: unable to enumerate USB device
[  569.039558][T17166] chnl_net:caif_netlink_parms(): no params data found
[  569.047135][T16503] Bluetooth: hci3: command tx timeout
[  569.073358][   T13] bridge_slave_1: left allmulticast mode
[  569.083689][   T13] bridge_slave_1: left promiscuous mode
[  569.093464][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.104135][   T13] bridge_slave_0: left allmulticast mode
[  569.109809][   T13] bridge_slave_0: left promiscuous mode
[  569.124821][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.367706][ T5884] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  569.506921][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  569.518300][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  569.529584][   T13] bond0 (unregistering): Released all slaves
[  569.529626][ T5884] usb 6-1: Using ep0 maxpacket: 32
[  569.565643][ T5884] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  569.591417][ T5884] usb 6-1: config 0 has no interface number 0
[  569.606026][ T5884] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  569.626847][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.636044][ T5884] usb 6-1: Product: syz
[  569.640245][ T5884] usb 6-1: Manufacturer: syz
[  569.644934][ T5884] usb 6-1: SerialNumber: syz
[  569.661318][ T5884] usb 6-1: config 0 descriptor??
[  569.670129][ T5884] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  569.682140][   T13] tipc: Left network mode
[  569.774934][T17166] bridge0: port 1(bridge_slave_0) entered blocking state
[  569.786015][T17166] bridge0: port 1(bridge_slave_0) entered disabled state
[  569.798402][T17166] bridge_slave_0: entered allmulticast mode
[  569.811209][T17166] bridge_slave_0: entered promiscuous mode
[  569.836525][T17166] bridge0: port 2(bridge_slave_1) entered blocking state
[  569.853814][T17166] bridge0: port 2(bridge_slave_1) entered disabled state
[  569.870128][ T5884] usb 6-1: qt2_setup_urbs - submit read urb failed -8
[  569.880189][T17166] bridge_slave_1: entered allmulticast mode
[  569.886538][ T5884] quatech2 6-1:0.51: probe with driver quatech2 failed with error -8
[  569.896725][T17166] bridge_slave_1: entered promiscuous mode
[  569.935440][T17222] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  570.003577][T16503] Bluetooth: hci0: command tx timeout
[  570.043103][T17166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  570.075661][ T5884] usb 6-1: USB disconnect, device number 94
[  570.095724][T17166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  570.232195][   T13] hsr_slave_0: left promiscuous mode
[  570.254654][   T13] hsr_slave_1: left promiscuous mode
[  570.272687][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.296003][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.322726][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.335741][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.376977][   T13] veth0_macvtap: left promiscuous mode
[  570.384057][   T13] veth0_vlan: left promiscuous mode
[  571.728795][   T13] team0 (unregistering): Port device team_slave_1 removed
[  571.855705][   T13] team0 (unregistering): Port device team_slave_0 removed
[  572.084103][T16503] Bluetooth: hci0: command tx timeout
[  572.343281][T17263] Process accounting resumed
[  573.332290][T17166] team0: Port device team_slave_0 added
[  573.357036][T17338] binder: 17336:17338 ioctl 4018620d 0 returned -22
[  573.357086][T17166] team0: Port device team_slave_1 added
[  573.483718][T17343] fuse: Bad value for 'fd'
[  573.511001][T17343] bridge0: entered allmulticast mode
[  573.532105][T17345] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  573.539442][T17345] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  573.539806][T17166] batman_adv: batadv0: Adding interface: batadv_slave_0
[  573.546701][T17345] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  573.559731][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.586384][T17345] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  573.587598][T17346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3750'.
[  573.594067][T17166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  573.604680][T17345] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  573.617419][T17166] batman_adv: batadv0: Adding interface: batadv_slave_1
[  573.631234][T17345] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  573.639326][T17166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  573.645362][T17345] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  573.666640][T17166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  573.682226][T17345] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  573.699709][T17345] comedi comedi3: 8255: I/O port conflict (0x3000000,4)
[  573.707633][T17345] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  573.714365][T17343] pim6reg: entered allmulticast mode
[  573.715769][T17345] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  573.741348][T17346] bridge_slave_1: left allmulticast mode
[  573.748912][T17346] bridge_slave_1: left promiscuous mode
[  573.755212][T17346] bridge0: port 2(bridge_slave_1) entered disabled state
[  573.763454][T17345] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  573.772669][T17346] bridge_slave_0: left allmulticast mode
[  573.779236][T17345] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  573.786057][T17346] bridge_slave_0: left promiscuous mode
[  573.791895][T17346] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.799913][T17345] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  573.809164][T17345] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  573.876660][T17346] bridge0 (unregistering): left allmulticast mode
[  574.164689][T16503] Bluetooth: hci0: command tx timeout
[  574.209939][T17367] mmap: syz.4.3755 (17367) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  574.249049][T17166] hsr_slave_0: entered promiscuous mode
[  574.274152][   T13] ------------[ cut here ]------------
[  574.280068][   T13] WARNING: net/ipv6/xfrm6_tunnel.c:341 at xfrm6_tunnel_net_exit+0x7e/0x100, CPU#0: kworker/u8:1/13
[  574.291305][   T13] Modules linked in:
[  574.295826][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  574.305719][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  574.315852][   T13] Workqueue: netns cleanup_net
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  574.320643][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  574.326708][   T13] Code: 08 45 0f f8 4b 83 3c 2c 00 75 19 e8 ec 85 a9 f7 49 81 fd f8 07 00 00 74 1d e8 de 85 a9 f7 49 83 c5 08 eb c9 e8 d3 85 a9 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  574.346438][   T13] RSP: 0018:ffffc90000127890 EFLAGS: 00010293
[  574.352526][   T13] RAX: ffffffff8a16d6dd RBX: ffff888023d64000 RCX: ffff88801ce90000
[  574.360579][   T13] RDX: 0000000000000000 RSI: ffffffff8d7f7453 RDI: ffff888023d64000
[  574.362411][T17166] hsr_slave_1: entered promiscuous mode
[  574.368591][   T13] RBP: ffffc90000127990 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  574.368638][   T13] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffff888023d64000
[  574.368652][   T13] R13: 0000000000000000 R14: ffff888077f24780 R15: dffffc0000000000
[  574.368666][   T13] FS:  0000000000000000(0000) GS:ffff888125d22000(0000) knlGS:0000000000000000
[  574.368681][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  574.368695][   T13] CR2: 00007f3343385d58 CR3: 000000005ddd8000 CR4: 00000000003526f0
[  574.368714][   T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144
[  574.368727][   T13] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  574.368740][   T13] Call Trace:
[  574.368748][   T13]  <TASK>
[  574.368759][   T13]  ops_undo_list+0x49a/0x990
[  574.368795][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  574.368824][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  574.368850][   T13]  cleanup_net+0x4d8/0x820
[  574.368869][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  574.368888][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  574.368907][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  574.368930][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  574.368955][   T13]  process_scheduled_works+0xae1/0x17b0
[  574.369003][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  574.384472][T17369] FAULT_INJECTION: forcing a failure.
[  574.384472][T17369] name failslab, interval 1, probability 0, space 0, times 0
[  574.391728][   T13]  worker_thread+0x8a0/0xda0
[  574.402951][T17166] debugfs: 'hsr0' already exists in 'hsr'
[  574.408763][   T13]  kthread+0x711/0x8a0
[  574.444974][T17369] CPU: 1 UID: 0 PID: 17369 Comm: syz.1.3754 Not tainted syzkaller #0 PREEMPT(full) 
[  574.444997][T17369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  574.445009][T17369] Call Trace:
[  574.445016][T17369]  <TASK>
[  574.445025][T17369]  dump_stack_lvl+0x189/0x250
[  574.445048][T17369]  ? __pfx____ratelimit+0x10/0x10
[  574.445068][T17369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.445086][T17369]  ? __pfx__printk+0x10/0x10
[  574.445109][T17369]  ? __pfx___might_resched+0x10/0x10
[  574.445137][T17369]  should_fail_ex+0x414/0x560
[  574.445162][T17369]  should_failslab+0xa8/0x100
[  574.445187][T17369]  __kmalloc_noprof+0xdf/0x800
[  574.445205][T17369]  ? kfree+0x4d/0x6d0
[  574.445219][T17369]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  574.445246][T17369]  tomoyo_realpath_from_path+0xe3/0x5d0
[  574.445270][T17369]  ? tomoyo_domain+0xd9/0x130
[  574.445296][T17369]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  574.445315][T17369]  tomoyo_path_number_perm+0x1e8/0x5a0
[  574.445336][T17369]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  574.445390][T17369]  ? __fget_files+0x2a/0x420
[  574.445417][T17369]  ? __fget_files+0x3a0/0x420
[  574.445437][T17369]  ? __fget_files+0x2a/0x420
[  574.445462][T17369]  security_file_ioctl+0xcb/0x2d0
[  574.445481][T17369]  __se_sys_ioctl+0x47/0x170
[  574.445503][T17369]  do_syscall_64+0xfa/0xfa0
[  574.445529][T17369]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.445549][T17369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.445566][T17369]  ? clear_bhb_loop+0x60/0xb0
[  574.445586][T17369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  574.445601][T17369] RIP: 0033:0x7f0c9718eec9
[  574.445617][T17369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  574.445633][T17369] RSP: 002b:00007f0c98049038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  574.445651][T17369] RAX: ffffffffffffffda RBX: 00007f0c973e6090 RCX: 00007f0c9718eec9
[  574.445665][T17369] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  574.445676][T17369] RBP: 00007f0c98049090 R08: 0000000000000000 R09: 0000000000000000
[  574.445687][T17369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  574.445698][T17369] R13: 00007f0c973e6128 R14: 00007f0c973e6090 R15: 00007ffe36c9c518
[  574.445729][T17369]  </TASK>
[  574.445738][T17369] ERROR: Out of memory at tomoyo_realpath_from_path.
[  574.450195][   T13]  ? __pfx_worker_thread+0x10/0x10
[  574.450222][   T13]  ? __pfx_kthread+0x10/0x10
[  574.458290][T17166] Cannot create hsr debugfs directory
[  574.460550][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  574.784653][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  574.790274][   T13]  ? __pfx_kthread+0x10/0x10
[  574.795278][   T13]  ret_from_fork+0x4bc/0x870
[  574.799889][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  574.805089][   T13]  ? __switch_to_asm+0x39/0x70
[  574.809872][   T13]  ? __switch_to_asm+0x33/0x70
[  574.814718][   T13]  ? __pfx_kthread+0x10/0x10
[  574.819596][   T13]  ret_from_fork_asm+0x1a/0x30
[  574.824480][   T13]  </TASK>
[  574.827519][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  574.834804][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  574.844131][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  574.854198][   T13] Workqueue: netns cleanup_net
[  574.858988][   T13] Call Trace:
[  574.862273][   T13]  <TASK>
[  574.865196][   T13]  dump_stack_lvl+0x99/0x250
[  574.869778][   T13]  ? __asan_memcpy+0x40/0x70
[  574.874361][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  574.879548][   T13]  ? __pfx__printk+0x10/0x10
[  574.884139][   T13]  vpanic+0x237/0x6d0
[  574.888116][   T13]  ? __pfx_vpanic+0x10/0x10
[  574.892693][   T13]  ? is_bpf_text_address+0x26/0x2b0
[  574.897921][   T13]  panic+0xb9/0xc0
[  574.901635][   T13]  ? __pfx_panic+0x10/0x10
[  574.906063][   T13]  __warn+0x334/0x4c0
[  574.910037][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  574.915396][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  574.920751][   T13]  report_bug+0x2be/0x4f0
[  574.925587][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  574.931289][   T13]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  574.936645][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  574.942030][   T13]  handle_bug+0x84/0x160
[  574.946264][   T13]  exc_invalid_op+0x1a/0x50
[  574.950756][   T13]  asm_exc_invalid_op+0x1a/0x20
[  574.955588][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  574.961593][   T13] Code: 08 45 0f f8 4b 83 3c 2c 00 75 19 e8 ec 85 a9 f7 49 81 fd f8 07 00 00 74 1d e8 de 85 a9 f7 49 83 c5 08 eb c9 e8 d3 85 a9 f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  574.981293][   T13] RSP: 0018:ffffc90000127890 EFLAGS: 00010293
[  574.987361][   T13] RAX: ffffffff8a16d6dd RBX: ffff888023d64000 RCX: ffff88801ce90000
[  574.995341][   T13] RDX: 0000000000000000 RSI: ffffffff8d7f7453 RDI: ffff888023d64000
[  575.003300][   T13] RBP: ffffc90000127990 R08: ffffffff8f9dd677 R09: 1ffffffff1f3bace
[  575.011257][   T13] R10: dffffc0000000000 R11: fffffbfff1f3bacf R12: ffff888023d64000
[  575.019216][   T13] R13: 0000000000000000 R14: ffff888077f24780 R15: dffffc0000000000
[  575.027178][   T13]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  575.032549][   T13]  ops_undo_list+0x49a/0x990
[  575.037137][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  575.042245][   T13]  ? do_raw_spin_unlock+0x122/0x240
[  575.047435][   T13]  cleanup_net+0x4d8/0x820
[  575.051841][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  575.056774][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  575.061978][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  575.067687][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  575.073396][   T13]  process_scheduled_works+0xae1/0x17b0
[  575.078957][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  575.084942][   T13]  worker_thread+0x8a0/0xda0
[  575.089560][   T13]  kthread+0x711/0x8a0
[  575.093617][   T13]  ? __pfx_worker_thread+0x10/0x10
[  575.098716][   T13]  ? __pfx_kthread+0x10/0x10
[  575.103291][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  575.108478][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  575.113658][   T13]  ? __pfx_kthread+0x10/0x10
[  575.118234][   T13]  ret_from_fork+0x4bc/0x870
[  575.122822][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  575.127927][   T13]  ? __switch_to_asm+0x39/0x70
[  575.132675][   T13]  ? __switch_to_asm+0x33/0x70
[  575.137428][   T13]  ? __pfx_kthread+0x10/0x10
[  575.142008][   T13]  ret_from_fork_asm+0x1a/0x30
[  575.146774][   T13]  </TASK>
[  575.150069][   T13] Kernel Offset: disabled
[  575.154387][   T13] Rebooting in 86400 seconds..