last executing test programs:

8.728187733s ago: executing program 3 (id=2712):
syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="b9800000c00f3235000100000f303e440f01f5c4a1f9d1d1c4a1e5740cce360f01c466ba4100ec66baf80cb81475b58aef66bafc0ced45dbd30f09dfdd", 0x3d}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7})
ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]})
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2)

7.881391708s ago: executing program 3 (id=2715):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x5, 0x2, 0x3, 0x4, 0x0, 0xfffffff6, 0x8, 0x5}}}}]}, 0x58}}, 0x20040084)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x24}}, 0x5)
r5 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000001cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x24, r6, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "ed197fbfb5c342b6", "e4477f4930bcc7d0bc1819000000009d", "000087e0", "11edf8da8e55bb27"}, 0x28)
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x0, 0x5, 0x401, 0x3, 0x6, 0x4, 0x3d3, 0x40, 0x24f, 0x2f, 0x1, 0x38, 0x4, 0x7, 0x1000, 0xff00}, [{0x70000000, 0x3, 0xffffffffffffffff, 0x10, 0x9, 0x3, 0x7, 0x7}, {0x3, 0xf6, 0xffffffffffffff7f, 0x1, 0x9, 0x9, 0x8, 0x6}, {0x5, 0x7d2, 0x1, 0x2, 0xfffffffffffff708, 0x8001, 0x86, 0xfffffffffffffffd}, {0x5, 0x65b2, 0x9, 0x6, 0x40, 0x2c, 0x18e9, 0x4}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920)

7.517176719s ago: executing program 3 (id=2717):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c09"], 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x2000})

6.982989437s ago: executing program 2 (id=2718):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
prlimit64(0x0, 0x3, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x1231, 0x8, 0x0, 0x1, 0x0, 0x4, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfc, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8, 0x6}], 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x87, @private=0xa010101, 0x4e24, 0x1, 'none\x00', 0x5, 0x32bd, 0x9}, {@loopback, 0x4e25, 0x2, 0xfffffffe, 0x8, 0x12d5c}}, 0x44)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x69, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0x10d000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000080)=0xfffffffa)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
r9 = syz_open_pts(r8, 0x0)
ioctl$TCFLSH(r9, 0x540b, 0x2)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

6.697192942s ago: executing program 3 (id=2720):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0}, 0x0)

5.868803109s ago: executing program 0 (id=2723):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0xffff, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000001b80)=0xfffffff9)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x110, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00220500000093"], 0x0}, 0x0)

5.756560978s ago: executing program 2 (id=2724):
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x401, 0x7, 'syz1\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x95, 0x7f, 0xffffffff, 0xfff, 0x1, 0xf, 0x1, 0x3, 0xfffffffffffffffd, 0x5f, 0xfff, 0x100000001, 0x1, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x8, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0x7, 0x6, 0xfffffffffffffff7, 0x8, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000000, 0x800003, 0x0, 0x7, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x7, 0x6, 0xfffffffffffffffd, 0x7, 0xf0, 0x26e692ff, 0x5, 0x2, 0x2, 0x2, 0x1, 0x9, 0x1, 0x4, 0xd, 0x81, 0x80000001, 0x7ffe, 0xf, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xf, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0xffffffffffffffff, 0xafae, 0x1, 0x8, 0x1, 0xb, 0x1, 0xffff, 0x7, 0xcc, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x3, 0xaad, 0x7, 0x1, 0x8, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x4, 0xa, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x100000000, 0x140000000]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setpgid(0x0, 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r4 = mq_open(&(0x7f0000000180)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_setup(0x1a39, &(0x7f0000002c80)={0x0, 0xe3d3, 0x0, 0x800005, 0x21ed}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x5, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
mq_notify(r4, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}})
r5 = mq_open(&(0x7f00000001c0)='&\xaf\x12}N\xf3oW\'\x00', 0x1, 0x2, 0x0)
mq_timedsend(r5, 0x0, 0x0, 0xa19, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0xffffffffffffffff, 0x1]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)

5.215264742s ago: executing program 4 (id=2725):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x700, 0x4, {{@in6=@mcast1, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@empty, @in=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x3c, 0x0, 0x0, 0x3505, 0x2, 0xa}]}]}, 0xa0}}, 0x0)

5.058548123s ago: executing program 4 (id=2727):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
eventfd2(0xffff5faa, 0x80000)
close(0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x200000a, 0x3be}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6441c605ec7fda525166af33177521f2606e0ba3437c4a7d0e835991ab1875bc9652135e4e39c78d0a8", 0x60, 0x2400c0c7, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.844015468s ago: executing program 1 (id=2729):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008800000240012800c0001006d6163766c616e00140002800800010004000000080009000100000068f84f8ffc8087153899b46b7e05ca7bf53e3cc871f1d4f8ff7d9429771aaf0a40fc7b3f1e51d8b52ff5984189e8b4ce980c0fbb0703a2e1a303812c8da08e70eb7b1e1851d425e114c65c54943aee36365e096bd68d48f20f89961a5608d3d78ce721c3151fae2d2005612a8bfc03aa799e5db953afc0"], 0x44}}, 0x8000)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = fcntl$getown(r4, 0x9)
syz_clone3(&(0x7f00000005c0)={0x301811400, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200), {0x2b}, &(0x7f0000000640)=""/23, 0x17, &(0x7f0000000480)=""/238, &(0x7f0000000580)=[r7], 0x1}, 0x58)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)

4.534762584s ago: executing program 4 (id=2730):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000640), 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000240)=<r2=>0xffffffffffffffff)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r1, 0x80000003)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x26}], 0x1)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x20000000)
fanotify_init(0x200, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000300)=0x2, 0x4)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
getdents64(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x96, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003ffffffffffff86dd69feb700006006fffe800000000000000000000000000039ff0200000000000000000000000000014e224e24", @ANYRES8=r0, @ANYRES32=r3, @ANYRESOCT=r2], 0x0)
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000780)=""/4096)

4.268645091s ago: executing program 2 (id=2731):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
read(r0, &(0x7f0000000000), 0x2002)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003020000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112006558"], 0xfdef)

4.142886049s ago: executing program 0 (id=2732):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40046201, &(0x7f0000000b00)='\x0fde\x84T\xa1\xfd\xba`\xc4{\xd2y\'e>9s\xfdY\xe6\x88R\x1b\x82GmU\xb7\xaa\x9d\x93 \xa4E\xd6v\xa3V?\xdf\x1b5\x9eb\xc7\xb3:\xc4\xa1\x1f\x96\xab\xbc\x83\x7f\xa3\xbb\xe7\xe8q\xe1\xf8q~\xa6vC*\xb4\xec\x87-8$\x99\xb5\xe3f^D\x0fGh\x01\x14c\xba\xc7\x83\xd8\xf4u\x18\x95\xc1\xc7\x88\xa02O\xce\xa8\xf4\xe0\x00\xf6\xc4\xaa7Y\xaa\xd6\xaf\xab\xdb?\x82k\x1c\xb4\xadY\xed\x1e\xae\xdf\x1d\xb4V?\xca\x9aA\xf9\xa0$\x8d\a\xf3\x82\xff_`\xcf\xdcA\x9fk!\xaa\xe2\x8e\x907\v4\xf6Q\xb9@\x1c\xdc6\"\x05\xae\xf4\x8b\x02s\x145x\xa6X\x03a\xb4Q\xe0\x94k=2O\xb4\xc6\xa0\xe3k2\xb1\xf9\xa1?\x81\xdd\x90\xd7Fz\xef$\xe0\xf6\xd6e\xb4\xe2}\xb1\x84\xefQ\x87\n\xec\xa3\xd1<\xc1\xe8\xc2\b\xcaam0\x9dJ?k{mD\x02\xb8\xb62\x14j\x01\x147\x18a\xa9\xca\x8a\xd5p<\x8a\x19\xe3\x02t\xf0\a\xb0V\xdf}\xc4\x9a\xd3T\xd6\xceYFk3\x1d\xe2MQ9O?\x89\"\xc1\xf0\xfe\x1dP\x83\x15\x92\x1a\xd4\x14\x87\xdf\xdd\x80&\x02\xb1\xce\xe7C\\>\t\xf2\xc4\x93vat/\x03\fM\xab\x1d\xb4xa{\xc8b\x8d\"\x93\xfb\xcd\xd0\x0fwRI \x03\x04@w\xfc\xf4\xbf\xde\a\xa0\xd7\xeaN\xf85\x9cT\xdaO)f\xfbAX\x9f\x1d\xf8hm\xb3L+\x95b\xf2\xda\xa4\x00pIJA/\x98\xd6\xbf\xac\xb4\x81q:\xf5\xa1\x00\xa8\xa8\x8f\x9c\xd7\x89.\xeb\x8a\xfds\xf5\x03\xf8\xc9O<~\xd9\xdf\x9c\xca\xe6\x81\x85&0\x80\xdc\xca\xab\xec\xfc\xcc\xe4e\xa9\x16\xc4\xa1p\xd5\xf8E3:\xa67\xa3\'A\x9d\xdb\xbb\xd1\x98\xb4\xb4\xe9nC\xf4\xdf\x9a\x89\xb2\x1e\xe6\x80\xd8\xdb\xe9q\x90B\x8c>\xd0}\xe9\x9c\xe9\xd9\x8cv\xdf\x897\x87\x91\t\xa7[0T\xf2S1\'A\xb8\x18\r}\x99PU\x04\xbf\xd0\x80Zw\x89\x05\xbe\xc5*\x03\xad\x96-\\\bj\xf2\x1c\x0f\xf1\xa7s/\x18\x01\fG\x95\x17Q{\xdd\x82\xb95\xb0G\xbe\x05\xbc\x9a|\xc7?\x8d\xe2{&\xa7T\x1c2B\f\x99\xd2\xd6\xe0\x9eh8\xed\xd0#.j\v%\xc5\xb0Z\xd0\x04;\xdb\x8b\xe6\x97\xb1]M\xec\x89\x96\xab\x95\xc3\xcfEB4\xe0\x82\xde\xd1\xdb,\xd8x\x17\xcc\xc3w},\xb6\xe2\x15\a\\\xfaCa\x15\x95\xb2>')
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})

4.111708042s ago: executing program 4 (id=2733):
openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$alg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x200400a0}, 0x4008000)
socket$packet(0x11, 0x2, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r1, &(0x7f0000000280), 0x10)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x8, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f0000000ec0)={0x800100, 0xfffffffd, 0x22, 0x100, 0x81, 0x5})
close(r2)
setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000400)=[{{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}], 0x10)
close(r1)
r3 = socket(0x10, 0x2, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x1000, 0x4, &(0x7f00000000c0)={0x40, 0x0, 0x100, 0x75, 0x800}, 0x8, 0x5, 0x6553, 0x0, 0xfffffff9, 0x0, &(0x7f0000000180)="111e0f85755fb0151da8b6a4d2cc6d361b6664f5753b2cf8e78ffa3da5397c87ad8ef85b933077470338ae6f0fe5519d0937e6510c"})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000004c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x85, 0x6, @broadcast}, 0x14)

4.002296228s ago: executing program 2 (id=2734):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x95ef)
r1 = syz_usb_connect(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0))
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/hibernate_compression_threads', 0x141, 0x70)
write$UHID_INPUT2(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x87)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x1)
ioctl$EVIOCGMASK(r5, 0x5b02, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r6, &(0x7f00000004c0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x4000000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000140)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f00000001c0)=0x10)

3.903903426s ago: executing program 4 (id=2735):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})

3.700183536s ago: executing program 1 (id=2736):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x194, r1, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x170, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x18}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '-^)-(-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\'\xae+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#()\xb1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '#{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*-]$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\x88\xfe,*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3a0e}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^T)]-,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ':::\xd0$/}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{\xc3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000080)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002e00000027bd759e486a7cb9607b00eb020000000000000004001e"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3.608810044s ago: executing program 1 (id=2737):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2c, 0x1, @private2, @mcast2, {[@hopopts={0xff}]}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0, 0x12, &(0x7f0000002280)=""/35, 0x23}, 0x4}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x10122, 0x0)

3.597140832s ago: executing program 3 (id=2738):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x3000)=nil, 0x3000, 0x92})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
r2 = mq_open(0x0, 0x2, 0x48, &(0x7f0000000080)={0x7f, 0x9c1, 0x6, 0x80})
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x7, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$DVB_DVR_DMX_EXPBUF(r4, 0xc00c6f3e, &(0x7f0000000200)={0xa, 0x80000, r2})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

3.559186876s ago: executing program 1 (id=2739):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000280)={0x20, 0x18, 0x2, "36bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000280)={0x20, 0x18, 0x2, "36bc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

3.37146953s ago: executing program 0 (id=2740):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
eventfd2(0xffff5faa, 0x80000)
close(0x3)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x200000a, 0x3be}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000300)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd6441c605ec7fda525166af33177521f2606e0ba3437c4a7d0e835991ab1875bc9652135e4e39c78d0a8", 0x60, 0x2400c0c7, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.124453161s ago: executing program 2 (id=2741):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x9, 0x4) (async)
poll(0x0, 0x0, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})
socket$packet(0x11, 0x2, 0x300) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x2)
syz_usbip_server_init(0x1) (async)
syz_usbip_server_init(0x3) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4089d}, 0xc010) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async, rerun: 32)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0xa00828, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async)
mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000, &(0x7f00000000c0)={0x0, 0x74, 0x100000}, 0x20) (async, rerun: 64)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896) (rerun: 64)
fallocate(r4, 0x9, 0x5, 0x7) (async)
recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) (async, rerun: 64)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (rerun: 64)

2.799444117s ago: executing program 2 (id=2742):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000257000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x44000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1, 0x2, 0xfffffffc}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x800, 0x3, 0x290}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
syz_usb_connect$cdc_ncm(0x2, 0x76, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

2.381353608s ago: executing program 0 (id=2743):
r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0})

2.276478261s ago: executing program 4 (id=2744):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x47)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lchown(0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1c4}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="00008a38221ef76954c20000a3683f7af8fa6f10d2cf12a2308f00000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000340)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r5, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x3b, 0x4, 0x4c8, 0x1e8, 0x2f8, 0x3e0, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:update_modules_exec_t:s0\x00'}}}, {{@arp={@broadcast, @dev, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_batadv\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @loopback}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x520)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="01002dbd7000fcdbdf25010000000800070009000000540008804c000080240002009959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb73370600459b3922040000801400020077673100"/126], 0x84}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwrite64(0xffffffffffffffff, &(0x7f0000000440)="e67ab166972ce298f4681ef5c755f60473b17b7887d62bd37cecdcbad562ef030000009005bc69f6c3c5238bebfbce42362d29d64c37eeaeec2d13731c56a864da45a465e64de62d", 0x48, 0x33)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket(0x10, 0x3, 0x0)

1.760105188s ago: executing program 0 (id=2745):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000640)={'tunl0\x00', <r2=>0x0, 0x7, 0x8, 0x81a7, 0xe7, {{0x2e, 0x4, 0x3, 0x5, 0xb8, 0x65, 0x0, 0x0, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_prespec={0x44, 0x3c, 0x32, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x36}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcb2}, {@empty, 0x40}, {@multicast1, 0xfffffffd}, {@loopback, 0x8f5a}, {@loopback, 0x8e80}, {@rand_addr=0x64010101, 0x1}]}, @generic={0x88, 0x11, "4711c7bd27033f1a7bc01fd298a7c9"}, @rr={0x7, 0x3, 0xd1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xf4, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @local]}, @timestamp_addr={0x44, 0xc, 0x46, 0x1, 0x3, [{@remote, 0xf91}]}, @lsrr={0x83, 0x3, 0xcf}, @timestamp_addr={0x44, 0x1c, 0x1d, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@private=0xa010100, 0x3}, {@broadcast, 0xde84}]}, @ra={0x94, 0x4}]}}}}}) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', <r4=>0x0, 0x40, 0x8000, 0x2, 0xfffffff9, {{0xa, 0x4, 0x1, 0x4, 0x28, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@end, @cipso={0x86, 0x10, 0x3, [{0x0, 0xa, "be17f9a80a225910"}]}]}}}}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRES32=r6], 0x24}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@RTM_NEWMDB={0x98, 0x54, 0x400, 0x70bd28, 0x25dfdbfd, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x2, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x2, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x400}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x3, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x2, {@in6_addr=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, 0x98}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)

1.544694633s ago: executing program 0 (id=2746):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000008800000240012800c0001006d6163766c616e00140002800800010004000000080009000100000068f84f8ffc8087153899b46b7e05ca7bf53e3cc871f1d4f8ff7d9429771aaf0a40fc7b3f1e51d8b52ff5984189e8b4ce980c0fbb0703a2e1a303812c8da08e70eb7b1e1851d425e114c65c54943aee36365e096bd68d48f20f89961a5608d3d78ce721c3151fae2d2005612a8bfc03aa799e5db953afc0"], 0x44}}, 0x8000)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = fcntl$getown(r4, 0x9)
syz_clone3(&(0x7f00000005c0)={0x301811400, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000200), {0x2b}, &(0x7f0000000640)=""/23, 0x17, &(0x7f0000000480)=""/238, &(0x7f0000000580)=[r7], 0x1}, 0x58)
writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)

479.229602ms ago: executing program 1 (id=2747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x3, 0x6, 0x201, 0xfffffff0, 0x0, {0x7, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)

195.361337ms ago: executing program 3 (id=2748):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00220b000000f3bfce044f53040000007758b31f95d175670ff4e3d8b5c5cd22177e3f7563dc164bb815da996916db1dccca41f67ad7ec3a9e8dee3e11ec6b3ea97e89fc4e2c8d3d7954edbaafa2e647cfc710da03da1bde36a2c2ca50bcf010d966e31dade5df10d0c5d8411ac38ad87a688f61966a5924e3f828a008af29675d5da977ffb9ea7f4236be9c21ffb6f9d5d08c49caaa7ad3e209a7ad03cb795fd36b4e3f87599c03c078c850737c29acf20b65fcd023c171eeb1e8e8a769004c61045284e225387bcfceac66c25328c68842680b16ba2f21c1906f4080619101717ced98ee75f8136d9ec467dd583f3d0fa54cd642e8e75703e4147662148a3ad0934beaa1daf8acd64d17d2"], 0x0}, 0x0)

0s ago: executing program 1 (id=2749):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000001640)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2a0750b19c19c46800", 0x9}, {&(0x7f0000000140)="dee42465335e2c5c12d0f6ef7f141bcdbfa7267857ecf025f9b3e685ab380a861e59387a193d94507da8bdcd57e25e8da96610a7ef9b4e122a57e8c19c9b8f655f4c32df", 0x44}], 0x2, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}, {0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="6c937e2c1c951ec60f825c35b32c11ad667c18c490517747c540c056e92c0c1ab8827bdc886ded0bf778cc0e", 0x2c}], 0x1, 0x0, 0x0, 0x805}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="51cb7b40f6308adaf84bbeef3e51f568b60ae5b379f44a53fd162ef53953f1ac49e140dbb702b556110a5d14fc7674d49f1fab090b60b5df0921762da35b8d02c6ce3908da91c0ce32c484e5b94b64ea59a3d2e6c08483d8f5bd94b86a9aed835c329c7dd7aa1274d9e91ae130ace9679ac4a9356dd300b5158b31106ede46cc1f66fac485151d1c99a3a91b16b25f2aacb1c820c6cc4c37cda16fb65600f571f0f654cc7dd7c698ca8df3d57f7104b977ccb09e1d6c9c075d5275fd881f2bde032ce1d7292c66651d0cb2608fd3b84986055283ad1b0ebb6e6fdf", 0xdb}, {&(0x7f0000000400)="3b3f6b41837c85b6c8b48ba69d13e313a622ccd473b260f9971987bb3ae38e8f4175751a850664dd3f45a1a10fe1b4a6cc9b9acc24927e1946972850a6dbaa17ce1a09c3941e743de485f1251a42666fd27fcf547c06acfd302ad432c14d829a4d370df7726f2814bc4a5c316bfcac237e", 0x71}], 0x2, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x94f}], 0x18, 0x4004881}, {0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="36dcc630656e7c01f1d81f8ce4c497e1360166e0d85ea6d059fb2cd362b040d0fb729b52838a85c83ce0cbe1ce41f1a9c6f8cd5ede1860670e8be6ad6fe00aba010440744f5dc8533c73b6dd889c0b0a2868ca63856c7ed4a1315921ee53890a603fb2cd18ac7b80eacc5986082ba539abfe066a32c746c5f5", 0x79}, {&(0x7f0000000680)="a18b79d3bcbf2b39530dab12195004238a034270dfffca9a219533a9ed1a87166de42f89dae1585355c67bbe4497c83f7d0bd9c70660a3bf9bae655e38d303115e44dfc76f3fade2058f5bccb665da994f9cde9987d7f7e2356a1d35ccab8e5b98b2b951c1ea41dc4990b626bbb3e18954fed04d7c80e28223b691822b1e3c3d8dcb014a02e5941e28f7592180ed78970e771c25b91294c9e5bb7f865e05d59600b964b68c3f0dc696b767c846869f886065760f0a034c2c1252bd494d21991646b99b947cacb851e1b60e1efb", 0xcd}, {&(0x7f0000000780)="9bf23d3d567fdbea87c437b26d1da362c6f037d0b35dd69d633b820a05b29f3868ba73ef0524c5c7eb35461f2a06e20ce532d75602ccc5d2b66a95e835ace438c3127b6f28893c0200ebd83806efd07528447b0e207d1c373629f3861eeaa3a6414ce75c6ab10a85babae48770a4279cf7c692de1a8a0ebfcd561dd43dcdfa744d", 0x81}, {&(0x7f0000000580)="4bebc563abba1b026aca48ee407168b30c3937f07a4ef2d870af391d9d0e27d4d6", 0x21}, {&(0x7f0000000840)="1c8e3257369c688756ef989c710efffcc8bbdee12907c9540ba7d5c4de20", 0x1e}, {&(0x7f0000000880)="aee9", 0x2}], 0x6, &(0x7f0000000940)=[@op={0x18}], 0x18, 0x20000090}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000980)="28fb682283e01399344333c207e266b7fb5c9d28c648beeb4739bafc6185d6ccafa68a5dacec08075c40e3c054df6c74191caf405903c5288a8da988275dd16dd1193eaffc090cdb06318502e8a98b6e62a076485270fd82fff5e8", 0x5b}, {&(0x7f0000000a00)="dc9e4fcf2aa3eb16d1a3731c595419cecd7c7369fd8b60c93f14acbccc5812334ea377eae1a2a4b5fd95b8780c91facb56479b1d7f2331363bcf54ca2b30c79cff3edd20f44186131c1363759b9c00c6716ce07625197157cc34536eeed3f282e147b2d7d45986adf7dff3f7c6a701cd9701b52e1ba4e4974d77efffdce59330b79ffd15cd9bab2d1916b52c182798eb6f44048c035f615e7ba0e3175ca3834926ce4899a2f4fc16465c5dd60820219c8989466ad8b2b33907ce4c15cd87c1d72fe238dedec1de57cbe90a847747c863d0d8b244c4b2", 0xd6}, {&(0x7f0000000b00)="88f4d4d7f13770052687ade694fc", 0xe}], 0x3, &(0x7f0000000b80)=[@op={0x18}, @op={0x18}], 0x30, 0x4000}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="210c5afa34cd6b68", 0x8}, {&(0x7f0000000c00)="570b23fc4f54844f977bac314f1f9349490401014d8844de27bf034757b0744b6dbb5b6c60e46a58775566d536d711629ff3020aa2f3aaab1cfb51bf47ad5faf7b369af51c79", 0x46}], 0x2, &(0x7f0000000cc0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18}], 0x48, 0x20000840}, {0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000d40)="1fbe1b179bd3ac250ed12a0bd49af2c90256e4afa166c5480cba30caf0ae197d61e56a2c069c14ecfc33087f8a1c42eeefb60c96f4a52f497160519588f441e5913d6bb59d24765a74a1f038daa67cbd39f4f0d3d883ef9d28aef90c16c7613e844b4b48bc427e7ee1a7e6453fdfa48c8bd2cfb6cf06e208e73d59150164b57afd06969667c1c7ce16b4f10fd793d159fb01845e956eb541b51bfed565cdf86201910d4e29f1d4b3cc2540ab8fad8815c00539dbd846f01ab6d51b3ffd844eea03c635cc5a991dd7", 0xc8}, {&(0x7f0000000e40)="e3a936db56fa545bbee724e73f3d42d13546dec17cc06f6e189bc72e7cf8aa03f3a8d9ef445e3c90f07bf64a661008eda671b3c0800feb8ed62898d44a31c51f32e3e50b9b98738947476370ac63ebf21f4d5bae0edc65cc804ba12d37b5ed3156e36106e6b1b45358fff81ef634af0bdcd911ca3acee3add33ef672c64b268f6c3a6d8c8e5c803d479b30542dfa71b6bed385d495d4ee2009fb706f5ee22c3bfc6b7825dcdf6762a7ec3f8ba54c294188393bf6eae9e9a8d7d7f0a36c912da732c7b49ebd494a1c631d2998f7b04f93cfd1b6ea9d420585fca65dd1851a675fc387bbd307ebf666e53f6162d9d953d326408b871238ee655c861ad2", 0xfc}, {&(0x7f0000000f40)="b5fb1463e8203d656befb2c2f8d66c4eccc96c444595a19eed68ee520d5397884bf241a0d9f6492bd80b0de21e39a0f4f95778f7716bf0908caf83c53f4e67125675eb4fda808456433f4b74068fa69e25039d3c5d60016eaa6058aa0264ae6d8de5caf8", 0x64}, {&(0x7f0000000fc0)="9bad79dffa1d63d2ab09aa7ce8ab96b9d5d7376e1765aff8f97e1ae75b8bfe50987a4cdb31df9cc8fee643429936ab4d7898d81b475562ff247d8a59c54ed6ecb89ec16fc1b97c1912f62bab85f587c149946844012b88d954a9cca57c29e6a1", 0x60}, {&(0x7f0000001040)="7d063a14cde3c32f2709992ffbb4ffb98894830c98a1876d754d73249133d95d7f95fbf9341373768ae8fa5753373f2227bedf4381bf981206e51813e408a534636923b942d279b65fcadee527d4fcd3b17a910f8b5d5ea45c3e9d419726fd82d6a394c36e965db0c03a03da87577901fde196ea5fe0a08905000d31712a6c64f673dff624825253fa393add47b9239ed8694be2ada281cf3a799257", 0x9c}, {&(0x7f0000001100)="928440e940a77fa2d3c48c753719ceb449400d77160ed69fb1846c2c0ad249c5532db87d76b8e6a0f0cea8dc", 0x2c}, {&(0x7f0000001140)="6fa2e5af7b1161e831ca284d34ce1fd6bfdf3b8cf3b94df144cae607d42b3cb839e9639df96f694b68da8cb16ca73b15a1946163f75f38e43182dd70b6f8c94fc8be92f0cc853b5c4ffd9cb397f6b038fc9ae9dcc27d7e4f605bf349e34813b13dd4ceeef4dd266f10dfefb0c5d9bfb5df2b61b3642c6dc248d24dfcd001fc8ce07c2506d5b5e6e905416bfd88272f43371afc4971425e1e2d2f5a47dbe0461d23a3e0a828ae2bce59e56c9441efd0ed3cb9625fbb6f3d3207e0158d124620d687f27ec879585ad97e67b6e25a7743b2a9d561d13fb7307a6bee13800f34", 0xde}, {&(0x7f0000001240)="1ae4929381c8f272e4749e82bf63f1dac12c5f47170a072e17a9f5d81d9b5ef948186d06e5880e5c8c40a92961f12d1eba17eb3f22af87ebcf0685ae363cc936178a3ef0a226dbd70fc35db234c6ea3218e48000cb1a72f6e5c23847267d134c10abc613f059b7ff19de696e0690449ba4f0728c9583219f9196d25ee46e481117e23f3ec1a2fbdab9214220d001b173ac96886a0eef1c9abb65e5378622531e232c8c3c3d80168fee4f77e271f77d295e835f1ba298a9182c4a052d84dc2ffdbfae80560a", 0xc5}, {&(0x7f0000001340)="a37cce6c6c13207aa239dba15dc29f45e4ce66eb9526100f637842a23c2fd6450dc52da0f74ec60bea5ca182bb2bd48fde3195c8824c40865a50f2e0cb158e1fc82cb1c1a65bf4259cbe7955021825a3331e77780a16dcf3d7a3c249a6f7ab913318b627494808c2f0bcf8642a68db6156c67a87701a14cbf62362cdecc43156264999dd6393695bbb5874", 0x8b}], 0x9, &(0x7f00000014c0)=[@iv={0xb0, 0x117, 0x2, 0x9c, "9b3895cb037b3473265b970fa2b9247a52ef43197043677ac9293ccbd6faa8cec1bb0458e5ffe680536c83ee7db5ecc7dfcba17ebb2e284ca3d6f88cb3e7c6c0c1f56d5c893a9ad64a8ff7d45a58f7276dd18d729bc4e77f8723ec7422b2996d5e056facc0bf3bbb4e50e556ffe7a6b5dfe2fbddbcd9cae79c71fdd45a44407fed60167f1e51f549912db8c7ccd37f3494933fab4b053b7116dc6e10"}, @op={0x18}, @iv={0x18}, @iv={0x58, 0x117, 0x2, 0x42, "31f1315769a43015fadcbabdf8c5835a82a4c1343fe943bd7a10089108c37e970544e72881d1720b0fc7606749f8529656365e3287d9ff8ba6c02bfc4720cffb41b9"}, @op={0x18, 0x117, 0x3, 0x1}], 0x150, 0x20008040}], 0x7, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0)

kernel console output (not intermixed with test programs):

eam0: Port device dummy0 added
[ 1018.177551][T16952] team0: Port device dummy0 removed
[ 1018.194167][T16952] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1018.205756][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1018.233334][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1018.245251][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1018.287555][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1018.305639][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1018.345853][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1018.446940][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1018.485925][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1018.590360][T16958] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1018.917438][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1018.955605][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.005919][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.075743][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.116662][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.152322][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.196199][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.231485][T16963] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2376'.
[ 1019.232052][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.349664][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.376405][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.486188][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.527191][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.569699][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.610926][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.659257][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.678508][ T5939] net_ratelimit: 8 callbacks suppressed
[ 1019.678528][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1019.693353][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.728004][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.764195][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.795240][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.838281][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.864701][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.900816][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1019.929007][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1019.948627][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.165302][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.198336][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.227904][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.238569][T11049] usb 2-1: new full-speed USB device number 93 using dummy_hcd
[ 1020.260058][   T30] audit: type=1326 audit(1771985592.816:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.305916][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.321464][   T30] audit: type=1326 audit(1771985592.816:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.347994][   T30] audit: type=1326 audit(1771985592.816:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.370677][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.393990][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.407668][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.422526][   T30] audit: type=1326 audit(1771985592.816:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.450377][   T30] audit: type=1326 audit(1771985592.816:6655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.473390][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.496434][T11049] usb 2-1: config 0 has no interfaces?
[ 1020.509416][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.520794][T11049] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1020.538007][T11049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.547176][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.559238][   T30] audit: type=1326 audit(1771985592.816:6656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.646553][T16983] netlink: 'syz.2.2381': attribute type 10 has an invalid length.
[ 1020.697015][T16983] bond0: (slave dummy0): Releasing backup interface
[ 1020.703473][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.704677][T16984] netlink: 'syz.2.2381': attribute type 10 has an invalid length.
[ 1020.727048][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1020.727785][T11049] usb 2-1: config 0 descriptor??
[ 1020.767761][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.781647][   T30] audit: type=1326 audit(1771985592.816:6657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.825680][T16983] dummy0: entered promiscuous mode
[ 1020.834590][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.871068][T16983] dummy0: entered allmulticast mode
[ 1020.876733][   T30] audit: type=1326 audit(1771985592.816:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.878620][T16983] team0: Port device dummy0 added
[ 1020.899533][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1020.958909][   T30] audit: type=1326 audit(1771985592.816:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1020.959103][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1020.997638][   T30] audit: type=1326 audit(1771985592.816:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.041516][   T30] audit: type=1326 audit(1771985592.816:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.066887][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.097978][T16984] dummy0: left allmulticast mode
[ 1021.113450][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.176183][   T30] audit: type=1326 audit(1771985592.816:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.199690][   T30] audit: type=1326 audit(1771985592.816:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.222723][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.236071][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.247293][   T30] audit: type=1326 audit(1771985592.816:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.270294][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.290698][T16984] team0: Port device dummy0 removed
[ 1021.315019][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.325898][T16984] dummy0: left promiscuous mode
[ 1021.345666][T16984] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1021.360143][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.377402][   T30] audit: type=1326 audit(1771985592.816:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.409996][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.435684][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.451203][   T30] audit: type=1326 audit(1771985592.816:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.478875][   T30] audit: type=1326 audit(1771985592.816:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.502600][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.515838][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.529141][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.678037][   T30] audit: type=1326 audit(1771985592.816:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16975 comm="syz.3.2380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1021.733137][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.748029][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.756913][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.765319][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.765348][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.776780][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.796398][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1021.843173][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.865172][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1021.896832][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1021.949570][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.019845][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.187154][T14810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1022.228819][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.242721][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.257144][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.269330][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.288294][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.309936][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.427856][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.444958][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.469156][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.496938][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.543693][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.581885][T11049] usb 2-1: string descriptor 0 read error: -71
[ 1022.590844][T11049] usb 2-1: USB disconnect, device number 93
[ 1022.600536][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.632434][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.680864][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.695288][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1022.732398][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1022.778046][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.058149][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.139314][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.233731][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.245704][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.256929][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.294551][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.307735][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.322007][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.337120][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.373361][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.420833][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.434038][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.448426][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.465871][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.506533][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.536648][T17016] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[ 1023.600337][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access
[ 1023.641566][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access
[ 1023.689843][  T929] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9
[ 1023.827783][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1023.899957][  T929] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[ 1023.950142][  T929] usb 4-1: USB disconnect, device number 99
[ 1024.342410][  T929] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 1024.846106][T17050] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1024.906693][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.527357][  T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1025.805431][T17069] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1025.978354][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.028574][T17086] netlink: 'syz.1.2405': attribute type 4 has an invalid length.
[ 1027.036737][T15292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1027.437620][   T30] kauditd_printk_skb: 122 callbacks suppressed
[ 1027.437635][   T30] audit: type=1326 audit(1771985599.986:6791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1027.543035][   T30] audit: type=1326 audit(1771985599.986:6792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1027.720607][   T30] audit: type=1326 audit(1771985599.986:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1027.785795][   T30] audit: type=1326 audit(1771985599.986:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.020723][   T30] audit: type=1326 audit(1771985599.986:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.068076][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.114998][   T30] audit: type=1326 audit(1771985599.986:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.182750][   T30] audit: type=1326 audit(1771985599.986:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.237881][   T30] audit: type=1326 audit(1771985599.986:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.277158][T17114] netlink: 'syz.0.2411': attribute type 11 has an invalid length.
[ 1028.367631][   T30] audit: type=1326 audit(1771985599.986:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.467676][T17112] FAULT_INJECTION: forcing a failure.
[ 1028.467676][T17112] name failslab, interval 1, probability 0, space 0, times 0
[ 1028.497634][T17112] CPU: 0 UID: 0 PID: 17112 Comm: syz.4.2413 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1028.497665][T17112] Tainted: [L]=SOFTLOCKUP
[ 1028.497671][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1028.497682][T17112] Call Trace:
[ 1028.497689][T17112]  <TASK>
[ 1028.497697][T17112]  dump_stack_lvl+0xe8/0x150
[ 1028.497718][T17112]  should_fail_ex+0x412/0x560
[ 1028.497733][T17112]  should_failslab+0xa8/0x100
[ 1028.497748][T17112]  __kmalloc_noprof+0xe8/0x760
[ 1028.497759][T17112]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1028.497776][T17112]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1028.497793][T17112]  ? tomoyo_path_number_perm+0x219/0x630
[ 1028.497804][T17112]  tomoyo_path_number_perm+0x246/0x630
[ 1028.497816][T17112]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1028.497828][T17112]  ? __lock_acquire+0x6b5/0x2cf0
[ 1028.497847][T17112]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1028.497873][T17112]  ? __fget_files+0x2a/0x420
[ 1028.497889][T17112]  ? __fget_files+0x2a/0x420
[ 1028.497903][T17112]  ? __fget_files+0x3a0/0x420
[ 1028.497916][T17112]  ? __fget_files+0x2a/0x420
[ 1028.497932][T17112]  security_file_ioctl+0xc3/0x2a0
[ 1028.497950][T17112]  __se_sys_ioctl+0x47/0x170
[ 1028.497963][T17112]  do_syscall_64+0x14d/0xf80
[ 1028.497978][T17112]  ? trace_irq_disable+0x3b/0x150
[ 1028.497993][T17112]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.498012][T17112]  ? clear_bhb_loop+0x40/0x90
[ 1028.498025][T17112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1028.498035][T17112] RIP: 0033:0x7f7afa19c629
[ 1028.498046][T17112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1028.498056][T17112] RSP: 002b:00007f7afaf94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1028.498068][T17112] RAX: ffffffffffffffda RBX: 00007f7afa415fa0 RCX: 00007f7afa19c629
[ 1028.498076][T17112] RDX: 0000200000000080 RSI: 000000000000891c RDI: 0000000000000003
[ 1028.498082][T17112] RBP: 00007f7afaf94090 R08: 0000000000000000 R09: 0000000000000000
[ 1028.498089][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1028.498095][T17112] R13: 00007f7afa416038 R14: 00007f7afa415fa0 R15: 00007f7afa53fa48
[ 1028.498110][T17112]  </TASK>
[ 1028.498115][T17112] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1028.689311][T17116] fuse: Unknown parameter '�d'
[ 1028.692168][  T929] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1028.747774][   T30] audit: type=1326 audit(1771985599.986:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1028.824307][T17116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2414'.
[ 1028.869555][T17116] openvswitch: netlink: Flow key attr not present in new flow.
[ 1029.114459][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1029.201519][T17127] netlink: 'syz.3.2417': attribute type 4 has an invalid length.
[ 1029.217600][T11049] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1029.314435][T17132] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1029.359575][T17133] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2419'.
[ 1029.390237][T11049] usb 5-1: Using ep0 maxpacket: 16
[ 1029.412670][T17134] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1029.451877][T11049] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1029.469810][T11049] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1029.540719][T11049] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1029.555970][T11049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.566113][T11049] usb 5-1: Product: syz
[ 1029.576213][T11049] usb 5-1: Manufacturer: syz
[ 1029.586434][T11049] usb 5-1: SerialNumber: syz
[ 1029.602282][T11049] usb 5-1: config 0 descriptor??
[ 1029.760469][T11049] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1029.778275][T11049] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[ 1030.148259][ T5822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1030.348730][T17142] i2c i2c-0: Invalid block read size 255
[ 1030.423318][T11049] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1030.431011][T11049] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[ 1030.488737][T17146] netlink: 'syz.2.2421': attribute type 4 has an invalid length.
[ 1030.637612][  T929] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1030.752889][T11049] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[ 1030.761346][T11049] em28xx 5-1:0.0: No AC97 audio processor
[ 1030.870218][  T929] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1030.881653][  T929] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1030.929193][  T929] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1030.987341][  T929] usb 1-1: config 220 has no interface number 2
[ 1031.044826][  T929] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1031.095461][  T929] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1031.133092][  T929] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1031.168195][  T929] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1031.199557][  T929] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1031.312379][  T929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.338442][  T929] usb 1-1: Product: syz
[ 1031.343737][  T929] usb 1-1: Manufacturer: syz
[ 1031.353828][  T929] usb 1-1: SerialNumber: syz
[ 1031.586460][  T929] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1031.611003][  T929] uvcvideo 1-1:220.0: No valid video chain found.
[ 1031.650167][  T929] usb 1-1: selecting invalid altsetting 0
[ 1031.706517][  T929] usb 1-1: selecting invalid altsetting 0
[ 1031.718704][  T929] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[ 1031.832434][  T929] usb 1-1: USB disconnect, device number 96
[ 1032.550928][T17182] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1032.677548][ T5822] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1032.685261][ T5906] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1032.705515][T17181] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1032.833600][T15292] usb 5-1: USB disconnect, device number 110
[ 1032.841214][T15292] em28xx 5-1:0.0: Disconnecting em28xx
[ 1032.865344][T15292] em28xx 5-1:0.0: Freeing device
[ 1032.920967][ T5822] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[ 1032.929888][ T5822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.950415][ T5906] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1033.028065][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.036238][ T5822] usb 2-1: config 0 has no interface number 0
[ 1033.042417][ T5822] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1033.053635][ T5906] usb 3-1: Product: syz
[ 1033.057865][ T5906] usb 3-1: Manufacturer: syz
[ 1033.062558][ T5906] usb 3-1: SerialNumber: syz
[ 1033.067261][ T5822] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1033.081901][ T5906] usb 3-1: config 0 descriptor??
[ 1033.087741][ T5822] usb 2-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[ 1033.111670][ T5822] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[ 1033.144757][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.171384][ T5822] usb 2-1: config 0 descriptor??
[ 1033.193150][ T5822] HFC-S_USB 2-1:0.168: probe with driver HFC-S_USB failed with error -5
[ 1033.409885][T11049] usb 5-1: new full-speed USB device number 111 using dummy_hcd
[ 1033.547747][ T5906] usb 3-1: Firmware version (0.0) predates our first public release.
[ 1033.559998][ T5906] usb 3-1: Please update to version 0.2 or newer
[ 1033.578493][ T5906] usb 3-1: Firmware: build 
[ 1033.592114][T11049] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1033.601375][T11049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.648019][T11049] usb 5-1: Product: syz
[ 1033.652226][T11049] usb 5-1: Manufacturer: syz
[ 1033.656827][T11049] usb 5-1: SerialNumber: syz
[ 1033.674136][T11049] usb 5-1: config 0 descriptor??
[ 1033.743027][T11049] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1033.799876][ T5906] usb 3-1: USB disconnect, device number 92
[ 1034.291037][T17201] netlink: 'syz.0.2435': attribute type 10 has an invalid length.
[ 1034.300711][T11049] gspca_stk1135: reg_w 0x2 err -110
[ 1034.317960][T17200] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1034.340330][T17201] bond0: (slave dummy0): Releasing backup interface
[ 1034.363048][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.377133][T11049] gspca_stk1135: Sensor write failed
[ 1034.383307][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.390284][T11049] gspca_stk1135: Sensor write failed
[ 1034.396573][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.403394][T11049] gspca_stk1135: Sensor read failed
[ 1034.411343][T17202] netlink: 'syz.0.2435': attribute type 10 has an invalid length.
[ 1034.419984][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.426471][T11049] gspca_stk1135: Sensor read failed
[ 1034.434600][T11049] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1034.446736][T17201] team0: Port device dummy0 added
[ 1034.502461][T17202] team0: Port device dummy0 removed
[ 1034.515518][T17202] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1034.610416][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.671559][T11049] gspca_stk1135: Sensor read failed
[ 1034.690231][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.714817][T11049] gspca_stk1135: Sensor read failed
[ 1034.730816][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.745684][T11049] gspca_stk1135: Sensor write failed
[ 1034.760127][T11049] gspca_stk1135: serial bus timeout: status=0x00
[ 1034.781762][T11049] gspca_stk1135: Sensor write failed
[ 1034.798675][T11049] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[ 1035.421918][T15292] usb 2-1: USB disconnect, device number 94
[ 1035.743503][T17221] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1036.005616][T15292] usb 5-1: USB disconnect, device number 111
[ 1036.097899][ T5893] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 1036.261392][ T5893] usb 4-1: Using ep0 maxpacket: 8
[ 1036.279740][T17237] netlink: 'syz.4.2443': attribute type 11 has an invalid length.
[ 1036.370453][ T5893] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1036.379295][ T5893] usb 4-1: config 1 has an invalid interface number: 74 but max is 0
[ 1036.387401][ T5893] usb 4-1: config 1 has no interface number 0
[ 1036.443305][ T5893] usb 4-1: config 1 interface 74 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[ 1036.598392][ T5893] usb 4-1: config 1 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.742144][ T5893] usb 4-1: config 1 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.772316][ T5893] usb 4-1: config 1 interface 74 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1036.796870][ T5893] usb 4-1: config 1 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.871730][ T5893] usb 4-1: New USB device found, idVendor=1199, idProduct=6893, bcdDevice=3e.cc
[ 1036.881004][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.887600][T15292] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1036.890239][ T5893] usb 4-1: Product: syz
[ 1036.940609][ T5893] usb 4-1: Manufacturer: syz
[ 1036.978259][ T5893] usb 4-1: SerialNumber: syz
[ 1037.058910][T15292] usb 3-1: Using ep0 maxpacket: 32
[ 1037.075590][T15292] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1037.097384][T15292] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1037.119996][T15292] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.40
[ 1037.129419][T15292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.149095][T15292] usb 3-1: Product: syz
[ 1037.153462][T15292] usb 3-1: Manufacturer: syz
[ 1037.167516][T15292] usb 3-1: SerialNumber: syz
[ 1037.591303][T17248] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2446'.
[ 1037.907840][T14810] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1038.067781][T14810] usb 1-1: Using ep0 maxpacket: 16
[ 1038.076574][T14810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.101752][T14810] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1038.130465][T14810] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1038.145429][T14810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.178686][T14810] usb 1-1: Product: syz
[ 1038.191913][T14810] usb 1-1: Manufacturer: syz
[ 1038.203281][T14810] usb 1-1: SerialNumber: syz
[ 1038.452976][T14810] usb 1-1: 0:2 : does not exist
[ 1038.485534][T14810] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1038.577902][T17261] fuse: Unknown parameter 'ft0x0000000000000003'
[ 1038.724475][T14810] usb 1-1: USB disconnect, device number 97
[ 1038.914552][ T5893] sierra 4-1:1.74: Sierra USB modem converter detected
[ 1038.917343][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1038.998923][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[ 1039.210080][ T5893] usb 4-1: Sierra USB modem converter now attached to ttyUSB1
[ 1039.287065][ T5893] usb 4-1: USB disconnect, device number 101
[ 1039.362597][T17269] netlink: 'syz.0.2456': attribute type 10 has an invalid length.
[ 1039.375331][T17269] bond0: (slave dummy0): Releasing backup interface
[ 1039.379077][ T5893] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 1039.410591][ T5893] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[ 1039.418970][T17269] team0: Port device dummy0 added
[ 1039.459119][T17273] netlink: 'syz.0.2456': attribute type 10 has an invalid length.
[ 1039.462807][ T5893] sierra 4-1:1.74: device disconnected
[ 1039.496333][T17274] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1039.539401][T15292] usbhid 3-1:1.0: can't add hid device: -71
[ 1039.553372][T15292] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1039.568502][T15292] usb 3-1: USB disconnect, device number 93
[ 1039.604828][T17273] team0: Port device dummy0 removed
[ 1039.992646][T17273] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1040.366482][T17287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1040.399402][T17294] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85
[ 1040.417045][T17294] binder: BINDER_SET_CONTEXT_MGR already set
[ 1040.423865][T17294] binder: 17293:17294 ioctl 4018620d 200000004a80 returned -16
[ 1040.750601][T17310] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1041.077576][T14810] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1041.127602][T15292] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[ 1041.252300][T17324] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1041.260812][T14810] usb 2-1: Using ep0 maxpacket: 32
[ 1041.268296][T15292] usb 4-1: device descriptor read/64, error -71
[ 1041.276033][T14810] usb 2-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config
[ 1041.286759][T14810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1041.332835][T14810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1041.352066][T14810] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 20
[ 1041.489176][T14810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1041.610968][T14810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1041.620686][T14810] usb 2-1: SerialNumber: syz
[ 1041.713110][T15292] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[ 1041.803404][T14810] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[ 1041.833213][T14810] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[ 1041.843522][T14810] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22
[ 1041.878610][T15292] usb 4-1: device descriptor read/64, error -71
[ 1042.079543][ T5906] usb 2-1: USB disconnect, device number 95
[ 1042.087911][T15292] usb usb4-port1: attempt power cycle
[ 1042.488209][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'.
[ 1042.505643][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2472'.
[ 1042.517749][T15292] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[ 1042.548700][T15292] usb 4-1: device descriptor read/8, error -71
[ 1042.799868][T17349] FAULT_INJECTION: forcing a failure.
[ 1042.799868][T17349] name failslab, interval 1, probability 0, space 0, times 0
[ 1042.817879][T15292] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[ 1042.823145][T17349] CPU: 0 UID: 0 PID: 17349 Comm: syz.0.2477 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1042.823175][T17349] Tainted: [L]=SOFTLOCKUP
[ 1042.823182][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1042.823194][T17349] Call Trace:
[ 1042.823202][T17349]  <TASK>
[ 1042.823210][T17349]  dump_stack_lvl+0xe8/0x150
[ 1042.823240][T17349]  should_fail_ex+0x412/0x560
[ 1042.823265][T17349]  should_failslab+0xa8/0x100
[ 1042.823290][T17349]  __kmalloc_noprof+0xe8/0x760
[ 1042.823309][T17349]  ? sock_kmalloc+0xd6/0x160
[ 1042.823340][T17349]  sock_kmalloc+0xd6/0x160
[ 1042.823367][T17349]  ____sys_sendmsg+0x1e2/0xad0
[ 1042.823400][T17349]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1042.823433][T17349]  ? import_iovec+0x73/0xa0
[ 1042.823461][T17349]  ___sys_sendmsg+0x2a5/0x360
[ 1042.823495][T17349]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1042.823549][T17349]  ? __fget_files+0x2a/0x420
[ 1042.823573][T17349]  ? __fget_files+0x3a0/0x420
[ 1042.823605][T17349]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1042.823632][T17349]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1042.823665][T17349]  ? __pfx_ksys_write+0x10/0x10
[ 1042.823694][T17349]  do_syscall_64+0x14d/0xf80
[ 1042.823719][T17349]  ? trace_irq_disable+0x3b/0x150
[ 1042.823744][T17349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.823763][T17349]  ? clear_bhb_loop+0x40/0x90
[ 1042.823785][T17349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1042.823803][T17349] RIP: 0033:0x7f6c30b9c629
[ 1042.823827][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1042.823842][T17349] RSP: 002b:00007f6c319d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1042.823862][T17349] RAX: ffffffffffffffda RBX: 00007f6c30e15fa0 RCX: 00007f6c30b9c629
[ 1042.823876][T17349] RDX: 0000000010004000 RSI: 0000200000000500 RDI: 0000000000000003
[ 1042.823889][T17349] RBP: 00007f6c319d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1042.823901][T17349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1042.823912][T17349] R13: 00007f6c30e16038 R14: 00007f6c30e15fa0 R15: 00007f6c30f3fa48
[ 1042.823940][T17349]  </TASK>
[ 1043.117331][T15292] usb 4-1: device descriptor read/8, error -71
[ 1043.248010][T15292] usb usb4-port1: unable to enumerate USB device
[ 1043.262319][T17366] netlink: 'syz.2.2479': attribute type 10 has an invalid length.
[ 1043.275155][T17366] bond0: (slave dummy0): Releasing backup interface
[ 1043.286167][T17366] dummy0: entered promiscuous mode
[ 1043.291985][T17366] dummy0: entered allmulticast mode
[ 1043.299354][T17366] team0: Port device dummy0 added
[ 1043.447616][  T929] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1043.527706][T15292] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1043.747556][T15292] usb 2-1: Using ep0 maxpacket: 16
[ 1043.757443][T15292] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[ 1043.780730][  T929] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1043.792531][T15292] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1043.807030][  T929] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1
[ 1043.822017][  T929] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1043.837380][  T929] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1043.837961][T15292] usb 2-1: Product: syz
[ 1043.851231][  T929] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1043.864891][  T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.936494][T15292] usb 2-1: Manufacturer: syz
[ 1043.945426][T15292] usb 2-1: SerialNumber: syz
[ 1043.961163][T15292] usb 2-1: config 0 descriptor??
[ 1043.975467][T15292] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[ 1044.191370][T15292] gp8psk: usb in 128 operation failed.
[ 1044.222216][T15292] gp8psk: usb in 137 operation failed.
[ 1044.228180][T15292] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1044.255418][T15292] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[ 1044.296379][T15292] usb 2-1: media controller created
[ 1044.448549][T17381] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'.
[ 1044.491312][T15292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1044.616061][T15292] gp8psk_fe: Frontend revision 1 attached
[ 1044.625813][T15292] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[ 1044.651630][T15292] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[ 1045.016585][T15292] gp8psk: usb in 138 operation failed.
[ 1045.022960][  T929] ath6kl: Failed to submit usb control message: -110
[ 1045.029846][T15292] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[ 1045.037440][  T929] ath6kl: unable to send the bmi data to the device: -110
[ 1045.067625][T15292] gp8psk: found Genpix USB device pID = 201 (hex)
[ 1045.071118][  T929] ath6kl: Unable to send get target info: -110
[ 1045.096847][T17396] netlink: 'syz.1.2488': attribute type 11 has an invalid length.
[ 1045.156780][T15292] usb 2-1: USB disconnect, device number 96
[ 1045.240840][ T5893] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1045.263411][  T929] ath6kl: Failed to init ath6kl core: -110
[ 1045.334377][  T929] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -110
[ 1045.357315][T15292] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[ 1045.485092][ T5893] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1045.495103][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.510152][ T5893] usb 5-1: Product: syz
[ 1045.515186][ T5893] usb 5-1: Manufacturer: syz
[ 1045.521138][ T5893] usb 5-1: SerialNumber: syz
[ 1045.537293][ T5893] usb 5-1: config 0 descriptor??
[ 1045.967039][ T5893] usb 5-1: Firmware version (0.0) predates our first public release.
[ 1045.976840][ T5893] usb 5-1: Please update to version 0.2 or newer
[ 1045.997220][ T5893] usb 5-1: Firmware: build 
[ 1046.107280][ T5822] usb 1-1: USB disconnect, device number 98
[ 1046.233098][ T5893] usb 5-1: USB disconnect, device number 112
[ 1046.489605][T17418] netlink: 'syz.0.2494': attribute type 10 has an invalid length.
[ 1046.616929][T17420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2495'.
[ 1047.209922][   T30] kauditd_printk_skb: 48 callbacks suppressed
[ 1047.209941][   T30] audit: type=1326 audit(1771985619.776:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17430 comm="syz.4.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1047.364961][   T30] audit: type=1326 audit(1771985619.776:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17430 comm="syz.4.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1047.387814][   T30] audit: type=1326 audit(1771985619.776:6851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17430 comm="syz.4.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1047.477226][   T30] audit: type=1326 audit(1771985619.776:6852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17430 comm="syz.4.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1047.651287][   T30] audit: type=1326 audit(1771985619.776:6853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17430 comm="syz.4.2499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1047.834527][T17447] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1048.429381][T17452] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1048.769662][T17457] netlink: 'syz.0.2504': attribute type 10 has an invalid length.
[ 1048.828054][T17458] netlink: 'syz.0.2504': attribute type 10 has an invalid length.
[ 1048.938499][T17457] bond0: (slave dummy0): Releasing backup interface
[ 1049.255541][T17457] team0: Port device dummy0 added
[ 1049.351974][T17458] team0: Port device dummy0 removed
[ 1049.368706][T17458] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1050.257866][  T929] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1050.381354][T17484] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1050.439318][  T929] usb 5-1: Using ep0 maxpacket: 32
[ 1050.450883][  T929] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1050.489543][  T929] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1050.511152][  T929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1050.536928][  T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1050.555195][  T929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1050.573147][  T929] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1050.627520][  T929] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1050.647603][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.662557][  T929] usb 5-1: config 0 descriptor??
[ 1050.960924][  T929] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1051.022081][  T929] usb 5-1: USB disconnect, device number 113
[ 1051.194120][  T929] usblp0: removed
[ 1051.537614][  T929] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[ 1051.718939][  T929] usb 5-1: Using ep0 maxpacket: 32
[ 1051.725745][  T929] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1051.735188][  T929] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1051.797928][T17506] netlink: 'syz.0.2514': attribute type 4 has an invalid length.
[ 1051.832676][  T929] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1051.844923][  T929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1051.857361][  T929] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1051.873193][  T929] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1051.894537][  T929] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1051.899429][T17505] trusted_key: syz.2.2515 sent an empty control message without MSG_MORE.
[ 1051.924715][  T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.978724][  T929] usb 5-1: config 0 descriptor??
[ 1052.575142][  T929] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1052.577595][ T5906] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1052.613980][  T929] usb 5-1: USB disconnect, device number 114
[ 1052.631521][  T929] usblp0: removed
[ 1052.801965][ T5906] usb 2-1: config 171 has an invalid interface number: 109 but max is 0
[ 1052.960814][ T5906] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.061310][   T30] audit: type=1326 audit(1771985625.546:6854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1053.099393][   T30] audit: type=1326 audit(1771985625.546:6855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1053.413304][   T30] audit: type=1326 audit(1771985625.546:6856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1053.436120][ T5906] usb 2-1: config 171 has no interface number 0
[ 1053.442811][ T5906] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1053.456895][ T5906] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1053.477671][ T5906] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1053.518042][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1053.527203][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.535319][ T5906] usb 2-1: Product: syz
[ 1053.539616][ T5906] usb 2-1: Manufacturer: syz
[ 1053.544294][ T5906] usb 2-1: SerialNumber: syz
[ 1053.554354][T17511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1053.636067][   T30] audit: type=1326 audit(1771985625.546:6857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1053.668852][T17527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2519'.
[ 1053.746666][   T30] audit: type=1326 audit(1771985625.546:6858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1053.824608][   T30] audit: type=1326 audit(1771985625.556:6859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1054.128191][   T30] audit: type=1326 audit(1771985625.556:6860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1054.346198][T17533] netlink: 'syz.1.2516': attribute type 21 has an invalid length.
[ 1054.354308][T17533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2516'.
[ 1054.365594][T17533] netlink: 'syz.1.2516': attribute type 21 has an invalid length.
[ 1054.373636][T17533] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2516'.
[ 1054.389163][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.395489][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.410486][   T30] audit: type=1326 audit(1771985625.556:6861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1054.470838][   T30] audit: type=1326 audit(1771985625.556:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1054.580533][   T30] audit: type=1326 audit(1771985625.556:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17517 comm="syz.3.2518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2468b9c629 code=0x7ffc0000
[ 1054.628098][ T5906] ath6kl: Failed to submit usb control message: -110
[ 1054.671531][ T5906] ath6kl: unable to send the bmi data to the device: -110
[ 1054.704549][ T5906] ath6kl: Unable to send get target info: -110
[ 1054.958956][ T5906] ath6kl: Failed to init ath6kl core: -110
[ 1054.970451][ T5906] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110
[ 1055.147651][T11049] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 1055.327623][T11049] usb 5-1: Using ep0 maxpacket: 16
[ 1055.359954][T11049] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1055.371134][T11049] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.379937][T11049] usb 5-1: Product: syz
[ 1055.388139][T11049] usb 5-1: Manufacturer: syz
[ 1055.393080][T11049] usb 5-1: SerialNumber: syz
[ 1055.436477][T11049] usb 5-1: config 0 descriptor??
[ 1055.667694][T17547] FAULT_INJECTION: forcing a failure.
[ 1055.667694][T17547] name failslab, interval 1, probability 0, space 0, times 0
[ 1055.695144][T17547] CPU: 0 UID: 0 PID: 17547 Comm: syz.0.2524 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1055.695177][T17547] Tainted: [L]=SOFTLOCKUP
[ 1055.695184][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1055.695196][T17547] Call Trace:
[ 1055.695205][T17547]  <TASK>
[ 1055.695214][T17547]  dump_stack_lvl+0xe8/0x150
[ 1055.695258][T17547]  should_fail_ex+0x412/0x560
[ 1055.695285][T17547]  should_failslab+0xa8/0x100
[ 1055.695310][T17547]  kmem_cache_alloc_node_noprof+0x8f/0x690
[ 1055.695340][T17547]  ? __alloc_skb+0x186/0x7d0
[ 1055.695363][T17547]  ? __alloc_skb+0x1d0/0x7d0
[ 1055.695384][T17547]  ? __local_bh_enable_ip+0xd0/0x130
[ 1055.695412][T17547]  __alloc_skb+0x1d0/0x7d0
[ 1055.695440][T17547]  netlink_sendmsg+0x5d4/0xb40
[ 1055.695477][T17547]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1055.695503][T17547]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1055.695527][T17547]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1055.695549][T17547]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1055.695571][T17547]  ____sys_sendmsg+0xa68/0xad0
[ 1055.695605][T17547]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1055.695640][T17547]  ? import_iovec+0x73/0xa0
[ 1055.695669][T17547]  ___sys_sendmsg+0x2a5/0x360
[ 1055.695701][T17547]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1055.695757][T17547]  ? __fget_files+0x2a/0x420
[ 1055.695782][T17547]  ? __fget_files+0x3a0/0x420
[ 1055.695816][T17547]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1055.695845][T17547]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1055.695880][T17547]  ? __pfx_ksys_write+0x10/0x10
[ 1055.695909][T17547]  do_syscall_64+0x14d/0xf80
[ 1055.695936][T17547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.695956][T17547]  ? clear_bhb_loop+0x40/0x90
[ 1055.695979][T17547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1055.695997][T17547] RIP: 0033:0x7f6c30b9c629
[ 1055.696016][T17547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1055.696032][T17547] RSP: 002b:00007f6c319d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1055.696053][T17547] RAX: ffffffffffffffda RBX: 00007f6c30e15fa0 RCX: 00007f6c30b9c629
[ 1055.696068][T17547] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1055.696080][T17547] RBP: 00007f6c319d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1055.696092][T17547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1055.696103][T17547] R13: 00007f6c30e16038 R14: 00007f6c30e15fa0 R15: 00007f6c30f3fa48
[ 1055.696132][T17547]  </TASK>
[ 1055.988014][  T929] usb 2-1: USB disconnect, device number 97
[ 1056.004922][T11049] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1056.015277][T11049] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1056.030974][T11049] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1056.038973][T11049] usb 5-1: media controller created
[ 1056.051035][T11049] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1056.178990][T11049] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1056.186975][T11049] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1056.332839][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2527'.
[ 1056.377773][T17562] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2527'.
[ 1056.386607][ T5906] usb 5-1: USB disconnect, device number 115
[ 1056.445244][ T5906] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1057.169068][T17583] netlink: 'syz.3.2530': attribute type 4 has an invalid length.
[ 1057.227580][ T5906] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1057.425201][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2533'.
[ 1057.468258][ T5906] usb 3-1: Using ep0 maxpacket: 32
[ 1057.481249][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.523301][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1057.615726][ T5893] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1057.624668][ T5906] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1057.703389][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.723704][ T5906] usb 3-1: config 0 descriptor??
[ 1057.820019][ T5893] usb 2-1: Using ep0 maxpacket: 16
[ 1057.855148][ T5893] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1057.866491][ T5893] usb 2-1: config 0 has no interface number 0
[ 1057.915995][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1057.955087][ T5893] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1058.061169][ T5893] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 1058.087538][T11049] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1058.104631][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.134658][ T5893] usb 2-1: config 0 descriptor??
[ 1058.357606][T11049] usb 1-1: Using ep0 maxpacket: 32
[ 1058.370724][T17608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1058.420605][T11049] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1058.473565][T17574] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1058.624299][T11049] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1058.637063][T11049] usb 1-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1058.660863][T11049] usb 1-1: config 0 interface 0 has no altsetting 1
[ 1058.677270][T11049] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57
[ 1058.687602][T11049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1058.695685][T11049] usb 1-1: Product: syz
[ 1058.707046][T11049] usb 1-1: Manufacturer: syz
[ 1058.717216][T11049] usb 1-1: SerialNumber: syz
[ 1058.759106][T11049] usb 1-1: config 0 descriptor??
[ 1058.853224][ T5893] uclogic 0003:28BD:0071.0007: pen parameters not found
[ 1058.902698][ T5893] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring
[ 1059.245299][ T5893] usb 2-1: USB disconnect, device number 98
[ 1059.386502][T11049] usb 1-1: USB disconnect, device number 99
[ 1059.898545][T17621] fuse: Bad value for 'user_id'
[ 1059.923765][T17621] fuse: Bad value for 'user_id'
[ 1060.161093][ T5906] usbhid 3-1:0.0: can't add hid device: -71
[ 1060.167087][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1060.255891][ T5906] usb 3-1: USB disconnect, device number 94
[ 1060.485994][T17643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2544'.
[ 1060.584673][T17640] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1060.737626][ T5822] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[ 1060.915922][ T5822] usb 2-1: Using ep0 maxpacket: 8
[ 1060.965837][ T5822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1060.975200][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.987650][ T5822] usb 2-1: Product: syz
[ 1060.991839][ T5822] usb 2-1: Manufacturer: syz
[ 1060.996521][ T5822] usb 2-1: SerialNumber: syz
[ 1061.026341][ T5822] usb 2-1: config 0 descriptor??
[ 1061.258739][ T5822] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1061.537534][T14810] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1061.709396][T14810] usb 5-1: config 171 has an invalid interface number: 109 but max is 0
[ 1061.726771][T14810] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1061.833303][T14810] usb 5-1: config 171 has no interface number 0
[ 1061.846625][T14810] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1061.876170][T14810] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1061.919016][T14810] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1061.947255][T14810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1061.957390][T14810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1062.053284][T14810] usb 5-1: Product: syz
[ 1062.073535][T14810] usb 5-1: Manufacturer: syz
[ 1062.074174][ T5822] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1062.083952][T14810] usb 5-1: SerialNumber: syz
[ 1062.134136][T17652] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1062.135563][ T5822] usb 2-1: USB disconnect, device number 99
[ 1062.182727][T17663] 8021q: adding VLAN 0 to HW filter on device batadv21
[ 1062.223817][T17663] batadv21: entered promiscuous mode
[ 1062.263384][T17663] batadv21: entered allmulticast mode
[ 1062.300059][T17663] team0: Port device batadv21 added
[ 1062.322749][T17665] gre2: entered allmulticast mode
[ 1062.351306][T17670] netlink: 'syz.3.2550': attribute type 4 has an invalid length.
[ 1062.402960][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2551'.
[ 1062.741075][T17673] netlink: 'syz.4.2547': attribute type 21 has an invalid length.
[ 1062.749255][T17673] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2547'.
[ 1063.264903][T14810] ath6kl: Failed to submit usb control message: -110
[ 1063.283885][T14810] ath6kl: unable to send the bmi data to the device: -110
[ 1063.335306][T14810] ath6kl: Unable to send get target info: -110
[ 1063.434418][T14810] ath6kl: Failed to init ath6kl core: -110
[ 1063.493889][T14810] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110
[ 1063.554351][T17679] ALSA: mixer_oss: invalid OSS volume ''
[ 1063.687877][T17684] fuse: Bad value for 'fd'
[ 1063.952681][T17691] netlink: 'syz.1.2557': attribute type 4 has an invalid length.
[ 1064.353173][ T5893] usb 5-1: USB disconnect, device number 116
[ 1064.715176][   T30] kauditd_printk_skb: 132 callbacks suppressed
[ 1064.715194][   T30] audit: type=1326 audit(1771985637.276:6996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1064.893903][   T30] audit: type=1326 audit(1771985637.276:6997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.038750][   T30] audit: type=1326 audit(1771985637.276:6998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.117601][ T5822] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1065.176183][   T30] audit: type=1326 audit(1771985637.306:6999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.279525][ T5822] usb 4-1: config 0 has an invalid interface number: 58 but max is 0
[ 1065.297503][ T5822] usb 4-1: config 0 has no interface number 0
[ 1065.367566][   T30] audit: type=1326 audit(1771985637.306:7000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.394914][ T5822] usb 4-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8
[ 1065.427498][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.461943][ T5822] usb 4-1: config 0 descriptor??
[ 1065.468036][   T30] audit: type=1326 audit(1771985637.306:7001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.499000][ T5822] gspca_main: spca500-2.14.0 probing 041e:400a
[ 1065.520626][   T30] audit: type=1326 audit(1771985637.316:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.573169][   T30] audit: type=1326 audit(1771985637.316:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.624750][   T30] audit: type=1326 audit(1771985637.316:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.668750][   T30] audit: type=1326 audit(1771985637.316:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17698 comm="syz.4.2559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1065.708157][ T5906] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1065.722976][ T5822] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1065.768177][T14810] usb 4-1: USB disconnect, device number 106
[ 1065.899904][ T5906] usb 5-1: config 171 has an invalid interface number: 109 but max is 0
[ 1065.910914][ T5822] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1065.918500][ T5906] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1065.932117][ T5822] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1065.941893][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[ 1065.950397][ T5906] usb 5-1: config 171 has no interface number 0
[ 1065.957024][ T5822] usb 1-1: Product: syz
[ 1065.961975][ T5906] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1065.973642][ T5906] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1065.986047][ T5822] usb 1-1: config 0 descriptor??
[ 1065.991300][ T5906] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1066.007111][ T5822] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1066.018724][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1066.027970][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.035945][ T5906] usb 5-1: Product: syz
[ 1066.040323][ T5906] usb 5-1: Manufacturer: syz
[ 1066.044919][ T5906] usb 5-1: SerialNumber: syz
[ 1066.052398][T17718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1066.138271][T14810] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1066.242879][ T5822] usb 1-1: USB disconnect, device number 100
[ 1066.289173][T14810] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1066.323275][T17728] netlink: 'syz.2.2567': attribute type 4 has an invalid length.
[ 1066.341161][T14810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1066.509268][T17732] netlink: 'syz.4.2564': attribute type 21 has an invalid length.
[ 1066.517716][T17732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2564'.
[ 1066.528214][T17732] netlink: 'syz.4.2564': attribute type 21 has an invalid length.
[ 1066.536172][T17732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2564'.
[ 1066.624122][T14810] usb 2-1: config 0 descriptor??
[ 1066.718639][ T5822] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1066.949844][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1066.966804][ T5822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1066.997708][ T5822] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1067.133413][ T5906] ath6kl: Failed to submit usb control message: -110
[ 1067.147827][ T5906] ath6kl: unable to send the bmi data to the device: -110
[ 1067.167973][ T5906] ath6kl: Unable to send get target info: -110
[ 1067.181072][ T5822] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1067.198376][ T5906] ath6kl: Failed to init ath6kl core: -110
[ 1067.205403][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.219728][ T5906] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -110
[ 1067.254561][ T5822] usb 4-1: config 0 descriptor??
[ 1067.518061][T17742] netlink: 'syz.0.2570': attribute type 4 has an invalid length.
[ 1067.704347][ T5822] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x6
[ 1067.781855][ T5822] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1068.002964][T17731] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2568'.
[ 1068.280312][ T5822] usb 4-1: USB disconnect, device number 107
[ 1068.865589][  T929] usb 5-1: USB disconnect, device number 117
[ 1069.390194][T17759] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1070.280856][T17770] FAULT_INJECTION: forcing a failure.
[ 1070.280856][T17770] name failslab, interval 1, probability 0, space 0, times 0
[ 1070.365822][T17770] CPU: 1 UID: 0 PID: 17770 Comm: syz.0.2575 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1070.365853][T17770] Tainted: [L]=SOFTLOCKUP
[ 1070.365861][T17770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1070.365874][T17770] Call Trace:
[ 1070.365883][T17770]  <TASK>
[ 1070.365891][T17770]  dump_stack_lvl+0xe8/0x150
[ 1070.365922][T17770]  should_fail_ex+0x412/0x560
[ 1070.365948][T17770]  should_failslab+0xa8/0x100
[ 1070.365980][T17770]  __kmalloc_noprof+0xe8/0x760
[ 1070.366001][T17770]  ? tomoyo_encode+0x28b/0x550
[ 1070.366030][T17770]  tomoyo_encode+0x28b/0x550
[ 1070.366057][T17770]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1070.366091][T17770]  ? tomoyo_path_number_perm+0x219/0x630
[ 1070.366110][T17770]  tomoyo_path_number_perm+0x246/0x630
[ 1070.366131][T17770]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1070.366153][T17770]  ? __lock_acquire+0x6b5/0x2cf0
[ 1070.366186][T17770]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[ 1070.366234][T17770]  ? __fget_files+0x2a/0x420
[ 1070.366263][T17770]  ? __fget_files+0x2a/0x420
[ 1070.366286][T17770]  ? __fget_files+0x3a0/0x420
[ 1070.366309][T17770]  ? __fget_files+0x2a/0x420
[ 1070.366337][T17770]  security_file_ioctl+0xc3/0x2a0
[ 1070.366367][T17770]  __se_sys_ioctl+0x47/0x170
[ 1070.366390][T17770]  do_syscall_64+0x14d/0xf80
[ 1070.366415][T17770]  ? trace_irq_disable+0x3b/0x150
[ 1070.366438][T17770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1070.366458][T17770]  ? clear_bhb_loop+0x40/0x90
[ 1070.366481][T17770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1070.366499][T17770] RIP: 0033:0x7f6c30b9c629
[ 1070.366518][T17770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1070.366534][T17770] RSP: 002b:00007f6c319d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1070.366554][T17770] RAX: ffffffffffffffda RBX: 00007f6c30e15fa0 RCX: 00007f6c30b9c629
[ 1070.366572][T17770] RDX: 0000200000000040 RSI: 0000000000001277 RDI: 0000000000000003
[ 1070.366584][T17770] RBP: 00007f6c319d5090 R08: 0000000000000000 R09: 0000000000000000
[ 1070.366596][T17770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1070.366606][T17770] R13: 00007f6c30e16038 R14: 00007f6c30e15fa0 R15: 00007f6c30f3fa48
[ 1070.366635][T17770]  </TASK>
[ 1070.366878][T17770] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1070.784203][T14810] usb 2-1: Cannot set autoneg
[ 1070.816261][T14810] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1070.894262][T14810] usb 2-1: USB disconnect, device number 100
[ 1071.520206][T14810] usb 2-1: new full-speed USB device number 101 using dummy_hcd
[ 1071.571560][T17785] program syz.3.2578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1071.582142][T17786] fuse: Bad value for 'rootmode'
[ 1071.587873][T17785] program syz.3.2578 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1071.667611][T14810] usb 2-1: device descriptor read/64, error -71
[ 1071.749642][  T929] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1071.985380][T14810] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[ 1072.019250][  T929] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1072.064128][  T929] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1072.091840][T17799] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1072.120562][  T929] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1072.140387][  T929] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1072.150574][T14810] usb 2-1: device descriptor read/64, error -71
[ 1072.160656][  T929] usb 3-1: Product: syz
[ 1072.177530][  T929] usb 3-1: Manufacturer: syz
[ 1072.189397][  T929] usb 3-1: SerialNumber: syz
[ 1072.199721][  T929] usb 3-1: config 0 descriptor??
[ 1072.210801][  T929] usb 3-1: selecting invalid altsetting 0
[ 1072.259550][T14810] usb usb2-port1: attempt power cycle
[ 1072.317680][ T5893] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1072.438003][T17781] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1072.492053][ T5893] usb 4-1: config 171 has an invalid interface number: 109 but max is 0
[ 1072.503334][ T5893] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.532259][ T5893] usb 4-1: config 171 has no interface number 0
[ 1072.554568][ T5893] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1072.579426][ T5893] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1072.597773][T14810] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[ 1072.671454][T14810] usb 2-1: device descriptor read/8, error -71
[ 1072.682191][ T5893] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1072.701813][ T5893] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1072.773674][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.785755][ T5893] usb 4-1: Product: syz
[ 1072.798833][ T5893] usb 4-1: Manufacturer: syz
[ 1072.807617][ T5893] usb 4-1: SerialNumber: syz
[ 1072.837770][T17798] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1072.917963][T14810] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[ 1072.946814][T14810] usb 2-1: device descriptor read/8, error -71
[ 1073.068379][T14810] usb usb2-port1: unable to enumerate USB device
[ 1073.681330][T17803] netlink: 'syz.3.2582': attribute type 21 has an invalid length.
[ 1073.689540][T17803] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2582'.
[ 1073.715291][T17803] netlink: 'syz.3.2582': attribute type 21 has an invalid length.
[ 1073.780294][T17803] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2582'.
[ 1074.007824][ T5893] ath6kl: Failed to submit usb control message: -110
[ 1074.041881][ T5893] ath6kl: unable to send the bmi data to the device: -110
[ 1074.103445][ T5893] ath6kl: Unable to send get target info: -110
[ 1074.172326][ T5822] usb 3-1: USB disconnect, device number 95
[ 1074.229747][ T5893] ath6kl: Failed to init ath6kl core: -110
[ 1074.255346][ T5893] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110
[ 1074.334995][T17817] netlink: 'syz.2.2585': attribute type 4 has an invalid length.
[ 1074.378237][T14810] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1074.633913][T14810] usb 2-1: Using ep0 maxpacket: 32
[ 1074.646866][T14810] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1074.687075][T14810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1074.726782][T14810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1074.765210][T14810] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1074.826587][T14810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.853432][T14810] usb 2-1: config 0 descriptor??
[ 1074.877786][T17813] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1074.923815][T14810] hub 2-1:0.0: USB hub found
[ 1075.131550][T14810] hub 2-1:0.0: 2 ports detected
[ 1075.336002][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1075.347681][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1075.422691][T14810] hub 2-1:0.0: hub_hub_status failed (err = -71)
[ 1075.429518][T14810] hub 2-1:0.0: config failed, can't get hub status (err -71)
[ 1075.486196][ T5822] usb 4-1: USB disconnect, device number 108
[ 1075.561058][T14810] usbhid 2-1:0.0: can't add hid device: -71
[ 1075.581469][T14810] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1075.703404][T17828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1075.728521][T14810] usb 2-1: USB disconnect, device number 105
[ 1075.887246][T17831] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1075.907928][T11049] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1076.142294][T11049] usb 1-1: Using ep0 maxpacket: 16
[ 1076.332005][T11049] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1076.362860][T11049] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.376263][T11049] usb 1-1: Product: syz
[ 1076.385790][T11049] usb 1-1: Manufacturer: syz
[ 1076.445813][T11049] usb 1-1: SerialNumber: syz
[ 1076.459334][T11049] usb 1-1: config 0 descriptor??
[ 1076.620777][T17842] syz.2.2590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1076.989261][T11049] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1077.048532][T11049] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1077.067497][T11049] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1077.133708][T11049] usb 1-1: media controller created
[ 1077.189369][T11049] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1077.277597][T14810] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1077.353144][T11049] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1077.367552][T11049] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1077.378525][T11049] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1077.405022][T17848] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85
[ 1077.407736][T11049] usb 1-1: USB disconnect, device number 101
[ 1077.427512][T14810] usb 3-1: device descriptor read/64, error -71
[ 1077.485109][T11049] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1077.668277][T14810] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1077.773377][T17863] netlink: 'syz.4.2597': attribute type 29 has an invalid length.
[ 1077.799827][T17863] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2597'.
[ 1077.817755][T14810] usb 3-1: device descriptor read/64, error -71
[ 1077.917551][ T5939] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1077.928298][T14810] usb usb3-port1: attempt power cycle
[ 1077.994446][T17872] netlink: 'syz.0.2600': attribute type 4 has an invalid length.
[ 1078.007591][ T5906] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1078.073482][ T5939] usb 4-1: Using ep0 maxpacket: 16
[ 1078.085571][ T5939] usb 4-1: config 0 has no interfaces?
[ 1078.097406][ T5939] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1078.109604][ T5939] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1078.120422][ T5939] usb 4-1: Manufacturer: syz
[ 1078.130527][ T5939] usb 4-1: config 0 descriptor??
[ 1078.159319][ T5906] usb 2-1: config 171 has an invalid interface number: 109 but max is 0
[ 1078.171567][ T5906] usb 2-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.188872][ T5906] usb 2-1: config 171 has no interface number 0
[ 1078.199619][ T5906] usb 2-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1078.216867][ T5906] usb 2-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1078.240730][ T5906] usb 2-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1078.266783][ T5906] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1078.282723][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.295770][ T5906] usb 2-1: Product: syz
[ 1078.304162][ T5906] usb 2-1: Manufacturer: syz
[ 1078.311582][ T5906] usb 2-1: SerialNumber: syz
[ 1078.318156][T14810] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1078.331230][T17865] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1078.348371][T14810] usb 3-1: device descriptor read/8, error -71
[ 1078.397124][ T5939] usb 4-1: USB disconnect, device number 109
[ 1078.597546][T14810] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1078.618932][T14810] usb 3-1: device descriptor read/8, error -71
[ 1078.817643][T14810] usb usb3-port1: unable to enumerate USB device
[ 1078.879615][T17877] netlink: 'syz.1.2598': attribute type 21 has an invalid length.
[ 1078.887644][T17877] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2598'.
[ 1078.897734][T17877] netlink: 'syz.1.2598': attribute type 21 has an invalid length.
[ 1078.905708][T17877] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2598'.
[ 1079.419747][ T5906] ath6kl: Failed to submit usb control message: -110
[ 1079.426893][ T5906] ath6kl: unable to send the bmi data to the device: -110
[ 1079.434336][T14810] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1079.442247][ T5906] ath6kl: Unable to send get target info: -110
[ 1079.582553][ T5906] ath6kl: Failed to init ath6kl core: -110
[ 1079.787540][T14810] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1079.797949][T14810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.804318][ T5906] ath6kl_usb 2-1:171.109: probe with driver ath6kl_usb failed with error -110
[ 1079.817051][T14810] usb 4-1: Product: syz
[ 1079.822037][T14810] usb 4-1: Manufacturer: syz
[ 1079.826925][T14810] usb 4-1: SerialNumber: syz
[ 1079.863159][T14810] usb 4-1: config 0 descriptor??
[ 1080.358386][T17897] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1080.431875][T17882] ptrace attach of "./syz-executor exec"[5835] was attempted by " ��      ��      �      ��      ��      ��      ��              ��      ��      ��                 ����                        ��ZU%�& ��ઉ�                                               ./file0                                                         ./file0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       
[ 1080.870184][T17900] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:0000:0000 with DS=0x85
[ 1081.320120][T14810] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1081.346222][T14810] usb 4-1: Please update to version 0.2 or newer
[ 1081.481306][T14810] usb 4-1: USB disconnect, device number 110
[ 1081.804737][T17911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'.
[ 1081.895831][ T5906] usb 2-1: USB disconnect, device number 106
[ 1082.122642][T17921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2610'.
[ 1082.898046][T17933] netlink: 'syz.4.2613': attribute type 4 has an invalid length.
[ 1084.053630][T17951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1084.885085][T17958] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1085.909710][T17964] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1086.385840][T17975] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1086.659211][T17976] netlink: 'syz.3.2622': attribute type 4 has an invalid length.
[ 1086.670414][T17976] netlink: 'syz.3.2622': attribute type 4 has an invalid length.
[ 1086.708939][T17977] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1088.612898][T18010] netlink: 'syz.1.2627': attribute type 4 has an invalid length.
[ 1088.708417][T18014] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1089.385149][T18028] netlink: 'syz.0.2630': attribute type 4 has an invalid length.
[ 1089.461168][T18030] netlink: 'syz.3.2631': attribute type 4 has an invalid length.
[ 1089.749471][T18038] netlink: 'syz.2.2633': attribute type 4 has an invalid length.
[ 1091.346459][T18063] netlink: 'syz.0.2641': attribute type 21 has an invalid length.
[ 1091.355146][T18064] netlink: 'syz.2.2640': attribute type 29 has an invalid length.
[ 1091.579397][T18063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2641'.
[ 1091.647188][T18064] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2640'.
[ 1092.102304][T18073] netlink: 'syz.3.2643': attribute type 10 has an invalid length.
[ 1092.126813][T18073] bond0: (slave dummy0): Releasing backup interface
[ 1092.153280][T18074] netlink: 'syz.3.2643': attribute type 10 has an invalid length.
[ 1092.194122][T18073] team0: Port device dummy0 added
[ 1092.241195][T18074] team0: Port device dummy0 removed
[ 1092.278756][T18074] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1092.657114][T18084] VFS: Mount too revealing
[ 1092.785454][T18090] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1092.795041][T18090] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1115.830866][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.837187][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.260546][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.266866][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.701569][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.708976][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1252.544959][T18117] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2655'.
[ 1252.588849][T18117] syzkaller0: entered promiscuous mode
[ 1252.594450][T18117] syzkaller0: entered allmulticast mode
[ 1252.745103][  T929] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1252.770145][T14810] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1252.974550][T14810] usb 1-1: Using ep0 maxpacket: 8
[ 1252.979744][  T929] usb 2-1: Using ep0 maxpacket: 8
[ 1253.009969][T14810] usb 1-1: config 0 has an invalid interface number: 250 but max is 0
[ 1253.024829][  T929] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1253.043597][T14810] usb 1-1: config 0 has no interface number 0
[ 1253.062475][  T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1253.092930][T14810] usb 1-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10
[ 1253.114596][T14810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.129433][  T929] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1253.157038][T14810] usb 1-1: Product: syz
[ 1253.161583][  T929] pvrusb2: **********
[ 1253.165576][  T929] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1253.179509][T14810] usb 1-1: Manufacturer: syz
[ 1253.184146][T14810] usb 1-1: SerialNumber: syz
[ 1253.200676][  T929] pvrusb2: Important functionality might not be entirely working.
[ 1253.229943][T14810] usb 1-1: config 0 descriptor??
[ 1253.234940][  T929] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1253.261192][T14810] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614
[ 1253.268456][  T929] pvrusb2: **********
[ 1253.371644][T18110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1253.380538][T18110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1253.417965][ T2343] pvrusb2: Invalid write control endpoint
[ 1253.513931][T14810] gspca_sn9c20x: Write register 1000 failed -71
[ 1253.547594][T14810] gspca_sn9c20x: Device initialization failed
[ 1253.559028][T14810] gspca_sn9c20x 1-1:0.250: probe with driver gspca_sn9c20x failed with error -71
[ 1253.589052][T14810] usb 1-1: USB disconnect, device number 102
[ 1253.608048][ T2343] pvrusb2: Invalid write control endpoint
[ 1253.634099][  T929] usb 2-1: USB disconnect, device number 107
[ 1253.652846][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1253.679196][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1253.717294][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1253.747434][ T2343] pvrusb2: Device being rendered inoperable
[ 1253.767043][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 1253.796455][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 1253.833976][ T2343] pvrusb2: Attached sub-driver cx25840
[ 1253.843243][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1253.863633][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1253.873923][T18134] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[ 1254.370390][  T929] usb 4-1: new full-speed USB device number 111 using dummy_hcd
[ 1254.540169][  T929] usb 4-1: not running at top speed; connect to a high speed hub
[ 1254.565261][  T929] usb 4-1: config 95 has an invalid interface number: 1 but max is 0
[ 1254.580852][  T929] usb 4-1: config 95 has no interface number 0
[ 1254.595678][  T929] usb 4-1: config 95 interface 1 has no altsetting 0
[ 1254.619559][  T929] usb 4-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[ 1254.628883][  T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1254.636999][  T929] usb 4-1: Product: 멧㎱훐姛ᐞ鷚泴腉俇쥏
[ 1254.651965][  T929] usb 4-1: Manufacturer: 
[ 1254.663590][  T929] usb 4-1: SerialNumber: syz
[ 1254.761654][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'.
[ 1255.619267][  T929] usb 4-1: USB disconnect, device number 111
[ 1255.665231][T18113] udevd[18113]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1255.726780][T18159] netlink: 'syz.4.2664': attribute type 4 has an invalid length.
[ 1255.826611][T18162] netlink: 'syz.4.2664': attribute type 4 has an invalid length.
[ 1256.241655][T18167] netlink: 'syz.3.2666': attribute type 10 has an invalid length.
[ 1256.469195][T18172] netlink: 'syz.3.2666': attribute type 10 has an invalid length.
[ 1256.506194][T18167] bond0: (slave dummy0): Releasing backup interface
[ 1256.779746][T18167] team0: Port device dummy0 added
[ 1256.867067][T18172] team0: Port device dummy0 removed
[ 1256.875058][T18172] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1257.726413][  T929] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1257.868755][T14810] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1257.969597][  T929] usb 5-1: config 171 has an invalid interface number: 109 but max is 0
[ 1257.978480][  T929] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1258.014071][  T929] usb 5-1: config 171 has no interface number 0
[ 1258.030478][T14810] usb 1-1: config 171 has an invalid interface number: 109 but max is 0
[ 1258.039170][T14810] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1258.050236][  T929] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1258.062654][T14810] usb 1-1: config 171 has no interface number 0
[ 1258.069015][  T929] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1258.080518][T14810] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1258.102937][T14810] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1258.114351][  T929] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1258.137247][T14810] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1258.153950][T18209] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1258.265130][T11049] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1258.469550][  T929] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1258.529892][  T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.539787][  T929] usb 5-1: Product: syz
[ 1258.557344][T14810] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1258.569857][T14810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.617532][T11049] usb 2-1: Using ep0 maxpacket: 32
[ 1258.624223][  T929] usb 5-1: Manufacturer: syz
[ 1258.628957][T14810] usb 1-1: Product: syz
[ 1258.637178][T11049] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 1258.646181][T14810] usb 1-1: Manufacturer: syz
[ 1258.650894][  T929] usb 5-1: SerialNumber: syz
[ 1258.669019][T14810] usb 1-1: SerialNumber: syz
[ 1258.674659][T11049] usb 2-1: config 0 has no interface number 0
[ 1258.681141][T18186] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1258.698262][T11049] usb 2-1: config 0 interface 196 has no altsetting 0
[ 1258.705573][T18196] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1258.732475][T11049] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1258.761272][T11049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.777773][T11049] usb 2-1: Product: syz
[ 1258.814994][T11049] usb 2-1: Manufacturer: syz
[ 1258.827615][T11049] usb 2-1: SerialNumber: syz
[ 1258.859238][T11049] usb 2-1: config 0 descriptor??
[ 1259.200786][T18186] netlink: 'syz.4.2670': attribute type 21 has an invalid length.
[ 1259.237613][T18186] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2670'.
[ 1259.257982][  T929] ath6kl: Failed to submit usb control message: -71
[ 1259.280278][  T929] ath6kl: unable to send the bmi data to the device: -71
[ 1259.307433][  T929] ath6kl: Unable to send get target info: -71
[ 1259.327858][  T929] ath6kl: Failed to init ath6kl core: -71
[ 1259.336305][  T929] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71
[ 1259.402756][  T929] usb 5-1: USB disconnect, device number 118
[ 1259.515284][T18196] netlink: 'syz.0.2673': attribute type 21 has an invalid length.
[ 1259.527746][T18196] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2673'.
[ 1259.551016][T14810] ath6kl: Failed to submit usb control message: -71
[ 1259.559377][T14810] ath6kl: unable to send the bmi data to the device: -71
[ 1259.566592][T14810] ath6kl: Unable to send get target info: -71
[ 1259.584269][T14810] ath6kl: Failed to init ath6kl core: -71
[ 1259.614856][T14810] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -71
[ 1259.639691][T14810] usb 1-1: USB disconnect, device number 103
[ 1259.748150][T11049] ipheth 2-1:0.196: Unable to find endpoints
[ 1259.771232][T11049] usb 2-1: USB disconnect, device number 108
[ 1260.217550][T11049] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1260.241958][T18237] FAULT_INJECTION: forcing a failure.
[ 1260.241958][T18237] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1260.255462][T18237] CPU: 0 UID: 0 PID: 18237 Comm: syz.4.2682 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1260.255492][T18237] Tainted: [L]=SOFTLOCKUP
[ 1260.255499][T18237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1260.255511][T18237] Call Trace:
[ 1260.255520][T18237]  <TASK>
[ 1260.255530][T18237]  dump_stack_lvl+0xe8/0x150
[ 1260.255561][T18237]  should_fail_ex+0x412/0x560
[ 1260.255589][T18237]  _copy_from_user+0x2d/0xb0
[ 1260.255617][T18237]  tls_setsockopt+0x678/0x15c0
[ 1260.255650][T18237]  ? __pfx_tls_setsockopt+0x10/0x10
[ 1260.255679][T18237]  ? __fget_files+0x2a/0x420
[ 1260.255702][T18237]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1260.255721][T18237]  ? sock_common_setsockopt+0x36/0xc0
[ 1260.255739][T18237]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1260.255758][T18237]  do_sock_setsockopt+0x17c/0x1b0
[ 1260.255783][T18237]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1260.255808][T18237]  do_syscall_64+0x14d/0xf80
[ 1260.255829][T18237]  ? trace_irq_disable+0x3b/0x150
[ 1260.255851][T18237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1260.255867][T18237]  ? clear_bhb_loop+0x40/0x90
[ 1260.255886][T18237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1260.255902][T18237] RIP: 0033:0x7f7afa19c629
[ 1260.255918][T18237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1260.255932][T18237] RSP: 002b:00007f7af83f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1260.255950][T18237] RAX: ffffffffffffffda RBX: 00007f7afa416180 RCX: 00007f7afa19c629
[ 1260.255962][T18237] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a
[ 1260.255972][T18237] RBP: 00007f7af83f6090 R08: 0000000000000028 R09: 0000000000000000
[ 1260.255982][T18237] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[ 1260.255992][T18237] R13: 00007f7afa416218 R14: 00007f7afa416180 R15: 00007f7afa53fa48
[ 1260.256015][T18237]  </TASK>
[ 1260.643701][T11049] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1260.663183][T11049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1260.754553][T11049] usb 2-1: config 0 descriptor??
[ 1261.858044][T15292] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1261.859491][T11049] usb 2-1: Cannot set autoneg
[ 1261.887797][T11049] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32
[ 1262.080165][T15292] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[ 1262.092186][T15292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[ 1262.116042][T15292] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[ 1262.140992][T15292] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1262.155338][T15292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1262.163942][T15292] usb 4-1: Product: syz
[ 1262.168465][T15292] usb 4-1: Manufacturer: syz
[ 1262.173074][T15292] usb 4-1: SerialNumber: syz
[ 1262.177628][T11049] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1262.188975][T15292] usb 4-1: config 0 descriptor??
[ 1262.205770][T18259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1262.337560][ T5939] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[ 1262.349705][T11049] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1262.360984][T11049] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82
[ 1262.371315][T11049] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.384220][T11049] usb 1-1: config 0 descriptor??
[ 1262.394163][T11049] smsusb:smsusb_probe: board id=8, interface number 0
[ 1262.402500][T11049] smsusb:smsusb_probe: Device initialized with return code -19
[ 1262.466947][T18259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2687'.
[ 1262.480411][T18259] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1262.503851][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1262.527674][ T5939] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1262.548903][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1262.600880][ T5939] usb 3-1: config 0 descriptor??
[ 1262.750679][T18275] tipc: Started in network mode
[ 1262.759545][   T30] kauditd_printk_skb: 43 callbacks suppressed
[ 1262.759559][   T30] audit: type=1326 audit(1771985835.316:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c30b9c629 code=0x7ffc0000
[ 1262.791553][   T30] audit: type=1326 audit(1771985835.316:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c30b9c629 code=0x7ffc0000
[ 1262.801552][T18275] tipc: Node identity 7f000001, cluster identity 4711
[ 1262.823863][T18275] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1262.832735][   T30] audit: type=1326 audit(1771985835.316:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c30b9c629 code=0x7ffc0000
[ 1262.856714][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2691'.
[ 1262.907223][T18270] bond_slave_0: entered promiscuous mode
[ 1262.912978][T18270] bond_slave_1: entered promiscuous mode
[ 1262.920366][T18270] macvtap4: entered promiscuous mode
[ 1262.926230][T18270] bond0: entered promiscuous mode
[ 1262.931983][T18270] macvtap4: entered allmulticast mode
[ 1262.940463][T18270] bond0: entered allmulticast mode
[ 1262.940515][   T30] audit: type=1326 audit(1771985835.316:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c30b9c629 code=0x7ffc0000
[ 1262.945807][T18270] bond_slave_0: entered allmulticast mode
[ 1262.974194][T18270] bond_slave_1: entered allmulticast mode
[ 1262.994633][   T30] audit: type=1326 audit(1771985835.316:7053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c30b9c629 code=0x7ffc0000
[ 1263.046211][   T30] audit: type=1326 audit(1771985835.316:7054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c30b9dec7 code=0x7ffc0000
[ 1263.074100][T18270] 8021q: adding VLAN 0 to HW filter on device macvtap4
[ 1263.087664][   T30] audit: type=1326 audit(1771985835.316:7055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6c30b5cece code=0x7ffc0000
[ 1263.133711][T18279] bond0: left allmulticast mode
[ 1263.143209][   T30] audit: type=1326 audit(1771985835.316:7056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6c30b5cece code=0x7ffc0000
[ 1263.181078][T18279] bond_slave_0: left allmulticast mode
[ 1263.199509][T18279] bond_slave_1: left allmulticast mode
[ 1263.214214][T18279] bond0: left promiscuous mode
[ 1263.226583][T18279] bond_slave_0: left promiscuous mode
[ 1263.232133][T18279] bond_slave_1: left promiscuous mode
[ 1263.241504][   T30] audit: type=1326 audit(1771985835.316:7057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6c30b5cece code=0x7ffc0000
[ 1263.280916][T18281] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1263.296262][T18281] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1263.317657][   T30] audit: type=1326 audit(1771985835.316:7058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18265 comm="syz.0.2689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6c30b5cece code=0x7ffc0000
[ 1263.342644][ T5939] usbhid 3-1:0.0: can't add hid device: -71
[ 1263.355725][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1263.401187][ T5939] usb 3-1: USB disconnect, device number 100
[ 1263.767529][ T5939] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1263.936820][ T5939] usb 5-1: config 171 has an invalid interface number: 109 but max is 0
[ 1263.945937][ T5939] usb 5-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[ 1263.970967][ T5939] usb 5-1: config 171 has no interface number 0
[ 1263.982855][ T5939] usb 5-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[ 1264.034626][ T5939] usb 5-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 12032, setting to 64
[ 1264.053683][ T5939] usb 5-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[ 1264.073605][ T5939] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[ 1264.084051][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.092722][ T5939] usb 5-1: Product: syz
[ 1264.097248][ T5939] usb 5-1: Manufacturer: syz
[ 1264.114325][ T5906] usb 2-1: USB disconnect, device number 109
[ 1264.131504][ T5939] usb 5-1: SerialNumber: syz
[ 1264.283335][T18286] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1264.789083][T18286] netlink: 'syz.4.2693': attribute type 21 has an invalid length.
[ 1264.802740][T18286] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2693'.
[ 1264.818497][ T5939] ath6kl: Failed to submit usb control message: -71
[ 1264.826261][ T5939] ath6kl: unable to send the bmi data to the device: -71
[ 1264.851142][ T5939] ath6kl: Unable to send get target info: -71
[ 1264.861718][ T5906] usb 4-1: USB disconnect, device number 112
[ 1264.924925][ T5939] ath6kl: Failed to init ath6kl core: -71
[ 1264.940489][ T5939] ath6kl_usb 5-1:171.109: probe with driver ath6kl_usb failed with error -71
[ 1264.989436][ T5939] usb 5-1: USB disconnect, device number 119
[ 1265.032033][T11049] usb 1-1: USB disconnect, device number 104
[ 1265.334254][T18315] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1265.517504][T14810] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1265.723258][T14810] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1265.734923][T14810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1265.756795][T14810] usb 2-1: config 0 descriptor??
[ 1265.904660][T18330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'.
[ 1265.917493][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'.
[ 1265.926591][T18329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'.
[ 1265.967556][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2706'.
[ 1266.868398][T14810] ath6kl: Failed to submit usb control message: -110
[ 1266.888584][T14810] ath6kl: unable to send the bmi data to the device: -110
[ 1266.909753][T14810] ath6kl: Unable to send get target info: -110
[ 1266.943199][T14810] ath6kl: Failed to init ath6kl core: -110
[ 1266.956535][T14810] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1267.419994][T18351] FAULT_INJECTION: forcing a failure.
[ 1267.419994][T18351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1267.435556][T18351] CPU: 0 UID: 0 PID: 18351 Comm: syz.2.2711 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1267.435586][T18351] Tainted: [L]=SOFTLOCKUP
[ 1267.435593][T18351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1267.435612][T18351] Call Trace:
[ 1267.435621][T18351]  <TASK>
[ 1267.435630][T18351]  dump_stack_lvl+0xe8/0x150
[ 1267.435661][T18351]  should_fail_ex+0x412/0x560
[ 1267.435689][T18351]  _copy_from_user+0x2d/0xb0
[ 1267.435716][T18351]  copy_from_sockptr_offset+0x66/0xa0
[ 1267.435745][T18351]  tls_setsockopt+0xd2c/0x15c0
[ 1267.435778][T18351]  ? __pfx_tls_setsockopt+0x10/0x10
[ 1267.435812][T18351]  ? __fget_files+0x2a/0x420
[ 1267.435836][T18351]  ? aa_sock_opt_perm+0xff/0x1a0
[ 1267.435861][T18351]  ? sock_common_setsockopt+0x36/0xc0
[ 1267.435883][T18351]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1267.435906][T18351]  do_sock_setsockopt+0x17c/0x1b0
[ 1267.435935][T18351]  __x64_sys_setsockopt+0x13d/0x1b0
[ 1267.435964][T18351]  do_syscall_64+0x14d/0xf80
[ 1267.435986][T18351]  ? trace_irq_disable+0x3b/0x150
[ 1267.436008][T18351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.436024][T18351]  ? clear_bhb_loop+0x40/0x90
[ 1267.436043][T18351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1267.436059][T18351] RIP: 0033:0x7f734cd9c629
[ 1267.436074][T18351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1267.436089][T18351] RSP: 002b:00007f734dc3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1267.436105][T18351] RAX: ffffffffffffffda RBX: 00007f734d016180 RCX: 00007f734cd9c629
[ 1267.436117][T18351] RDX: 0000000000000001 RSI: 000000000000011a RDI: 000000000000000a
[ 1267.436127][T18351] RBP: 00007f734dc3c090 R08: 0000000000000028 R09: 0000000000000000
[ 1267.436137][T18351] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001
[ 1267.436147][T18351] R13: 00007f734d016218 R14: 00007f734d016180 R15: 00007f734d13fa48
[ 1267.436170][T18351]  </TASK>
[ 1267.914858][T18356] netlink: 'syz.4.2713': attribute type 4 has an invalid length.
[ 1267.974955][T18359] netlink: 'syz.4.2713': attribute type 4 has an invalid length.
[ 1268.197336][ T5906] usb 2-1: USB disconnect, device number 110
[ 1268.294960][T18364] netlink: 'syz.3.2715': attribute type 1 has an invalid length.
[ 1268.314342][T18364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1269.157685][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1269.157702][   T30] audit: type=1326 audit(1771985841.726:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1269.214265][   T30] audit: type=1326 audit(1771985841.726:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1269.238460][   T30] audit: type=1326 audit(1771985841.766:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1269.285255][T18371] syzkaller0: entered promiscuous mode
[ 1269.299682][T18371] syzkaller0: entered allmulticast mode
[ 1269.348328][   T30] audit: type=1326 audit(1771985841.766:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1269.727453][ T5906] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1269.844761][T18384] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1269.997456][ T5906] usb 4-1: device descriptor read/64, error -71
[ 1270.006855][   T30] audit: type=1326 audit(1771985841.766:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.097660][   T30] audit: type=1326 audit(1771985841.786:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.289179][   T30] audit: type=1326 audit(1771985841.786:7076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.311850][ T5906] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1270.462907][ T5906] usb 4-1: device descriptor read/64, error -71
[ 1270.469286][   T30] audit: type=1326 audit(1771985841.786:7077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.497612][   T30] audit: type=1326 audit(1771985841.816:7078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.520500][   T30] audit: type=1326 audit(1771985841.816:7079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18370 comm="syz.4.2719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afa19c629 code=0x7ffc0000
[ 1270.547513][  T929] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1270.597776][ T5906] usb usb4-port1: attempt power cycle
[ 1270.739783][  T929] usb 1-1: Using ep0 maxpacket: 8
[ 1270.761973][  T929] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.773618][  T929] usb 1-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1270.796909][  T929] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1270.824600][  T929] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1270.833928][  T929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.865935][  T929] usb 1-1: config 0 descriptor??
[ 1270.948891][ T5906] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1270.968430][ T5906] usb 4-1: device descriptor read/8, error -71
[ 1271.040145][T18397] binder: 18395:18397 unknown command 2717917200
[ 1271.046886][T18397] binder: 18395:18397 ioctl c0306201 200000000780 returned -22
[ 1271.207480][ T5906] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1271.228137][ T5906] usb 4-1: device descriptor read/8, error -71
[ 1271.301198][  T929] usbhid 1-1:0.0: can't add hid device: -71
[ 1271.319814][  T929] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1271.331063][  T929] usb 1-1: USB disconnect, device number 105
[ 1271.339829][ T5906] usb usb4-port1: unable to enumerate USB device
[ 1271.372122][T18405] netlink: 'syz.1.2729': attribute type 4 has an invalid length.
[ 1271.381226][T18405] netlink: 'syz.1.2729': attribute type 4 has an invalid length.
[ 1271.579697][T18409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2730'.
[ 1271.863577][T18412] syzkaller1: entered promiscuous mode
[ 1271.869456][T18412] syzkaller1: entered allmulticast mode
[ 1272.423739][  T929] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1272.577481][  T929] usb 5-1: Using ep0 maxpacket: 32
[ 1272.584223][  T929] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[ 1272.592757][  T929] usb 5-1: config 0 has no interface number 0
[ 1272.598914][  T929] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[ 1272.613469][  T929] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[ 1272.623344][  T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1272.631604][  T929] usb 5-1: Product: syz
[ 1272.635870][  T929] usb 5-1: Manufacturer: syz
[ 1272.640599][  T929] usb 5-1: SerialNumber: syz
[ 1272.648348][  T929] usb 5-1: config 0 descriptor??
[ 1272.654770][T18420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1272.757464][ T5906] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1272.817515][T11049] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1272.914553][T18420] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1272.922986][T18434] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[ 1272.929942][T18434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1272.942663][T18434] vhci_hcd vhci_hcd.0: Device attached
[ 1272.948499][ T5906] usb 2-1: Using ep0 maxpacket: 32
[ 1272.956598][ T5906] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[ 1272.966502][T18434] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12)
[ 1272.973227][T18434] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1272.982104][T11049] usb 4-1: Using ep0 maxpacket: 32
[ 1272.988976][T18434] vhci_hcd vhci_hcd.0: Device attached
[ 1272.994797][T11049] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 1273.005758][T11049] usb 4-1: config 0 has no interface number 0
[ 1273.010779][ T5906] usb 2-1: config 0 has no interface number 0
[ 1273.015319][T18434] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(14)
[ 1273.024513][T18434] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1273.036628][T11049] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1273.038113][ T5906] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1273.047496][T11049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.073063][T18434] vhci_hcd vhci_hcd.0: Device attached
[ 1273.078859][ T5906] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[ 1273.087980][T11049] usb 4-1: Product: syz
[ 1273.088004][T11049] usb 4-1: Manufacturer: syz
[ 1273.088019][T11049] usb 4-1: SerialNumber: syz
[ 1273.098767][T11049] usb 4-1: config 0 descriptor??
[ 1273.110901][T11049] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1273.131603][T18440] vhci_hcd: connection closed
[ 1273.133638][T18438] vhci_hcd: connection closed
[ 1273.140319][   T13] vhci_hcd vhci_hcd.2: stop threads
[ 1273.145052][  T929] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[ 1273.145524][  T929] asix 5-1:0.188: probe with driver asix failed with error -71
[ 1273.157425][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.170660][T18436] vhci_hcd: connection closed
[ 1273.187993][ T5939] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[ 1273.199458][  T929] usb 5-1: USB disconnect, device number 120
[ 1273.200643][   T13] vhci_hcd vhci_hcd.2: release socket
[ 1273.227039][ T5906] usb 2-1: Product: syz
[ 1273.234647][T18437] vhci_hcd: sendmsg failed!, ret=-32 for 48
[ 1273.268123][ T5906] usb 2-1: Manufacturer: syz
[ 1273.275600][   T13] vhci_hcd vhci_hcd.2: disconnect device
[ 1273.291808][ T5906] usb 2-1: SerialNumber: syz
[ 1273.314757][ T5906] usb 2-1: config 0 descriptor??
[ 1273.320000][   T13] vhci_hcd vhci_hcd.2: stop threads
[ 1273.321248][T11049] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1273.325217][   T13] vhci_hcd vhci_hcd.2: release socket
[ 1273.337453][   T13] vhci_hcd vhci_hcd.2: disconnect device
[ 1273.365535][   T13] vhci_hcd vhci_hcd.2: stop threads
[ 1273.375038][ T5906] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[ 1273.407445][   T13] vhci_hcd vhci_hcd.2: release socket
[ 1273.413627][ T5906] em28xx 2-1:0.132: Video interface 132 found:
[ 1273.421831][T11049] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1273.427479][   T13] vhci_hcd vhci_hcd.2: disconnect device
[ 1273.716760][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1273.735688][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1273.774243][ T5906] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[ 1274.073866][ T5906] em28xx 2-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[ 1274.089331][ T5906] em28xx 2-1:0.132: board has no eeprom
[ 1274.187795][ T5906] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[ 1274.196119][ T5906] em28xx 2-1:0.132: analog set to bulk mode.
[ 1274.205524][T15292] em28xx 2-1:0.132: Registering V4L2 extension
[ 1274.451256][T15292] em28xx 2-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[ 1274.751954][  T929] usb 2-1: USB disconnect, device number 111
[ 1274.757482][T15292] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[ 1274.759731][  T929] em28xx 2-1:0.132: Disconnecting em28xx
[ 1274.889007][T18471] netlink: 'syz.0.2746': attribute type 4 has an invalid length.
[ 1274.897743][T18471] netlink: 'syz.0.2746': attribute type 4 has an invalid length.
[ 1275.554997][T15292] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[ 1275.585736][T15292] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[ 1275.620088][T15292] em28xx 2-1:0.132: No AC97 audio processor
[ 1275.762786][T15292] usb 2-1: Decoder not found
[ 1275.780725][T15292] em28xx 2-1:0.132: failed to create media graph
[ 1275.789829][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1275.798525][T14810] usb 4-1: USB disconnect, device number 117
[ 1275.820294][T14810] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1275.869145][T14810] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1275.883971][T15292] em28xx 2-1:0.132: V4L2 device video103 deregistered
[ 1275.943157][T14810] quatech2 4-1:0.51: device disconnected
[ 1276.023936][T15292] em28xx 2-1:0.132: Remote control support is not available for this card.
[ 1276.024180][T18477] ==================================================================
[ 1276.040703][T18477] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[ 1276.048083][T18477] Read of size 8 at addr ffff88803c6d0748 by task v4l_id/18477
[ 1276.055605][T18477] 
[ 1276.057942][T18477] CPU: 0 UID: 0 PID: 18477 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1276.057958][T18477] Tainted: [L]=SOFTLOCKUP
[ 1276.057962][T18477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1276.057969][T18477] Call Trace:
[ 1276.057975][T18477]  <TASK>
[ 1276.057981][T18477]  dump_stack_lvl+0xe8/0x150
[ 1276.057998][T18477]  print_report+0xba/0x230
[ 1276.058011][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1276.058022][T18477]  kasan_report+0x117/0x150
[ 1276.058035][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1276.058045][T18477]  v4l2_fh_open+0xac/0x420
[ 1276.058055][T18477]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1276.058073][T18477]  em28xx_v4l2_open+0x157/0x9a0
[ 1276.058088][T18477]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1276.058100][T18477]  v4l2_open+0x1bf/0x3a0
[ 1276.058111][T18477]  chrdev_open+0x4cd/0x5e0
[ 1276.058123][T18477]  ? __pfx_chrdev_open+0x10/0x10
[ 1276.058134][T18477]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 1276.058152][T18477]  ? __pfx_chrdev_open+0x10/0x10
[ 1276.058162][T18477]  do_dentry_open+0x785/0x14e0
[ 1276.058179][T18477]  vfs_open+0x3b/0x340
[ 1276.058191][T18477]  ? path_openat+0x2df0/0x3860
[ 1276.058202][T18477]  path_openat+0x2e08/0x3860
[ 1276.058215][T18477]  ? __pfx_stack_trace_save+0x10/0x10
[ 1276.058226][T18477]  ? stack_depot_save_flags+0x33/0x810
[ 1276.058240][T18477]  ? __pfx_path_openat+0x10/0x10
[ 1276.058249][T18477]  ? __x64_sys_openat+0x138/0x170
[ 1276.058263][T18477]  ? do_syscall_64+0x14d/0xf80
[ 1276.058278][T18477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.058290][T18477]  ? __lock_acquire+0x6b5/0x2cf0
[ 1276.058304][T18477]  do_file_open+0x23e/0x4a0
[ 1276.058315][T18477]  ? __pfx_do_file_open+0x10/0x10
[ 1276.058328][T18477]  ? _raw_spin_unlock+0x28/0x50
[ 1276.058341][T18477]  ? alloc_fd+0x64b/0x6c0
[ 1276.058356][T18477]  do_sys_openat2+0x113/0x200
[ 1276.058370][T18477]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1276.058383][T18477]  ? exc_page_fault+0x6a/0xc0
[ 1276.058398][T18477]  ? do_user_addr_fault+0xc6f/0x1340
[ 1276.058413][T18477]  __x64_sys_openat+0x138/0x170
[ 1276.058434][T18477]  do_syscall_64+0x14d/0xf80
[ 1276.058449][T18477]  ? trace_irq_disable+0x3b/0x150
[ 1276.058464][T18477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.058474][T18477]  ? clear_bhb_loop+0x40/0x90
[ 1276.058485][T18477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.058495][T18477] RIP: 0033:0x7f12abea7407
[ 1276.058506][T18477] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1276.058516][T18477] RSP: 002b:00007ffe0c3c6d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1276.058529][T18477] RAX: ffffffffffffffda RBX: 00007f12ac5e9880 RCX: 00007f12abea7407
[ 1276.058537][T18477] RDX: 0000000000000000 RSI: 00007ffe0c3c7f1a RDI: ffffffffffffff9c
[ 1276.058544][T18477] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1276.058551][T18477] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1276.058558][T18477] R13: 00007ffe0c3c6f80 R14: 00007f12ac750000 R15: 0000555a928a14d8
[ 1276.058569][T18477]  </TASK>
[ 1276.058572][T18477] 
[ 1276.358045][T18477] Allocated by task 15292:
[ 1276.362434][T18477]  kasan_save_track+0x3e/0x80
[ 1276.367092][T18477]  __kasan_kmalloc+0x93/0xb0
[ 1276.371658][T18477]  __kmalloc_cache_noprof+0x31c/0x660
[ 1276.377007][T18477]  em28xx_v4l2_init+0x10b/0x2e70
[ 1276.381924][T18477]  em28xx_init_extension+0x120/0x1c0
[ 1276.387187][T18477]  process_scheduled_works+0xb02/0x1830
[ 1276.392721][T18477]  worker_thread+0xa50/0xfc0
[ 1276.397289][T18477]  kthread+0x388/0x470
[ 1276.401331][T18477]  ret_from_fork+0x51e/0xb90
[ 1276.405897][T18477]  ret_from_fork_asm+0x1a/0x30
[ 1276.410641][T18477] 
[ 1276.412941][T18477] Freed by task 15292:
[ 1276.416982][T18477]  kasan_save_track+0x3e/0x80
[ 1276.421633][T18477]  kasan_save_free_info+0x46/0x50
[ 1276.426646][T18477]  __kasan_slab_free+0x5c/0x80
[ 1276.431385][T18477]  kfree+0x1c1/0x630
[ 1276.435261][T18477]  em28xx_v4l2_init+0x1683/0x2e70
[ 1276.440262][T18477]  em28xx_init_extension+0x120/0x1c0
[ 1276.445554][T18477]  process_scheduled_works+0xb02/0x1830
[ 1276.451078][T18477]  worker_thread+0xa50/0xfc0
[ 1276.455645][T18477]  kthread+0x388/0x470
[ 1276.459687][T18477]  ret_from_fork+0x51e/0xb90
[ 1276.464256][T18477]  ret_from_fork_asm+0x1a/0x30
[ 1276.469007][T18477] 
[ 1276.471394][T18477] The buggy address belongs to the object at ffff88803c6d0000
[ 1276.471394][T18477]  which belongs to the cache kmalloc-8k of size 8192
[ 1276.485422][T18477] The buggy address is located 1864 bytes inside of
[ 1276.485422][T18477]  freed 8192-byte region [ffff88803c6d0000, ffff88803c6d2000)
[ 1276.499375][T18477] 
[ 1276.501684][T18477] The buggy address belongs to the physical page:
[ 1276.508081][T18477] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803c6d4000 pfn:0x3c6d0
[ 1276.518126][T18477] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1276.526604][T18477] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1276.535086][T18477] page_type: f5(slab)
[ 1276.539131][T18477] raw: 00fff00000000240 ffff88813fea9280 ffffea00019d1c10 ffff88813fea3ac8
[ 1276.547690][T18477] raw: ffff88803c6d4000 0000000000020001 00000000f5000000 0000000000000000
[ 1276.556268][T18477] head: 00fff00000000240 ffff88813fea9280 ffffea00019d1c10 ffff88813fea3ac8
[ 1276.564914][T18477] head: ffff88803c6d4000 0000000000020001 00000000f5000000 0000000000000000
[ 1276.573562][T18477] head: 00fff00000000003 ffffea0000f1b401 00000000ffffffff 00000000ffffffff
[ 1276.582211][T18477] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1276.590868][T18477] page dumped because: kasan: bad access detected
[ 1276.597257][T18477] page_owner tracks the page as allocated
[ 1276.602944][T18477] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15292, tgid 15292 (kworker/1:1), ts 1274212349182, free_ts 1274071303553
[ 1276.626106][T18477]  post_alloc_hook+0x231/0x280
[ 1276.630856][T18477]  get_page_from_freelist+0x24dc/0x2580
[ 1276.636388][T18477]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 1276.642173][T18477]  allocate_slab+0x77/0x660
[ 1276.646658][T18477]  refill_objects+0x331/0x3c0
[ 1276.651312][T18477]  __pcs_replace_empty_main+0x2b9/0x620
[ 1276.656835][T18477]  __kmalloc_cache_noprof+0x392/0x660
[ 1276.662182][T18477]  em28xx_v4l2_init+0x10b/0x2e70
[ 1276.667098][T18477]  em28xx_init_extension+0x120/0x1c0
[ 1276.672359][T18477]  process_scheduled_works+0xb02/0x1830
[ 1276.677886][T18477]  worker_thread+0xa50/0xfc0
[ 1276.682454][T18477]  kthread+0x388/0x470
[ 1276.686495][T18477]  ret_from_fork+0x51e/0xb90
[ 1276.691064][T18477]  ret_from_fork_asm+0x1a/0x30
[ 1276.695811][T18477] page last free pid 18429 tgid 18428 stack trace:
[ 1276.702285][T18477]  __free_frozen_pages+0xc2b/0xdb0
[ 1276.707378][T18477]  __slab_free+0x263/0x2b0
[ 1276.711797][T18477]  qlist_free_all+0x97/0x100
[ 1276.716363][T18477]  kasan_quarantine_reduce+0x148/0x160
[ 1276.721810][T18477]  __kasan_slab_alloc+0x22/0x80
[ 1276.726658][T18477]  __kmalloc_noprof+0x316/0x760
[ 1276.731573][T18477]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1276.737102][T18477]  tomoyo_path_number_perm+0x246/0x630
[ 1276.742537][T18477]  security_file_ioctl+0xc3/0x2a0
[ 1276.747556][T18477]  __se_sys_ioctl+0x47/0x170
[ 1276.752120][T18477]  do_syscall_64+0x14d/0xf80
[ 1276.756688][T18477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1276.762560][T18477] 
[ 1276.764859][T18477] Memory state around the buggy address:
[ 1276.770465][T18477]  ffff88803c6d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.778513][T18477]  ffff88803c6d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.786553][T18477] >ffff88803c6d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.794594][T18477]                                               ^
[ 1276.800984][T18477]  ffff88803c6d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.809020][T18477]  ffff88803c6d0800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1276.817053][T18477] ==================================================================
[ 1276.936415][  T929] em28xx 2-1:0.132: Closing input extension
[ 1277.100837][T18477] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1277.108088][T18477] CPU: 0 UID: 0 PID: 18477 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1277.119035][T18477] Tainted: [L]=SOFTLOCKUP
[ 1277.123376][T18477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1277.133439][T18477] Call Trace:
[ 1277.136729][T18477]  <TASK>
[ 1277.139665][T18477]  vpanic+0x56c/0xa60
[ 1277.143642][T18477]  ? __pfx_vpanic+0x10/0x10
[ 1277.148130][T18477]  panic+0xc5/0xd0
[ 1277.151856][T18477]  ? __pfx_panic+0x10/0x10
[ 1277.156265][T18477]  ? preempt_schedule_thunk+0x16/0x30
[ 1277.161619][T18477]  ? preempt_schedule_thunk+0x16/0x30
[ 1277.166974][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1277.171562][T18477]  check_panic_on_warn+0x89/0xb0
[ 1277.176477][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1277.181040][T18477]  end_report+0x73/0x180
[ 1277.185260][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1277.189824][T18477]  kasan_report+0x128/0x150
[ 1277.194304][T18477]  ? v4l2_fh_open+0xac/0x420
[ 1277.198871][T18477]  v4l2_fh_open+0xac/0x420
[ 1277.203272][T18477]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1277.209236][T18477]  em28xx_v4l2_open+0x157/0x9a0
[ 1277.214069][T18477]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1277.219074][T18477]  v4l2_open+0x1bf/0x3a0
[ 1277.223295][T18477]  chrdev_open+0x4cd/0x5e0
[ 1277.227701][T18477]  ? __pfx_chrdev_open+0x10/0x10
[ 1277.232613][T18477]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[ 1277.238927][T18477]  ? __pfx_chrdev_open+0x10/0x10
[ 1277.243839][T18477]  do_dentry_open+0x785/0x14e0
[ 1277.248584][T18477]  vfs_open+0x3b/0x340
[ 1277.252628][T18477]  ? path_openat+0x2df0/0x3860
[ 1277.257371][T18477]  path_openat+0x2e08/0x3860
[ 1277.261957][T18477]  ? __pfx_stack_trace_save+0x10/0x10
[ 1277.267310][T18477]  ? stack_depot_save_flags+0x33/0x810
[ 1277.272753][T18477]  ? __pfx_path_openat+0x10/0x10
[ 1277.277668][T18477]  ? __x64_sys_openat+0x138/0x170
[ 1277.282688][T18477]  ? do_syscall_64+0x14d/0xf80
[ 1277.287432][T18477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.293476][T18477]  ? __lock_acquire+0x6b5/0x2cf0
[ 1277.298393][T18477]  do_file_open+0x23e/0x4a0
[ 1277.302874][T18477]  ? __pfx_do_file_open+0x10/0x10
[ 1277.307878][T18477]  ? _raw_spin_unlock+0x28/0x50
[ 1277.312710][T18477]  ? alloc_fd+0x64b/0x6c0
[ 1277.317104][T18477]  do_sys_openat2+0x113/0x200
[ 1277.321762][T18477]  ? __pfx_do_sys_openat2+0x10/0x10
[ 1277.326944][T18477]  ? exc_page_fault+0x6a/0xc0
[ 1277.331600][T18477]  ? do_user_addr_fault+0xc6f/0x1340
[ 1277.336864][T18477]  __x64_sys_openat+0x138/0x170
[ 1277.341694][T18477]  do_syscall_64+0x14d/0xf80
[ 1277.346263][T18477]  ? trace_irq_disable+0x3b/0x150
[ 1277.351284][T18477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.357328][T18477]  ? clear_bhb_loop+0x40/0x90
[ 1277.361994][T18477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.367866][T18477] RIP: 0033:0x7f12abea7407
[ 1277.372256][T18477] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1277.391838][T18477] RSP: 002b:00007ffe0c3c6d30 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 1277.400231][T18477] RAX: ffffffffffffffda RBX: 00007f12ac5e9880 RCX: 00007f12abea7407
[ 1277.408181][T18477] RDX: 0000000000000000 RSI: 00007ffe0c3c7f1a RDI: ffffffffffffff9c
[ 1277.416133][T18477] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[ 1277.424080][T18477] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[ 1277.432028][T18477] R13: 00007ffe0c3c6f80 R14: 00007f12ac750000 R15: 0000555a928a14d8
[ 1277.439986][T18477]  </TASK>
[ 1277.443372][T18477] Kernel Offset: disabled
[ 1277.447683][T18477] Rebooting in 86400 seconds..