last executing test programs:

18.402574524s ago: executing program 4 (id=4250):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040))
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x169})
mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, 0x0, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2b, 0x3, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x15, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x9}]}, 0x3}, {0x3f, '\x00', @buffer={"9a3cb80ec6afd2756aa0912355555cfcdf6b7f5a7c932626439667640bbe0466", 0x20}, 0xfffffc01}]})
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/100, 0x64}, 0x0, 0x24}}], 0x30, 0x8004}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010100}]}, 0x24}}, 0x0)
r5 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00F'], 0x0, 0x0, 0x0, 0x0}, 0x0)

15.221874956s ago: executing program 4 (id=4256):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x9, 0x72}, 0x2c)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x52, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

15.054705083s ago: executing program 4 (id=4258):
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00031c0000001c0355"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x103)
inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x112)
r2 = syz_open_dev$vcsa(&(0x7f0000000980), 0x7, 0x84041)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc7}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x67, &(0x7f0000000b40)=""/103, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xc, 0x8, 0x14}, 0x10, 0x1ec69, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000c40)=[{0x4, 0x2, 0x0, 0x3}], 0x10, 0x5e}, 0x94)
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r4 = socket(0x10, 0x3, 0x0)
connect$netlink(r4, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x7c}, 0x1, 0x0, 0x0, 0x10010}, 0x0)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0xffffffffffffffff, 0x401, 0x18}, 0xc)
r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
writev(r7, &(0x7f0000000380)=[{&(0x7f0000000400)="8867e877ccd861dbc4ac96fe2951c97bbb02672a0dafe1ecac335719e87b93a2db31d2886ed844ba4a4c8df6441f413402741a38e805f5cd685936f3a05159074fef1aaec79b5f1007ad5da77d9c117746ae2ba939b1b1705a070d3c82d03005e09147a3c9f8b11f", 0x68}, {&(0x7f00000004c0)="ea70918135eaab3a884242c9d1d25114aa96787c02826ef6ca", 0x19}], 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xc, 0x8, &(0x7f0000000880)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x62}, @generic={0xff, 0x7, 0xa, 0xb7}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2c}], &(0x7f00000008c0)='GPL\x00', 0x4, 0x63, &(0x7f0000000900)=""/99, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x0, 0x1, 0x57be}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f0000000dc0)=[r6, 0xffffffffffffffff, r8], &(0x7f0000000e00)=[{0x2, 0x1, 0x3}, {0x0, 0x1, 0xa, 0x9}], 0x10, 0x1}, 0x94)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x20, 0x9, 0x12, "4f9119518768f0bf0102c27b34bd08474faa"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000f00)={0x5, 0x2, 0x9, 0x0, 0xffffffff})
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000140)={0x20, 0x10, 0x87, {0x87, 0x8, "e0250e3f84b6850b03868ae8262806321bd14b803b63b8b7a0385064f4fd76da1efeaa0617e37bd0736fbecc21c781c256f71878208a6cf2fe38c17e16e0e740be5cf1ce9c9046757c6dcbcc4df3b1108f421b064884040cd5de157880b658e4a4df38031b9a812d5d18cc790a1de627468f3300458dd463b8b040d74afe445fb11001562d"}}, &(0x7f0000000040)={0x0, 0x3, 0x59, @string={0x59, 0x3, "4d2a613e6d929e0fefe553f3d95d6cde39bebb7b1af38a1806419ef5e9d093d3d5460547ae8ee000027905bb77bc56586bc818cdaf70036e9e63bdf3b3f6a68cd1cb4f2581a59936a661300fadd173ba51e3490622e1fc"}}, &(0x7f0000000200)={0x0, 0x22, 0x7, {[@global=@item_012={0x2, 0x1, 0x1, "ab3b"}, @local=@item_012={0x0, 0x2, 0x5}, @local=@item_012={0x2, 0x2, 0x8, "9fa4"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x8e1}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x20, 0x17, 0xe1, "630910c5fd38c01c3ecaecff586f20bfdb8ae8b6f240bc6438aeec33f608f22b966e4ad0721e08ee11f21ffc7c87562402453f87b4e17ff585b8bb94d0ba71ed3c8a46800268acfa03be605d2b5f13b4f4b0f4ba467e37be2f14da29cd86214a39f1833b16fa451ccba17268db3f63631e47f94494ff8a16e47176b254031199fc5cec95d2805d6a2ddfdf806c84a8b2af396bc503f04ee271b5b22941feee3dd5dfca3c27961cdba78cb62835e093ccba0faa51c02768abf264f985240faf48121d984c06f4ea450e1bd1a9cb3ddb46eabbf950bf5297394ab6990a5c114090c8"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000580)={0x20, 0x1, 0x98, "3fc7569c6a931e451f46adef1c4d9919a08893b4369d158cad120108d72bcde8161b59f8434939368c8c3367eef37f122afc581355f4242acee51e86038d744c03ab627f797f2e2d97d1d421d04536491085c33e3aed837b0fa0e2bdd6ed8dbf870b81e4ba204d335423545ba13a31b29eb60c9dc14fab2eede0fcf14e487841516aa4c683ec44558c208848c27f22bf0f1596d5da750684"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0xa}})
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r9, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xe256610c620413e9}, 0x600000c0)
open_tree(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x80001)

13.27811078s ago: executing program 2 (id=4262):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad000131001020301090224000100"], 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

11.01406238s ago: executing program 4 (id=4266):
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

10.830613071s ago: executing program 4 (id=4268):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c9"], 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

10.615425589s ago: executing program 4 (id=4270):
unshare(0x22020600)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x20, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001080)={r2, 0x4, 0x30}, 0xc)
openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$RDMA_USER_CM_CMD_NOTIFY(r3, 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

10.614114283s ago: executing program 2 (id=4271):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f440102030109021200"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8000}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0)
r3 = syz_clone(0x9b0400, &(0x7f0000000080)="8403119366bc43700102d6342aababd25d9544960dcf1e735a313e89271f41e98dd2f147f2dcccb78db0f0a911e3ce71e4edef3c2aaf9ed3fdf5fe9cc9070dc8d9988b5b118ca11de66b1335171a931fca37f09b6aae9a88e30e239c8ceaecd9c08cf6c3f5c67a52028411", 0x6b, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="fdf4e8f70dc6fbd8d274c3ba4f359ce6cff72e6d08fa4e2c8bcd1f2114eac518f59a5fff18982e419734ca06de9b2cc65b6cb8754f509c7ca9634504e254212b263d68fdc22f0cf706d7ac")
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, <r4=>0x0}, &(0x7f0000000380)=0xc)
sendmsg$netlink(r2, &(0x7f0000000300)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000640)={0x1344, 0x19, 0x200, 0x70bd2a, 0x25dfdbff, "", [@nested={0x303, 0xe1, 0x0, 0x1, [@nested={0x4, 0x12d}, @generic="49c14818cb99168cf0b712f7dc60f962fe0bf546517d531c3a85013ac5a61250b4c7cccc21ad7148e57d22b4998a6bde7cf5ebd8a691183ae30c698581852bba0e9f402fd4d1328d9a389647458d6343c02168892fe45d69f128925dc03207b7e4361a27fef4e8718bfc51d0404ab98f46dd9fdf418cd3d44c2a7b2544c06f9a3e776eb9186ef7def58fc6dd3e3e6294bc8e57e3d9b021cc5e49b4bb4241e9e5ebe2b4672f64", @generic="4f72a4e312aef3b88c86fb515ffe03fad7ca0ad8458635eb839e07d96cd2e03e76e7d9c9d0d91f2629deb06129746b1201b038ed2963f67138391a79c90cfbaf8a173878c1c74ce1b85cbcced31db074fe7374e3ce928d7bc57ae8e28b499c0724d47f60ced917f64f12c68a4e539186597f81ddeb70458f7cf0908a8d4887dfbbaa4769b8c5117131ea4262dd68abf841769f76ba76b4f05f25d17c9e5b856b0fc3e70aabbf02b2b26a362787faf35662bec87456ed6298e02b600e933eb9f139478965f81f5b0da7b3a741a9abedab49b945f135b640", @typed={0x5b, 0x11a, 0x0, 0x0, @binary="dc0d559a0a4b2961f1c75417d0e9323053cee1299aa2e46d0f861f848cd61c23e777940b70e28e7fde3f6713c1c0c3499c492232f99f2cc108429cb7d4c44d96ce3c5b9e584c4ce6710980c55bbef58a47035e013d3106"}, @generic="d16c845211f11818e2c098e7518206598b4efd3f94fd8f99787cb0ee463368b28e030b5ec684edb0a5bbab6ef6d40f450865ce30bc60352a", @generic="7cdb443ab52031f931ca01a4224e1d882f0aa80b91af5ac7425137014c90b9604358bb3cfff678f2b808ec7b256be1b3283f7d928f61f53f86615209c3fbcb35cf3e13eaab68599a286db8eb6e8d277dde62b0793ef2740d2f7849d322da74d554b3f1906bcefd52cf5d133335c02abb98179bcc868298f9dd07c7643a4b7afd332354ee4f663077beb612a14b032b14526cf010ac1f33dc55ef2e78418a0a8d73c6b1f2101290049456d86810997e6d4edc16e9e250ea92573dd69915c605655569e77654229b34c9aa981a8f9414df4c9c", @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0xed}]}, @nested={0x1028, 0xc2, 0x0, 0x1, [@nested={0x4, 0x26}, @generic="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", @typed={0xc, 0xb2, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0xf3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}]}, @typed={0x8, 0x106, 0x0, 0x0, @pid=r3}]}, 0x1344}, {&(0x7f0000004380)={0x1570, 0x2a, 0x4, 0x70bd29, 0x25dfdbfe, "", [@nested={0x1024, 0xd, 0x0, 0x1, [@typed={0x14, 0x93, 0x0, 0x0, @ipv6=@mcast1}, @generic="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", @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x129}]}, @generic="0c259aec59b87378c6f941fa66d0a653355da7578ba30c7b428ed67045c6b3d46175087a54c452118846c0ded4c1296711a25a34f655fc36cb1e80120a82606c7dc5e301833389d016df8e4b480b759290", @nested={0x432, 0x5e, 0x0, 0x1, [@nested={0x1b4, 0x71, 0x0, 0x1, [@generic="3af6f351e5bef5b6b194676bd96950c9dbfdbf6c2abf5c881f1291f6f5af9963383bc6fc105d80a4fee377b358a9722afef11b6c7213af7e3f139b5e4985d817ac1acef3464c746c86902634b63b2703768a90f70db92ccadc6eb0103a27b331c29d7da42bff2abf098ae0bc9f81e2ae63474af2777a8e05d1d093389b69a52332bf7496c9ed9b85484924deb8d920924f05d54e1d611c2ded3eaf308bc00e2ff137fc569f63004484ffc46ec45dabc07425e63f8724c65f5ec03329b4d124ae5fba34685e3de26fbd8f60c6c24a3fbf28d2b12ca320e1c4f70c149ce9de890c3626cede99342094d3fc564ef96bbf89d4f4", @generic="e9ed079278e45fa4169d28c2371be63797d2063543f5fa6d6537b99b3dddc21aa4c8", @generic="f3070a0463e58afe78564e88ce5c245664fa6b8ff18df6f1b72f9752d2c5ff61d34b0bee6b4910f2076f355425e2bd06f46563f5aec1b90eba61e1944ef51a9e7ce207593a6dcfa94dd4d219d7bd4edd1b567569c9e07ee9fcf9b2fe44ba7edf3afd72b237a0e9a7a27d23417225d1f75485e40ccd8f03403bb640705f1c8c22881d7e8f0cd5aa2be6f836c7fc1126cc", @nested={0x4, 0x2}, @nested={0x4, 0x156}, @nested={0x4, 0x8}]}, @typed={0x8, 0x12a, 0x0, 0x0, @u32=0x5}, @generic="63a5c4cf77dab404e17f728176dbf1e5ffc87609797716d3a427f7a9e5a7332c9a960ce3567e8bfd8de0553c8543629a6d58d2b8e87022b7f1a225e41e4c9741de4eda5f31a5b8dece4cdbcd7bcdab6d5b938a0bcea67d4e9c28", @typed={0x8, 0x11a, 0x0, 0x0, @uid=r4}, @nested={0x203, 0x11d, 0x0, 0x1, [@nested={0x11a, 0x136, 0x0, 0x1, [@generic="85e815c0608b8ee9ec3c951084767dcd6c547714f143d5c111e9443f90dc2e09ff0151e1dd5b6bd95d491abc325ee37aae0468ad726677c5c2f2bcb689e48fa28ea273aed8488562c9ba8d783c859801d2b81d0b8e72b4bf5c6c4217b1b5b15f04049b3f78cbf8aa3a417578d1e8793be2e40cf1fec4e4ff309e563db954c7add6e803a29c890790b41edecbfccb48", @typed={0x4, 0x93}, @typed={0x8, 0x131, 0x0, 0x0, @str=':-{\x00'}, @generic="44e81892917e89145aaf3dad14e3e66400618bc64d35db3fa0f79dc3f3d3757d6029f7a2a472419d82122fee279974496ab6b57cb82dd2b993b87edc896433151651abf68428955e989313622dac0ff50d891fe1b69b2d528f586567ffbd593d8d2da7ba754b82e930050d3e1eb66e67163336bb3c9416c13ad68f"]}, @generic="3879d53d444fdd728684af94946a9c3fc1d31888a1f1b646f5b1845912c20a01ee4e5e4756880f3e149f5f6e68d6f59831cc69e6aa510f8f7e266d60e2648cbc7cad4ff6a27276eb548a81244c6269a9cea7780b419bd43a2f4dc4f5879c527d992d96f59fa1f240b1cd943623d372ad7d77c9a26595d5406ced09e4f30c4c0c9d81b31bc962ce131f76311a6774bd56a319bd4b6f4dd6f0282a0a58823f79ee0b3031439cd103a2cff939567183a8c1e5191b38ea8a0c3b4134b2fb2be73a842d8430ad3803f1e47aa13688e90453ec615135788e7fe1b5bba97e", @typed={0x8, 0xea, 0x0, 0x0, @uid=r4}]}, @typed={0xc, 0x3f, 0x0, 0x0, @u64=0x1}]}, @generic="8926b597522d5e7bbb4051a49193dc43604d216aabbbde7c065aa123eead753df4e62506b0c0bf343d28030523c3a160a34ece0af65c7a80bf5778a43dbe46a79be6dce7db5df9221ce0048685b7a80bcc254d0165cda8ccb7254dc0f4db0733480c1803166fb35e8c8d676f5f50ee8735699eedb8a516ca29680fdd2d681bdb0e45a67f081efb2f78e6f43a253d89e9a4c589ad3e090d9efc4cbebe883b68db5d4d96b393339832738d84e005f2a723bc85ae325103"]}, 0x1570}, {&(0x7f0000000200)={0xa4, 0x29, 0x400, 0x70bd2b, 0x25dfdbff, "", [@generic="b0651fc38b2ef11ab8e5c8a408a6be35a4", @nested={0x20, 0xcc, 0x0, 0x1, [@nested={0x4, 0x155}, @typed={0x4, 0xd5}, @typed={0x8, 0xad, 0x0, 0x0, @pid=r0}, @typed={0x4, 0xd4}, @nested={0x4, 0x39}, @nested={0x4, 0x139}]}, @nested={0x5d, 0x23, 0x0, 0x1, [@generic="3e92ef458d0920a7ff0be620515e14324c3880ff49fb35b4994f717767e9", @typed={0x8, 0xb0, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x99}, @nested={0x4, 0x154}, @generic="928e5c8cab825d6487476530a6571703e46c508c75f9a5892e1ceeb892bf4a", @nested={0x4, 0x335}, @nested={0x4, 0x14}, @nested={0x4, 0x2b}]}]}, 0xa4}, {&(0x7f00000019c0)={0x494, 0x11, 0x1, 0x70bd25, 0x25dfdbff, "", [@nested={0x1da, 0x10d, 0x0, 0x1, [@nested={0x4, 0xf7}, @nested={0x4, 0xf7}, @generic="78b527b0d4572cf956efb86daf24a7ecd2a8d08479de70ee0f3f3f1c857fd3b93f31bee560d339c4", @typed={0x5, 0x53, 0x0, 0x0, @binary="b4"}, @generic="495f1746b2d7b590c04dc04849714c909fc364b2ac359df8f45e7c4f55d6d788fde6b55bcf4f101204fa20f9544978aec19b7b33a936141aff9264f531ddda3014fd8780dce7fdef8cc48b3c7393e311632b6930ac95669673ffe3ba09ba11815000d9d23a34f1cf0173a87a41c0e76abd0a5629cb908a4fe36d91a0bd071d52ede6e99588008754d7da06d7416f0681e89b5bf7cc124f4e7201be68fc04cc96b3b70a97baf3fa4f6c81", @typed={0x8, 0xdb, 0x0, 0x0, @pid=r0}, @generic="e9b52d30593714cfeec72b6c3cb7fab5db2158d8a0970505ed0de5089118197be65ecadc8db477b07643ae827dde9e05970e3f46974a2c879e09cef0945edfe93d002a0bc4373f4ecd102f1373a3c1734f4a70b16d8e3f7e725ab68b80d1082077c23905f6513f828b3063f0da7dd977de4527304be74c3d4b189a47c2a3a9f7947f1f33d15b805139c05e216defc69092d289a99e1a7aed341acdabe3729fc932b4897e63f9cde795bdfb186ea30982f8b7e903dc9b782bbbbe9fefedccbfe1864d64be33ee34a1321947f6d6b15ed432d2dcf5ab9c2f52bcf66d9534ce1b89de4c23a25dfcb8a6", @nested={0x4, 0x154}]}, @nested={0x72, 0xcb, 0x0, 0x1, [@typed={0x4, 0x45}, @typed={0x8, 0xf9, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x63}, @typed={0x8, 0x11e, 0x0, 0x0, @ipv4=@multicast1}, @generic="cb272249ed607fd0d6449b93488190411181531db8ee9fa8934eaf492cb18275", @typed={0x14, 0x8a, 0x0, 0x0, @ipv6=@empty}, @generic="b6f053ca86afe16f8975d09b6925d79e21c4fb69a0520019bdf6fc5d18e06f7ca532"]}, @nested={0x6c, 0x5b, 0x0, 0x1, [@nested={0x4, 0x7e}, @nested={0x4, 0x109}, @nested={0x4, 0x4f}, @nested={0x4, 0xb}, @typed={0x57, 0x1b, 0x0, 0x0, @binary="edae7d26dcb8f339667a817c02800df548083333970f79d4b1e272d1b952b8dda88cbc174832e02917e07eb5477ccf37c4922ca64930efe4ca09c9c5150f1f5a7742872c43d5771b2b96441f4179b7318d6e12"}]}, @generic="e0048086c0f9c7cdad2664153f194aa88326f5f3c9fd73fae4c2b930e1354320b3b8851b1d9959e2819df75f95afa40c3ea8997293f32ba54e4a2d9ae0321567afa6e22bee0fd2c336ffc8e04f267a756357bc302f28a3fd39d218c8fbea6fd39b78f6da4f4f9707a9eb1e309f1f54043ba4b02a9b03443b6d0ee6bd2a51e35950fc0df50133929235e28ead96f0ea5a605a86cac0d21e95f180e2e825507a00c69b5c86f3837df2a902e7cfc9be0a4c90de5ea09f2af995c1237a96e25d0f009b365269759941f492b87c699b4274455a63f0d35795c1d6e5f31653c8e112323ec6", @generic="ac28e9a162", @nested={0xde, 0x5e, 0x0, 0x1, [@generic="a3fe45cc32c344da0c1d918400ada6652fa12c4d275f7b0dd34490bed6b01db613b6be3a435b3331c9f897cb2684f2ac7063eadf0e7b42aaa6718006da3ef8a0d633b418dce123e7aa9af4f8deacb8a12b9214b3f52ced6bdd29855f36df871be1b621e5dc3860435c4ea99d45d16c31294efdba65e7b7586494909ec39b40c7afce68ddee87b27821af9616bdf7cde389a3edcfbbbe30eadcd458e243d64dd8fd3e251e5e37fe4ceafa6977f984a980b125e81ba06252729b211669ec73fba8b77ee693fb03018cbfbb6864714edb45d1c9", @typed={0x8, 0xee, 0x0, 0x0, @ipv4=@multicast2}]}]}, 0x494}], 0x4, 0x0, 0x0, 0x10}, 0x0)
syz_usb_disconnect(r1)
syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffe)

8.793247712s ago: executing program 1 (id=4273):
sendmsg$key(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04790620"], 0x7)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
sched_setaffinity(0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000200000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000022000000850000001b000000b7000000000000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)

7.503068126s ago: executing program 1 (id=4276):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x803cfa, 0x40, 0x0, 0x5a}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0xd1a3, 0x0, 0x0, 0x0, 0x8400}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x0, 0x10000000004, 0x1000000002, 0x4, 0x0, 0x6}, 0x0, 0x0)
shutdown(r2, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000100)={0x3, 0x0, 0x3, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f0000000040)=0x312)

6.359081643s ago: executing program 1 (id=4277):
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

6.274800159s ago: executing program 0 (id=4278):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x9, 0x72}, 0x2c)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x52, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$alg(r2, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

6.188754899s ago: executing program 2 (id=4279):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c9"], 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

6.055883876s ago: executing program 2 (id=4280):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2}, 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000226aa140070ad000131001020301090224000100"], 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

6.053581309s ago: executing program 0 (id=4281):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x100, 0xfffffffffffffffe, 0x76)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x813a, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0xa)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0)

5.893809055s ago: executing program 0 (id=4282):
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x4000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
pivot_root(0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9})
socket$inet6(0xa, 0x80003, 0xff)
setresuid(0xee01, r2, 0x0)
setresuid(0xee01, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000280)={[{@gid={'gid', 0x3d, r1}}, {@nr_blocks={'nr_blocks', 0x3d, [0x6d, 0x70, 0x70, 0x36, 0x39, 0x2d]}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r2}}, {@huge_advise}], [{@fowner_gt}]})
chdir(&(0x7f0000000080)='./file1\x00')
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}}, 0xf0}}, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180))

5.186294091s ago: executing program 3 (id=4283):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x6)
r2 = socket$inet6(0xa, 0x1, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x2710}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r0, &(0x7f0000000000)='\"', 0xfdef)

5.133538433s ago: executing program 0 (id=4284):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x8000)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000083c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xffe0}}, @TCA_BASIC_ACT={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084)

4.961038802s ago: executing program 0 (id=4285):
sendmsg$key(0xffffffffffffffff, 0x0, 0x800)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04790620"], 0x7)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
sched_setaffinity(0x0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000200000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000022000000850000001b000000b7000000000000008500000050000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)
socket$key(0xf, 0x3, 0x2)
socket$nl_xfrm(0x10, 0x3, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, 0x0, 0x0)

4.903879226s ago: executing program 3 (id=4286):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
set_mempolicy_home_node(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x0)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x803cfa, 0x40, 0x0, 0x5a}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0xd1a3, 0x0, 0x0, 0x0, 0x8400}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x0, 0x10000000004, 0x1000000002, 0x4, 0x0, 0x6}, 0x0, 0x0)
shutdown(r2, 0x1)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
r6 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000100)={0x3, 0x0, 0x3, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r7, 0x40026f33, &(0x7f0000000040)=0x312)

4.851132926s ago: executing program 1 (id=4287):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040))
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x169})
mmap$KVM_VCPU(&(0x7f0000005000/0x1000)=nil, 0x0, 0x2, 0x13, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8)
socket$netlink(0x10, 0x3, 0x0)
socket(0x2b, 0x3, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000001600)=[{0x15, '\x00', @st={0x4, [{0x2, @uvalue=0x8}, {0x1, @uvalue=0x2}, {0x2, @uvalue=0x2}, {0x3, @uvalue=0x9}]}, 0x3}, {0x3f, '\x00', @buffer={"9a3cb80ec6afd2756aa0912355555cfcdf6b7f5a7c932626439667640bbe0466", 0x20}, 0xfffffc01}]})
r2 = socket$rds(0x15, 0x5, 0x0)
r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
bind$rds(r2, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10)
sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/100, 0x64}, 0x0, 0x24}}], 0x30, 0x8004}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_GATEWAY={0x8, 0x5, @private=0xa010100}]}, 0x24}}, 0x0)
r5 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00F'], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.342112024s ago: executing program 3 (id=4288):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={0xffffffffffffffff, 0x2, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x12, 0xffffffff, 0x9, "fee8a2ab02000900d1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0xfffffffffffffffd]}})

2.965251436s ago: executing program 2 (id=4289):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230d00c9"], 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)

2.835544168s ago: executing program 2 (id=4290):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r1, &(0x7f0000000200)={&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x18}, 0x40004)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0xbc, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @rand_addr, {[@ssrr={0x89, 0x3, 0xf1}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setresgid(0x0, 0xee01, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xe, 0x5, &(0x7f00000021c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@map_fd={0x18, 0x5}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000006}, 0x94)
setuid(0xee01)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000002140)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0xffffffe7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x6, 0xd, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7})
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="0200000000000000001900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020020000100"/28], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x15)
write$binfmt_aout(r6, &(0x7f0000000000)=ANY=[], 0xff2e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil)

2.788188988s ago: executing program 3 (id=4291):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x9, 0x72}, 0x2c)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x52, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2.661034458s ago: executing program 3 (id=4292):
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r1, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)

2.659508446s ago: executing program 0 (id=4293):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000600)={0x2, @pix_mp={0x3, 0xfffff549, 0x59455247, 0x0, 0x5, [{0x6, 0xfffffffa}, {0x3, 0x2}, {0x7, 0x2}, {0x2, 0xeb}, {0x0, 0x4}, {0x8, 0xb}, {0x8}, {0x1a3b, 0x18f674ba}], 0x1, 0xb, 0x6, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57)
close(0x3)
shutdown(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17)
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
shutdown(0xffffffffffffffff, 0x1)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x2, 0x3, 0x400, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0xb, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0xfffffffffffffffb}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bridge_slave_1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r6 = syz_usb_connect$sierra_net(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x3ff, 0x3, 0x2, 0x7}, {0x9, 0x5, 0xd, 0x2, 0x40, 0x1, 0x6, 0x5}, {0x9, 0x5, 0xb, 0x3, 0x10, 0x1, 0x0, 0xc}}}}}}]}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x7, 0x0, 0x0, 0x2, 0x1}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x4f, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x5c}, 0x28)
syz_usb_control_io$sierra_net(r6, &(0x7f0000000340)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="400d66000000660902946d2f2035e0f86a95c7e40259c4fb1a25ce67f951e1a9daec469a0e7e86f93822f2f3515a001e426b9d5114672eaf14850e3e09f894a140ac20c37df2e3c63f4ffc1e9102f664ca05f1d172ee592110fab7844bb6798ff4941bd01fe7e5aaa1f92f51"], &(0x7f0000000240)={0x0, 0x3, 0xe1, @string={0xe1, 0x3, "9ce06eea44e411a745f0b59880e725f9272f812ae5573f2e2431dbca3d06e013c7c83a81cb125f14b23538ee51da4667a8c8cb6857176028ad85ebeba480494e95076168ccec5510cd6864656fd33f6530d448ba483a4c686aa7a373d1b44f04ba73dd2c64381111bec29be1e290931d5c1a88202f08d8433c36f06ebaaaea92c9eeac5d9a8976e825f230a9277c9000bc40dde21dc3df63872752f36af5f4f0c9c710141004c1f2c41c934e3ea2844548d72cdf7a9df03b725a85d0ce69f9ed0180b73160a2eb661d3012a222acd7e87a5bbd82beb25220bd7974aa6a53e8"}}}, &(0x7f00000008c0)={0x1c, &(0x7f0000000380)={0x0, 0x12, 0xb0, "37aea3a0b2022844121b1536fc48dc3532bf3b4643263486bbbfcd6d9adeead530c1a83681d7b4c01f62843b78548be6125eb9824742912f5aa905c729a64372b9d4d4b651d2dae37b04345c890bd8c367eece2b5cf24756dcf673724ebd79ffd7e2918174c8f80cbfa0cfca38047168b0bea66d8eac8ecddbc24e8a069b7872760aec0fd8f638c73c40c2f61ed803ed2ea500ad64893b8e9c8668f23d1feb7519e51b6dabe6360c114215b316c7d68a"}, &(0x7f0000000440)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000880)={0x21, 0x0, 0x3, "52ced6"}})

2.43045222s ago: executing program 1 (id=4294):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r1 = fcntl$getown(r0, 0x9)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000080)=0x6, 0x4)
sendto$inet(r2, &(0x7f0000000340)="01a4", 0x2, 0x4080, 0x0, 0x0)
ptrace$peek(0x2, r1, &(0x7f0000000000))
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000070000080000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, r5}, 0x94)

952.126527ms ago: executing program 3 (id=4295):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ffc000/0x4000)=nil)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xd, 0x0, 0x0)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x1c, r4, 0x1, 0x72bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000080))
syz_genetlink_get_family_id$team(&(0x7f00000000c0), r6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0)

0s ago: executing program 1 (id=4296):
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x2, 0x34f}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
unshare(0x24020400)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r0, 0x47bc, 0x3000000, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000002c0)="c156550baee31b4966957a0430b48cb9676d131c220d21b85a86bfead734bd9c614dd8872fa56a9042c58b8bd182c20f3efd43a75986e007628005dbf79edf9f94e7a81d4bc4224486d5530475bced06e208d85b33c0ed0978b47308602e98bc7ebd25c30778aa2fcbc19150fb6c95adc4d909dd34d9f9fba649fb208684d58006f8f13cfdb32eaf06f487d5fbf858f154bab485913193", 0x97, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001980)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010700000000ffdbdf250b0000000e0001006e657464657673696d0000000f000263006e657464657673696d300000"], 0x34}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="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", 0xed0, 0x1, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0xa, &(0x7f0000000240)=[{0x4, 0x2, 0x84, 0xfffffff7}, {0x2, 0x1, 0x81, 0x450}, {0x2, 0x1, 0x4, 0x3}, {0xe, 0x5, 0xd1}, {0x100, 0x80, 0xe7, 0x10001}, {0x3, 0xc, 0x1, 0x4}, {0x3, 0x5, 0x8, 0x4}, {0x80, 0x9, 0x4, 0x8}, {0x7e, 0x58, 0x7, 0x5}, {0xce, 0x2, 0xfd, 0xfffff037}]})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x3, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x1010, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000})
chdir(&(0x7f0000000080)='./file0\x00')

kernel console output (not intermixed with test programs):

istering): Released all slaves
[  959.313699][ T5852] lo speed is unknown, defaulting to 1000
[  959.313832][ T5852] syz0: Port: 1 Link DOWN
[  959.319136][ T5882] lo speed is unknown, defaulting to 1000
[  959.347351][ T5882] usb 4-1: USB disconnect, device number 107
[  959.351694][ T6020] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  960.842428][ T6020] usb 5-1: Using ep0 maxpacket: 8
[  960.849349][ T6020] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 7
[  960.849385][ T6020] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 21, changing to 7
[  960.849477][ T6285] ‚#{6c!: left promiscuous mode
[  960.880753][ T6020] usb 5-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40
[  960.880782][ T6020] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.880802][ T6020] usb 5-1: Product: à ¬
[  960.880816][ T6020] usb 5-1: Manufacturer: 텺碲柷�눷姜验䑎튈趘�˟ⲡ쎚쿗敟῔䪄蔇跡��魩��腘휣멌͔빨䌫२ự䨛깳㘄礲쾛⟣䥪✺苟鎈풧䂺銱殎砄報ⶦ괼앥�
[  960.880839][ T6020] usb 5-1: SerialNumber: syz
[  961.612704][ T6020] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  961.613017][ T6020] usb 5-1: found format II with max.bitrate = 1969, frame size=5
[  961.613030][ T6020] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  961.803676][ T6020] usb 5-1: USB disconnect, device number 112
[  962.019112][T16705] udevd[16705]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  963.635029][ T5852] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  963.712757][T17308] bridge0: entered promiscuous mode
[  963.712815][T17308] macvlan2: entered allmulticast mode
[  963.712822][T17308] bridge0: entered allmulticast mode
[  963.713883][T17308] bridge0: port 3(macvlan2) entered blocking state
[  963.713949][T17308] bridge0: port 3(macvlan2) entered disabled state
[  963.801776][ T5852] usb 5-1: Using ep0 maxpacket: 8
[  963.804032][ T5852] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  963.804057][ T5852] usb 5-1: config 179 has no interface number 0
[  963.804101][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  963.804127][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  963.804155][ T5852] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  963.804176][ T5852] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  963.804218][ T5852] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  963.804240][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.907097][T17301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  963.933171][T17308] bridge0: left allmulticast mode
[  963.933201][T17308] bridge0: left promiscuous mode
[  963.953302][ T6285] rxrpc: Call ffff888039470000 still in use (1,Complete,1409,0)!
[  964.165734][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.166245][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  965.257345][T17324] netlink: 'syz.3.3957': attribute type 8 has an invalid length.
[  966.530150][ T5881] usb 5-1: USB disconnect, device number 113
[  967.217471][T17339] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3959'.
[  968.855868][T17129] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  968.908485][T17129] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  968.955737][T17129] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  968.991705][ T5915] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  969.020638][T17129] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  969.181671][ T5915] usb 2-1: Using ep0 maxpacket: 32
[  969.184801][ T5915] usb 2-1: config 0 has an invalid interface number: 107 but max is 0
[  969.184824][ T5915] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  969.184843][ T5915] usb 2-1: config 0 has no interface number 0
[  969.184892][ T5915] usb 2-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  969.184930][ T5915] usb 2-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 1.10
[  969.184952][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  969.201743][ T5915] usb 2-1: config 0 descriptor??
[  969.213980][ T5915] usb-storage 2-1:0.107: USB Mass Storage device detected
[  969.242881][ T5915] usb-storage 2-1:0.107: Quirks match for vid 04b8 pid 0602: 1
[  969.478318][T17376] 9p: Bad value for 'wfdno'
[  969.628963][T17129] 8021q: adding VLAN 0 to HW filter on device bond0
[  969.725268][T17129] 8021q: adding VLAN 0 to HW filter on device team0
[  969.754045][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state
[  969.754244][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state
[  969.947527][T17382] bridge0: entered promiscuous mode
[  969.948286][T17382] macvlan2: entered allmulticast mode
[  969.948326][T17382] bridge0: entered allmulticast mode
[  969.965154][T17382] bridge0: port 3(macvlan2) entered blocking state
[  969.966232][T17382] bridge0: port 3(macvlan2) entered disabled state
[  970.598866][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3963'.
[  970.653278][T17382] bridge0: left allmulticast mode
[  970.653316][T17382] bridge0: left promiscuous mode
[  970.799467][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.800844][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state
[  971.198936][T17389] netlink: 'syz.3.3967': attribute type 4 has an invalid length.
[  971.253910][T17390] netlink: 'syz.3.3967': attribute type 4 has an invalid length.
[  971.641703][ T5915] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  971.804255][ T5915] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  971.804272][ T5915] usb 4-1: config 1 has no interface number 0
[  971.804303][ T5915] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  971.804316][ T5915] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  971.804330][ T5915] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  971.806915][ T5915] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  971.806937][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.806947][ T5915] usb 4-1: Product: syz
[  971.806954][ T5915] usb 4-1: Manufacturer: syz
[  971.806962][ T5915] usb 4-1: SerialNumber: syz
[  971.906996][T17388] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  971.987087][T17129] 8021q: adding VLAN 0 to HW filter on device batadv0
[  972.022764][ T1563] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  972.109964][T17388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.110255][T17388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.114746][ T5915] usb 4-1: Error in usbnet_get_endpoints (-71)
[  972.143516][T17129] veth0_vlan: entered promiscuous mode
[  972.160452][T17129] veth1_vlan: entered promiscuous mode
[  972.163775][ T5951] usb 2-1: USB disconnect, device number 103
[  972.182066][ T1563] usb 5-1: Using ep0 maxpacket: 8
[  972.186258][ T1563] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  972.186283][ T1563] usb 5-1: config 179 has no interface number 0
[  972.186938][ T1563] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  972.186964][ T1563] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  972.186991][ T1563] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  972.187012][ T1563] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  972.187052][ T1563] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  972.187073][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  972.225605][ T5915] usb 4-1: USB disconnect, device number 108
[  972.275218][T17398] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  972.332832][T17129] veth0_macvtap: entered promiscuous mode
[  972.338536][T17129] veth1_macvtap: entered promiscuous mode
[  972.406755][T17129] batman_adv: batadv0: Interface activated: batadv_slave_0
[  972.451869][T17129] batman_adv: batadv0: Interface activated: batadv_slave_1
[  972.470005][  T190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  972.470270][  T190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  972.470500][  T190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  972.470537][  T190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  972.504883][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.505379][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  974.993973][T17416] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  975.967606][ T5852] usb 5-1: USB disconnect, device number 114
[  976.075238][T17428] FAULT_INJECTION: forcing a failure.
[  976.075238][T17428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  976.075274][T17428] CPU: 1 UID: 0 PID: 17428 Comm: syz.0.3978 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  976.075301][T17428] Tainted: [L]=SOFTLOCKUP
[  976.075309][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  976.075320][T17428] Call Trace:
[  976.075328][T17428]  <TASK>
[  976.075335][T17428]  dump_stack_lvl+0xe8/0x150
[  976.075373][T17428]  should_fail_ex+0x46b/0x600
[  976.075409][T17428]  _copy_from_user+0x2d/0xb0
[  976.075430][T17428]  memdup_user+0x5e/0xd0
[  976.075448][T17428]  strndup_user+0x68/0xd0
[  976.075465][T17428]  __se_sys_fsopen+0x3d/0x2c0
[  976.075489][T17428]  do_syscall_64+0x14d/0xf80
[  976.075509][T17428]  ? trace_irq_disable+0x3b/0x150
[  976.075534][T17428]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.075549][T17428]  ? clear_bhb_loop+0x40/0x90
[  976.075567][T17428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  976.075582][T17428] RIP: 0033:0x7fce604dc799
[  976.075597][T17428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  976.075610][T17428] RSP: 002b:00007fce5e72e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  976.075627][T17428] RAX: ffffffffffffffda RBX: 00007fce60755fa0 RCX: 00007fce604dc799
[  976.075638][T17428] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0
[  976.075648][T17428] RBP: 00007fce5e72e090 R08: 0000000000000000 R09: 0000000000000000
[  976.075657][T17428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  976.075667][T17428] R13: 00007fce60756038 R14: 00007fce60755fa0 R15: 00007fff0bb1f958
[  976.075691][T17428]  </TASK>
[  976.216996][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3979'.
[  976.541106][ T3963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.541126][ T3963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.574824][ T1563] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  976.653678][ T1394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  976.653689][ T1394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  976.724858][ T1563] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  976.724884][ T1563] usb 4-1: config 0 has no interface number 0
[  976.724928][ T1563] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  976.724954][ T1563] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  976.727200][ T1563] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  976.727227][ T1563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.727247][ T1563] usb 4-1: Product: syz
[  976.727261][ T1563] usb 4-1: Manufacturer: syz
[  976.727277][ T1563] usb 4-1: SerialNumber: syz
[  976.740645][ T1563] usb 4-1: config 0 descriptor??
[  976.762082][T17434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  976.766826][ T1563] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  976.810209][ T1563] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  976.981347][    C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22
[  976.991724][ T5783] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  977.171626][ T5783] usb 1-1: Using ep0 maxpacket: 16
[  977.588722][ T5783] usb 1-1: unable to get BOS descriptor or descriptor too short
[  977.592478][ T5783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  977.592512][ T5783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  977.592593][ T5783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  977.592614][ T5783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  977.592636][ T5783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  977.592657][ T5783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  977.635431][ T5783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  977.635459][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  977.635479][ T5783] usb 1-1: Product: syz
[  977.635493][ T5783] usb 1-1: SerialNumber: syz
[  978.092352][ T5783] cdc_ncm 1-1:1.0: bind() failure
[  978.217732][ T5783] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  978.217760][ T5783] cdc_ncm 1-1:1.1: bind() failure
[  978.285043][ T5783] usb 1-1: USB disconnect, device number 70
[  979.329468][T17462] bridge0: entered promiscuous mode
[  979.329583][T17462] macvlan0: entered allmulticast mode
[  979.329596][T17462] bridge0: entered allmulticast mode
[  979.344938][T17462] bridge0: port 3(macvlan0) entered blocking state
[  979.345972][T17462] bridge0: port 3(macvlan0) entered disabled state
[  979.948518][T17462] bridge0: left allmulticast mode
[  979.948549][T17462] bridge0: left promiscuous mode
[  980.204248][T16722] Bluetooth: hci2: command 0x1003 tx timeout
[  980.204529][ T5803] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  980.435652][ T1563] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  980.495404][ T6020] usb 4-1: USB disconnect, device number 109
[  980.510724][ T6020] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  980.521680][ T6020] cyberjack 4-1:0.69: device disconnected
[  980.601644][ T1563] usb 1-1: Using ep0 maxpacket: 8
[  980.604297][ T1563] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  980.604322][ T1563] usb 1-1: config 179 has no interface number 0
[  980.604378][ T1563] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  980.604405][ T1563] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  980.604432][ T1563] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  980.604455][ T1563] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  980.604497][ T1563] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  980.604520][ T1563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  980.859750][T17481] FAULT_INJECTION: forcing a failure.
[  980.859750][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  980.859810][T17481] CPU: 1 UID: 0 PID: 17481 Comm: syz.4.3991 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  980.859839][T17481] Tainted: [L]=SOFTLOCKUP
[  980.859847][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  980.859860][T17481] Call Trace:
[  980.859868][T17481]  <TASK>
[  980.859877][T17481]  dump_stack_lvl+0xe8/0x150
[  980.859912][T17481]  should_fail_ex+0x46b/0x600
[  980.859949][T17481]  _copy_from_user+0x2d/0xb0
[  980.859974][T17481]  memdup_user+0x5e/0xd0
[  980.860000][T17481]  strndup_user+0x68/0xd0
[  980.860025][T17481]  __se_sys_mount+0x9d/0x420
[  980.860073][T17481]  ? __pfx___se_sys_mount+0x10/0x10
[  980.860102][T17481]  ? __x64_sys_mount+0x20/0xc0
[  980.860127][T17481]  do_syscall_64+0x14d/0xf80
[  980.860155][T17481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.860176][T17481]  ? clear_bhb_loop+0x40/0x90
[  980.860201][T17481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  980.860220][T17481] RIP: 0033:0x7f257c00c799
[  980.860239][T17481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  980.860257][T17481] RSP: 002b:00007f257a224028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  980.860278][T17481] RAX: ffffffffffffffda RBX: 00007f257c286180 RCX: 00007f257c00c799
[  980.860293][T17481] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000240
[  980.860308][T17481] RBP: 00007f257a224090 R08: 0000200000000100 R09: 0000000000000000
[  980.860321][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  980.860334][T17481] R13: 00007f257c286218 R14: 00007f257c286180 R15: 00007fff093136e8
[  980.860365][T17481]  </TASK>
[  980.904174][ T5881] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  981.404305][ T5881] usb 2-1: Using ep0 maxpacket: 16
[  981.406561][ T5881] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  981.406585][ T5881] usb 2-1: config 0 has no interface number 0
[  981.406649][ T5881] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  981.406675][ T5881] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  981.406713][ T5881] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  981.406736][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  981.427439][ T5881] usb 2-1: config 0 descriptor??
[  981.593931][T17466] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  981.774346][T17476] 9p: Bad value for 'rfdno'
[  981.800976][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  981.802038][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  981.868693][ T5881] hid (null): invalid report_size 9970
[  982.157821][ T5882] usb 2-1: USB disconnect, device number 104
[  983.111656][   T10] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  983.271841][   T10] usb 4-1: Using ep0 maxpacket: 8
[  983.280223][   T10] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  983.280247][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  983.280266][   T10] usb 4-1: config 0 has no interface number 0
[  983.280310][   T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  983.280335][   T10] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  983.280357][   T10] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  983.280384][   T10] usb 4-1: config 0 interface 52 has no altsetting 0
[  983.366051][   T10] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  983.366080][   T10] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  983.366101][   T10] usb 4-1: Product: syz
[  983.366115][   T10] usb 4-1: SerialNumber: syz
[  983.380420][   T10] usb 4-1: config 0 descriptor??
[  983.415869][T15149] usb 1-1: USB disconnect, device number 71
[  983.623960][   T10] synaptics_usb 4-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  983.624200][   T10] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -5
[  983.744393][ T1563] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[  984.024893][T15149] usb 2-1: new low-speed USB device number 105 using dummy_hcd
[  984.174801][ T1563] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  984.174827][ T1563] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  984.182568][ T1563] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  984.182598][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  984.182617][ T1563] usb 5-1: SerialNumber: syz
[  984.199363][ T1563] usb 5-1: 0:2 : does not exist
[  984.199441][ T1563] usb 5-1: unit 17 not found!
[  984.264143][T15149] usb 2-1: LPM exit latency is zeroed, disabling LPM.
[  984.265236][T15149] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  984.270141][T15149] usb 2-1: string descriptor 0 read error: -22
[  984.270266][T15149] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  984.270290][T15149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.302381][T17507] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  984.305611][T15149] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  984.524304][ T1563] usb 2-1: USB disconnect, device number 105
[  984.690884][ T6020] usb 4-1: USB disconnect, device number 110
[  984.760774][T17501] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.0)
[  984.889614][T17520] netlink: 'syz.2.4007': attribute type 10 has an invalid length.
[  984.902967][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  984.908657][T17520] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  985.091833][T17523] FAULT_INJECTION: forcing a failure.
[  985.091833][T17523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  985.091869][T17523] CPU: 1 UID: 0 PID: 17523 Comm: syz.0.4008 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  985.091896][T17523] Tainted: [L]=SOFTLOCKUP
[  985.091904][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  985.091916][T17523] Call Trace:
[  985.091924][T17523]  <TASK>
[  985.091933][T17523]  dump_stack_lvl+0xe8/0x150
[  985.091968][T17523]  should_fail_ex+0x46b/0x600
[  985.092004][T17523]  _copy_from_user+0x2d/0xb0
[  985.092030][T17523]  __copy_msghdr+0x3c5/0x5b0
[  985.092061][T17523]  ___sys_sendmsg+0x213/0x360
[  985.092094][T17523]  ? __pfx____sys_sendmsg+0x10/0x10
[  985.092154][T17523]  ? __fget_files+0x2a/0x420
[  985.092181][T17523]  ? __fget_files+0x3a6/0x420
[  985.092214][T17523]  __x64_sys_sendmsg+0x1c3/0x2a0
[  985.092244][T17523]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  985.092280][T17523]  ? __pfx_ksys_write+0x10/0x10
[  985.092318][T17523]  do_syscall_64+0x14d/0xf80
[  985.092344][T17523]  ? trace_irq_disable+0x3b/0x150
[  985.092368][T17523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.092388][T17523]  ? clear_bhb_loop+0x40/0x90
[  985.092410][T17523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  985.092429][T17523] RIP: 0033:0x7fce604dc799
[  985.092447][T17523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  985.092464][T17523] RSP: 002b:00007fce5e70d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  985.092485][T17523] RAX: ffffffffffffffda RBX: 00007fce60756090 RCX: 00007fce604dc799
[  985.092500][T17523] RDX: 0000000020000004 RSI: 0000200000000340 RDI: 0000000000000006
[  985.092513][T17523] RBP: 00007fce5e70d090 R08: 0000000000000000 R09: 0000000000000000
[  985.092525][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  985.092537][T17523] R13: 00007fce60756128 R14: 00007fce60756090 R15: 00007fff0bb1f958
[  985.092569][T17523]  </TASK>
[  985.465687][T17539] lo speed is unknown, defaulting to 1000
[  985.471686][ T5881] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  985.507190][   T37] audit: type=1326 audit(1772342616.572:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17538 comm="syz.3.4015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd70cf0c799 code=0x0
[  985.621731][ T5881] usb 2-1: Using ep0 maxpacket: 8
[  985.623477][ T5881] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  985.623493][ T5881] usb 2-1: config 179 has no interface number 0
[  985.623517][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  985.623531][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  985.623545][ T5881] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  985.623557][ T5881] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  985.623626][ T5881] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  985.623639][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.629043][T17530] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  985.836858][T17530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  985.837674][T17530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  986.571865][T15149] usb 5-1: USB disconnect, device number 115
[  988.320237][ T5783] IPVS: starting estimator thread 0...
[  988.448525][ T1563] usb 2-1: USB disconnect, device number 106
[  988.451934][T17559] IPVS: using max 8 ests per chain, 19200 per kthread
[  988.675847][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4028'.
[  988.675871][T17575] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4028'.
[  988.680460][T17575] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4028'.
[  988.681019][T17575] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4028'.
[  988.681039][T17575] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4028'.
[  989.401632][ T5881] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  989.401725][ T6020] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  989.831278][ T6020] usb 4-1: Using ep0 maxpacket: 16
[  989.833733][ T6020] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  989.833757][ T6020] usb 4-1: config 0 has no interface number 0
[  989.833817][ T6020] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  989.833842][ T6020] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  989.835933][ T6020] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  989.835959][ T6020] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  989.835979][ T6020] usb 4-1: Product: syz
[  989.835993][ T6020] usb 4-1: SerialNumber: syz
[  989.859591][ T5881] usb 1-1: LPM exit latency is zeroed, disabling LPM.
[  989.860729][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  989.864373][ T6020] usb 4-1: config 0 descriptor??
[  989.866479][ T5881] usb 1-1: string descriptor 0 read error: -22
[  989.866605][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  989.866629][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  989.880947][ T6020] cm109 4-1:0.8: invalid payload size 0, expected 4
[  989.893215][T17564] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  989.944518][ T6020] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input42
[  989.966864][ T5881] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  990.157287][T17562] CIFS: VFS: Malformed UNC in devname
[  990.210500][ T6020] usb 1-1: USB disconnect, device number 72
[  990.372549][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.376951][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.377191][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.377441][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.377678][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.377910][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.378143][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.378373][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.378597][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.378822][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  990.379375][T15149] usb 4-1: USB disconnect, device number 111
[  990.379466][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  990.498347][T15149] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  990.765851][T17597] FAULT_INJECTION: forcing a failure.
[  990.765851][T17597] name failslab, interval 1, probability 0, space 0, times 0
[  990.765886][T17597] CPU: 0 UID: 0 PID: 17597 Comm: syz.4.4032 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  990.765914][T17597] Tainted: [L]=SOFTLOCKUP
[  990.765922][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  990.765934][T17597] Call Trace:
[  990.765943][T17597]  <TASK>
[  990.765952][T17597]  dump_stack_lvl+0xe8/0x150
[  990.765984][T17597]  should_fail_ex+0x46b/0x600
[  990.766021][T17597]  should_failslab+0xa8/0x100
[  990.766050][T17597]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[  990.766089][T17597]  ? __alloc_skb+0x1d0/0x7d0
[  990.766111][T17597]  ? lockdep_hardirqs_on+0x7a/0x110
[  990.766143][T17597]  __alloc_skb+0x1d0/0x7d0
[  990.766170][T17597]  netlink_sendmsg+0x5d4/0xb40
[  990.766201][T17597]  ? __pfx_netlink_sendmsg+0x10/0x10
[  990.766230][T17597]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  990.766261][T17597]  ____sys_sendmsg+0xa4e/0xac0
[  990.766296][T17597]  ? __pfx_____sys_sendmsg+0x10/0x10
[  990.766329][T17597]  ? import_iovec+0x73/0xa0
[  990.766356][T17597]  ___sys_sendmsg+0x2a5/0x360
[  990.766387][T17597]  ? __pfx____sys_sendmsg+0x10/0x10
[  990.766446][T17597]  ? __fget_files+0x2a/0x420
[  990.766468][T17597]  ? __fget_files+0x3a6/0x420
[  990.766500][T17597]  __x64_sys_sendmsg+0x1c3/0x2a0
[  990.766529][T17597]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  990.766565][T17597]  ? __pfx_ksys_write+0x10/0x10
[  990.766603][T17597]  do_syscall_64+0x14d/0xf80
[  990.766629][T17597]  ? trace_irq_disable+0x3b/0x150
[  990.766652][T17597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.766672][T17597]  ? clear_bhb_loop+0x40/0x90
[  990.766696][T17597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.766715][T17597] RIP: 0033:0x7f257c00c799
[  990.766733][T17597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  990.766750][T17597] RSP: 002b:00007f257a266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  990.766772][T17597] RAX: ffffffffffffffda RBX: 00007f257c285fa0 RCX: 00007f257c00c799
[  990.766786][T17597] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  990.766799][T17597] RBP: 00007f257a266090 R08: 0000000000000000 R09: 0000000000000000
[  990.766811][T17597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  990.766823][T17597] R13: 00007f257c286038 R14: 00007f257c285fa0 R15: 00007fff093136e8
[  990.766854][T17597]  </TASK>
[  990.822039][ T6020] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  990.981602][ T6020] usb 2-1: Using ep0 maxpacket: 8
[  990.983368][ T6020] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  990.983392][ T6020] usb 2-1: config 179 has no interface number 0
[  990.983434][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  990.983460][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  990.983486][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  990.983508][ T6020] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  990.983546][ T6020] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  990.983567][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.144141][T17595] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  991.532967][T17595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  991.533485][T17595] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  991.865055][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4041'.
[  991.865082][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4041'.
[  991.865112][T17617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4041'.
[  991.872016][T15149] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  992.248500][T15149] usb 3-1: Using ep0 maxpacket: 32
[  992.924197][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  992.924311][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  993.071476][T15149] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  993.079342][T15149] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  993.079392][T15149] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  993.079415][T15149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.317104][T15149] usb 3-1: config 0 descriptor??
[  995.321944][T15149] usb 3-1: can't set config #0, error -71
[  995.330957][T15149] usb 3-1: USB disconnect, device number 74
[  996.150645][   T10] usb 2-1: USB disconnect, device number 107
[  996.750494][T17638] netlink: 'syz.4.4047': attribute type 4 has an invalid length.
[  996.860223][T17640] netlink: 'syz.4.4047': attribute type 4 has an invalid length.
[  997.790389][T17650] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  997.861714][ T1563] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  997.866336][T15149] usb 3-1: new low-speed USB device number 75 using dummy_hcd
[  997.992204][   T10] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  998.202540][ T1563] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[  998.202632][ T1563] usb 5-1: config 1 has no interface number 0
[  998.202697][ T1563] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  998.202777][ T1563] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  998.202803][ T1563] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  998.206020][T15149] usb 3-1: LPM exit latency is zeroed, disabling LPM.
[  998.207667][T15149] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  998.210834][ T1563] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  998.210917][ T1563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  998.210937][ T1563] usb 5-1: Product: syz
[  998.210951][ T1563] usb 5-1: Manufacturer: syz
[  998.210966][ T1563] usb 5-1: SerialNumber: syz
[  999.429255][T15149] usb 3-1: string descriptor 0 read error: -71
[  999.429396][T15149] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  999.429420][T15149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.460915][T15149] usb 3-1: can't set config #1, error -71
[  999.472844][ T1563] usb 5-1: can't set config #1, error -71
[  999.487860][ T1563] usb 5-1: USB disconnect, device number 116
[  999.490349][T15149] usb 3-1: USB disconnect, device number 75
[  999.561639][   T10] usb 1-1: device descriptor read/64, error -71
[ 1000.761724][   T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1001.761750][ T5881] usb 3-1: new low-speed USB device number 76 using dummy_hcd
[ 1001.914147][ T5881] usb 3-1: LPM exit latency is zeroed, disabling LPM.
[ 1001.915507][ T5881] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1001.942029][ T5881] usb 3-1: string descriptor 0 read error: -22
[ 1001.942175][ T5881] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1001.942199][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.947235][T17680] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1001.989670][ T5881] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1002.512696][T17689] netlink: 'syz.0.4064': attribute type 4 has an invalid length.
[ 1002.603909][T17691] netlink: 'syz.0.4064': attribute type 4 has an invalid length.
[ 1003.473023][T15149] usb 3-1: USB disconnect, device number 76
[ 1003.521709][ T1563] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1003.551774][ T5852] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1003.671625][ T1563] usb 2-1: Using ep0 maxpacket: 8
[ 1003.673440][ T1563] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1003.673454][ T1563] usb 2-1: config 179 has no interface number 0
[ 1003.673478][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1003.673492][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1003.673506][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1003.673518][ T1563] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1003.673540][ T1563] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1003.673552][ T1563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.678320][T17685] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1003.691653][ T6020] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1003.743613][ T5852] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1003.743628][ T5852] usb 1-1: config 1 has no interface number 0
[ 1003.743652][ T5852] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1003.743666][ T5852] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1003.743680][ T5852] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1003.768905][ T5852] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1003.768922][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.768933][ T5852] usb 1-1: Product: syz
[ 1003.768941][ T5852] usb 1-1: Manufacturer: syz
[ 1003.768948][ T5852] usb 1-1: SerialNumber: syz
[ 1003.841680][ T6020] usb 5-1: device descriptor read/64, error -71
[ 1003.868209][T17692] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1003.907307][T17685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1003.908186][T17685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1004.076075][T17688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1004.076684][T17688] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1004.102208][ T6020] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1004.105876][ T5852] usb 1-1: Error in usbnet_get_endpoints (-71)
[ 1004.281789][ T6020] usb 5-1: device descriptor read/64, error -71
[ 1004.346307][ T5852] usb 1-1: USB disconnect, device number 75
[ 1004.393397][ T6020] usb usb5-port1: attempt power cycle
[ 1004.752037][ T6020] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1004.787385][ T6020] usb 5-1: device descriptor read/8, error -71
[ 1005.133746][ T6020] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1005.170025][ T6020] usb 5-1: device descriptor read/8, error -71
[ 1005.273497][ T6020] usb usb5-port1: unable to enumerate USB device
[ 1006.623457][T15149] usb 2-1: USB disconnect, device number 108
[ 1006.961954][ T6020] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1007.121632][ T6020] usb 4-1: Using ep0 maxpacket: 8
[ 1007.123993][ T6020] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1007.125165][ T6020] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1007.125214][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1007.125241][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1007.125264][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[ 1007.125289][ T6020] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[ 1007.125312][ T6020] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1007.125332][ T6020] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5
[ 1007.127628][ T6020] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[ 1007.127655][ T6020] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1007.127801][ T6020] usb 4-1: Product: syz
[ 1007.127817][ T6020] usb 4-1: Manufacturer: syz
[ 1007.127832][ T6020] usb 4-1: SerialNumber: syz
[ 1007.181831][   T31] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1007.211650][ T1563] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1007.271082][ T6020] usb 4-1: config 0 descriptor??
[ 1007.273243][T17703] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1007.293989][ T6020] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1007.361696][ T1563] usb 2-1: Using ep0 maxpacket: 32
[ 1007.364097][ T1563] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1007.364126][ T1563] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1007.368411][ T1563] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1007.368437][ T1563] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1007.368458][ T1563] usb 2-1: Product: syz
[ 1007.368472][ T1563] usb 2-1: Manufacturer: syz
[ 1007.381637][   T31] usb 5-1: Using ep0 maxpacket: 32
[ 1007.384123][   T31] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1007.384149][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1007.397499][ T1563] hub 2-1:4.0: USB hub found
[ 1007.462176][   T31] usb 5-1: config 0 descriptor??
[ 1007.468385][   T31] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1007.562493][ T6020] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1007.732173][ T1563] hub 2-1:4.0: 2 ports detected
[ 1007.884908][T17714] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[ 1008.000278][T17714] hpfs: Bad magic ... probably not HPFS
[ 1008.279698][   T31] gspca_sunplus: reg_w_riv err -110
[ 1008.280557][   T31] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[ 1008.651134][T17710] udevd[17710]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1008.724334][T17716] input: syz1 as /devices/virtual/input/input43
[ 1008.802797][ T1563] hub 2-1:4.0: hub_hub_status failed (err = -71)
[ 1008.802824][ T1563] hub 2-1:4.0: config failed, can't get hub status (err -71)
[ 1008.852924][ T1563] usb 2-1: USB disconnect, device number 109
[ 1009.628099][ T1563] usb 5-1: USB disconnect, device number 121
[ 1009.768720][T15149] usb 4-1: USB disconnect, device number 112
[ 1010.607869][T17729] netlink: 'syz.4.4077': attribute type 4 has an invalid length.
[ 1010.723125][T17731] netlink: 'syz.4.4077': attribute type 4 has an invalid length.
[ 1012.317236][ T1563] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1012.504534][ T6020] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1012.803620][ T1563] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1012.803638][ T1563] usb 5-1: config 1 has no interface number 0
[ 1012.803661][ T1563] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1012.803676][ T1563] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1012.803688][ T1563] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1012.806265][ T1563] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1012.806281][ T1563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.806291][ T1563] usb 5-1: Product: syz
[ 1012.806299][ T1563] usb 5-1: Manufacturer: syz
[ 1012.806306][ T1563] usb 5-1: SerialNumber: syz
[ 1012.814305][T17726] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1012.861759][ T6020] usb 2-1: Using ep0 maxpacket: 8
[ 1012.906868][ T6020] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1012.906895][ T6020] usb 2-1: config 179 has no interface number 0
[ 1012.906939][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1012.906964][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1012.906990][ T6020] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1012.907012][ T6020] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1012.907052][ T6020] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1012.907074][ T6020] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.994506][T17741] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1013.016228][T17726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.016508][T17726] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.018304][ T1563] usb 5-1: Error in usbnet_get_endpoints (-71)
[ 1013.051718][   T31] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[ 1013.085721][ T1563] usb 5-1: USB disconnect, device number 122
[ 1013.101785][T15149] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1013.181662][   T31] usb 4-1: device descriptor read/64, error -71
[ 1013.202076][T17741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1013.202644][T17741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1013.252137][T15149] usb 3-1: device descriptor read/64, error -71
[ 1013.492949][T15149] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1013.701737][T15149] usb 3-1: device descriptor read/64, error -71
[ 1013.721846][   T31] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1013.817261][T15149] usb usb3-port1: attempt power cycle
[ 1014.021675][   T31] usb 4-1: device descriptor read/64, error -71
[ 1014.212116][T15149] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1014.245205][T15149] usb 3-1: device descriptor read/8, error -71
[ 1014.297671][   T31] usb usb4-port1: attempt power cycle
[ 1014.512153][T15149] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1014.542336][T15149] usb 3-1: device descriptor read/8, error -71
[ 1014.661060][T15149] usb usb3-port1: unable to enumerate USB device
[ 1014.762047][ T5882] usb 2-1: USB disconnect, device number 110
[ 1015.162259][ T5881] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1015.431647][   T31] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1015.463827][ T5881] usb 3-1: Using ep0 maxpacket: 32
[ 1015.464496][   T31] usb 4-1: Using ep0 maxpacket: 32
[ 1015.470327][   T31] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1015.470354][   T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1015.473379][ T5881] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1015.473406][ T5881] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1015.476017][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1015.476042][ T5881] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1015.476063][ T5881] usb 3-1: Product: syz
[ 1015.476077][ T5881] usb 3-1: Manufacturer: syz
[ 1015.490290][   T31] usb 4-1: config 0 descriptor??
[ 1015.740910][T17772] bridge0: entered promiscuous mode
[ 1015.741794][T17772] macvlan0: entered allmulticast mode
[ 1015.741834][T17772] bridge0: entered allmulticast mode
[ 1015.760277][T17772] bridge0: port 3(macvlan0) entered blocking state
[ 1015.761345][T17772] bridge0: port 3(macvlan0) entered disabled state
[ 1016.397702][ T5881] hub 3-1:4.0: USB hub found
[ 1016.400418][   T31] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1016.421928][ T5881] hub 3-1:4.0: 2 ports detected
[ 1016.444211][T17772] bridge0: left allmulticast mode
[ 1016.444242][T17772] bridge0: left promiscuous mode
[ 1016.932006][   T31] gspca_sunplus: reg_w_riv err -110
[ 1016.932153][   T31] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[ 1017.188537][   T10] usb 4-1: USB disconnect, device number 115
[ 1017.260573][T17795] FAULT_INJECTION: forcing a failure.
[ 1017.260573][T17795] name failslab, interval 1, probability 0, space 0, times 0
[ 1017.260608][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.4.4095 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1017.260637][T17795] Tainted: [L]=SOFTLOCKUP
[ 1017.260645][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1017.260657][T17795] Call Trace:
[ 1017.260665][T17795]  <TASK>
[ 1017.260674][T17795]  dump_stack_lvl+0xe8/0x150
[ 1017.260710][T17795]  should_fail_ex+0x46b/0x600
[ 1017.260756][T17795]  should_failslab+0xa8/0x100
[ 1017.260789][T17795]  __kmalloc_noprof+0xdf/0x7b0
[ 1017.260818][T17795]  ? tomoyo_encode+0x28b/0x550
[ 1017.260852][T17795]  tomoyo_encode+0x28b/0x550
[ 1017.260886][T17795]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1017.260927][T17795]  ? tomoyo_path_number_perm+0x219/0x630
[ 1017.260954][T17795]  tomoyo_path_number_perm+0x246/0x630
[ 1017.260982][T17795]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1017.261010][T17795]  ? __lock_acquire+0x6b5/0x2cf0
[ 1017.261060][T17795]  ? __fget_files+0x2a/0x420
[ 1017.261087][T17795]  ? __fget_files+0x2a/0x420
[ 1017.261109][T17795]  ? __fget_files+0x3a6/0x420
[ 1017.261131][T17795]  ? __fget_files+0x2a/0x420
[ 1017.261158][T17795]  security_file_ioctl+0xc3/0x2a0
[ 1017.261187][T17795]  __se_sys_ioctl+0x47/0x170
[ 1017.261219][T17795]  do_syscall_64+0x14d/0xf80
[ 1017.261246][T17795]  ? trace_irq_disable+0x3b/0x150
[ 1017.261268][T17795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1017.261288][T17795]  ? clear_bhb_loop+0x40/0x90
[ 1017.261312][T17795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1017.261331][T17795] RIP: 0033:0x7f257c00c799
[ 1017.261349][T17795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1017.261366][T17795] RSP: 002b:00007f257a266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1017.261387][T17795] RAX: ffffffffffffffda RBX: 00007f257c285fa0 RCX: 00007f257c00c799
[ 1017.261402][T17795] RDX: 0000000000000000 RSI: 0000000000004142 RDI: 0000000000000005
[ 1017.261414][T17795] RBP: 00007f257a266090 R08: 0000000000000000 R09: 0000000000000000
[ 1017.261427][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1017.261439][T17795] R13: 00007f257c286038 R14: 00007f257c285fa0 R15: 00007fff093136e8
[ 1017.261470][T17795]  </TASK>
[ 1017.261491][T17795] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1017.973766][ T5881] hub 3-1:4.0: hub_hub_status failed (err = -32)
[ 1017.973792][ T5881] hub 3-1:4.0: config failed, can't get hub status (err -32)
[ 1018.619623][T17802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1018.656680][ T5882] usb 3-1: USB disconnect, device number 81
[ 1019.078577][   T10] usb 4-1: new full-speed USB device number 116 using dummy_hcd
[ 1019.215513][T17808] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4101'.
[ 1019.525919][T17812] bridge0: entered promiscuous mode
[ 1019.526158][T17812] macvlan2: entered allmulticast mode
[ 1019.526198][T17812] bridge0: entered allmulticast mode
[ 1019.529818][T17812] bridge0: port 3(macvlan2) entered blocking state
[ 1019.530050][T17812] bridge0: port 3(macvlan2) entered disabled state
[ 1020.644599][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1020.645326][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[ 1020.646704][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.646727][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1020.687353][   T10] usb 4-1: string descriptor 0 read error: -22
[ 1020.687502][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1020.687526][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.800431][T17812] bridge0: left allmulticast mode
[ 1020.800482][T17812] bridge0: left promiscuous mode
[ 1020.841330][   T10] usb 4-1: 0:2 : does not exist
[ 1021.111671][ T1563] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1022.209080][   T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1022.218707][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1022.227631][   T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[ 1022.298445][ T1563] usb 1-1: device descriptor read/all, error -71
[ 1022.408423][   T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1022.466629][   T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1022.476324][T17838] No control pipe specified
[ 1023.951629][   T10] usb 4-1: USB disconnect, device number 116
[ 1024.061648][ T5915] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1024.221681][ T5915] usb 2-1: Using ep0 maxpacket: 8
[ 1024.223463][ T5915] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1024.223488][ T5915] usb 2-1: config 179 has no interface number 0
[ 1024.223531][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1024.223553][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1024.223567][ T5915] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1024.223579][ T5915] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1024.223602][ T5915] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1024.223613][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.228452][T17835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1024.331697][   T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1024.438550][T17835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.440093][T17835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.441739][ T1563] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1024.521714][   T10] usb 4-1: Using ep0 maxpacket: 32
[ 1024.532534][   T10] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1024.532560][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1024.566306][   T10] usb 4-1: config 0 descriptor??
[ 1024.600676][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1024.601834][ T1563] usb 5-1: Using ep0 maxpacket: 32
[ 1024.617045][ T1563] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1024.617075][ T1563] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1024.618890][ T1563] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1024.618905][ T1563] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1024.618916][ T1563] usb 5-1: Product: syz
[ 1024.618924][ T1563] usb 5-1: Manufacturer: syz
[ 1024.689827][ T1563] hub 5-1:4.0: USB hub found
[ 1025.464405][   T10] gspca_sunplus: reg_w_riv err -110
[ 1025.467022][   T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110
[ 1025.759434][ T1563] hub 5-1:4.0: 2 ports detected
[ 1025.820570][ T5915] usb 2-1: USB disconnect, device number 111
[ 1025.871638][   T31] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[ 1025.956193][T17862] FAULT_INJECTION: forcing a failure.
[ 1025.956193][T17862] name failslab, interval 1, probability 0, space 0, times 0
[ 1025.956225][T17862] CPU: 1 UID: 0 PID: 17862 Comm: syz.1.4114 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1025.956253][T17862] Tainted: [L]=SOFTLOCKUP
[ 1025.956260][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1025.956272][T17862] Call Trace:
[ 1025.956280][T17862]  <TASK>
[ 1025.956289][T17862]  dump_stack_lvl+0xe8/0x150
[ 1025.956324][T17862]  should_fail_ex+0x46b/0x600
[ 1025.956344][T17862]  should_failslab+0xa8/0x100
[ 1025.956361][T17862]  __kmalloc_noprof+0xdf/0x7b0
[ 1025.956382][T17862]  ? tomoyo_encode+0x28b/0x550
[ 1025.956417][T17862]  tomoyo_encode+0x28b/0x550
[ 1025.956453][T17862]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1025.956491][T17862]  ? tomoyo_path_number_perm+0x219/0x630
[ 1025.956504][T17862]  tomoyo_path_number_perm+0x246/0x630
[ 1025.956518][T17862]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1025.956532][T17862]  ? __lock_acquire+0x6b5/0x2cf0
[ 1025.956581][T17862]  ? __fget_files+0x2a/0x420
[ 1025.956608][T17862]  ? __fget_files+0x2a/0x420
[ 1025.956637][T17862]  ? __fget_files+0x3a6/0x420
[ 1025.956655][T17862]  ? __fget_files+0x2a/0x420
[ 1025.956669][T17862]  security_file_ioctl+0xc3/0x2a0
[ 1025.956684][T17862]  __se_sys_ioctl+0x47/0x170
[ 1025.956701][T17862]  do_syscall_64+0x14d/0xf80
[ 1025.956727][T17862]  ? trace_irq_disable+0x3b/0x150
[ 1025.956749][T17862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.956770][T17862]  ? clear_bhb_loop+0x40/0x90
[ 1025.956795][T17862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.956815][T17862] RIP: 0033:0x7fd09f88c799
[ 1025.956827][T17862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1025.956836][T17862] RSP: 002b:00007fd09dade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1025.956848][T17862] RAX: ffffffffffffffda RBX: 00007fd09fb05fa0 RCX: 00007fd09f88c799
[ 1025.956856][T17862] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 1025.956864][T17862] RBP: 00007fd09dade090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.956876][T17862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.956888][T17862] R13: 00007fd09fb06038 R14: 00007fd09fb05fa0 R15: 00007ffcca75fc88
[ 1025.956920][T17862]  </TASK>
[ 1025.956940][T17862] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1026.111630][   T31] usb 1-1: Using ep0 maxpacket: 8
[ 1026.123433][   T31] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1026.123459][   T31] usb 1-1: config 179 has no interface number 0
[ 1026.123504][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1026.123530][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1026.123556][   T31] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1026.123577][   T31] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1026.123627][   T31] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1026.123650][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1026.290195][T17854] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[ 1026.360487][T17868] FAULT_INJECTION: forcing a failure.
[ 1026.360487][T17868] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.360523][T17868] CPU: 1 UID: 0 PID: 17868 Comm: syz.1.4115 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1026.360550][T17868] Tainted: [L]=SOFTLOCKUP
[ 1026.360558][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1026.360570][T17868] Call Trace:
[ 1026.360578][T17868]  <TASK>
[ 1026.360586][T17868]  dump_stack_lvl+0xe8/0x150
[ 1026.360619][T17868]  should_fail_ex+0x46b/0x600
[ 1026.360640][T17868]  should_failslab+0xa8/0x100
[ 1026.360658][T17868]  __kmalloc_noprof+0xdf/0x7b0
[ 1026.360687][T17868]  ? tomoyo_encode+0x28b/0x550
[ 1026.360722][T17868]  tomoyo_encode+0x28b/0x550
[ 1026.360754][T17868]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1026.360793][T17868]  ? tomoyo_path_number_perm+0x219/0x630
[ 1026.360819][T17868]  tomoyo_path_number_perm+0x246/0x630
[ 1026.360847][T17868]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1026.360875][T17868]  ? __lock_acquire+0x6b5/0x2cf0
[ 1026.360929][T17868]  ? __fget_files+0x2a/0x420
[ 1026.360947][T17868]  ? __fget_files+0x2a/0x420
[ 1026.360957][T17868]  ? __fget_files+0x3a6/0x420
[ 1026.360968][T17868]  ? __fget_files+0x2a/0x420
[ 1026.360981][T17868]  security_file_ioctl+0xc3/0x2a0
[ 1026.361009][T17868]  __se_sys_ioctl+0x47/0x170
[ 1026.361041][T17868]  do_syscall_64+0x14d/0xf80
[ 1026.361068][T17868]  ? trace_irq_disable+0x3b/0x150
[ 1026.361091][T17868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.361107][T17868]  ? clear_bhb_loop+0x40/0x90
[ 1026.361120][T17868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.361130][T17868] RIP: 0033:0x7fd09f88c799
[ 1026.361141][T17868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.361153][T17868] RSP: 002b:00007fd09dade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1026.361175][T17868] RAX: ffffffffffffffda RBX: 00007fd09fb05fa0 RCX: 00007fd09f88c799
[ 1026.361189][T17868] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003
[ 1026.361202][T17868] RBP: 00007fd09dade090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.361215][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1026.361227][T17868] R13: 00007fd09fb06038 R14: 00007fd09fb05fa0 R15: 00007ffcca75fc88
[ 1026.361259][T17868]  </TASK>
[ 1026.361275][T17868] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1026.686626][T17854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1026.688016][T17854] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1026.767016][T17872] FAULT_INJECTION: forcing a failure.
[ 1026.767016][T17872] name failslab, interval 1, probability 0, space 0, times 0
[ 1026.767074][T17872] CPU: 1 UID: 0 PID: 17872 Comm: syz.1.4116 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1026.767102][T17872] Tainted: [L]=SOFTLOCKUP
[ 1026.767110][T17872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1026.767122][T17872] Call Trace:
[ 1026.767130][T17872]  <TASK>
[ 1026.767140][T17872]  dump_stack_lvl+0xe8/0x150
[ 1026.767175][T17872]  should_fail_ex+0x46b/0x600
[ 1026.767212][T17872]  should_failslab+0xa8/0x100
[ 1026.767245][T17872]  kmem_cache_alloc_node_noprof+0x8f/0x6e0
[ 1026.767274][T17872]  ? __alloc_skb+0x1d0/0x7d0
[ 1026.767296][T17872]  ? __local_bh_enable_ip+0x1c2/0x2b0
[ 1026.767329][T17872]  __alloc_skb+0x1d0/0x7d0
[ 1026.767357][T17872]  netlink_sendmsg+0x5d4/0xb40
[ 1026.767389][T17872]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1026.767419][T17872]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1026.767450][T17872]  ____sys_sendmsg+0xa4e/0xac0
[ 1026.767487][T17872]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1026.767522][T17872]  ? import_iovec+0x73/0xa0
[ 1026.767549][T17872]  ___sys_sendmsg+0x2a5/0x360
[ 1026.767587][T17872]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1026.767646][T17872]  ? __fget_files+0x2a/0x420
[ 1026.767669][T17872]  ? __fget_files+0x3a6/0x420
[ 1026.767702][T17872]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 1026.767732][T17872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1026.767768][T17872]  ? rcu_is_watching+0x15/0xb0
[ 1026.767801][T17872]  do_syscall_64+0x14d/0xf80
[ 1026.767828][T17872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.767849][T17872]  ? clear_bhb_loop+0x40/0x90
[ 1026.767873][T17872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1026.767893][T17872] RIP: 0033:0x7fd09f88c799
[ 1026.767912][T17872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1026.767929][T17872] RSP: 002b:00007fd09da9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1026.767952][T17872] RAX: ffffffffffffffda RBX: 00007fd09fb06180 RCX: 00007fd09f88c799
[ 1026.767968][T17872] RDX: 0000000000008080 RSI: 0000200000000340 RDI: 0000000000000006
[ 1026.767982][T17872] RBP: 00007fd09da9c090 R08: 0000000000000000 R09: 0000000000000000
[ 1026.767995][T17872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1026.768007][T17872] R13: 00007fd09fb06218 R14: 00007fd09fb06180 R15: 00007ffcca75fc88
[ 1026.768039][T17872]  </TASK>
[ 1027.517594][T15149] hub 5-1:4.0: hub_ext_port_status failed (err = -32)
[ 1027.777311][T17882] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4119'.
[ 1027.854360][T17885] No control pipe specified
[ 1029.426831][ T5881] usb 4-1: USB disconnect, device number 117
[ 1030.161699][ T5881] usb 1-1: USB disconnect, device number 78
[ 1030.380104][   T31] usb 5-1: USB disconnect, device number 123
[ 1030.571690][ T5881] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1030.732093][ T5881] usb 1-1: Using ep0 maxpacket: 8
[ 1030.734005][ T5881] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1030.734031][ T5881] usb 1-1: config 179 has no interface number 0
[ 1030.734075][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1030.734093][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1030.734108][ T5881] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1030.734119][ T5881] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1030.734143][ T5881] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1030.734155][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1030.858083][T17903] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1031.390048][T17921] bridge0: entered promiscuous mode
[ 1031.390161][T17921] macvlan2: entered allmulticast mode
[ 1031.390187][T17921] bridge0: entered allmulticast mode
[ 1031.408443][T17921] bridge0: port 3(macvlan2) entered blocking state
[ 1031.409402][T17921] bridge0: port 3(macvlan2) entered disabled state
[ 1035.977050][T17921] bridge0: left allmulticast mode
[ 1035.977082][T17921] bridge0: left promiscuous mode
[ 1037.042342][ T5881] usb 1-1: USB disconnect, device number 79
[ 1037.102071][T17935] netlink: 'syz.4.4129': attribute type 4 has an invalid length.
[ 1037.153297][T17940] netlink: 'syz.4.4129': attribute type 4 has an invalid length.
[ 1037.160763][T17924] bridge0: entered promiscuous mode
[ 1037.160832][T17924] macvlan2: entered allmulticast mode
[ 1037.160840][T17924] bridge0: entered allmulticast mode
[ 1037.161946][T17924] bridge0: port 3(macvlan2) entered blocking state
[ 1037.162027][T17924] bridge0: port 3(macvlan2) entered disabled state
[ 1037.257987][T17924] bridge0: left allmulticast mode
[ 1037.258019][T17924] bridge0: left promiscuous mode
[ 1037.841359][T17944] netlink: 'syz.0.4130': attribute type 4 has an invalid length.
[ 1038.111813][T17946] netlink: 'syz.0.4130': attribute type 4 has an invalid length.
[ 1038.768220][ T5881] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1038.981018][T15149] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[ 1039.003913][ T5881] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1039.003938][ T5881] usb 1-1: config 1 has no interface number 0
[ 1039.003980][ T5881] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1039.004005][ T5881] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1039.004030][ T5881] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1039.007306][ T5881] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1039.007321][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.007331][ T5881] usb 1-1: Product: syz
[ 1039.007339][ T5881] usb 1-1: Manufacturer: syz
[ 1039.007352][ T5881] usb 1-1: SerialNumber: syz
[ 1039.090782][T17943] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1039.144158][T15149] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1039.144186][T15149] usb 5-1: config 1 has no interface number 0
[ 1039.144228][T15149] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1039.144255][T15149] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1039.144280][T15149] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1039.147477][T15149] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1039.147503][T15149] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.147523][T15149] usb 5-1: Product: syz
[ 1039.147537][T15149] usb 5-1: Manufacturer: syz
[ 1039.147552][T15149] usb 5-1: SerialNumber: syz
[ 1039.153725][T17932] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1039.297349][T17943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.297640][T17943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.300126][ T5881] usb 1-1: Error in usbnet_get_endpoints (-71)
[ 1039.343488][ T5881] usb 1-1: USB disconnect, device number 80
[ 1039.358696][T17932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.358974][T17932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.553825][T15149] usb 5-1: Error in usbnet_get_endpoints (-71)
[ 1039.592695][T15149] usb 5-1: USB disconnect, device number 124
[ 1040.584870][T17956] bridge0: entered promiscuous mode
[ 1040.584969][T17956] macvlan0: entered allmulticast mode
[ 1040.584983][T17956] bridge0: entered allmulticast mode
[ 1040.586332][T17956] bridge0: port 3(macvlan0) entered blocking state
[ 1040.586402][T17956] bridge0: port 3(macvlan0) entered disabled state
[ 1040.717301][T17959] No control pipe specified
[ 1040.718171][T17956] bridge0: left allmulticast mode
[ 1040.718227][T17956] bridge0: left promiscuous mode
[ 1042.173615][   T37] audit: type=1326 audit(1772342673.242:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.173948][   T37] audit: type=1326 audit(1772342673.242:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.174210][   T37] audit: type=1326 audit(1772342673.242:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.174500][   T37] audit: type=1326 audit(1772342673.242:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.174757][   T37] audit: type=1326 audit(1772342673.242:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.175050][   T37] audit: type=1326 audit(1772342673.242:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.175301][   T37] audit: type=1326 audit(1772342673.242:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.175588][   T37] audit: type=1326 audit(1772342673.242:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09f84cfce code=0x7ffc0000
[ 1042.176116][   T37] audit: type=1326 audit(1772342673.242:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09f84cfce code=0x7ffc0000
[ 1042.176612][   T37] audit: type=1326 audit(1772342673.242:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17967 comm="syz.1.4138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09f88c799 code=0x7ffc0000
[ 1042.221687][T15149] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1042.322647][T17968] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4138'.
[ 1042.391639][T15149] usb 4-1: Using ep0 maxpacket: 32
[ 1042.395412][T15149] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1042.395439][T15149] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1042.399435][T15149] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1042.399460][T15149] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1042.399479][T15149] usb 4-1: Product: syz
[ 1042.399494][T15149] usb 4-1: Manufacturer: syz
[ 1042.439860][T15149] hub 4-1:4.0: USB hub found
[ 1042.629961][T15149] hub 4-1:4.0: 2 ports detected
[ 1043.144085][ T1563] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1043.291710][ T1563] usb 2-1: Using ep0 maxpacket: 8
[ 1043.298960][ T1563] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1043.298986][ T1563] usb 2-1: config 179 has no interface number 0
[ 1043.299656][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1043.299739][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1043.299767][ T1563] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1043.299789][ T1563] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1043.299830][ T1563] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1043.300238][ T1563] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.424414][T17972] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1043.720679][T17972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1043.737860][T17972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1045.648143][ T1563] hub 4-1:4.0: hub_ext_port_status failed (err = -32)
[ 1047.342249][ T5852] usb 4-1: USB disconnect, device number 118
[ 1049.074325][ T5852] usb 2-1: USB disconnect, device number 112
[ 1049.171683][ T1563] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1049.500685][T18005] netlink: 'syz.1.4145': attribute type 3 has an invalid length.
[ 1050.496256][ T1563] usb 5-1: Using ep0 maxpacket: 32
[ 1050.496447][T15149] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1050.503008][ T1563] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1050.503035][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1050.773302][ T1563] usb 5-1: config 0 descriptor??
[ 1050.821118][ T1563] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1051.923153][ T1563] gspca_sunplus: reg_w_riv err -110
[ 1051.923306][ T1563] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[ 1052.145828][ T5852] usb 5-1: USB disconnect, device number 125
[ 1052.276024][T15149] usb 3-1: device descriptor read/all, error -71
[ 1053.081834][T18024] netlink: 'syz.1.4151': attribute type 4 has an invalid length.
[ 1053.182231][T18024] netlink: 'syz.1.4151': attribute type 4 has an invalid length.
[ 1054.495664][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.495733][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.501476][   T31] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1054.592231][T18029] netlink: 'syz.2.4150': attribute type 4 has an invalid length.
[ 1054.597031][T18029] netlink: 'syz.2.4150': attribute type 4 has an invalid length.
[ 1054.681148][   T31] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[ 1054.681165][   T31] usb 2-1: config 1 has no interface number 0
[ 1054.681189][   T31] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1054.681202][   T31] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1054.681215][   T31] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1054.683931][   T31] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1054.683947][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.683957][   T31] usb 2-1: Product: syz
[ 1054.683964][   T31] usb 2-1: Manufacturer: syz
[ 1054.683972][   T31] usb 2-1: SerialNumber: syz
[ 1054.689416][T18024] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1054.891456][T18024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.891814][T18024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1054.894009][   T31] usb 2-1: Error in usbnet_get_endpoints (-71)
[ 1054.937206][   T31] usb 2-1: USB disconnect, device number 113
[ 1054.944822][ T5852] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1055.103449][ T5852] usb 5-1: Using ep0 maxpacket: 32
[ 1055.107510][ T5852] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1055.107538][ T5852] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1055.121649][T15149] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1055.144168][ T5852] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1055.144194][ T5852] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1055.144215][ T5852] usb 5-1: Product: syz
[ 1055.144228][ T5852] usb 5-1: Manufacturer: syz
[ 1055.184336][ T5852] hub 5-1:4.0: USB hub found
[ 1055.275832][T15149] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[ 1055.275859][T15149] usb 3-1: config 1 has no interface number 0
[ 1055.275902][T15149] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1055.275927][T15149] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1055.275951][T15149] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1055.280687][T15149] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1055.280713][T15149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1055.280734][T15149] usb 3-1: Product: syz
[ 1055.280748][T15149] usb 3-1: Manufacturer: syz
[ 1055.280761][T15149] usb 3-1: SerialNumber: syz
[ 1055.370451][T18029] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1055.521686][ T5852] hub 5-1:4.0: 2 ports detected
[ 1055.577741][T18029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.578044][T18029] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.613665][T15149] usb 3-1: Error in usbnet_get_endpoints (-71)
[ 1055.645992][T15149] usb 3-1: USB disconnect, device number 84
[ 1055.670882][T18034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4154'.
[ 1056.988571][ T5852] usb 5-1: USB disconnect, device number 126
[ 1059.046997][T18040] netlink: 'syz.3.4152': attribute type 4 has an invalid length.
[ 1059.125130][T18040] netlink: 'syz.3.4152': attribute type 4 has an invalid length.
[ 1060.831705][ T5915] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1060.984946][ T5915] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[ 1060.984974][ T5915] usb 4-1: config 1 has no interface number 0
[ 1060.985031][ T5915] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1060.985057][ T5915] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1060.985083][ T5915] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1060.988111][ T5915] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1060.988139][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.988159][ T5915] usb 4-1: Product: syz
[ 1060.988172][ T5915] usb 4-1: Manufacturer: syz
[ 1060.988187][ T5915] usb 4-1: SerialNumber: syz
[ 1061.544915][ T5915] usb 4-1: can't set config #1, error -71
[ 1061.572210][ T5915] usb 4-1: USB disconnect, device number 119
[ 1062.071642][ T1563] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1062.233603][ T1563] usb 2-1: no configurations
[ 1062.233622][ T1563] usb 2-1: can't read configurations, error -22
[ 1062.361685][ T1563] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1062.567589][ T1563] usb 2-1: no configurations
[ 1062.567657][ T1563] usb 2-1: can't read configurations, error -22
[ 1062.590799][ T1563] usb usb2-port1: attempt power cycle
[ 1062.672199][ T5915] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[ 1063.051686][ T1563] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1063.084077][ T1563] usb 2-1: no configurations
[ 1063.084096][ T1563] usb 2-1: can't read configurations, error -22
[ 1063.183918][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1063.183943][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1063.186352][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1063.186378][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1063.186398][ T5915] usb 1-1: SerialNumber: syz
[ 1063.238277][ T1563] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1063.256135][ T1563] usb 2-1: no configurations
[ 1063.256152][ T1563] usb 2-1: can't read configurations, error -22
[ 1063.256464][ T1563] usb usb2-port1: unable to enumerate USB device
[ 1063.287757][ T5915] usb 1-1: 0:2 : does not exist
[ 1063.287846][ T5915] usb 1-1: unit 17 not found!
[ 1063.895164][T18065] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.0)
[ 1063.956359][ T1563] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1064.374375][ T1563] usb 5-1: Using ep0 maxpacket: 32
[ 1064.376642][ T1563] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1064.376670][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.413618][ T1563] usb 5-1: config 0 descriptor??
[ 1064.448509][ T1563] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1064.606958][T18071] FAULT_INJECTION: forcing a failure.
[ 1064.606958][T18071] name failslab, interval 1, probability 0, space 0, times 0
[ 1064.606994][T18071] CPU: 0 UID: 0 PID: 18071 Comm: syz.1.4164 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1064.607026][T18071] Tainted: [L]=SOFTLOCKUP
[ 1064.607034][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1064.607046][T18071] Call Trace:
[ 1064.607054][T18071]  <TASK>
[ 1064.607063][T18071]  dump_stack_lvl+0xe8/0x150
[ 1064.607105][T18071]  should_fail_ex+0x46b/0x600
[ 1064.607142][T18071]  should_failslab+0xa8/0x100
[ 1064.607175][T18071]  __kmalloc_cache_node_noprof+0x8a/0x6c0
[ 1064.607207][T18071]  ? __get_vm_area_node+0x171/0x350
[ 1064.607238][T18071]  __get_vm_area_node+0x171/0x350
[ 1064.607270][T18071]  __vmalloc_node_range_noprof+0x372/0x1730
[ 1064.607300][T18071]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.607340][T18071]  ? __lock_acquire+0x6b5/0x2cf0
[ 1064.607367][T18071]  ? kernel_text_address+0xa5/0xe0
[ 1064.607395][T18071]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1064.607424][T18071]  ? arch_stack_walk+0xfb/0x150
[ 1064.607456][T18071]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.607478][T18071]  __vmalloc_noprof+0xd2/0x120
[ 1064.607506][T18071]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.607533][T18071]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.607563][T18071]  bpf_prog_alloc+0x3c/0x1a0
[ 1064.607590][T18071]  bpf_prog_load+0x7ba/0x1ae0
[ 1064.607629][T18071]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1064.607674][T18071]  ? bpf_lsm_bpf+0x9/0x20
[ 1064.607692][T18071]  ? security_bpf+0x7e/0x2d0
[ 1064.607724][T18071]  __sys_bpf+0x618/0x950
[ 1064.607749][T18071]  ? __pfx___sys_bpf+0x10/0x10
[ 1064.607770][T18071]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1064.607808][T18071]  ? ksys_write+0x248/0x270
[ 1064.607837][T18071]  ? __pfx_ksys_write+0x10/0x10
[ 1064.607871][T18071]  __x64_sys_bpf+0x7c/0x90
[ 1064.607893][T18071]  do_syscall_64+0x14d/0xf80
[ 1064.607919][T18071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1064.607939][T18071]  ? clear_bhb_loop+0x40/0x90
[ 1064.607964][T18071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1064.607983][T18071] RIP: 0033:0x7fd09f88c799
[ 1064.608002][T18071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1064.608020][T18071] RSP: 002b:00007fd09dade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1064.608042][T18071] RAX: ffffffffffffffda RBX: 00007fd09fb05fa0 RCX: 00007fd09f88c799
[ 1064.608057][T18071] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005
[ 1064.608070][T18071] RBP: 00007fd09dade090 R08: 0000000000000000 R09: 0000000000000000
[ 1064.608089][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1064.608102][T18071] R13: 00007fd09fb06038 R14: 00007fd09fb05fa0 R15: 00007ffcca75fc88
[ 1064.608134][T18071]  </TASK>
[ 1064.608245][T18071] syz.1.4164: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1064.608312][T18071] CPU: 0 UID: 0 PID: 18071 Comm: syz.1.4164 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1064.608339][T18071] Tainted: [L]=SOFTLOCKUP
[ 1064.608347][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1064.608358][T18071] Call Trace:
[ 1064.608366][T18071]  <TASK>
[ 1064.608374][T18071]  dump_stack_lvl+0xe8/0x150
[ 1064.608406][T18071]  warn_alloc+0x263/0x3e0
[ 1064.608444][T18071]  ? __pfx_warn_alloc+0x10/0x10
[ 1064.608471][T18071]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[ 1064.608498][T18071]  ? __get_vm_area_node+0x171/0x350
[ 1064.608526][T18071]  ? __get_vm_area_node+0x2e1/0x350
[ 1064.608558][T18071]  __vmalloc_node_range_noprof+0x397/0x1730
[ 1064.608598][T18071]  ? __lock_acquire+0x6b5/0x2cf0
[ 1064.608624][T18071]  ? kernel_text_address+0xa5/0xe0
[ 1064.608651][T18071]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1064.608678][T18071]  ? arch_stack_walk+0xfb/0x150
[ 1064.608710][T18071]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.608733][T18071]  __vmalloc_noprof+0xd2/0x120
[ 1064.608760][T18071]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.608788][T18071]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[ 1064.608817][T18071]  bpf_prog_alloc+0x3c/0x1a0
[ 1064.608843][T18071]  bpf_prog_load+0x7ba/0x1ae0
[ 1064.608881][T18071]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1064.608924][T18071]  ? bpf_lsm_bpf+0x9/0x20
[ 1064.608943][T18071]  ? security_bpf+0x7e/0x2d0
[ 1064.608972][T18071]  __sys_bpf+0x618/0x950
[ 1064.608998][T18071]  ? __pfx___sys_bpf+0x10/0x10
[ 1064.609020][T18071]  ? rt_mutex_slowunlock+0x1cb/0x300
[ 1064.609055][T18071]  ? ksys_write+0x248/0x270
[ 1064.609090][T18071]  ? __pfx_ksys_write+0x10/0x10
[ 1064.609125][T18071]  __x64_sys_bpf+0x7c/0x90
[ 1064.609146][T18071]  do_syscall_64+0x14d/0xf80
[ 1064.609172][T18071]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1064.609193][T18071]  ? clear_bhb_loop+0x40/0x90
[ 1064.609218][T18071]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1064.609238][T18071] RIP: 0033:0x7fd09f88c799
[ 1064.609256][T18071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1064.609273][T18071] RSP: 002b:00007fd09dade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1064.609293][T18071] RAX: ffffffffffffffda RBX: 00007fd09fb05fa0 RCX: 00007fd09f88c799
[ 1064.609307][T18071] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005
[ 1064.609320][T18071] RBP: 00007fd09dade090 R08: 0000000000000000 R09: 0000000000000000
[ 1064.609333][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1064.609345][T18071] R13: 00007fd09fb06038 R14: 00007fd09fb05fa0 R15: 00007ffcca75fc88
[ 1064.609377][T18071]  </TASK>
[ 1064.609464][T18071] Mem-Info:
[ 1064.609474][T18071] active_anon:3133 inactive_anon:8393 isolated_anon:0
[ 1064.609474][T18071]  active_file:29555 inactive_file:40296 isolated_file:0
[ 1064.609474][T18071]  unevictable:768 dirty:217 writeback:13
[ 1064.609474][T18071]  slab_reclaimable:13152 slab_unreclaimable:105624
[ 1064.609474][T18071]  mapped:31945 shmem:6981 pagetables:1549
[ 1064.609474][T18071]  sec_pagetables:0 bounce:0
[ 1064.609474][T18071]  kernel_misc_reclaimable:0
[ 1064.609474][T18071]  free:1278521 free_pcp:11005 free_cma:0
[ 1064.609528][T18071] Node 0 active_anon:12532kB inactive_anon:33572kB active_file:117752kB inactive_file:161184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127612kB dirty:868kB writeback:52kB shmem:26388kB kernel_stack:13628kB pagetables:6068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1064.609651][T18071] Node 1 active_anon:0kB inactive_anon:0kB active_file:468kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1064.609693][T18071] Node 0 DMA free:15348kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[ 1064.609804][T18071] lowmem_reserve[]: 0 2506 2506 2506 2506
[ 1064.609838][T18071] Node 0 DMA32 free:1169236kB boost:0kB min:3932kB low:6468kB high:9004kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12532kB inactive_anon:33572kB active_file:117752kB inactive_file:161184kB unevictable:1536kB writepending:920kB zspages:0kB present:3129332kB managed:2566628kB mlocked:0kB bounce:0kB free_pcp:43972kB local_pcp:26292kB free_cma:0kB
[ 1064.609898][T18071] lowmem_reserve[]: 0 0 0 0 0
[ 1064.609982][T18071] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:420kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1064.610035][T18071] lowmem_reserve[]: 0 0 0 0 0
[ 1064.610066][T18071] Node 1 Normal free:3929500kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:468kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1064.610364][T18071] lowmem_reserve[]: 0 0 0 0 0
[ 1064.610397][T18071] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15348kB
[ 1064.610989][T18071] Node 0 DMA32: 3563*4kB (UM) 3430*8kB (UME) 2592*16kB (UME) 715*32kB (UME) 332*64kB (UME) 467*128kB (UME) 387*256kB (UME) 185*512kB (UM) 126*1024kB (UME) 64*2048kB (UME) 129*4096kB (UM) = 1169340kB
[ 1064.621760][T18071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1064.621881][T18071] Node 1 Normal: 1*4kB (M) 5*8kB (U) 19*16kB (UME) 10*32kB (UME) 10*64kB (UME) 5*128kB (UM) 4*256kB (UM) 3*512kB (UM) 3*1024kB (UME) 3*2048kB (ME) 956*4096kB (M) = 3929500kB
[ 1064.622025][T18071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1064.622043][T18071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1064.622059][T18071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1064.622075][T18071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1064.622091][T18071] 76679 total pagecache pages
[ 1064.622099][T18071] 1 pages in swap cache
[ 1064.622105][T18071] Free swap  = 124992kB
[ 1064.622113][T18071] Total swap = 124996kB
[ 1064.622121][T18071] 2097051 pages RAM
[ 1064.622128][T18071] 0 pages HighMem/MovableOnly
[ 1064.622135][T18071] 423674 pages reserved
[ 1064.622142][T18071] 0 pages cma reserved
[ 1065.191950][ T1563] gspca_sunplus: reg_w_riv err -110
[ 1065.192047][ T1563] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[ 1065.900573][ T5915] usb 1-1: USB disconnect, device number 81
[ 1066.011996][T15149] usb 5-1: USB disconnect, device number 127
[ 1066.126902][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4167'.
[ 1066.377602][T18084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 1066.377630][T18084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1066.380980][T18084] vhci_hcd vhci_hcd.0: Device attached
[ 1066.382953][T18086] vhci_hcd: cannot find a urb of seqnum 4294967295 max seqnum 0
[ 1066.383476][ T6288] vhci_hcd vhci_hcd.4: stop threads
[ 1066.383497][ T6288] vhci_hcd vhci_hcd.4: release socket
[ 1066.383534][ T6288] vhci_hcd vhci_hcd.4: disconnect device
[ 1066.478385][T18091] bridge0: entered promiscuous mode
[ 1066.478483][T18091] macvlan2: entered allmulticast mode
[ 1066.478498][T18091] bridge0: entered allmulticast mode
[ 1066.480251][T18091] bridge0: port 3(macvlan2) entered blocking state
[ 1066.480372][T18091] bridge0: port 3(macvlan2) entered disabled state
[ 1067.788062][ T5803] Bluetooth: hci1: command 0x0406 tx timeout
[ 1068.222868][T18091] bridge0: left allmulticast mode
[ 1068.222901][T18091] bridge0: left promiscuous mode
[ 1068.321687][ T1563] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1068.457323][T18106] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1068.531703][ T1563] usb 3-1: Using ep0 maxpacket: 32
[ 1068.533964][ T1563] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1068.533988][ T1563] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1068.536875][ T1563] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae
[ 1068.536900][ T1563] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.536919][ T1563] usb 3-1: Product: syz
[ 1068.536933][ T1563] usb 3-1: Manufacturer: syz
[ 1068.536947][ T1563] usb 3-1: SerialNumber: syz
[ 1068.608355][ T1563] usb 3-1: config 0 descriptor??
[ 1068.867088][T18118] snd_dummy snd_dummy.0: control 2:14:5:syz1:10 is already present
[ 1068.951713][T16722] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1069.318736][ T6020] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1070.115746][ T1563] usb 3-1: USB disconnect, device number 85
[ 1070.424268][ T6020] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1070.424294][ T6020] usb 1-1: config 0 has no interfaces?
[ 1070.427466][ T6020] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1070.427492][ T6020] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.427519][ T6020] usb 1-1: Product: syz
[ 1070.427533][ T6020] usb 1-1: Manufacturer: syz
[ 1070.427548][ T6020] usb 1-1: SerialNumber: syz
[ 1070.446122][ T6020] usb 1-1: config 0 descriptor??
[ 1071.455347][ T6020] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[ 1071.751779][T18133] netlink: 'syz.1.4180': attribute type 4 has an invalid length.
[ 1071.823390][T18133] netlink: 'syz.1.4180': attribute type 4 has an invalid length.
[ 1071.970819][T16312] usb 1-1: USB disconnect, device number 82
[ 1072.014725][ T6020] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1072.014752][ T6020] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1072.016322][ T6020] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1072.016349][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1072.016368][ T6020] usb 5-1: SerialNumber: syz
[ 1072.074416][ T6020] usb 5-1: 0:2 : does not exist
[ 1072.074472][ T6020] usb 5-1: unit 17 not found!
[ 1072.151645][   T31] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1072.304615][   T31] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[ 1072.304642][   T31] usb 2-1: config 1 has no interface number 0
[ 1072.304685][   T31] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1072.304711][   T31] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1072.304736][   T31] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1072.307116][   T31] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1072.307143][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.307163][   T31] usb 2-1: Product: syz
[ 1072.307177][   T31] usb 2-1: Manufacturer: syz
[ 1072.307192][   T31] usb 2-1: SerialNumber: syz
[ 1072.331228][T18133] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1072.535020][T18133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1072.535547][T18133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.540126][   T31] usb 2-1: Error in usbnet_get_endpoints (-71)
[ 1072.576116][   T31] usb 2-1: USB disconnect, device number 118
[ 1072.582090][T18132] dlm: plock device version mismatch: kernel (1.2.0), user (4.0.0)
[ 1073.235901][T18148] overlayfs: failed to resolve './file1': -2
[ 1074.385025][T16312] usb 5-1: USB disconnect, device number 2
[ 1076.208528][T18163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1076.460769][   T37] kauditd_printk_skb: 84 callbacks suppressed
[ 1076.460787][   T37] audit: type=1326 audit(1772342707.522:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.464556][   T37] audit: type=1326 audit(1772342707.532:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.465116][   T37] audit: type=1326 audit(1772342707.532:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.473588][   T37] audit: type=1326 audit(1772342707.542:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.474231][   T37] audit: type=1326 audit(1772342707.542:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.474355][   T37] audit: type=1326 audit(1772342707.542:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.481685][   T37] audit: type=1326 audit(1772342707.532:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.481734][   T37] audit: type=1326 audit(1772342707.552:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.481982][   T37] audit: type=1326 audit(1772342707.552:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1076.482107][   T37] audit: type=1326 audit(1772342707.552:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18167 comm="syz.0.4187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce604dc799 code=0x7ffc0000
[ 1077.046503][ T1563] libceph: connect (1)[c::]:6789 error -101
[ 1077.046676][ T1563] libceph: mon0 (1)[c::]:6789 connect error
[ 1077.073591][ T1563] libceph: connect (1)[c::]:6789 error -101
[ 1077.073765][ T1563] libceph: mon0 (1)[c::]:6789 connect error
[ 1077.275762][T18184] ALSA: mixer_oss: invalid OSS volume ''
[ 1077.333039][T15149] libceph: connect (1)[c::]:6789 error -101
[ 1077.333216][T15149] libceph: mon0 (1)[c::]:6789 connect error
[ 1078.542375][ T1563] libceph: connect (1)[c::]:6789 error -101
[ 1078.542490][ T1563] libceph: mon0 (1)[c::]:6789 connect error
[ 1078.896453][T18197] No control pipe specified
[ 1079.662161][T18188] netlink: 'syz.3.4195': attribute type 4 has an invalid length.
[ 1079.662657][T18198] netlink: 'syz.3.4195': attribute type 4 has an invalid length.
[ 1079.689269][T18168] ceph: No mds server is up or the cluster is laggy
[ 1080.288432][ T1563] libceph: connect (1)[c::]:6789 error -101
[ 1080.288618][ T1563] libceph: mon0 (1)[c::]:6789 connect error
[ 1080.312353][T18200] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1080.438428][ T1563] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1080.619632][ T1563] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[ 1080.619659][ T1563] usb 4-1: config 1 has no interface number 0
[ 1080.619702][ T1563] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1080.619728][ T1563] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1080.619753][ T1563] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1080.622824][ T1563] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1080.622852][ T1563] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.622871][ T1563] usb 4-1: Product: syz
[ 1080.622885][ T1563] usb 4-1: Manufacturer: syz
[ 1080.622899][ T1563] usb 4-1: SerialNumber: syz
[ 1080.636226][T18201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1081.388064][T18212] netlink: 'syz.1.4202': attribute type 4 has an invalid length.
[ 1081.651824][T18214] netlink: 'syz.1.4202': attribute type 4 has an invalid length.
[ 1082.111697][ T1563] usb 4-1: Error in usbnet_get_endpoints (-71)
[ 1082.163072][ T1563] usb 4-1: USB disconnect, device number 120
[ 1082.241660][   T31] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1082.263417][T18220] ALSA: mixer_oss: invalid OSS volume ''
[ 1082.414039][   T31] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[ 1082.414066][   T31] usb 2-1: config 1 has no interface number 0
[ 1082.414108][   T31] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1082.414133][   T31] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1082.414158][   T31] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1082.417236][   T31] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1082.417251][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.417262][   T31] usb 2-1: Product: syz
[ 1082.417269][   T31] usb 2-1: Manufacturer: syz
[ 1082.417276][   T31] usb 2-1: SerialNumber: syz
[ 1082.505686][T18211] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1082.708373][T18211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.708650][T18211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.729457][   T31] usb 2-1: Error in usbnet_get_endpoints (-71)
[ 1082.762296][   T31] usb 2-1: USB disconnect, device number 119
[ 1082.771411][T18230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4208'.
[ 1087.233761][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1087.237489][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1087.239267][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1087.240380][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1087.242902][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1087.931422][T18268] program syz.1.4219 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1087.933501][T18257] lo speed is unknown, defaulting to 1000
[ 1088.871807][T18270] netlink: 'syz.4.4220': attribute type 4 has an invalid length.
[ 1088.930325][T18270] netlink: 'syz.4.4220': attribute type 4 has an invalid length.
[ 1089.185457][T18276] omfs: Invalid superblock (0)
[ 1089.232395][T18257] chnl_net:caif_netlink_parms(): no params data found
[ 1089.280834][   T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1089.382995][T16722] Bluetooth: hci2: command tx timeout
[ 1089.453934][   T31] usb 5-1: config 1 has an invalid interface number: 7 but max is 0
[ 1089.453951][   T31] usb 5-1: config 1 has no interface number 0
[ 1089.453975][   T31] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1089.453989][   T31] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1089.454003][   T31] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1089.456612][   T31] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1089.456637][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.456648][   T31] usb 5-1: Product: syz
[ 1089.456656][   T31] usb 5-1: Manufacturer: syz
[ 1089.456663][   T31] usb 5-1: SerialNumber: syz
[ 1089.542458][T18270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1089.641757][ T5915] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 1089.746271][T18270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.746553][T18270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.778507][   T31] usb 5-1: Error in usbnet_get_endpoints (-71)
[ 1089.793033][ T5915] usb 2-1: Using ep0 maxpacket: 16
[ 1089.801051][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1089.801080][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1089.801103][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1089.801115][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.813732][ T5915] usb 2-1: config 0 descriptor??
[ 1089.838797][ T5915] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1089.860846][T18257] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1089.860913][T18257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1089.861027][T18257] bridge_slave_0: entered allmulticast mode
[ 1089.870005][T18257] bridge_slave_0: entered promiscuous mode
[ 1089.877989][T18257] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1089.878111][T18257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1089.878291][T18257] bridge_slave_1: entered allmulticast mode
[ 1089.886648][T18257] bridge_slave_1: entered promiscuous mode
[ 1089.950069][   T31] usb 5-1: USB disconnect, device number 3
[ 1089.988334][T18257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1089.999893][T18257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1090.108392][T18257] team0: Port device team_slave_0 added
[ 1090.128874][T18257] team0: Port device team_slave_1 added
[ 1090.205064][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4222'.
[ 1091.402735][T18257] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.402746][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1091.402761][T18257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.404452][T18257] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.404464][T18257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1091.404478][T18257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1091.451722][T16722] Bluetooth: hci2: command tx timeout
[ 1091.584201][ T5915] usb 2-1: USB disconnect, device number 120
[ 1091.626191][T18257] hsr_slave_0: entered promiscuous mode
[ 1091.626934][T18257] hsr_slave_1: entered promiscuous mode
[ 1091.627406][T18257] debugfs: 'hsr0' already exists in 'hsr'
[ 1091.627420][T18257] Cannot create hsr debugfs directory
[ 1092.351410][T18257] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1093.534215][T16722] Bluetooth: hci2: command tx timeout
[ 1093.575959][T18318] bridge0: entered promiscuous mode
[ 1093.576018][T18318] macvlan0: entered allmulticast mode
[ 1093.576025][T18318] bridge0: entered allmulticast mode
[ 1093.577032][T18318] bridge0: port 3(macvlan0) entered blocking state
[ 1093.577099][T18318] bridge0: port 3(macvlan0) entered disabled state
[ 1093.774187][T18318] bridge0: left allmulticast mode
[ 1093.774218][T18318] bridge0: left promiscuous mode
[ 1094.150366][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306449][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306527][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306586][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306642][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306698][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306753][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306809][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306865][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1094.306920][T18321] netlink: 'syz.4.4232': attribute type 3 has an invalid length.
[ 1095.664251][T16722] Bluetooth: hci2: command tx timeout
[ 1095.743033][T18339] autofs: Unknown parameter '0x0000000000000000'
[ 1096.955803][T18257] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1098.031491][T18257] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1098.793319][T18363] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4243'.
[ 1100.211794][ T1563] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[ 1100.326404][T18257] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1100.394359][ T1563] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1100.394389][ T1563] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1100.394409][ T1563] usb 5-1: Product: syz
[ 1100.394424][ T1563] usb 5-1: Manufacturer: syz
[ 1100.394438][ T1563] usb 5-1: SerialNumber: syz
[ 1100.448592][ T1563] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1101.473123][ T1563] vp7045: USB control message 'out' went wrong.
[ 1101.473142][ T1563] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1101.473186][ T1563] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1101.485667][ T1563] usb 5-1: USB disconnect, device number 4
[ 1101.743393][T18378] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1101.802986][ T6020] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1101.919965][T18257] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1101.953830][ T6020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1101.953856][ T6020] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1101.956760][ T6020] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1101.956786][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.956805][ T6020] usb 3-1: Product: syz
[ 1101.956820][ T6020] usb 3-1: Manufacturer: syz
[ 1101.956835][ T6020] usb 3-1: SerialNumber: syz
[ 1102.227319][ T6020] usb 3-1: config 0 descriptor??
[ 1103.115777][T16722] Bluetooth: hci4: unexpected event for opcode 0x2006
[ 1103.207271][ T6020] usb 3-1: USB disconnect, device number 86
[ 1103.210235][T18257] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1103.286584][T18257] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1103.348343][T18257] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1103.415953][T18394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4254'.
[ 1104.942525][T18257] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1104.994803][T18257] 8021q: adding VLAN 0 to HW filter on device team0
[ 1105.087945][ T6283] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.088140][ T6283] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1105.137747][ T6283] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.137875][ T6283] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1105.421735][   T10] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[ 1105.576827][   T10] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1105.576860][   T10] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1105.576881][   T10] usb 5-1: Product: syz
[ 1105.576896][   T10] usb 5-1: Manufacturer: syz
[ 1105.576911][   T10] usb 5-1: SerialNumber: syz
[ 1105.706434][   T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1105.886392][T18423] bridge0: entered promiscuous mode
[ 1105.887150][T18423] macvlan2: entered allmulticast mode
[ 1105.887189][T18423] bridge0: entered allmulticast mode
[ 1105.909540][T18423] bridge0: port 3(macvlan2) entered blocking state
[ 1105.910641][T18423] bridge0: port 3(macvlan2) entered disabled state
[ 1106.637995][T18423] bridge0: left allmulticast mode
[ 1106.638029][T18423] bridge0: left promiscuous mode
[ 1106.821168][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1106.821213][   T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 1106.852130][T16722] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1106.973253][T18257] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1107.029713][   T36] usb 5-1: USB disconnect, device number 5
[ 1107.159086][T18257] veth0_vlan: entered promiscuous mode
[ 1107.198764][T18257] veth1_vlan: entered promiscuous mode
[ 1107.201821][ T6020] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1107.256293][T18257] veth0_macvtap: entered promiscuous mode
[ 1107.268991][T18257] veth1_macvtap: entered promiscuous mode
[ 1107.321015][T18257] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1107.336039][T18257] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1107.363562][ T6020] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1107.363588][ T6020] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1107.365745][ T6020] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1107.365766][ T6020] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.365776][ T6020] usb 3-1: Product: syz
[ 1107.365784][ T6020] usb 3-1: Manufacturer: syz
[ 1107.365791][ T6020] usb 3-1: SerialNumber: syz
[ 1107.369196][ T6020] usb 3-1: config 0 descriptor??
[ 1107.405894][ T6277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1107.412226][ T6277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1107.417697][ T6277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1107.418158][ T6277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1107.480576][T18439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4264'.
[ 1108.952973][T18437] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1108.968871][ T5852] usb 3-1: USB disconnect, device number 87
[ 1110.686145][T16312] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1111.081621][T16312] usb 5-1: Using ep0 maxpacket: 32
[ 1111.084661][T16312] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1111.084690][T16312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.147095][T16312] usb 5-1: config 0 descriptor??
[ 1111.167783][T16312] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1111.292346][ T5852] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1111.306874][  T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.306889][  T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.407760][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1111.407781][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1111.455519][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1111.455547][ T5852] usb 3-1: config 0 has no interfaces?
[ 1111.477144][ T5852] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1111.477173][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1111.477192][ T5852] usb 3-1: Product: syz
[ 1111.477206][ T5852] usb 3-1: Manufacturer: syz
[ 1111.477275][ T5852] usb 3-1: SerialNumber: syz
[ 1111.537002][ T5852] usb 3-1: config 0 descriptor??
[ 1111.644099][T16722] Bluetooth: hci5: unexpected event for opcode 0x2006
[ 1111.807245][T15149] usb 3-1: USB disconnect, device number 88
[ 1111.881971][T16312] gspca_sunplus: reg_w_riv err -110
[ 1111.882083][T16312] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[ 1112.503879][ T5882] usb 5-1: USB disconnect, device number 6
[ 1112.631694][T15149] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1112.792430][T15149] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1112.792457][T15149] usb 4-1: config 0 has no interfaces?
[ 1112.794991][T15149] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1112.795019][T15149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.795039][T15149] usb 4-1: Product: syz
[ 1112.795055][T15149] usb 4-1: Manufacturer: syz
[ 1112.795069][T15149] usb 4-1: SerialNumber: syz
[ 1112.800234][T15149] usb 4-1: config 0 descriptor??
[ 1112.889491][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1112.919919][T18476] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1113.635704][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1113.637250][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1113.639468][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1113.643390][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1113.759120][   T31] usb 4-1: USB disconnect, device number 121
[ 1113.964522][T18477] lo speed is unknown, defaulting to 1000
[ 1114.404037][   T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1114.845837][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1114.845864][   T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1114.850538][   T10] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1114.850567][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.850588][   T10] usb 3-1: Product: syz
[ 1114.850603][   T10] usb 3-1: Manufacturer: syz
[ 1114.850617][   T10] usb 3-1: SerialNumber: syz
[ 1114.897357][   T10] usb 3-1: config 0 descriptor??
[ 1115.085579][T18477] chnl_net:caif_netlink_parms(): no params data found
[ 1115.110760][ T1563] usb 3-1: USB disconnect, device number 89
[ 1115.290844][T16722] Bluetooth: hci4: unexpected event for opcode 0x2006
[ 1115.808363][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.808405][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1115.989857][T18519] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[ 1116.282202][T18477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1116.282335][T18477] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.282879][T18477] bridge_slave_0: entered allmulticast mode
[ 1116.314757][T18477] bridge_slave_0: entered promiscuous mode
[ 1116.317775][T18477] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1116.317897][T18477] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.318393][T18477] bridge_slave_1: entered allmulticast mode
[ 1116.914020][T16722] Bluetooth: hci3: command tx timeout
[ 1117.145455][T18477] bridge_slave_1: entered promiscuous mode
[ 1117.287159][T18477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1117.291215][T18477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1117.529132][T18477] team0: Port device team_slave_0 added
[ 1117.537641][T18477] team0: Port device team_slave_1 added
[ 1118.338569][T18534] validate_nla: 37 callbacks suppressed
[ 1118.338607][T18534] netlink: 'syz.0.4293': attribute type 4 has an invalid length.
[ 1118.408908][T18536] netlink: 'syz.0.4293': attribute type 4 has an invalid length.
[ 1119.061646][T16722] Bluetooth: hci3: command tx timeout
[ 1119.125995][T18477] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1119.126013][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1119.126041][T18477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1119.145040][T18477] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1119.145056][T18477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1119.145082][T18477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1119.341804][ T5852] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1119.504681][ T5852] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1119.504714][ T5852] usb 1-1: config 1 has no interface number 0
[ 1119.504773][ T5852] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1119.504799][ T5852] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1119.504828][ T5852] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1119.525237][ T5852] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1119.525265][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1119.525284][ T5852] usb 1-1: Product: syz
[ 1119.525298][ T5852] usb 1-1: Manufacturer: syz
[ 1119.533210][ T5852] usb 1-1: SerialNumber: syz
[ 1120.064560][T18533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1120.268840][T18533] UDC core: USB Raw Gadget: couldn't f[ 1120.268840][T18533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1120.269135][T18533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1120.344554][   T38] INFO: task kworker/u8:22:6285 blocked for more than 144 seconds.
[ 1120.344634][   T38]       Tainted: G             L      syzkaller #0
[ 1120.344673][   T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1120.344708][   T38] task:kworker/u8:22   state:D stack:20960 pid:6285  tgid:6285  ppid:2      task_flags:0x4208160 flags:0x00080000
[ 1120.344900][   T38] Workqueue: netns cleanup_net
[ 1120.344978][   T38] Call Trace:
[ 1120.345008][   T38]  <TASK>
[ 1120.345069][   T38]  __schedule+0x14fb/0x52c0
[ 1120.345237][   T38]  ? rt_spin_lock+0x1e0/0x400
[ 1120.345322][   T38]  ? __pfx___schedule+0x10/0x10
[ 1120.345429][   T38]  ? schedule+0x90/0x360
[ 1120.345504][   T38]  schedule+0x164/0x360
[ 1120.345580][   T38]  rxrpc_destroy_all_calls+0x57e/0x6a0
[ 1120.345689][   T38]  ? __pfx_rxrpc_destroy_all_calls+0x10/0x10
[ 1120.345766][   T38]  ? __pfx_var_wake_function+0x10/0x10
[ 1120.345846][   T38]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1120.345900][   T38]  ? __timer_delete_sync+0x53e/0x610
[ 1120.345959][   T38]  rxrpc_exit_net+0x6f/0xc0
[ 1120.345986][   T38]  ops_undo_list+0x49f/0x940
[ 1120.346062][   T38]  ? rt_spin_unlock+0x170/0x200
[ 1120.346110][   T38]  ? __pfx_ops_undo_list+0x10/0x10
[ 1120.346157][   T38]  ? rt_spin_unlock+0x14f/0x200
[ 1120.346339][   T38]  ? idr_destroy+0x21b/0x2a0
[ 1120.346404][   T38]  ? rt_spin_unlock+0x160/0x200
[ 1120.346477][   T38]  cleanup_net+0x56e/0x800
[ 1120.346552][   T38]  ? __pfx_cleanup_net+0x10/0x10
[ 1120.346660][   T38]  ? process_scheduled_works+0xa25/0x1830
[ 1120.346714][   T38]  ? process_scheduled_works+0xa25/0x1830
[ 1120.346744][   T38]  process_scheduled_works+0xb02/0x1830
[ 1120.346986][   T38]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1120.347091][   T38]  ? assign_work+0x3d5/0x5e0
[ 1120.347194][   T38]  worker_thread+0xa50/0xfc0
[ 1120.347541][   T38]  kthread+0x388/0x470
[ 1120.347590][   T38]  ? __pfx_worker_thread+0x10/0x10
[ 1120.347648][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.347695][   T38]  ret_from_fork+0x51e/0xb90
[ 1120.347775][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1120.347828][   T38]  ? __switch_to+0xc7d/0x1450
[ 1120.347928][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.347975][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1120.348128][   T38]  </TASK>
[ 1120.348285][   T38] 
[ 1120.348285][   T38] Showing all locks held in the system:
[ 1120.348467][   T38] 4 locks held by pr/legacy/17:
[ 1120.348508][   T38] 1 lock held by khungtaskd/38:
[ 1120.348544][   T38]  #0: ffffffff8ddcd780 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1120.348963][   T38] 2 locks held by getty/5556:
[ 1120.349000][   T38]  #0: ffff8880370370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1120.349120][   T38]  #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0
[ 1120.349249][   T38] 6 locks held by kworker/1:4/5852:
[ 1120.349286][   T38] 3 locks held by kworker/1:7/5882:
[ 1120.349324][   T38] 3 locks held by kworker/u8:20/6283:
[ 1120.349360][   T38] 3 locks held by kworker/u8:22/6285:
[ 1120.349394][   T38]  #0: ffff88801aed9138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830
[ 1120.349717][   T38]  #1: ffffc90003dd7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830
[ 1120.349891][   T38]  #2: ffffffff8f14b940 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[ 1120.349965][   T38] 10 locks held by syz-executor/9410:
[ 1120.350065][   T38] 4 locks held by udevd/18380:
[ 1120.350101][   T38]  #0: ffff888039337b80 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20
[ 1120.350294][   T38]  #1: ffff8880393f4878 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 1120.350581][   T38]  #2: ffff88804f2e0788 (kn->active#31){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 1120.350799][   T38]  #3: ffff888063386188 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 1120.350908][   T38] 1 lock held by syz-executor/18477:
[ 1120.350945][   T38] 4 locks held by syz.2.4290/18524:
[ 1120.350981][   T38] 5 locks held by syz.3.4295/18544:
[ 1120.351018][   T38] 
[ 1120.351057][   T38] =============================================
[ 1120.351057][   T38] 
[ 1120.351129][   T38] NMI backtrace for cpu 1
[ 1120.351147][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1120.351175][   T38] Tainted: [L]=SOFTLOCKUP
[ 1120.351182][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1120.351195][   T38] Call Trace:
[ 1120.351203][   T38]  <TASK>
[ 1120.351212][   T38]  dump_stack_lvl+0xe8/0x150
[ 1120.351243][   T38]  nmi_cpu_backtrace+0x274/0x2d0
[ 1120.351264][   T38]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1120.351295][   T38]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1120.351319][   T38]  sys_info+0x135/0x170
[ 1120.351348][   T38]  watchdog+0xfd9/0x1030
[ 1120.351377][   T38]  ? watchdog+0x21a/0x1030
[ 1120.351408][   T38]  kthread+0x388/0x470
[ 1120.351428][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1120.351449][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.351471][   T38]  ret_from_fork+0x51e/0xb90
[ 1120.351503][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1120.351528][   T38]  ? __switch_to+0xc7d/0x1450
[ 1120.351555][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.351577][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1120.351612][   T38]  </TASK>
[ 1120.351663][   T38] Sending NMI from CPU 1 to CPUs 0:
[ 1120.351691][    C0] NMI backtrace for cpu 0
[ 1120.351708][    C0] CPU: 0 UID: 0 PID: 18544 Comm: syz.3.4295 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1120.351733][    C0] Tainted: [L]=SOFTLOCKUP
[ 1120.351740][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1120.351751][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x17/0x80
[ 1120.351773][    C0] Code: cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d c8 ac 89 10 65 8b 35 e9 ac 89 10 <81> e6 00 00 ff 00 ba 00 01 00 00 23 91 64 0b 00 00 89 d7 09 f7 74
[ 1120.351789][    C0] RSP: 0018:ffffc9000639f968 EFLAGS: 00000282
[ 1120.351805][    C0] RAX: ffffffff849be5ed RBX: 0000000000000008 RCX: ffff88803d470000
[ 1120.351818][    C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 1120.351830][    C0] RBP: 0000000000000000 R08: ffffc9000639fba0 R09: ffffc9000639fcf0
[ 1120.351842][    C0] R10: ffffc9000639fd30 R11: fffff52000c73fa8 R12: 0000000000000000
[ 1120.351855][    C0] R13: 0000000000000000 R14: ffffc9000639fba0 R15: dffffc0000000000
[ 1120.351867][    C0] FS:  00007f6ef91456c0(0000) GS:ffff888126340000(0000) knlGS:0000000000000000
[ 1120.351883][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1120.351896][    C0] CR2: 00002000000c2030 CR3: 0000000033a5a000 CR4: 00000000003526f0
[ 1120.351912][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1120.351923][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1120.351935][    C0] Call Trace:
[ 1120.351942][    C0]  <TASK>
[ 1120.351949][    C0]  __import_iovec+0x3d/0x7e0
[ 1120.351976][    C0]  import_iovec+0x73/0xa0
[ 1120.351997][    C0]  ___sys_recvmsg+0x4bd/0x590
[ 1120.352021][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[ 1120.352040][    C0]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1120.352081][    C0]  do_recvmmsg+0x33a/0x800
[ 1120.352108][    C0]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1120.352138][    C0]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 1120.352158][    C0]  ? rt_spin_lock+0x1e0/0x400
[ 1120.352177][    C0]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 1120.352199][    C0]  __x64_sys_recvmmsg+0x198/0x250
[ 1120.352225][    C0]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1120.352254][    C0]  do_syscall_64+0x14d/0xf80
[ 1120.352278][    C0]  ? trace_irq_disable+0x3b/0x150
[ 1120.352298][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1120.352316][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1120.352336][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1120.352353][    C0] RIP: 0033:0x7f6efaf0c799
[ 1120.352372][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1120.352387][    C0] RSP: 002b:00007f6ef9145028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1120.352404][    C0] RAX: ffffffffffffffda RBX: 00007f6efb186090 RCX: 00007f6efaf0c799
[ 1120.352417][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1120.352429][    C0] RBP: 00007f6efafa2bd9 R08: 0000000000000000 R09: 0000000000000000
[ 1120.352441][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[ 1120.352453][    C0] R13: 00007f6efb186128 R14: 00007f6efb186090 R15: 00007ffd940e99c8
[ 1120.352474][    C0]  </TASK>
[ 1120.353129][   T38] Kernel panic - not syncing: hung_task: blocked tasks
[ 1120.353148][   T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1120.353176][   T38] Tainted: [L]=SOFTLOCKUP
[ 1120.353184][   T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1120.353195][   T38] Call Trace:
[ 1120.353203][   T38]  <TASK>
[ 1120.353212][   T38]  vpanic+0x56c/0xa60
[ 1120.353247][   T38]  ? __pfx_vpanic+0x10/0x10
[ 1120.353279][   T38]  ? irqentry_exit+0x59e/0x620
[ 1120.353312][   T38]  panic+0xc5/0xd0
[ 1120.353341][   T38]  ? __pfx_panic+0x10/0x10
[ 1120.353385][   T38]  watchdog+0x1023/0x1030
[ 1120.353414][   T38]  ? watchdog+0x21a/0x1030
[ 1120.353444][   T38]  kthread+0x388/0x470
[ 1120.353464][   T38]  ? __pfx_watchdog+0x10/0x10
[ 1120.353486][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.353508][   T38]  ret_from_fork+0x51e/0xb90
[ 1120.353539][   T38]  ? __pfx_ret_from_fork+0x10/0x10
[ 1120.353566][   T38]  ? __switch_to+0xc7d/0x1450
[ 1120.353594][   T38]  ? __pfx_kthread+0x10/0x10
[ 1120.353622][   T38]  ret_from_fork_asm+0x1a/0x30
[ 1120.353657][   T38]  </TASK>
[ 1120.354022][   T38] Kernel Offset: disabled