last executing test programs:

19.1333924s ago: executing program 1 (id=7138):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db", 0xa}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

18.523065595s ago: executing program 3 (id=7140):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b75000905", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x54b00)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)

16.229448513s ago: executing program 4 (id=7144):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

15.823063074s ago: executing program 1 (id=7145):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[], 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x102000, &(0x7f0000000040)=ANY=[])
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0)

15.182803431s ago: executing program 2 (id=7146):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

15.02594436s ago: executing program 4 (id=7147):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
getsockopt(r3, 0x6, 0x5, 0x0, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x401})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8)
sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x99}, 0x8084)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40040)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008840)

14.996208538s ago: executing program 3 (id=7148):
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_getrule={0x1c, 0x22, 0x300, 0x70bd2c, 0x25dfdbff, {0xa, 0x30, 0x80, 0xf, 0xfe, 0x0, 0x0, 0x8, 0x1000b}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r2}, &(0x7f00000007c0), &(0x7f0000000800)=r1}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r2, &(0x7f0000000200)}, 0x20)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
r4 = getpgrp(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000006d80))
sched_setaffinity(r4, 0x0, 0x0)
sched_rr_get_interval(r4, &(0x7f00000003c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x11, 0x0, 0x70bd2d, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, @in=@private=0xa010100}}, @sadb_address={0x3, 0x5, 0xff, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}}, @sadb_address={0x3, 0x6, 0xff, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xff, 0x0}}}, @sadb_x_sec_ctx={0x1}]}, 0x88}}, 0x0)

13.994738003s ago: executing program 3 (id=7149):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xcfbc, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000)

13.990498144s ago: executing program 0 (id=7150):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

13.911404508s ago: executing program 2 (id=7151):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 1)

13.887128936s ago: executing program 1 (id=7152):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x8, 0x40, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xb9}]}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2040, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x6d, &(0x7f0000000240)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x400000}, 0x10, 0xffffffffffffffff}, 0x94)
write(r0, &(0x7f0000000040)="e558c04ed901fdcfd866f1ee57d7b59ba7de1a785bc0b32a0c5e8f9d7cca8e0545034a3cb389d81e3be2a59e42ca4b0a58126ccd2082847afb32", 0x3a)

11.902801167s ago: executing program 3 (id=7153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2002)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
getdents64(0xffffffffffffffff, &(0x7f0000000400)=""/4096, 0x1000)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000240)={{0x0, 0x3}, 'port0\x00', 0x4, 0x800, 0x2000000, 0xfff, 0x6, 0x0, 0x400, 0x0, 0x4, 0x68})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)={0x1c, 0x52, 0x1, 0x70bd28, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feffffff"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44091}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0)

11.836539137s ago: executing program 0 (id=7154):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) (async, rerun: 64)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (rerun: 64)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080007400000000508000640000000040900010073797a30000000000900020073797a32000000001400000011000100000000ffdf0000000000000a"], 0x7c}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) (rerun: 32)

11.210595082s ago: executing program 1 (id=7155):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6", 0x70, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041", 0x2e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x4}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000010800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07170200eab402000008009680040001800a000100aaaaaaaaaabb0000140035006261746164765f736c6176655f300000"], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x20e00, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20, 0x1)
mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000380)={0x1, 0x35000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000040)={0x2, 0x110000})

11.16949796s ago: executing program 4 (id=7156):
syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="3886a76a29a086e0"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
futex(&(0x7f00000002c0), 0x3, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f0000000680)=0x2, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", 0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, 0x0)
ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640400fd", @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb0500210001000000"], 0x64}, 0x1, 0x0, 0x0, 0x40801}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000003d00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x600000, 0x3}}, './file0\x00'})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004000)={0x1b, 0x22, &(0x7f0000003d80)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x2}, @map_idx={0x18, 0xe, 0x5, 0x0, 0x5}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x1, 0x7, 0x5, 0xb, 0x8, 0xfffffffffffffff0}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000003ec0)='syzkaller\x00', 0x401, 0xb, &(0x7f0000003f00)=""/11, 0x41000, 0x12, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003f40)={0x2, 0x0, 0x3, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000003f80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000003fc0)=[{0x2, 0x2, 0x3, 0x8}], 0x10, 0xc}, 0x94)
syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
close_range(r6, r6, 0x0)
socket$netlink(0x10, 0x3, 0x0)

11.069103213s ago: executing program 0 (id=7157):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

10.898051833s ago: executing program 2 (id=7158):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b75000905", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x54b00)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)

9.526112423s ago: executing program 0 (id=7159):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000640)='syzkaller\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/181, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x48)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})

9.274942691s ago: executing program 1 (id=7160):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b750009", @ANYRES8], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x54b00)
openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)

7.232108424s ago: executing program 0 (id=7161):
kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc5", 0x9e, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf9989fa7b13df2f67b", 0xe7, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add", 0x7e, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}], 0x2}, 0x41)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.14198476s ago: executing program 4 (id=7162):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$igmp6(0xa, 0x3, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x5)
syz_emit_ethernet(0x36, &(0x7f0000000200)=ANY=[], 0x0)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
r6 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x102000, &(0x7f0000000040)=ANY=[])
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, 0x0, 0x0)

6.151481799s ago: executing program 2 (id=7163):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010)
recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0xfffffffd, 0x68e463e4, 0xfffffdeb, 0x18f, 0x2, 0x2, 0x3, 0x5}}}}]}, 0x58}}, 0x0)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$BLKREPORTZONE(r9, 0xc0101282, &(0x7f0000000440)={0x1, 0x2, 0x0, [{0x6, 0x4, 0x4, 0x6, 0x9, 0x1, 0x0, '\x00', 0x6}, {0x4, 0x3ff, 0x4ef, 0xff, 0x5, 0x5, 0xb9, '\x00', 0x3}]})
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xf}}]}}]}, 0x40}}, 0x24040084)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRESOCT=r1], 0xc3}, 0x1, 0x100000000000000}, 0x24000084)

4.569115387s ago: executing program 2 (id=7164):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xcfbc, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000)

4.526867452s ago: executing program 3 (id=7165):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xcfbc, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4082, 0xff2, 0x0, 0x3, 0x1}}, 0x48)
write$vhost_msg(r4, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/73, 0x49, 0x0, 0x3, 0x2}}, 0x71)
write$vhost_msg(r4, &(0x7f0000003b80)={0x1, {&(0x7f0000000840)=""/248, 0xf8, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000006c0)=""/136, 0x88, 0x0, 0x1, 0x2}}, 0x48)
write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48)

4.476202854s ago: executing program 1 (id=7166):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000400)={0x0, @motion_det})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x64, 0x0, 0x0, 0x8000}, 0x28)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0007299400000000000000000014615936ecdbfa96c63bc7071a000002000010180002801400018008000100ac38ecaa08000200ac1e0001"], 0x2c}}, 0x0)
r2 = socket$inet(0x2, 0x200000003, 0x84)
getsockopt$inet_buf(r2, 0x0, 0x50, 0x0, &(0x7f0000000180))
r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x5)
write$binfmt_script(r9, &(0x7f0000000080)={'#! ', './file1/../file0', [{0x20, '\x00'}, {0x20, '\\%'}, {0x20, '#'}, {0x20, '\x00'}], 0xa, "8e4927a7000278414808f90249ecb1bda8974898280f3c430aa9f74dc5855ce647cbec19744a6dd89dca09"}, 0x48)
write$UHID_INPUT(r9, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r4, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0)
syz_usb_control_io$uac2(r3, &(0x7f0000000d80)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003860000008603"]}, 0x0)
syz_usb_connect$midi(0x4, 0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="12011003000000ff3014a97b76f8ffffffa987e5ac4b474000010203010902320001010290f90904000000010320071924030200090600000000000000010507050206f5560e90b50493b3eae095d233fe350405d706d9127874af866a36699d112796685d57b344e14a18b05abf6192888d8aa4fe045b"], &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x4, 0x7, 0xff, 0x119, 0x10}, 0x7d, &(0x7f00000000c0)={0x5, 0xf, 0x7d, 0x4, [@generic={0x60, 0x10, 0x1, "465b9aa900424dac10d7906fa605724efd0172980f5ded99060548948eb334a23790f48982bdcf70d6fb39d1fd9c536cffcbed811fcff927406c0abeabc15f53aa6cffc02da8757c53191a81ae27e1c76547cb1d31b6dba65e6d0535d1"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x7, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0x8, 0x6, 0xff}, @ptm_cap={0x3}]}, 0x2, [{0x1a, &(0x7f0000000140)=@string={0x1a, 0x3, "04c4c9b485fb83c9d41c614c044877412ebc6be6976e5039"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2c01}}]})

4.465586268s ago: executing program 4 (id=7167):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0)
read(r0, &(0x7f0000000000)=""/145, 0x91) (fail_nth: 1)

2.479349388s ago: executing program 2 (id=7168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002)
pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000440)="49b724f20f0249658b618b5007964784b96b20389f401a33cc8808db3dd204f8058bf7213e639b4e6986d9d96f575a516cadfe5da653beeb88d119e7a0ee80e05ad734aeaff584625a96a8b546e6e81d72fd72d8976eeedc982ddc551cf33d5b121c02a2061104179df415a60358146453c4746548fe4599bfb05878d3647df81fc29ee8b88ef898dd2ddd5c044288f08551fa4a87cb77bf7be629421ac2b228607d6edbbd821070d1ef2dd9e7990470dad3", 0xb2}, {&(0x7f0000000500)="b7c98459bb3fbaf74e38040648b403348b8b8a51280610e709e97369cb38dd78c6d0daacae040ef1788b67345d7a186515a74b567a52965c9e9ae4fc6b4bebe6d7bb061bf55fe32e78beea279202df0ba255757df94b0394d4674f62c0e9ac04c3de43d4a1759d153fc56308cbb04bc2b641d2a5fbb45f", 0x77}, {&(0x7f00000005c0)="8cbbfc1bfce86b7a15f80f4920bef71179262048e31d3856a3eddf928d5f4acf1d2e58d0c09819e17e688265d3", 0x2d}, {&(0x7f0000000600)="52ea23a4429b", 0x6}], 0x4, 0x6, 0x860, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380))
fcntl$setown(r4, 0x8, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x23c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x3, 0x9, 0x0, 0x5}, {0x0, 0x0, 0x1800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private1, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x2000, 0x3c}, 0x2, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xc}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0x2, @in=@multicast2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

277.330808ms ago: executing program 4 (id=7169):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x0, 0x1cb, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be53", 0x9f, 0x840, 0x0, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40)

150.741353ms ago: executing program 3 (id=7170):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xcfbc, 0x0, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r4, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48)

0s ago: executing program 0 (id=7171):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r2=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, 0x0) (fail_nth: 1)

kernel console output (not intermixed with test programs):

er 6 using dummy_hcd
[ 3277.262049][T30099] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 3277.262083][T30099] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 3277.262106][T30099] usb 3-1: Product: syz
[ 3277.262122][T30099] usb 3-1: SerialNumber: syz
[ 3277.304635][T30099] usb 3-1: config 0 descriptor??
[ 3277.394802][T18783] usb 5-1: new full-speed USB device number 104 using dummy_hcd
[ 3277.477182][T30291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6674'.
[ 3277.564040][T18783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 3277.564077][T18783] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3277.592771][T18783] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3277.592808][T18783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3277.593080][T18783] usb 5-1: Product: syz
[ 3277.593099][T18783] usb 5-1: Manufacturer: syz
[ 3277.593115][T18783] usb 5-1: SerialNumber: syz
[ 3277.646091][T18783] usb 5-1: config 0 descriptor??
[ 3277.884528][T18783] hub 5-1:0.0: bad descriptor, ignoring hub
[ 3277.884575][T18783] hub 5-1:0.0: probe with driver hub failed with error -5
[ 3282.204896][T30099] usb 3-1: USB disconnect, device number 6
[ 3282.495124][T18783] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input133
[ 3282.521658][T19507] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.117/input/input132
[ 3282.573818][T18783] usb 5-1: USB disconnect, device number 104
[ 3282.701611][T19507] usb 1-1: USB disconnect, device number 3
[ 3282.931450][T27976] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 3283.092393][T27976] usb 4-1: Using ep0 maxpacket: 16
[ 3283.097492][T27976] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3283.097544][T27976] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[ 3283.097571][T27976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3283.131051][T27976] usb 4-1: config 0 descriptor??
[ 3283.368335][T30306] netlink: 'syz.4.6679': attribute type 1 has an invalid length.
[ 3286.176764][T27976] usbhid 4-1:0.0: can't add hid device: -71
[ 3286.176899][T27976] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 3286.198227][T27976] usb 4-1: USB disconnect, device number 121
[ 3286.328758][T30322] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[ 3286.328779][T30322] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3286.328939][T30322] vhci_hcd vhci_hcd.0: Device attached
[ 3286.330863][T30323] usbip_core: unknown command
[ 3286.330879][T30323] vhci_hcd: unknown pdu 813196902
[ 3286.334167][T30323] usbip_core: unknown command
[ 3286.369328][T16399] vhci_hcd vhci_hcd.4: stop threads
[ 3286.369362][T16399] vhci_hcd vhci_hcd.4: release socket
[ 3286.369393][T16399] vhci_hcd vhci_hcd.4: disconnect device
[ 3286.883529][T18783] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 3287.048328][T18783] usb 2-1: Using ep0 maxpacket: 16
[ 3287.062569][T30099] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 3287.081790][T18783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3287.081862][T18783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3287.081894][T18783] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3287.081918][T18783] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3287.081944][T18783] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3287.084427][T18783] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3287.084457][T18783] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3287.084480][T18783] usb 2-1: Manufacturer: syz
[ 3287.237903][T18783] usb 2-1: config 0 descriptor??
[ 3287.267421][T30099] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 3287.267450][T30099] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3287.267471][T30099] usb 3-1: config 0 has no interface number 0
[ 3287.267610][T30099] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 3287.267642][T30099] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3287.267906][T30099] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3287.347359][T30099] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 3287.347382][T30099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3287.347398][T30099] usb 3-1: Product: syz
[ 3287.347409][T30099] usb 3-1: Manufacturer: syz
[ 3287.347420][T30099] usb 3-1: SerialNumber: syz
[ 3287.416079][T30099] usb 3-1: config 0 descriptor??
[ 3287.620100][T18783] rc_core: IR keymap rc-hauppauge not found
[ 3287.620122][T18783] Registered IR keymap rc-empty
[ 3287.620468][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.641874][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.665177][T18783] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 3287.668484][T18783] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input136
[ 3287.671771][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.706784][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.728554][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.755701][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.772367][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.793445][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.815124][T19507] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 3287.815123][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.842450][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.859006][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.880650][T18783] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 3287.926837][T18783] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 3287.926865][T18783] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 3287.951299][T30341] qrtr: Invalid version 73
[ 3288.234560][T27976] usb 2-1: USB disconnect, device number 61
[ 3288.268302][T19507] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 3288.268334][T19507] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 3288.268356][T19507] usb 5-1: Product: syz
[ 3288.268371][T19507] usb 5-1: SerialNumber: syz
[ 3289.506394][T30099] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.117/input/input135
[ 3289.513192][T19507] usb 5-1: config 0 descriptor??
[ 3289.572331][T30099] usb 3-1: USB disconnect, device number 7
[ 3294.950608][T19507] usb 5-1: USB disconnect, device number 105
[ 3295.632775][T30372] FAULT_INJECTION: forcing a failure.
[ 3295.632775][T30372] name failslab, interval 1, probability 0, space 0, times 0
[ 3295.632805][T30372] CPU: 1 UID: 0 PID: 30372 Comm: syz.4.6696 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3295.632828][T30372] Tainted: [L]=SOFTLOCKUP
[ 3295.632834][T30372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3295.632844][T30372] Call Trace:
[ 3295.632851][T30372]  <TASK>
[ 3295.632859][T30372]  dump_stack_lvl+0xe8/0x150
[ 3295.632888][T30372]  should_fail_ex+0x46b/0x600
[ 3295.632912][T30372]  should_failslab+0xa8/0x100
[ 3295.632935][T30372]  __kmalloc_noprof+0xdf/0x7b0
[ 3295.632953][T30372]  ? kfree+0x4d/0x6c0
[ 3295.632969][T30372]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3295.632991][T30372]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3295.633009][T30372]  ? tomoyo_domain+0xd7/0x130
[ 3295.633031][T30372]  ? tomoyo_path_number_perm+0x219/0x630
[ 3295.633055][T30372]  tomoyo_path_number_perm+0x246/0x630
[ 3295.633080][T30372]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3295.633103][T30372]  ? __lock_acquire+0x6b5/0x2cf0
[ 3295.633152][T30372]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3295.633213][T30372]  ? __fget_files+0x2a/0x420
[ 3295.633240][T30372]  ? __fget_files+0x2a/0x420
[ 3295.633260][T30372]  ? __fget_files+0x3a6/0x420
[ 3295.633283][T30372]  ? __fget_files+0x2a/0x420
[ 3295.633302][T30372]  security_file_ioctl+0xc3/0x2a0
[ 3295.633328][T30372]  __se_sys_ioctl+0x47/0x170
[ 3295.633349][T30372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3295.633367][T30372]  do_syscall_64+0x15f/0x560
[ 3295.633393][T30372]  ? trace_irq_disable+0x3b/0x140
[ 3295.633413][T30372]  ? clear_bhb_loop+0x40/0x90
[ 3295.633433][T30372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3295.633450][T30372] RIP: 0033:0x7f3568a3ce59
[ 3295.633465][T30372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3295.633480][T30372] RSP: 002b:00007f3566c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3295.633496][T30372] RAX: ffffffffffffffda RBX: 00007f3568cb6090 RCX: 00007f3568a3ce59
[ 3295.633509][T30372] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[ 3295.633519][T30372] RBP: 00007f3566c75090 R08: 0000000000000000 R09: 0000000000000000
[ 3295.633529][T30372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3295.633539][T30372] R13: 00007f3568cb6128 R14: 00007f3568cb6090 R15: 00007fff355f1a48
[ 3295.633564][T30372]  </TASK>
[ 3295.633570][T30372] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3295.689905][T10342] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[ 3295.910161][T10342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 3295.910196][T10342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3295.942158][T10342] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3295.942192][T10342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3295.942215][T10342] usb 4-1: Product: syz
[ 3295.942231][T10342] usb 4-1: Manufacturer: syz
[ 3295.942248][T10342] usb 4-1: SerialNumber: syz
[ 3295.997459][T10342] usb 4-1: config 0 descriptor??
[ 3296.015767][T10342] hub 4-1:0.0: bad descriptor, ignoring hub
[ 3296.015796][T10342] hub 4-1:0.0: probe with driver hub failed with error -5
[ 3296.024626][T10342] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input137
[ 3296.177565][T30099] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 2848 sec
[ 3296.601792][T30099] usb 4-1: USB disconnect, device number 122
[ 3298.787828][T30244] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 3298.987002][T30244] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3298.987064][T30244] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3298.987091][T30244] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3300.092597][T30244] usb 5-1: config 0 descriptor??
[ 3300.158174][T30244] pwc: Askey VC010 type 2 USB webcam detected.
[ 3300.428495][T30244] pwc: send_video_command error -71
[ 3300.428518][T30244] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3300.428645][T30244] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[ 3300.463196][T30244] usb 5-1: USB disconnect, device number 106
[ 3300.661805][T18783] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 3301.094921][T18783] usb 1-1: Using ep0 maxpacket: 16
[ 3301.104466][T18783] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3301.104499][T18783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3301.104522][T18783] usb 1-1: Product: syz
[ 3301.104539][T18783] usb 1-1: Manufacturer: syz
[ 3301.104555][T18783] usb 1-1: SerialNumber: syz
[ 3302.606384][T18783] usb 1-1: config 0 descriptor??
[ 3302.619536][T18783] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3302.849791][T18783] pwc: Warning: more than 1 configuration available.
[ 3302.850296][T18783] pwc: Failed to set LED on/off time (-71)
[ 3302.852587][T18783] pwc: send_video_command error -71
[ 3302.852602][T18783] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3302.852724][T18783] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 3302.915966][T18783] usb 1-1: USB disconnect, device number 4
[ 3302.965055][T30415] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3303.218307][T30415] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 3303.218496][T30415] overlayfs: failed to look up (tracing) for ino (-66)
[ 3304.387889][T29187] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 3304.550259][T29187] usb 5-1: Using ep0 maxpacket: 16
[ 3304.552586][T29187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3304.552643][T29187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3304.552665][T29187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3304.552681][T29187] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3304.552699][T29187] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3304.553922][T29187] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3304.553950][T29187] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3304.553972][T29187] usb 5-1: Manufacturer: syz
[ 3304.563084][T29187] usb 5-1: config 0 descriptor??
[ 3304.983549][T29187] rc_core: IR keymap rc-hauppauge not found
[ 3304.983570][T29187] Registered IR keymap rc-empty
[ 3304.983733][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.006687][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.042505][T10342] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 3305.056363][T29187] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 3305.074691][T29187] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input139
[ 3305.085002][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.115848][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.140038][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.157177][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.189894][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.214481][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.232655][T10342] usb 2-1: Using ep0 maxpacket: 32
[ 3305.232735][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.236224][T10342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3305.236251][T10342] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 3305.236302][T10342] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[ 3305.236354][T10342] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 3305.236401][T10342] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3305.236427][T10342] usb 2-1: config 1 interface 1 has no altsetting 0
[ 3305.254948][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.275339][T30431] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6713'.
[ 3305.278860][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.305487][T29187] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 3305.354068][T10342] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 3305.354103][T10342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3305.354126][T10342] usb 2-1: Product: syz
[ 3305.354143][T10342] usb 2-1: Manufacturer: syz
[ 3305.354160][T10342] usb 2-1: SerialNumber: syz
[ 3305.445677][T29187] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 3305.445707][T29187] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 3305.472540][T29187] usb 5-1: USB disconnect, device number 107
[ 3305.632712][T30427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3305.641932][T30427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3305.678069][T10342] usb 2-1: selecting invalid altsetting 0
[ 3305.881920][T10342] usb 2-1: 1:1: cannot get freq (v2/v3): err -32
[ 3305.885589][T30436] input: syz0 as /devices/virtual/input/input140
[ 3305.922653][T10342] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[ 3306.395034][T10342] usb 2-1: USB disconnect, device number 62
[ 3307.066987][ T6452] udevd[6452]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3307.150971][T30452] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6718'.
[ 3307.876780][T30461] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3309.402975][T18783] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 3309.508894][T30474] vcan0: tx drop: invalid sa for name 0x0000000000000003
[ 3309.567510][T18783] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 3309.567542][T18783] usb 2-1: config 0 has no interface number 0
[ 3309.567590][T18783] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3309.570243][T18783] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 3309.570273][T18783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3309.570295][T18783] usb 2-1: Product: syz
[ 3309.570311][T18783] usb 2-1: Manufacturer: syz
[ 3309.570327][T18783] usb 2-1: SerialNumber: syz
[ 3309.609283][T18783] usb 2-1: config 0 descriptor??
[ 3309.674944][T18783] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 3309.841073][T18783] usb 2-1: USB disconnect, device number 63
[ 3309.906634][T18783] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 3312.130480][T30498] netlink: 'syz.4.6732': attribute type 1 has an invalid length.
[ 3314.237135][T30535] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3314.544512][T30535] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 3314.544887][T30535] overlayfs: failed to look up (tracing) for ino (-66)
[ 3315.245317][T29187] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 3315.406102][T29187] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[ 3315.406134][T29187] usb 2-1: config 0 has no interface number 0
[ 3315.406185][T29187] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3315.408773][T29187] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 3315.408802][T29187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3315.408834][T29187] usb 2-1: Product: syz
[ 3315.408845][T29187] usb 2-1: Manufacturer: syz
[ 3315.408856][T29187] usb 2-1: SerialNumber: syz
[ 3315.413536][T29187] usb 2-1: config 0 descriptor??
[ 3315.550109][T29187] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[ 3315.642668][T29187] usb 2-1: USB disconnect, device number 64
[ 3315.849503][T29187] yurex 2-1:0.50: USB YUREX #0 now disconnected
[ 3318.320006][T30548] netlink: 'syz.2.6746': attribute type 1 has an invalid length.
[ 3318.501112][T30553] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6748'.
[ 3320.463433][T30574] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6753'.
[ 3321.962580][T30579] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3322.280658][T30579] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 3322.281382][T30579] overlayfs: failed to look up (tracing) for ino (-66)
[ 3325.943256][T30244] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 3326.105714][T30244] usb 4-1: Using ep0 maxpacket: 16
[ 3326.152979][T30244] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3326.153014][T30244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3326.153038][T30244] usb 4-1: Product: syz
[ 3326.153054][T30244] usb 4-1: Manufacturer: syz
[ 3326.153071][T30244] usb 4-1: SerialNumber: syz
[ 3326.194501][T30244] usb 4-1: config 0 descriptor??
[ 3326.216636][T30244] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3326.340470][T30601] netlink: 'syz.2.6761': attribute type 1 has an invalid length.
[ 3326.423830][T30244] pwc: Warning: more than 1 configuration available.
[ 3326.424405][T30244] pwc: Failed to set LED on/off time (-71)
[ 3326.425083][T30244] pwc: send_video_command error -71
[ 3326.425098][T30244] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3326.425213][T30244] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 3326.472647][T30244] usb 4-1: USB disconnect, device number 123
[ 3327.501377][T30621] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3327.501862][T30621] overlayfs: overlapping lowerdir path
[ 3332.299146][T18783] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 3332.745695][T29187] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 3332.843183][T26948] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[ 3332.963087][T29187] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 3332.963118][T29187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3332.963138][T29187] usb 5-1: config 0 has no interface number 0
[ 3332.963195][T29187] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 3332.963223][T29187] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 3332.963247][T29187] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3332.972079][T29187] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 3332.972110][T29187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3332.972132][T29187] usb 5-1: Product: syz
[ 3332.972148][T29187] usb 5-1: Manufacturer: syz
[ 3332.972164][T29187] usb 5-1: SerialNumber: syz
[ 3333.068240][T29187] usb 5-1: config 0 descriptor??
[ 3333.090291][T26948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 3333.090330][T26948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3333.101277][T26948] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3333.101377][T26948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3333.101451][T26948] usb 3-1: Product: syz
[ 3333.101501][T26948] usb 3-1: Manufacturer: syz
[ 3333.101544][T26948] usb 3-1: SerialNumber: syz
[ 3333.240189][T26948] usb 3-1: config 0 descriptor??
[ 3333.280652][T26948] hub 3-1:0.0: bad descriptor, ignoring hub
[ 3333.280853][T26948] hub 3-1:0.0: probe with driver hub failed with error -5
[ 3333.362578][T26948] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input142
[ 3333.535151][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 3333.535251][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 3333.775818][T26948] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 3333.811234][T29187] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input141
[ 3333.937272][T26948] usb 4-1: Using ep0 maxpacket: 16
[ 3333.940089][T26948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3333.940143][T26948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3333.940171][T26948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3333.940195][T26948] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3333.940219][T26948] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3333.942739][T26948] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3333.942769][T26948] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3333.942791][T26948] usb 4-1: Manufacturer: syz
[ 3334.043226][T26948] usb 4-1: config 0 descriptor??
[ 3334.078290][T29187] input: failed to attach handler mousedev to device input141, error: -5
[ 3334.114757][T29187] usb 5-1: USB disconnect, device number 108
[ 3334.403064][T26948] rc_core: IR keymap rc-hauppauge not found
[ 3334.403087][T26948] Registered IR keymap rc-empty
[ 3334.403248][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.429596][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.487859][T26948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 3334.502732][T26948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input143
[ 3334.506908][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.523291][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.546685][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.573010][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.587304][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.608997][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.630537][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.652163][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.673832][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.697269][T26948] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 3334.804125][T26948] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 3334.804780][T26948] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 3334.858114][T26948] usb 4-1: USB disconnect, device number 124
[ 3335.098796][T27785] usb 3-1: USB disconnect, device number 8
[ 3337.988457][T30244] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 3338.186574][T30244] usb 2-1: Using ep0 maxpacket: 32
[ 3338.192647][T30244] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3338.192675][T30244] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 3338.192727][T30244] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[ 3338.192770][T30244] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 3338.192814][T30244] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3338.192839][T30244] usb 2-1: config 1 interface 1 has no altsetting 0
[ 3338.265798][T30244] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 3338.265885][T30244] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3338.265934][T30244] usb 2-1: Product: syz
[ 3338.266021][T30244] usb 2-1: Manufacturer: syz
[ 3338.266065][T30244] usb 2-1: SerialNumber: syz
[ 3339.441689][T30687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3339.443130][T30687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3339.472733][T30244] usb 2-1: selecting invalid altsetting 0
[ 3339.529386][T30695] qrtr: Invalid version 73
[ 3339.623964][T18783] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 3339.756777][T30244] usb 2-1: 1:1: cannot get freq (v2/v3): err -32
[ 3339.758098][T30244] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[ 3340.863490][T18783] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3340.863569][T18783] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3340.863597][T18783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3341.087337][T18783] usb 1-1: config 0 descriptor??
[ 3341.125009][T18783] pwc: Askey VC010 type 2 USB webcam detected.
[ 3341.164574][T30244] usb 2-1: USB disconnect, device number 66
[ 3341.494503][T18783] pwc: send_video_command error -71
[ 3341.494522][T18783] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3341.494666][T18783] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 3341.538488][T18783] usb 1-1: USB disconnect, device number 5
[ 3341.802193][T30709] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3343.683392][T30730] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 3343.704274][T30730] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 3343.716657][T30730] sctp: [Deprecated]: syz.1.6793 (pid 30730) Use of int in max_burst socket option.
[ 3343.716657][T30730] Use struct sctp_assoc_value instead
[ 3344.600750][T30727] netlink: 'syz.3.6795': attribute type 1 has an invalid length.
[ 3345.671487][T30737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6798'.
[ 3345.771985][T30740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6799'.
[ 3346.469741][T19507] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[ 3346.717314][T30754] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3346.905463][   T59] Bluetooth: hci0: command 0x0406 tx timeout
[ 3347.677263][T19507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 3347.677301][T19507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3347.703831][T19507] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3347.703916][T19507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3347.703972][T19507] usb 3-1: Product: syz
[ 3347.704015][T19507] usb 3-1: Manufacturer: syz
[ 3347.704050][T19507] usb 3-1: SerialNumber: syz
[ 3347.945125][T19507] usb 3-1: config 0 descriptor??
[ 3347.948784][T19507] hub 3-1:0.0: bad descriptor, ignoring hub
[ 3347.948838][T19507] hub 3-1:0.0: probe with driver hub failed with error -5
[ 3348.028467][T19507] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input146
[ 3348.734891][T29187] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 3348.741117][   T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 3348.794038][T18783] usb 3-1: USB disconnect, device number 9
[ 3348.930777][   T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 3348.952847][   T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 3349.043389][T29187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3349.043446][T29187] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3349.043472][T29187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3349.046452][   T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 3349.052521][   T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 3349.094458][T29187] usb 5-1: config 0 descriptor??
[ 3349.101346][T29187] pwc: Askey VC010 type 2 USB webcam detected.
[ 3349.359333][T29187] pwc: send_video_command error -71
[ 3349.359350][T29187] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3349.359471][T29187] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[ 3349.529935][T29187] usb 5-1: USB disconnect, device number 109
[ 3351.262274][T18819] Bluetooth: hci0: unexpected event for opcode 0x0000
[ 3351.316028][T30781] tipc: Can't bind to reserved service type 2
[ 3351.463414][T30781] Bluetooth: MGMT ver 1.23
[ 3351.560939][T18819] Bluetooth: hci3: command tx timeout
[ 3352.740381][T19814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3352.879789][T30794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6812'.
[ 3354.606476][T18819] Bluetooth: hci3: command tx timeout
[ 3355.953282][T18819] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 3356.007019][T18819] Bluetooth: hci0: Injecting HCI hardware error event
[ 3356.061844][T18819] Bluetooth: hci0: hardware error 0x00
[ 3356.835967][   T59] Bluetooth: hci3: command tx timeout
[ 3356.926403][T19814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3357.787218][T19814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3357.813994][T19507] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 3357.905926][T30826] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3358.084984][T19507] usb 3-1: Using ep0 maxpacket: 16
[ 3358.175160][T19507] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3358.175697][T19507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3358.175797][T19507] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3358.175885][T19507] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 3358.175969][T19507] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3358.835745][T18819] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 3358.954251][T19507] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3358.954283][T19507] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3358.954305][T19507] usb 3-1: Manufacturer: syz
[ 3359.044680][T19507] usb 3-1: config 0 descriptor??
[ 3359.090948][T18819] Bluetooth: hci3: command tx timeout
[ 3359.359670][T29187] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 3359.416239][T19507] rc_core: IR keymap rc-hauppauge not found
[ 3359.416262][T19507] Registered IR keymap rc-empty
[ 3359.416426][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.435481][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.477635][T19507] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 3359.495133][T19507] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input147
[ 3359.516612][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.534320][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.548341][T29187] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3359.548402][T29187] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3359.548439][T29187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3359.559610][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.595191][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.617906][T29187] usb 5-1: config 0 descriptor??
[ 3359.629518][T29187] pwc: Askey VC010 type 2 USB webcam detected.
[ 3359.666315][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.686883][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.729441][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.752570][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.771425][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.793004][T19507] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 3359.859644][T19507] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 3359.859747][T19507] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 3359.909329][T19507] usb 3-1: USB disconnect, device number 10
[ 3359.968088][T29187] pwc: send_video_command error -71
[ 3359.968107][T29187] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3359.968226][T29187] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[ 3360.017857][T19814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 3360.106042][T29187] usb 5-1: USB disconnect, device number 110
[ 3360.172113][T27785] usb 2-1: new low-speed USB device number 67 using dummy_hcd
[ 3360.346085][T27785] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3360.348682][T27785] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 3360.348720][T27785] usb 2-1: can't read configurations, error -71
[ 3360.472485][T30759] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3360.472637][T30759] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3360.472822][T30759] bridge_slave_0: entered allmulticast mode
[ 3360.474929][T30759] bridge_slave_0: entered promiscuous mode
[ 3360.527082][T30759] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3360.528890][T30759] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3360.529135][T30759] bridge_slave_1: entered allmulticast mode
[ 3360.558236][T30759] bridge_slave_1: entered promiscuous mode
[ 3360.618568][T30759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 3360.623863][T30759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 3360.694071][T30759] team0: Port device team_slave_0 added
[ 3360.698267][T30759] team0: Port device team_slave_1 added
[ 3360.817762][T30759] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 3360.817780][T30759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3360.817805][T30759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 3360.819841][T30759] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 3360.819855][T30759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 3360.819880][T30759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 3361.175440][T17402] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 2908 sec
[ 3361.549077][T30759] hsr_slave_0: entered promiscuous mode
[ 3361.573566][T30759] hsr_slave_1: entered promiscuous mode
[ 3361.574816][T30759] debugfs: 'hsr0' already exists in 'hsr'
[ 3361.574844][T30759] Cannot create hsr debugfs directory
[ 3364.496253][T30867] qrtr: Invalid version 73
[ 3364.802090][T30872] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3368.945928][T29187] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 3368.980293][T19814] bridge_slave_1: left allmulticast mode
[ 3368.980331][T19814] bridge_slave_1: left promiscuous mode
[ 3368.980585][T19814] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3369.110815][T29187] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 3369.110846][T29187] usb 5-1: config 0 has no interface number 0
[ 3369.110894][T29187] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3369.150124][T29187] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 3369.150155][T29187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3369.150177][T29187] usb 5-1: Product: syz
[ 3369.150193][T29187] usb 5-1: Manufacturer: syz
[ 3369.150209][T29187] usb 5-1: SerialNumber: syz
[ 3369.190003][T19814] bridge_slave_0: left allmulticast mode
[ 3369.190043][T19814] bridge_slave_0: left promiscuous mode
[ 3369.206930][T29187] usb 5-1: config 0 descriptor??
[ 3369.210975][T19814] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3369.250802][T29187] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 3369.437726][T29187] usb 5-1: USB disconnect, device number 111
[ 3369.522258][T29187] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 3370.005389][T18783] usb 4-1: new low-speed USB device number 125 using dummy_hcd
[ 3370.238621][T18783] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3370.239507][T18783] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 3370.239532][T18783] usb 4-1: can't read configurations, error -71
[ 3372.533477][T30903] netlink: 'syz.4.6836': attribute type 1 has an invalid length.
[ 3372.793199][T19814] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 3372.882982][T19814] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 3372.924722][T19814] bond0 (unregistering): Released all slaves
[ 3372.980869][T30887] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6832'.
[ 3372.985864][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1
[ 3373.232563][T19814] tipc: Left network mode
[ 3374.966809][T30244] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 3375.141672][T30244] usb 3-1: Using ep0 maxpacket: 16
[ 3375.169041][T30244] usb 3-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3375.169129][T30244] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3375.169149][T30244] usb 3-1: Product: syz
[ 3375.169163][T30244] usb 3-1: Manufacturer: syz
[ 3375.169185][T30244] usb 3-1: SerialNumber: syz
[ 3375.190551][T30244] usb 3-1: config 0 descriptor??
[ 3375.223143][T30244] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3375.385323][T30938] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3375.699113][T30938] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type
[ 3375.699730][T30938] overlayfs: failed to look up (tracing) for ino (-66)
[ 3376.348213][T30244] pwc: Warning: more than 1 configuration available.
[ 3376.348705][T30244] pwc: Failed to set LED on/off time (-71)
[ 3376.350593][T30244] pwc: send_video_command error -71
[ 3376.350610][T30244] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3376.350727][T30244] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3376.426731][T30244] usb 3-1: USB disconnect, device number 11
[ 3376.931328][T30944] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 3376.945514][T30944] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3376.948100][T30944] vhci_hcd vhci_hcd.0: Device attached
[ 3376.959173][T30945] usbip_core: unknown command
[ 3376.959215][T30945] vhci_hcd: unknown pdu 0
[ 3376.959247][T30945] usbip_core: unknown command
[ 3376.963932][T16347] vhci_hcd vhci_hcd.1: stop threads
[ 3376.964034][T16347] vhci_hcd vhci_hcd.1: release socket
[ 3376.964151][T16347] vhci_hcd vhci_hcd.1: disconnect device
[ 3377.075319][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2
[ 3377.546681][T29187] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 3378.112253][T29187] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[ 3378.112280][T29187] usb 5-1: config 0 has no interface number 0
[ 3378.112318][T29187] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3378.114507][T29187] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 3378.114535][T29187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3378.114553][T29187] usb 5-1: Product: syz
[ 3378.114567][T29187] usb 5-1: Manufacturer: syz
[ 3378.114582][T29187] usb 5-1: SerialNumber: syz
[ 3378.179995][T29187] usb 5-1: config 0 descriptor??
[ 3378.214934][T29187] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[ 3378.411976][T30244] usb 5-1: USB disconnect, device number 112
[ 3378.479733][T30244] yurex 5-1:0.50: USB YUREX #0 now disconnected
[ 3384.012564][T30982] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6849'.
[ 3387.931677][T31022] qrtr: Invalid version 73
[ 3389.518242][T31028] qrtr: Invalid version 73
[ 3391.120630][T31043] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3392.101275][T19814] hsr_slave_0: left promiscuous mode
[ 3392.635240][T19814] hsr_slave_1: left promiscuous mode
[ 3392.636344][T19814] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3392.636371][T19814] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3392.705547][T19814] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3392.705577][T19814] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3392.985109][T19814] veth1_macvtap: left promiscuous mode
[ 3392.985222][T19814] veth0_macvtap: left promiscuous mode
[ 3392.985505][T19814] veth1_vlan: left promiscuous mode
[ 3392.985673][T19814] veth0_vlan: left promiscuous mode
[ 3395.105512][T19814] team0 (unregistering): Port device team_slave_1 removed
[ 3395.161252][T19814] team0 (unregistering): Port device team_slave_0 removed
[ 3396.116186][T31072] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3397.548593][T30759] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 3397.638159][T31086] qrtr: Invalid version 73
[ 3397.864662][T30759] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 3397.890471][T30759] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 3399.396441][T30759] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 3399.423704][T30759] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 3399.809619][T30759] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 3400.006713][T30759] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 3400.181439][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 3400.182963][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 3401.052683][T30759] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 3401.841069][T30759] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3401.842353][T27785] usb 4-1: new full-speed USB device number 127 using dummy_hcd
[ 3401.897568][T30759] 8021q: adding VLAN 0 to HW filter on device team0
[ 3401.919961][T19815] bridge0: port 1(bridge_slave_0) entered blocking state
[ 3401.921985][T19815] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 3401.985077][T19815] bridge0: port 2(bridge_slave_1) entered blocking state
[ 3401.985249][T19815] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 3402.021163][T27785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3402.024400][T27785] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3402.024432][T27785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3402.024461][T27785] usb 4-1: Product: syz
[ 3402.024478][T27785] usb 4-1: Manufacturer: syz
[ 3402.024495][T27785] usb 4-1: SerialNumber: syz
[ 3402.079178][T27785] usb 4-1: config 0 descriptor??
[ 3402.094230][T27785] hub 4-1:0.0: bad descriptor, ignoring hub
[ 3402.094311][T27785] hub 4-1:0.0: probe with driver hub failed with error -5
[ 3402.676463][T27785] usb 4-1: USB disconnect, device number 127
[ 3404.643126][T31150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6877'.
[ 3405.051005][T31164] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3405.051052][T31164] overlayfs: overlapping lowerdir path
[ 3405.586882][T30759] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 3405.861344][T30759] veth0_vlan: entered promiscuous mode
[ 3405.884069][T30759] veth1_vlan: entered promiscuous mode
[ 3406.036575][T30759] veth0_macvtap: entered promiscuous mode
[ 3406.063941][T30759] veth1_macvtap: entered promiscuous mode
[ 3406.142251][T30759] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 3406.176794][T30759] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 3406.260920][T16399] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.287496][T19814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.314052][T19814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.356799][T19814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 3406.545470][T29187] usb 5-1: new low-speed USB device number 113 using dummy_hcd
[ 3406.819425][T29187] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 3406.820600][T29187] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 3406.820639][T29187] usb 5-1: can't read configurations, error -71
[ 3407.603820][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3407.603845][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3408.212966][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3408.212988][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3408.233072][T30099] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 3408.398461][T30099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 3408.404554][T30099] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3408.404586][T30099] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3408.404610][T30099] usb 4-1: Product: syz
[ 3408.404627][T30099] usb 4-1: Manufacturer: syz
[ 3408.404644][T30099] usb 4-1: SerialNumber: syz
[ 3408.419809][T30099] usb 4-1: config 0 descriptor??
[ 3408.426988][T30099] hub 4-1:0.0: bad descriptor, ignoring hub
[ 3408.427029][T30099] hub 4-1:0.0: probe with driver hub failed with error -5
[ 3409.849426][T10342] usb 4-1: USB disconnect, device number 2
[ 3412.024359][T27785] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[ 3412.130600][T31231] tipc: Started in network mode
[ 3412.130624][T31231] tipc: Node identity 7f000001, cluster identity 4711
[ 3412.130953][T31231] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 3412.197646][T17402] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 3412.199359][T27785] usb 5-1: Using ep0 maxpacket: 16
[ 3412.228830][T27785] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3412.228854][T27785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3412.228870][T27785] usb 5-1: Product: syz
[ 3412.228882][T27785] usb 5-1: Manufacturer: syz
[ 3412.228893][T27785] usb 5-1: SerialNumber: syz
[ 3412.274840][T27785] usb 5-1: config 0 descriptor??
[ 3412.292103][T27785] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3412.360197][T29187] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 3412.364165][T17402] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3412.364237][T17402] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3412.364264][T17402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3412.410836][T17402] usb 1-1: config 0 descriptor??
[ 3412.432965][T17402] pwc: Askey VC010 type 2 USB webcam detected.
[ 3412.500909][T29187] usb 2-1: device descriptor read/64, error -71
[ 3412.539985][T27785] pwc: Warning: more than 1 configuration available.
[ 3412.541727][T27785] pwc: Failed to set LED on/off time (-71)
[ 3412.542161][T27785] pwc: send_video_command error -71
[ 3412.542175][T27785] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3412.542303][T27785] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[ 3412.569884][T27785] usb 5-1: USB disconnect, device number 115
[ 3412.709713][T17402] pwc: send_video_command error -71
[ 3412.709732][T17402] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3412.709873][T17402] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 3412.749110][T17402] usb 1-1: USB disconnect, device number 6
[ 3412.761233][T29187] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 3412.901829][T29187] usb 2-1: device descriptor read/64, error -71
[ 3413.022040][T29187] usb usb2-port1: attempt power cycle
[ 3413.464979][T29187] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 3414.579918][T29187] usb 2-1: device descriptor read/8, error -71
[ 3414.829803][T29187] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 3414.860005][T29187] usb 2-1: device descriptor read/8, error -71
[ 3414.971115][T29187] usb usb2-port1: unable to enumerate USB device
[ 3415.029724][T31253] qrtr: Invalid version 73
[ 3417.315405][T31267] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 3417.418535][T27785] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 3417.591915][T27785] usb 3-1: Using ep0 maxpacket: 32
[ 3417.594175][T27785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3417.594210][T27785] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3417.594253][T27785] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 3417.594280][T27785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3417.612390][T27785] usb 3-1: config 0 descriptor??
[ 3417.664420][T27785] hub 3-1:0.0: USB hub found
[ 3417.875158][T27785] hub 3-1:0.0: 29 ports detected
[ 3417.875581][T27785] hub 3-1:0.0: insufficient power available to use all downstream ports
[ 3418.090199][T27785] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 3418.090306][T27785] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 3418.127212][T27785] usbhid 3-1:0.0: can't add hid device: -71
[ 3418.127306][T27785] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3418.149950][T27785] usb 3-1: USB disconnect, device number 12
[ 3420.245292][T31291] FAULT_INJECTION: forcing a failure.
[ 3420.245292][T31291] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3420.245377][T31291] CPU: 1 UID: 0 PID: 31291 Comm: syz.0.6913 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3420.245410][T31291] Tainted: [L]=SOFTLOCKUP
[ 3420.245429][T31291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3420.245445][T31291] Call Trace:
[ 3420.245454][T31291]  <TASK>
[ 3420.245466][T31291]  dump_stack_lvl+0xe8/0x150
[ 3420.245501][T31291]  should_fail_ex+0x46b/0x600
[ 3420.245536][T31291]  _copy_from_user+0x2d/0xb0
[ 3420.245566][T31291]  ___sys_sendmsg+0x1c6/0x360
[ 3420.245602][T31291]  ? __lock_acquire+0x6b5/0x2cf0
[ 3420.245640][T31291]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3420.245681][T31291]  ? finish_task_switch+0x41f/0xbe0
[ 3420.245729][T31291]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3420.245793][T31291]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3420.245826][T31291]  ? lock_release+0x2d7/0x3c0
[ 3420.245858][T31291]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3420.245914][T31291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3420.245942][T31291]  do_syscall_64+0x15f/0x560
[ 3420.245977][T31291]  ? clear_bhb_loop+0x40/0x90
[ 3420.246005][T31291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3420.246030][T31291] RIP: 0033:0x7f0f135cce59
[ 3420.246053][T31291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3420.246073][T31291] RSP: 002b:00007f0f117e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3420.246099][T31291] RAX: ffffffffffffffda RBX: 00007f0f13846180 RCX: 00007f0f135cce59
[ 3420.246117][T31291] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006
[ 3420.246132][T31291] RBP: 00007f0f117e4090 R08: 0000000000000000 R09: 0000000000000000
[ 3420.246148][T31291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3420.246163][T31291] R13: 00007f0f13846218 R14: 00007f0f13846180 R15: 00007ffc7249be58
[ 3420.246199][T31291]  </TASK>
[ 3421.544392][T31298] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3421.978723][T19507] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 3422.119566][T19507] usb 3-1: device descriptor read/64, error -71
[ 3422.467634][T19507] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 3423.246095][T19507] usb 3-1: device descriptor read/64, error -71
[ 3423.365743][T19507] usb usb3-port1: attempt power cycle
[ 3423.765992][T19507] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 3424.413267][T19507] usb 3-1: device descriptor read/8, error -71
[ 3426.176974][T17402] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 2968 sec
[ 3426.341261][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6925'.
[ 3426.341288][T31332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6925'.
[ 3426.341318][T31332] netlink: 'syz.0.6925': attribute type 12 has an invalid length.
[ 3426.375053][T31333] qrtr: Invalid version 73
[ 3430.860942][T26948] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 3431.001787][T26948] usb 5-1: device descriptor read/64, error -71
[ 3431.554193][T26948] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 3431.694961][T26948] usb 5-1: device descriptor read/64, error -71
[ 3431.814595][T26948] usb usb5-port1: attempt power cycle
[ 3431.862084][T31386] FAULT_INJECTION: forcing a failure.
[ 3431.862084][T31386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3431.862134][T31386] CPU: 1 UID: 0 PID: 31386 Comm: syz.3.6941 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3431.862165][T31386] Tainted: [L]=SOFTLOCKUP
[ 3431.862174][T31386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3431.862189][T31386] Call Trace:
[ 3431.862198][T31386]  <TASK>
[ 3431.862209][T31386]  dump_stack_lvl+0xe8/0x150
[ 3431.862244][T31386]  should_fail_ex+0x46b/0x600
[ 3431.862281][T31386]  _copy_from_user+0x2d/0xb0
[ 3431.862311][T31386]  ___sys_sendmsg+0x1c6/0x360
[ 3431.862347][T31386]  ? __lock_acquire+0x6b5/0x2cf0
[ 3431.862384][T31386]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3431.862454][T31386]  ? __fget_files+0x2a/0x420
[ 3431.862478][T31386]  ? __fget_files+0x3a6/0x420
[ 3431.862511][T31386]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3431.862548][T31386]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3431.862594][T31386]  ? __pfx_ksys_write+0x10/0x10
[ 3431.862632][T31386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3431.862658][T31386]  do_syscall_64+0x15f/0x560
[ 3431.862691][T31386]  ? trace_irq_disable+0x3b/0x140
[ 3431.862721][T31386]  ? clear_bhb_loop+0x40/0x90
[ 3431.862748][T31386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3431.862773][T31386] RIP: 0033:0x7f287bc7ce59
[ 3431.862794][T31386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3431.862814][T31386] RSP: 002b:00007f2879ece028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3431.862839][T31386] RAX: ffffffffffffffda RBX: 00007f287bef5fa0 RCX: 00007f287bc7ce59
[ 3431.862856][T31386] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000003
[ 3431.862872][T31386] RBP: 00007f2879ece090 R08: 0000000000000000 R09: 0000000000000000
[ 3431.862887][T31386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3431.862902][T31386] R13: 00007f287bef6038 R14: 00007f287bef5fa0 R15: 00007fff6afe59d8
[ 3431.862938][T31386]  </TASK>
[ 3432.408567][T31390] FAULT_INJECTION: forcing a failure.
[ 3432.408567][T31390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3432.408634][T31390] CPU: 1 UID: 0 PID: 31390 Comm: syz.2.6942 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3432.408668][T31390] Tainted: [L]=SOFTLOCKUP
[ 3432.408677][T31390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3432.408692][T31390] Call Trace:
[ 3432.408704][T31390]  <TASK>
[ 3432.408716][T31390]  dump_stack_lvl+0xe8/0x150
[ 3432.408750][T31390]  should_fail_ex+0x46b/0x600
[ 3432.408782][T31390]  _copy_to_user+0x31/0xb0
[ 3432.408813][T31390]  simple_read_from_buffer+0xe1/0x170
[ 3432.408857][T31390]  proc_fail_nth_read+0x1be/0x230
[ 3432.408886][T31390]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3432.408915][T31390]  ? rw_verify_area+0x2ac/0x4e0
[ 3432.408941][T31390]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3432.408968][T31390]  vfs_read+0x212/0xa80
[ 3432.408997][T31390]  ? preempt_schedule_thunk+0x16/0x30
[ 3432.409034][T31390]  ? __pfx_vfs_read+0x10/0x10
[ 3432.409067][T31390]  ? preempt_schedule_thunk+0x16/0x30
[ 3432.409108][T31390]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[ 3432.409143][T31390]  ? mutex_lock_nested+0x152/0x1d0
[ 3432.409168][T31390]  ? fdget_pos+0x252/0x320
[ 3432.409200][T31390]  ksys_read+0x156/0x270
[ 3432.409230][T31390]  ? __pfx_ksys_read+0x10/0x10
[ 3432.409254][T31390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3432.409288][T31390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3432.409314][T31390]  do_syscall_64+0x15f/0x560
[ 3432.409349][T31390]  ? clear_bhb_loop+0x40/0x90
[ 3432.409377][T31390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3432.409402][T31390] RIP: 0033:0x7f8c17eed68e
[ 3432.409424][T31390] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3432.409444][T31390] RSP: 002b:00007f8c1613bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3432.409469][T31390] RAX: ffffffffffffffda RBX: 00007f8c1613c6c0 RCX: 00007f8c17eed68e
[ 3432.409486][T31390] RDX: 000000000000000f RSI: 00007f8c1613c0a0 RDI: 0000000000000006
[ 3432.409502][T31390] RBP: 00007f8c1613c090 R08: 0000000000000000 R09: 0000000000000000
[ 3432.409518][T31390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3432.409533][T31390] R13: 00007f8c181a6218 R14: 00007f8c181a6180 R15: 00007ffca184ab68
[ 3432.409576][T31390]  </TASK>
[ 3432.429673][T26948] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 3433.189310][T26948] usb 5-1: device descriptor read/8, error -71
[ 3433.449764][T26948] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 3433.472848][T26948] usb 5-1: device descriptor read/8, error -71
[ 3433.965524][T26948] usb usb5-port1: unable to enumerate USB device
[ 3435.816847][T17402] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 3436.171369][T17402] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3436.171430][T17402] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3436.171458][T17402] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3436.207834][T17402] usb 3-1: config 0 descriptor??
[ 3436.228135][T17402] pwc: Askey VC010 type 2 USB webcam detected.
[ 3436.487601][T17402] pwc: send_video_command error -71
[ 3436.487622][T17402] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3436.487740][T17402] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3436.520099][T17402] usb 3-1: USB disconnect, device number 17
[ 3438.841727][T31427] vxcan1: tx drop: invalid da for name 0x00000000000000c8
[ 3441.924065][T31442] FAULT_INJECTION: forcing a failure.
[ 3441.924065][T31442] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3441.924114][T31442] CPU: 1 UID: 0 PID: 31442 Comm: syz.0.6955 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3441.924144][T31442] Tainted: [L]=SOFTLOCKUP
[ 3441.924153][T31442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3441.924167][T31442] Call Trace:
[ 3441.924176][T31442]  <TASK>
[ 3441.924186][T31442]  dump_stack_lvl+0xe8/0x150
[ 3441.924227][T31442]  should_fail_ex+0x46b/0x600
[ 3441.924257][T31442]  _copy_from_user+0x2d/0xb0
[ 3441.924286][T31442]  ___sys_sendmsg+0x1c6/0x360
[ 3441.924319][T31442]  ? __lock_acquire+0x6b5/0x2cf0
[ 3441.924353][T31442]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3441.924421][T31442]  ? __fget_files+0x2a/0x420
[ 3441.924443][T31442]  ? __fget_files+0x3a6/0x420
[ 3441.924475][T31442]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3441.924511][T31442]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3441.924554][T31442]  ? __pfx_ksys_write+0x10/0x10
[ 3441.924578][T31442]  ? __task_pid_nr_ns+0x28/0x470
[ 3441.924629][T31442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3441.924654][T31442]  do_syscall_64+0x15f/0x560
[ 3441.924688][T31442]  ? clear_bhb_loop+0x40/0x90
[ 3441.924716][T31442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3441.924739][T31442] RIP: 0033:0x7f0f135cce59
[ 3441.924767][T31442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3441.924787][T31442] RSP: 002b:00007f0f11826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3441.924818][T31442] RAX: ffffffffffffffda RBX: 00007f0f13845fa0 RCX: 00007f0f135cce59
[ 3441.924835][T31442] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 3441.924850][T31442] RBP: 00007f0f11826090 R08: 0000000000000000 R09: 0000000000000000
[ 3441.924865][T31442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3441.924879][T31442] R13: 00007f0f13846038 R14: 00007f0f13845fa0 R15: 00007ffc7249be58
[ 3441.924913][T31442]  </TASK>
[ 3442.196132][T31444] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 3444.341556][T31459] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[ 3445.137391][T30099] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 3445.331429][T30099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3445.331494][T30099] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3445.331523][T30099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3445.351132][T30099] usb 4-1: config 0 descriptor??
[ 3445.360724][T30099] pwc: Askey VC010 type 2 USB webcam detected.
[ 3445.624836][T27785] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 3445.699024][T30099] pwc: send_video_command error -71
[ 3445.699045][T30099] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3445.699180][T30099] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[ 3445.708023][T30099] usb 4-1: USB disconnect, device number 3
[ 3445.776455][T27785] usb 3-1: device descriptor read/64, error -71
[ 3446.354852][T27785] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 3447.022063][T27785] usb 3-1: device descriptor read/64, error -71
[ 3447.142177][T27785] usb usb3-port1: attempt power cycle
[ 3449.932348][T27785] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 3450.000913][T17402] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 3450.006423][T27785] usb 3-1: device descriptor read/8, error -71
[ 3450.163672][T17402] usb 1-1: device descriptor read/64, error -71
[ 3450.271611][T27785] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 3450.304984][T27785] usb 3-1: device descriptor read/8, error -71
[ 3450.412846][T29187] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[ 3450.431308][T27785] usb usb3-port1: unable to enumerate USB device
[ 3450.436665][T17402] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 3450.577756][T29187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3450.577815][T29187] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7
[ 3450.577844][T29187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[ 3450.577874][T29187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 3450.577899][T29187] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 3450.579867][T29187] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 3450.579898][T29187] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 3450.579921][T29187] usb 2-1: Manufacturer: syz
[ 3450.615761][T17402] usb 1-1: device descriptor read/64, error -71
[ 3450.646803][T29187] usb 2-1: config 0 descriptor??
[ 3450.734389][T17402] usb usb1-port1: attempt power cycle
[ 3451.120746][T17402] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 3451.138536][  T820] usb 2-1: USB disconnect, device number 73
[ 3451.167919][T17402] usb 1-1: device descriptor read/8, error -71
[ 3456.413989][  T820] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 3457.344246][  T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3457.344306][  T820] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3457.344332][  T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3457.378429][  T820] usb 3-1: config 0 descriptor??
[ 3457.386921][  T820] pwc: Askey VC010 type 2 USB webcam detected.
[ 3458.638384][  T820] pwc: send_video_command error -71
[ 3458.638402][  T820] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3458.638517][  T820] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[ 3458.985239][  T820] usb 3-1: USB disconnect, device number 22
[ 3460.167477][T31549] FAULT_INJECTION: forcing a failure.
[ 3460.167477][T31549] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3460.167517][T31549] CPU: 1 UID: 0 PID: 31549 Comm: syz.1.6982 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3460.167548][T31549] Tainted: [L]=SOFTLOCKUP
[ 3460.167556][T31549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3460.167570][T31549] Call Trace:
[ 3460.167579][T31549]  <TASK>
[ 3460.167589][T31549]  dump_stack_lvl+0xe8/0x150
[ 3460.167623][T31549]  should_fail_ex+0x46b/0x600
[ 3460.167654][T31549]  _copy_from_user+0x2d/0xb0
[ 3460.167683][T31549]  ___sys_sendmsg+0x1c6/0x360
[ 3460.167715][T31549]  ? __lock_acquire+0x6b5/0x2cf0
[ 3460.167751][T31549]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3460.167820][T31549]  ? __fget_files+0x2a/0x420
[ 3460.167841][T31549]  ? __fget_files+0x3a6/0x420
[ 3460.167873][T31549]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3460.167909][T31549]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3460.167952][T31549]  ? __pfx_ksys_write+0x10/0x10
[ 3460.167988][T31549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3460.168012][T31549]  do_syscall_64+0x15f/0x560
[ 3460.168044][T31549]  ? trace_irq_disable+0x3b/0x140
[ 3460.168072][T31549]  ? clear_bhb_loop+0x40/0x90
[ 3460.168107][T31549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3460.168129][T31549] RIP: 0033:0x7f0354b4ce59
[ 3460.168150][T31549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3460.168170][T31549] RSP: 002b:00007f0352d64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3460.168194][T31549] RAX: ffffffffffffffda RBX: 00007f0354dc6180 RCX: 00007f0354b4ce59
[ 3460.168211][T31549] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[ 3460.168226][T31549] RBP: 00007f0352d64090 R08: 0000000000000000 R09: 0000000000000000
[ 3460.168240][T31549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3460.168255][T31549] R13: 00007f0354dc6218 R14: 00007f0354dc6180 R15: 00007ffe9f82cc48
[ 3460.168290][T31549]  </TASK>
[ 3460.358789][T31551] qrtr: Invalid version 73
[ 3463.833733][T31558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6987'.
[ 3465.222905][T31580] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3465.222978][T31580] overlayfs: overlapping lowerdir path
[ 3465.598517][  T820] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 3466.629730][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 3466.629920][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 3466.714908][  T820] usb 3-1: Using ep0 maxpacket: 16
[ 3466.717028][  T820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3466.717055][  T820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3466.721585][  T820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3466.721625][  T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3466.721641][  T820] usb 3-1: Product: syz
[ 3466.721652][  T820] usb 3-1: Manufacturer: syz
[ 3466.721663][  T820] usb 3-1: SerialNumber: syz
[ 3466.830902][  T820] usb 3-1: 0:2 : does not exist
[ 3466.990130][T31578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3466.990842][T31578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3467.275427][T30244] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 3468.203513][T30244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3468.203657][T30244] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3468.203685][T30244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3468.312953][T30244] usb 2-1: config 0 descriptor??
[ 3468.379964][T30244] pwc: Askey VC010 type 2 USB webcam detected.
[ 3468.649857][T30244] pwc: send_video_command error -71
[ 3468.649873][T30244] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3468.650017][T30244] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 3468.693266][T30244] usb 2-1: USB disconnect, device number 74
[ 3469.358082][  T820] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 3469.452223][  T820] usb 3-1: USB disconnect, device number 23
[ 3471.065419][ T6453] udevd[6453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3472.843025][T31629] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3472.843109][T31629] overlayfs: overlapping lowerdir path
[ 3473.384893][T31636] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 3473.384930][T31636] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3473.491796][T31636] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 3473.491828][T31636] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 3476.000173][T31648] FAULT_INJECTION: forcing a failure.
[ 3476.000173][T31648] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3476.000216][T31648] CPU: 1 UID: 0 PID: 31648 Comm: syz.0.7010 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3476.000248][T31648] Tainted: [L]=SOFTLOCKUP
[ 3476.000258][T31648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3476.000274][T31648] Call Trace:
[ 3476.000284][T31648]  <TASK>
[ 3476.000295][T31648]  dump_stack_lvl+0xe8/0x150
[ 3476.000330][T31648]  should_fail_ex+0x46b/0x600
[ 3476.000363][T31648]  _copy_to_user+0x31/0xb0
[ 3476.000396][T31648]  simple_read_from_buffer+0xe1/0x170
[ 3476.000439][T31648]  proc_fail_nth_read+0x1be/0x230
[ 3476.000468][T31648]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3476.000496][T31648]  ? rw_verify_area+0x2ac/0x4e0
[ 3476.000522][T31648]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3476.000549][T31648]  vfs_read+0x212/0xa80
[ 3476.000585][T31648]  ? __pfx_vfs_read+0x10/0x10
[ 3476.000616][T31648]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 3476.000651][T31648]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3476.000685][T31648]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 3476.000718][T31648]  ? mutex_lock_nested+0x152/0x1d0
[ 3476.000756][T31648]  ? fdget_pos+0x252/0x320
[ 3476.000789][T31648]  ksys_read+0x156/0x270
[ 3476.000818][T31648]  ? __pfx_ksys_read+0x10/0x10
[ 3476.000855][T31648]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3476.000882][T31648]  do_syscall_64+0x15f/0x560
[ 3476.000921][T31648]  ? trace_irq_disable+0x3b/0x140
[ 3476.000950][T31648]  ? clear_bhb_loop+0x40/0x90
[ 3476.000979][T31648]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3476.001003][T31648] RIP: 0033:0x7f0f1358d68e
[ 3476.001025][T31648] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3476.001047][T31648] RSP: 002b:00007f0f117e3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3476.001072][T31648] RAX: ffffffffffffffda RBX: 00007f0f117e46c0 RCX: 00007f0f1358d68e
[ 3476.001089][T31648] RDX: 000000000000000f RSI: 00007f0f117e40a0 RDI: 0000000000000006
[ 3476.001105][T31648] RBP: 00007f0f117e4090 R08: 0000000000000000 R09: 0000000000000000
[ 3476.001120][T31648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3476.001135][T31648] R13: 00007f0f13846218 R14: 00007f0f13846180 R15: 00007ffc7249be58
[ 3476.001173][T31648]  </TASK>
[ 3476.744896][  T820] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 3476.907295][  T820] usb 2-1: Using ep0 maxpacket: 8
[ 3476.910380][  T820] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 3476.936105][  T820] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40
[ 3476.936138][  T820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3476.936161][  T820] usb 2-1: Product: syz
[ 3476.936178][  T820] usb 2-1: Manufacturer: syz
[ 3476.936195][  T820] usb 2-1: SerialNumber: syz
[ 3477.256634][  T820] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 3477.261763][  T820] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 3477.262307][  T820] usb 2-1: unit 5 not found!
[ 3477.350320][  T820] usb 2-1: USB disconnect, device number 75
[ 3478.529446][ T6453] udevd[6453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3478.697369][T26948] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 3478.864125][T26948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3478.864186][T26948] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3478.864213][T26948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3478.908960][T31661] netdevsim netdevsim2: Direct firmware load for /
[ 3478.908960][T31661]  failed with error -2
[ 3478.908991][T31661] netdevsim netdevsim2: Falling back to sysfs fallback for: /
[ 3478.908991][T31661] 
[ 3479.030268][  T820] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 3479.203687][  T820] usb 1-1: Using ep0 maxpacket: 8
[ 3479.215152][  T820] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3479.215189][  T820] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3479.215220][  T820] usb 1-1: config 0 interface 0 has no altsetting 0
[ 3479.215258][  T820] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00
[ 3479.215284][  T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3479.236432][  T820] usb 1-1: config 0 descriptor??
[ 3479.762822][   T37] kauditd_printk_skb: 10 callbacks suppressed
[ 3479.762842][   T37] audit: type=1326 audit(1779809805.746:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31665 comm="syz.0.7016" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x0
[ 3481.338422][T26948] usb 5-1: config 0 descriptor??
[ 3481.404500][T26948] pwc: Askey VC010 type 2 USB webcam detected.
[ 3481.727786][T26948] pwc: send_video_command error -71
[ 3481.727808][T26948] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3481.727945][T26948] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[ 3481.770768][T26948] usb 5-1: USB disconnect, device number 120
[ 3481.858252][  T820] usbhid 1-1:0.0: can't add hid device: -71
[ 3481.858386][  T820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 3481.933317][  T820] usb 1-1: USB disconnect, device number 11
[ 3485.320554][T31701] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 3485.320625][T31701] overlayfs: overlapping lowerdir path
[ 3485.528854][T18819] Bluetooth: hci3: command 0x0406 tx timeout
[ 3488.254800][   T37] audit: type=1326 audit(1779809813.510:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.256510][   T37] audit: type=1326 audit(1779809813.510:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.256778][   T37] audit: type=1326 audit(1779809813.528:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.257061][   T37] audit: type=1326 audit(1779809813.528:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.257296][   T37] audit: type=1326 audit(1779809813.538:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.258794][   T37] audit: type=1326 audit(1779809813.538:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.259401][   T37] audit: type=1326 audit(1779809813.538:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f135cce59 code=0x7ffc0000
[ 3488.287894][   T37] audit: type=1326 audit(1779809813.547:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1358d68e code=0x7ffc0000
[ 3488.287954][   T37] audit: type=1326 audit(1779809813.547:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1358d68e code=0x7ffc0000
[ 3488.288001][   T37] audit: type=1326 audit(1779809813.547:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31722 comm="syz.0.7025" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0f1358d68e code=0x7ffc0000
[ 3488.761714][T31727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7026'.
[ 3490.150692][T31741] qrtr: Invalid version 73
[ 3491.430084][T26948] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 3028 sec
[ 3493.345170][T31767] vxcan1: tx drop: invalid da for name 0x00000000000000c8
[ 3493.465520][T31775] qrtr: Invalid version 73
[ 3496.077447][T31794] qrtr: Invalid version 73
[ 3502.378670][T31829] FAULT_INJECTION: forcing a failure.
[ 3502.378670][T31829] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3502.378746][T31829] CPU: 1 UID: 0 PID: 31829 Comm: syz.0.7051 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3502.378784][T31829] Tainted: [L]=SOFTLOCKUP
[ 3502.378794][T31829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3502.378811][T31829] Call Trace:
[ 3502.378822][T31829]  <TASK>
[ 3502.378834][T31829]  dump_stack_lvl+0xe8/0x150
[ 3502.378871][T31829]  should_fail_ex+0x46b/0x600
[ 3502.378907][T31829]  _copy_from_user+0x2d/0xb0
[ 3502.378940][T31829]  ___sys_sendmsg+0x1c6/0x360
[ 3502.378978][T31829]  ? __lock_acquire+0x6b5/0x2cf0
[ 3502.379020][T31829]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3502.379109][T31829]  ? __fget_files+0x2a/0x420
[ 3502.379133][T31829]  ? __fget_files+0x3a6/0x420
[ 3502.379171][T31829]  __sys_sendmmsg+0x282/0x4e0
[ 3502.379230][T31829]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3502.379278][T31829]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3502.379325][T31829]  ? ksys_write+0x248/0x270
[ 3502.379357][T31829]  ? __pfx_ksys_write+0x10/0x10
[ 3502.379383][T31829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3502.379419][T31829]  __x64_sys_sendmmsg+0xa0/0xc0
[ 3502.379455][T31829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3502.379481][T31829]  do_syscall_64+0x15f/0x560
[ 3502.379518][T31829]  ? clear_bhb_loop+0x40/0x90
[ 3502.379549][T31829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3502.379575][T31829] RIP: 0033:0x7f0f135cce59
[ 3502.379598][T31829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3502.379620][T31829] RSP: 002b:00007f0f117e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3502.379648][T31829] RAX: ffffffffffffffda RBX: 00007f0f13846180 RCX: 00007f0f135cce59
[ 3502.379667][T31829] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000005
[ 3502.379686][T31829] RBP: 00007f0f117e4090 R08: 0000000000000000 R09: 0000000000000000
[ 3502.379703][T31829] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[ 3502.379720][T31829] R13: 00007f0f13846218 R14: 00007f0f13846180 R15: 00007ffc7249be58
[ 3502.379760][T31829]  </TASK>
[ 3505.806865][T31839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7056'.
[ 3506.350135][   T59] Bluetooth: hci3: unexpected event for opcode 0x4889
[ 3506.411878][T31845] qrtr: Invalid version 73
[ 3506.493886][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7059'.
[ 3506.494561][T31847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7059'.
[ 3508.166330][T31858] FAULT_INJECTION: forcing a failure.
[ 3508.166330][T31858] name failslab, interval 1, probability 0, space 0, times 0
[ 3508.166360][T31858] CPU: 1 UID: 0 PID: 31858 Comm: syz.2.7061 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3508.166383][T31858] Tainted: [L]=SOFTLOCKUP
[ 3508.166389][T31858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3508.166399][T31858] Call Trace:
[ 3508.166406][T31858]  <TASK>
[ 3508.166414][T31858]  dump_stack_lvl+0xe8/0x150
[ 3508.166438][T31858]  should_fail_ex+0x46b/0x600
[ 3508.166460][T31858]  should_failslab+0xa8/0x100
[ 3508.166484][T31858]  __kmalloc_noprof+0xdf/0x7b0
[ 3508.166502][T31858]  ? kfree+0x4d/0x6c0
[ 3508.166517][T31858]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3508.166541][T31858]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3508.166559][T31858]  ? tomoyo_domain+0xd7/0x130
[ 3508.166580][T31858]  ? tomoyo_path_number_perm+0x219/0x630
[ 3508.166604][T31858]  tomoyo_path_number_perm+0x246/0x630
[ 3508.166629][T31858]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3508.166651][T31858]  ? __lock_acquire+0x6b5/0x2cf0
[ 3508.166677][T31858]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3508.166720][T31858]  ? __fget_files+0x2a/0x420
[ 3508.166745][T31858]  ? __fget_files+0x2a/0x420
[ 3508.166760][T31858]  ? __fget_files+0x3a6/0x420
[ 3508.166774][T31858]  ? __fget_files+0x2a/0x420
[ 3508.166792][T31858]  security_file_ioctl+0xc3/0x2a0
[ 3508.166818][T31858]  __se_sys_ioctl+0x47/0x170
[ 3508.166839][T31858]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3508.166857][T31858]  do_syscall_64+0x15f/0x560
[ 3508.166881][T31858]  ? trace_irq_disable+0x3b/0x140
[ 3508.166901][T31858]  ? clear_bhb_loop+0x40/0x90
[ 3508.166921][T31858]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3508.166937][T31858] RIP: 0033:0x7f8c17f2ce59
[ 3508.166953][T31858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3508.166967][T31858] RSP: 002b:00007f8c1615d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3508.166984][T31858] RAX: ffffffffffffffda RBX: 00007f8c181a6090 RCX: 00007f8c17f2ce59
[ 3508.166997][T31858] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[ 3508.167007][T31858] RBP: 00007f8c1615d090 R08: 0000000000000000 R09: 0000000000000000
[ 3508.167017][T31858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3508.167027][T31858] R13: 00007f8c181a6128 R14: 00007f8c181a6090 R15: 00007ffca184ab68
[ 3508.167053][T31858]  </TASK>
[ 3508.167059][T31858] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3508.527395][   T59] Bluetooth: hci3: unexpected event for opcode 0x4889
[ 3510.799541][T31878] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7067'.
[ 3511.063622][T26948] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 3511.090299][T31886] netlink: 'syz.2.7068': attribute type 3 has an invalid length.
[ 3511.242400][T26948] usb 2-1: Using ep0 maxpacket: 16
[ 3511.254811][T26948] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3511.254842][T26948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3511.254871][T26948] usb 2-1: Product: syz
[ 3511.254883][T26948] usb 2-1: Manufacturer: syz
[ 3511.254895][T26948] usb 2-1: SerialNumber: syz
[ 3511.295705][T26948] usb 2-1: config 0 descriptor??
[ 3511.311445][T26948] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3511.523655][T26948] pwc: Warning: more than 1 configuration available.
[ 3511.524526][T26948] pwc: Failed to set LED on/off time (-71)
[ 3511.524940][T26948] pwc: send_video_command error -71
[ 3511.524955][T26948] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3511.525069][T26948] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 3511.584242][T26948] usb 2-1: USB disconnect, device number 76
[ 3514.892518][T31918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7078'.
[ 3514.892555][T31918] netlink: 'syz.2.7078': attribute type 2 has an invalid length.
[ 3515.432357][   T59] Bluetooth: hci3: unexpected event for opcode 0x4889
[ 3515.832580][T31935] bond1: option resend_igmp: invalid value (18446744073709551615)
[ 3515.832613][T31935] bond1: option resend_igmp: allowed values 0 - 255
[ 3515.884374][T31935] bond1 (unregistering): Released all slaves
[ 3520.668913][  T820] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 3520.744493][T30244] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 3520.833150][  T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3520.833190][  T820] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 3520.833245][  T820] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 3520.833271][  T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3520.851811][  T820] usb 3-1: config 0 descriptor??
[ 3520.911294][  T820] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 3520.923659][  T820] dvb-usb: bulk message failed: -22 (3/0)
[ 3520.944861][T30244] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3520.946138][T30244] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[ 3520.946173][T30244] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[ 3521.038783][T31971] FAULT_INJECTION: forcing a failure.
[ 3521.038783][T31971] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3521.038824][T31971] CPU: 0 UID: 0 PID: 31971 Comm: syz.4.7095 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3521.038855][T31971] Tainted: [L]=SOFTLOCKUP
[ 3521.038863][T31971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3521.038879][T31971] Call Trace:
[ 3521.038888][T31971]  <TASK>
[ 3521.038898][T31971]  dump_stack_lvl+0xe8/0x150
[ 3521.038932][T31971]  should_fail_ex+0x46b/0x600
[ 3521.038964][T31971]  _copy_from_user+0x2d/0xb0
[ 3521.038994][T31971]  ___sys_sendmsg+0x1c6/0x360
[ 3521.039027][T31971]  ? __lock_acquire+0x6b5/0x2cf0
[ 3521.039065][T31971]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3521.039136][T31971]  ? __fget_files+0x2a/0x420
[ 3521.039158][T31971]  ? __fget_files+0x3a6/0x420
[ 3521.039191][T31971]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3521.039228][T31971]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3521.039272][T31971]  ? __pfx_ksys_write+0x10/0x10
[ 3521.039308][T31971]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3521.039334][T31971]  do_syscall_64+0x15f/0x560
[ 3521.039367][T31971]  ? trace_irq_disable+0x3b/0x140
[ 3521.039395][T31971]  ? clear_bhb_loop+0x40/0x90
[ 3521.039423][T31971]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3521.039446][T31971] RIP: 0033:0x7f3568a3ce59
[ 3521.039469][T31971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3521.039489][T31971] RSP: 002b:00007f3566c96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3521.039514][T31971] RAX: ffffffffffffffda RBX: 00007f3568cb5fa0 RCX: 00007f3568a3ce59
[ 3521.039532][T31971] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 3521.039548][T31971] RBP: 00007f3566c96090 R08: 0000000000000000 R09: 0000000000000000
[ 3521.039563][T31971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3521.039577][T31971] R13: 00007f3568cb6038 R14: 00007f3568cb5fa0 R15: 00007fff355f1a48
[ 3521.039614][T31971]  </TASK>
[ 3521.344525][T30244] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[ 3521.344560][T30244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3521.344591][T30244] usb 4-1: Product: syz
[ 3521.344607][T30244] usb 4-1: Manufacturer: syz
[ 3521.344621][T30244] usb 4-1: SerialNumber: syz
[ 3521.949053][T31960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3521.949700][T31960] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3522.233449][T30244] usb 4-1: USB disconnect, device number 4
[ 3522.307084][  T820] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 3522.309322][  T820] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 3522.309364][  T820] usb 3-1: media controller created
[ 3522.371767][  T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3522.435444][T31978] netlink: del zone limit has 8 unknown bytes
[ 3522.464474][  T820] dvb-usb: bulk message failed: -22 (6/0)
[ 3522.464721][  T820] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 3522.498997][  T820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input148
[ 3522.508633][  T820] dvb-usb: schedule remote query interval to 150 msecs.
[ 3522.508660][  T820] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 3522.545866][  T820] usb 3-1: USB disconnect, device number 24
[ 3523.365488][T30244] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[ 3524.427607][T30244] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3524.428744][T30244] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 3524.428780][T30244] usb 4-1: can't read configurations, error -71
[ 3524.436885][  T820] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 3526.237450][T32006] FAULT_INJECTION: forcing a failure.
[ 3526.237450][T32006] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3526.237487][T32006] CPU: 0 UID: 0 PID: 32006 Comm: syz.4.7105 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3526.237511][T32006] Tainted: [L]=SOFTLOCKUP
[ 3526.237518][T32006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3526.237530][T32006] Call Trace:
[ 3526.237538][T32006]  <TASK>
[ 3526.237547][T32006]  dump_stack_lvl+0xe8/0x150
[ 3526.237576][T32006]  should_fail_ex+0x46b/0x600
[ 3526.237603][T32006]  _copy_to_user+0x31/0xb0
[ 3526.237635][T32006]  simple_read_from_buffer+0xe1/0x170
[ 3526.237672][T32006]  proc_fail_nth_read+0x1be/0x230
[ 3526.237696][T32006]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3526.237719][T32006]  ? rw_verify_area+0x2ac/0x4e0
[ 3526.237740][T32006]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3526.237761][T32006]  vfs_read+0x212/0xa80
[ 3526.237790][T32006]  ? __pfx_vfs_read+0x10/0x10
[ 3526.237815][T32006]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 3526.237848][T32006]  ? lockdep_hardirqs_on+0x7a/0x110
[ 3526.237879][T32006]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 3526.237905][T32006]  ? mutex_lock_nested+0x152/0x1d0
[ 3526.237924][T32006]  ? fdget_pos+0x252/0x320
[ 3526.237947][T32006]  ksys_read+0x156/0x270
[ 3526.237970][T32006]  ? __pfx_ksys_read+0x10/0x10
[ 3526.237997][T32006]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3526.238018][T32006]  do_syscall_64+0x15f/0x560
[ 3526.238043][T32006]  ? trace_irq_disable+0x3b/0x140
[ 3526.238065][T32006]  ? clear_bhb_loop+0x40/0x90
[ 3526.238090][T32006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3526.238109][T32006] RIP: 0033:0x7f35689fd68e
[ 3526.238129][T32006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3526.238145][T32006] RSP: 002b:00007f3566c74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3526.238167][T32006] RAX: ffffffffffffffda RBX: 00007f3566c756c0 RCX: 00007f35689fd68e
[ 3526.238192][T32006] RDX: 000000000000000f RSI: 00007f3566c750a0 RDI: 0000000000000005
[ 3526.238205][T32006] RBP: 00007f3566c75090 R08: 0000000000000000 R09: 0000000000000000
[ 3526.238217][T32006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3526.238228][T32006] R13: 00007f3568cb6128 R14: 00007f3568cb6090 R15: 00007fff355f1a48
[ 3526.238262][T32006]  </TASK>
[ 3526.983095][T17402] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 3527.102183][T30244] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 3527.150620][T17402] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3527.150661][T17402] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 3527.150680][T17402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3527.189975][T17402] usb 2-1: config 0 descriptor??
[ 3527.233893][T17402] pwc: Askey VC010 type 2 USB webcam detected.
[ 3527.275499][T30244] usb 1-1: Using ep0 maxpacket: 16
[ 3527.297226][T30244] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[ 3527.297257][T30244] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3527.297280][T30244] usb 1-1: Product: syz
[ 3527.297297][T30244] usb 1-1: Manufacturer: syz
[ 3527.297314][T30244] usb 1-1: SerialNumber: syz
[ 3527.346073][T30244] usb 1-1: config 0 descriptor??
[ 3527.375722][T30244] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[ 3527.585878][T17402] pwc: send_video_command error -71
[ 3527.585905][T17402] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 3527.586987][T17402] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[ 3527.615384][T30244] pwc: Warning: more than 1 configuration available.
[ 3527.619412][T30244] pwc: Failed to set LED on/off time (-71)
[ 3527.620827][T30244] pwc: send_video_command error -71
[ 3527.620842][T30244] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 3527.620975][T30244] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 3527.668841][T17402] usb 2-1: USB disconnect, device number 77
[ 3527.698555][T30244] usb 1-1: USB disconnect, device number 12
[ 3532.119865][T32045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7116'.
[ 3532.875124][T32047] FAULT_INJECTION: forcing a failure.
[ 3532.875124][T32047] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3532.875164][T32047] CPU: 1 UID: 0 PID: 32047 Comm: syz.0.7117 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3532.875196][T32047] Tainted: [L]=SOFTLOCKUP
[ 3532.875205][T32047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3532.875219][T32047] Call Trace:
[ 3532.875228][T32047]  <TASK>
[ 3532.875238][T32047]  dump_stack_lvl+0xe8/0x150
[ 3532.875271][T32047]  should_fail_ex+0x46b/0x600
[ 3532.875302][T32047]  _copy_from_user+0x2d/0xb0
[ 3532.875338][T32047]  ___sys_sendmsg+0x1c6/0x360
[ 3532.875376][T32047]  ? __lock_acquire+0x6b5/0x2cf0
[ 3532.875414][T32047]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3532.875482][T32047]  ? __fget_files+0x2a/0x420
[ 3532.875505][T32047]  ? __fget_files+0x3a6/0x420
[ 3532.875537][T32047]  __x64_sys_sendmsg+0x1c3/0x2a0
[ 3532.875574][T32047]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3532.875619][T32047]  ? __pfx_ksys_write+0x10/0x10
[ 3532.875661][T32047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3532.875680][T32047]  do_syscall_64+0x15f/0x560
[ 3532.875704][T32047]  ? trace_irq_disable+0x3b/0x140
[ 3532.875724][T32047]  ? clear_bhb_loop+0x40/0x90
[ 3532.875744][T32047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3532.875761][T32047] RIP: 0033:0x7f0f135cce59
[ 3532.875776][T32047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3532.875790][T32047] RSP: 002b:00007f0f11826028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3532.875807][T32047] RAX: ffffffffffffffda RBX: 00007f0f13845fa0 RCX: 00007f0f135cce59
[ 3532.875820][T32047] RDX: 000000000404c094 RSI: 0000200000000200 RDI: 0000000000000003
[ 3532.875832][T32047] RBP: 00007f0f11826090 R08: 0000000000000000 R09: 0000000000000000
[ 3532.875842][T32047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3532.875852][T32047] R13: 00007f0f13846038 R14: 00007f0f13845fa0 R15: 00007ffc7249be58
[ 3532.875877][T32047]  </TASK>
[ 3533.187315][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[ 3533.187399][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[ 3535.474231][T32057] FAULT_INJECTION: forcing a failure.
[ 3535.474231][T32057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3535.474274][T32057] CPU: 0 UID: 0 PID: 32057 Comm: syz.3.7121 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3535.474317][T32057] Tainted: [L]=SOFTLOCKUP
[ 3535.474326][T32057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3535.474341][T32057] Call Trace:
[ 3535.474351][T32057]  <TASK>
[ 3535.474361][T32057]  dump_stack_lvl+0xe8/0x150
[ 3535.474394][T32057]  should_fail_ex+0x46b/0x600
[ 3535.474425][T32057]  copy_fpstate_to_sigframe+0xaab/0xd60
[ 3535.474464][T32057]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 3535.474492][T32057]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[ 3535.474528][T32057]  ? rt_spin_lock+0x1e0/0x400
[ 3535.474555][T32057]  ? rt_spin_lock+0x1e0/0x400
[ 3535.474590][T32057]  ? fpu__alloc_mathframe+0xac/0x130
[ 3535.474616][T32057]  get_sigframe+0x5f7/0x820
[ 3535.474663][T32057]  ? __pfx_get_sigframe+0x10/0x10
[ 3535.474697][T32057]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 3535.474725][T32057]  ? reacquire_held_locks+0x104/0x190
[ 3535.474769][T32057]  x64_setup_rt_frame+0x160/0xcb0
[ 3535.474791][T32057]  ? rt_spin_unlock+0x14f/0x200
[ 3535.474855][T32057]  ? rt_spin_unlock+0x160/0x200
[ 3535.474884][T32057]  ? get_signal+0x114f/0x1330
[ 3535.474912][T32057]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 3535.474944][T32057]  arch_do_signal_or_restart+0x442/0x840
[ 3535.474988][T32057]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 3535.475033][T32057]  ? ksys_write+0x248/0x270
[ 3535.475070][T32057]  exit_to_user_mode_loop+0x8c/0x4d0
[ 3535.475100][T32057]  ? rcu_is_watching+0x15/0xb0
[ 3535.475151][T32057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3535.475177][T32057]  do_syscall_64+0x33e/0x560
[ 3535.475212][T32057]  ? clear_bhb_loop+0x40/0x90
[ 3535.475240][T32057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3535.475263][T32057] RIP: 0033:0x7f287bc3d68e
[ 3535.475285][T32057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3535.475304][T32057] RSP: 002b:00007f2879ecdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3535.475335][T32057] RAX: 0000000000000001 RBX: 00007f2879ece6c0 RCX: 00007f287bc3d68e
[ 3535.475350][T32057] RDX: 0000000000000001 RSI: 00007f2879ece090 RDI: 0000000000000003
[ 3535.475366][T32057] RBP: 00007f2879ece090 R08: 0000000000000000 R09: 0000000000000000
[ 3535.475381][T32057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3535.475395][T32057] R13: 00007f287bef6038 R14: 00007f287bef5fa0 R15: 00007fff6afe59d8
[ 3535.475433][T32057]  </TASK>
[ 3535.995188][T26948] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 3536.122681][T32063] hsr0: entered promiscuous mode
[ 3536.158786][T26948] usb 3-1: Using ep0 maxpacket: 32
[ 3536.160760][T26948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3536.160798][T26948] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 3536.160846][T26948] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[ 3536.160874][T26948] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 3536.160902][T26948] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3536.160918][T26948] usb 3-1: config 1 interface 1 has no altsetting 0
[ 3536.163403][T26948] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 3536.163442][T26948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3536.163471][T26948] usb 3-1: Product: syz
[ 3536.163482][T26948] usb 3-1: Manufacturer: syz
[ 3536.163493][T26948] usb 3-1: SerialNumber: syz
[ 3536.187282][T32062] hsr0: left promiscuous mode
[ 3536.439392][T30099] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 3536.562524][T32059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3536.564742][T32059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3536.612295][T30099] usb 5-1: config index 0 descriptor too short (expected 2084, got 36)
[ 3536.612324][T30099] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[ 3536.612359][T30099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3536.614883][T30099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3536.615082][T30099] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 3536.615357][T30099] usb 5-1: New USB device found, idVendor=054c, idProduct=0cc6, bcdDevice= 0.00
[ 3536.615853][T30099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3536.729802][T30099] usb 5-1: config 0 descriptor??
[ 3536.744644][T26948] usb 3-1: selecting invalid altsetting 0
[ 3536.788998][T30099] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count
[ 3536.789057][T30099] usbhid 5-1:0.0: can't add hid device: -22
[ 3536.789139][T30099] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[ 3536.922946][T26948] usb 3-1: 1:1: cannot get freq (v2/v3): err -32
[ 3536.934945][T26948] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[ 3537.278491][T26948] usb 3-1: USB disconnect, device number 25
[ 3538.035090][T32074] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7126'.
[ 3539.747705][T10343] usb 5-1: USB disconnect, device number 121
[ 3540.229650][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3541.925720][T32087] FAULT_INJECTION: forcing a failure.
[ 3541.925720][T32087] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3541.925750][T32087] CPU: 1 UID: 0 PID: 32087 Comm: syz.0.7123 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3541.925773][T32087] Tainted: [L]=SOFTLOCKUP
[ 3541.925780][T32087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3541.925790][T32087] Call Trace:
[ 3541.925796][T32087]  <TASK>
[ 3541.925804][T32087]  dump_stack_lvl+0xe8/0x150
[ 3541.925828][T32087]  should_fail_ex+0x46b/0x600
[ 3541.925851][T32087]  _copy_from_user+0x2d/0xb0
[ 3541.925873][T32087]  ucma_write+0x166/0x2f0
[ 3541.925900][T32087]  ? __pfx_ucma_write+0x10/0x10
[ 3541.925922][T32087]  ? rw_verify_area+0x25b/0x4e0
[ 3541.925966][T32087]  vfs_writev+0x4c6/0x9a0
[ 3541.926002][T32087]  ? __pfx_ucma_write+0x10/0x10
[ 3541.926026][T32087]  ? __pfx_vfs_writev+0x10/0x10
[ 3541.926059][T32087]  ? __fget_files+0x2a/0x420
[ 3541.926078][T32087]  ? __fget_files+0x3a6/0x420
[ 3541.926092][T32087]  ? __fget_files+0x2a/0x420
[ 3541.926114][T32087]  do_writev+0x15a/0x2e0
[ 3541.926139][T32087]  ? __pfx_do_writev+0x10/0x10
[ 3541.926168][T32087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3541.926186][T32087]  do_syscall_64+0x15f/0x560
[ 3541.926210][T32087]  ? trace_irq_disable+0x3b/0x140
[ 3541.926230][T32087]  ? clear_bhb_loop+0x40/0x90
[ 3541.926252][T32087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3541.926268][T32087] RIP: 0033:0x7f0f135cce59
[ 3541.926283][T32087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3541.926298][T32087] RSP: 002b:00007f0f11805028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3541.926316][T32087] RAX: ffffffffffffffda RBX: 00007f0f13846090 RCX: 00007f0f135cce59
[ 3541.926328][T32087] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 3541.926339][T32087] RBP: 00007f0f11805090 R08: 0000000000000000 R09: 0000000000000000
[ 3541.926355][T32087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3541.926365][T32087] R13: 00007f0f13846128 R14: 00007f0f13846090 R15: 00007ffc7249be58
[ 3541.926390][T32087]  </TASK>
[ 3542.865946][T32094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7127'.
[ 3543.447513][T30099] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 3543.612840][T30099] usb 1-1: Using ep0 maxpacket: 8
[ 3543.616196][T30099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3543.616254][T30099] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3543.620542][T30099] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 3543.620574][T30099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3543.620598][T30099] usb 1-1: Product: syz
[ 3543.620629][T30099] usb 1-1: Manufacturer: syz
[ 3543.620957][T30099] usb 1-1: SerialNumber: syz
[ 3543.732896][T30099] usb 1-1: config 0 descriptor??
[ 3543.957422][T30099] usb 1-1: USB disconnect, device number 13
[ 3544.193003][T32115] FAULT_INJECTION: forcing a failure.
[ 3544.193003][T32115] name failslab, interval 1, probability 0, space 0, times 0
[ 3544.193033][T32115] CPU: 1 UID: 0 PID: 32115 Comm: syz.4.7132 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3544.193056][T32115] Tainted: [L]=SOFTLOCKUP
[ 3544.193062][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3544.193073][T32115] Call Trace:
[ 3544.193079][T32115]  <TASK>
[ 3544.193086][T32115]  dump_stack_lvl+0xe8/0x150
[ 3544.193111][T32115]  should_fail_ex+0x46b/0x600
[ 3544.193134][T32115]  should_failslab+0xa8/0x100
[ 3544.193157][T32115]  __kmalloc_noprof+0xdf/0x7b0
[ 3544.193174][T32115]  ? kfree+0x4d/0x6c0
[ 3544.193189][T32115]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3544.193211][T32115]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3544.193251][T32115]  ? tomoyo_domain+0xd7/0x130
[ 3544.193272][T32115]  ? tomoyo_path_number_perm+0x219/0x630
[ 3544.193296][T32115]  tomoyo_path_number_perm+0x246/0x630
[ 3544.193321][T32115]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3544.193343][T32115]  ? __lock_acquire+0x6b5/0x2cf0
[ 3544.193368][T32115]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3544.193411][T32115]  ? __fget_files+0x2a/0x420
[ 3544.193429][T32115]  ? __fget_files+0x2a/0x420
[ 3544.193443][T32115]  ? __fget_files+0x3a6/0x420
[ 3544.193457][T32115]  ? __fget_files+0x2a/0x420
[ 3544.193476][T32115]  security_file_ioctl+0xc3/0x2a0
[ 3544.193502][T32115]  __se_sys_ioctl+0x47/0x170
[ 3544.193523][T32115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3544.193541][T32115]  do_syscall_64+0x15f/0x560
[ 3544.193565][T32115]  ? trace_irq_disable+0x3b/0x140
[ 3544.193585][T32115]  ? clear_bhb_loop+0x40/0x90
[ 3544.193605][T32115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3544.193621][T32115] RIP: 0033:0x7f3568a3ce59
[ 3544.193636][T32115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3544.193651][T32115] RSP: 002b:00007f3566c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3544.193668][T32115] RAX: ffffffffffffffda RBX: 00007f3568cb6090 RCX: 00007f3568a3ce59
[ 3544.193680][T32115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[ 3544.193691][T32115] RBP: 00007f3566c75090 R08: 0000000000000000 R09: 0000000000000000
[ 3544.193701][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3544.193711][T32115] R13: 00007f3568cb6128 R14: 00007f3568cb6090 R15: 00007fff355f1a48
[ 3544.193736][T32115]  </TASK>
[ 3544.193744][T32115] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3544.923384][T32126] loop5: detected capacity change from 0 to 7
[ 3544.948246][T32126] Dev loop5: unable to read RDB block 7
[ 3544.948301][T32126]  loop5: unable to read partition table
[ 3544.948544][T32126] loop5: partition table beyond EOD, truncated
[ 3544.948580][T32126] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 3545.653479][T32129] FAULT_INJECTION: forcing a failure.
[ 3545.653479][T32129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3545.653545][T32129] CPU: 0 UID: 0 PID: 32129 Comm: syz.0.7142 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3545.653579][T32129] Tainted: [L]=SOFTLOCKUP
[ 3545.653588][T32129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3545.653601][T32129] Call Trace:
[ 3545.653616][T32129]  <TASK>
[ 3545.653625][T32129]  dump_stack_lvl+0xe8/0x150
[ 3545.653650][T32129]  should_fail_ex+0x46b/0x600
[ 3545.653672][T32129]  strncpy_from_user+0x36/0x2b0
[ 3545.653701][T32129]  path_setxattrat+0x191/0x440
[ 3545.653729][T32129]  ? __pfx_path_setxattrat+0x10/0x10
[ 3545.653772][T32129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3545.653793][T32129]  __x64_sys_setxattr+0xbc/0xe0
[ 3545.653810][T32129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3545.653827][T32129]  do_syscall_64+0x15f/0x560
[ 3545.653854][T32129]  ? clear_bhb_loop+0x40/0x90
[ 3545.653874][T32129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3545.653890][T32129] RIP: 0033:0x7f0f135cce59
[ 3545.653906][T32129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3545.653920][T32129] RSP: 002b:00007f0f11805028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 3545.653937][T32129] RAX: ffffffffffffffda RBX: 00007f0f13846090 RCX: 00007f0f135cce59
[ 3545.653949][T32129] RDX: 0000200000000340 RSI: 0000200000002a40 RDI: 0000200000002a00
[ 3545.653962][T32129] RBP: 00007f0f11805090 R08: 0000000000000000 R09: 0000000000000000
[ 3545.653972][T32129] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001
[ 3545.653987][T32129] R13: 00007f0f13846128 R14: 00007f0f13846090 R15: 00007ffc7249be58
[ 3545.654012][T32129]  </TASK>
[ 3546.718991][T30099] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[ 3546.762508][T10343] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[ 3546.906585][T30099] usb 3-1: config index 0 descriptor too short (expected 63186, got 210)
[ 3546.906619][T30099] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[ 3546.906642][T30099] usb 3-1: config 0 has an invalid descriptor of length 146, skipping remainder of the config
[ 3546.906663][T30099] usb 3-1: config 0 has no interface number 0
[ 3546.906712][T30099] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 3546.906739][T30099] usb 3-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xFB, changing to 0x8B
[ 3546.906768][T30099] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x8B has invalid maxpacket 7971, setting to 64
[ 3546.906798][T30099] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3546.906853][T30099] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 3546.906879][T30099] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3546.922957][T30099] usb 3-1: config 0 descriptor??
[ 3546.945676][T32126] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 3546.987663][T10343] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3546.987700][T10343] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3546.994012][T10343] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3546.994044][T10343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3546.994066][T10343] usb 4-1: Product: syz
[ 3546.994083][T10343] usb 4-1: Manufacturer: syz
[ 3546.994099][T10343] usb 4-1: SerialNumber: syz
[ 3547.118862][T10343] usb 4-1: config 0 descriptor??
[ 3547.136204][T10343] hub 4-1:0.0: bad descriptor, ignoring hub
[ 3547.136246][T10343] hub 4-1:0.0: probe with driver hub failed with error -5
[ 3547.261617][T30099] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 3547.304967][T30099] usb 3-1: USB disconnect, device number 26
[ 3547.318362][ T3301] usb 3-1: Failed to submit usb control message: -19
[ 3547.318463][ T3301] usb 3-1: unable to send the bmi data to the device: -19
[ 3547.318529][ T3301] usb 3-1: unable to get target info from device
[ 3547.318575][ T3301] usb 3-1: could not get target info (-19)
[ 3547.318745][ T3301] usb 3-1: could not probe fw (-19)
[ 3547.630395][T26948] usb 4-1: USB disconnect, device number 7
[ 3548.384789][T32140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7145'.
[ 3551.585929][T32144] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 3551.822664][T32169] 9p: Bad value for 'rfdno'
[ 3551.972254][T10343] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 3552.180109][T32174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7155'.
[ 3553.937355][T32189] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 3553.965262][T26948] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[ 3556.012913][T26948] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3556.012950][T26948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3556.048248][T26948] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3556.048280][T26948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3556.048302][T26948] usb 3-1: Product: syz
[ 3556.048319][T26948] usb 3-1: Manufacturer: syz
[ 3556.048334][T26948] usb 3-1: SerialNumber: syz
[ 3556.054466][T26948] usb 3-1: config 0 descriptor??
[ 3556.095340][T26948] hub 3-1:0.0: bad descriptor, ignoring hub
[ 3556.095380][T26948] hub 3-1:0.0: probe with driver hub failed with error -5
[ 3556.478678][  T820] usb 3-1: USB disconnect, device number 27
[ 3556.629906][T26948] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[ 3556.799713][T26948] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3556.803654][T26948] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 3556.803775][T26948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3556.803800][T26948] usb 2-1: Product: syz
[ 3556.803817][T26948] usb 2-1: Manufacturer: syz
[ 3556.803835][T26948] usb 2-1: SerialNumber: syz
[ 3556.868510][T26948] usb 2-1: config 0 descriptor??
[ 3556.872310][T26948] hub 2-1:0.0: bad descriptor, ignoring hub
[ 3556.872353][T26948] hub 2-1:0.0: probe with driver hub failed with error -5
[ 3557.095974][T18783] page_pool_release_retry() stalled pool shutdown: id 29, 1 inflight 3088 sec
[ 3557.146833][T32196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7162'.
[ 3557.596531][T18783] usb 2-1: USB disconnect, device number 78
[ 3560.685230][   T59] Bluetooth: hci3: unexpected event for opcode 0x0000
[ 3560.825972][T32214] FAULT_INJECTION: forcing a failure.
[ 3560.825972][T32214] name failslab, interval 1, probability 0, space 0, times 0
[ 3560.826014][T32214] CPU: 1 UID: 0 PID: 32214 Comm: syz.4.7167 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3560.826046][T32214] Tainted: [L]=SOFTLOCKUP
[ 3560.826055][T32214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3560.826080][T32214] Call Trace:
[ 3560.826090][T32214]  <TASK>
[ 3560.826100][T32214]  dump_stack_lvl+0xe8/0x150
[ 3560.826137][T32214]  should_fail_ex+0x46b/0x600
[ 3560.826171][T32214]  should_failslab+0xa8/0x100
[ 3560.826203][T32214]  __kmalloc_noprof+0xdf/0x7b0
[ 3560.826230][T32214]  ? nvram_misc_read+0x8c/0x1a0
[ 3560.826371][T32214]  nvram_misc_read+0x8c/0x1a0
[ 3560.826401][T32214]  ? __pfx_nvram_misc_read+0x10/0x10
[ 3560.826436][T32214]  vfs_read+0x212/0xa80
[ 3560.826473][T32214]  ? __pfx_vfs_read+0x10/0x10
[ 3560.826502][T32214]  ? __fget_files+0x2a/0x420
[ 3560.826527][T32214]  ? __fget_files+0x2a/0x420
[ 3560.826548][T32214]  ? __fget_files+0x3a6/0x420
[ 3560.826568][T32214]  ? __fget_files+0x2a/0x420
[ 3560.826600][T32214]  ksys_read+0x156/0x270
[ 3560.826629][T32214]  ? __pfx_ksys_read+0x10/0x10
[ 3560.826665][T32214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3560.826692][T32214]  do_syscall_64+0x15f/0x560
[ 3560.826735][T32214]  ? trace_irq_disable+0x3b/0x140
[ 3560.826764][T32214]  ? clear_bhb_loop+0x40/0x90
[ 3560.826791][T32214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3560.826813][T32214] RIP: 0033:0x7f3568a3ce59
[ 3560.826834][T32214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3560.826854][T32214] RSP: 002b:00007f3566c96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3560.826878][T32214] RAX: ffffffffffffffda RBX: 00007f3568cb5fa0 RCX: 00007f3568a3ce59
[ 3560.826895][T32214] RDX: 0000000000000091 RSI: 0000200000000000 RDI: 0000000000000003
[ 3560.826914][T32214] RBP: 00007f3566c96090 R08: 0000000000000000 R09: 0000000000000000
[ 3560.826928][T32214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3560.826942][T32214] R13: 00007f3568cb6038 R14: 00007f3568cb5fa0 R15: 00007fff355f1a48
[ 3560.826978][T32214]  </TASK>
[ 3562.760170][T26948] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 3563.074312][T26948] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 3563.074348][T26948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3563.074383][T26948] usb 2-1: Product: syz
[ 3563.074400][T26948] usb 2-1: Manufacturer: syz
[ 3563.074416][T26948] usb 2-1: SerialNumber: syz
[ 3563.119857][T26948] usb 2-1: config 0 descriptor??
[ 3563.362033][T26948] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22
[ 3563.481045][T32222] FAULT_INJECTION: forcing a failure.
[ 3563.481045][T32222] name failslab, interval 1, probability 0, space 0, times 0
[ 3563.481088][T32222] CPU: 1 UID: 0 PID: 32222 Comm: syz.0.7171 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3563.481121][T32222] Tainted: [L]=SOFTLOCKUP
[ 3563.481131][T32222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3563.481146][T32222] Call Trace:
[ 3563.481155][T32222]  <TASK>
[ 3563.481166][T32222]  dump_stack_lvl+0xe8/0x150
[ 3563.481223][T32222]  should_fail_ex+0x46b/0x600
[ 3563.481255][T32222]  should_failslab+0xa8/0x100
[ 3563.481290][T32222]  __kmalloc_noprof+0xdf/0x7b0
[ 3563.481318][T32222]  ? kfree+0x4d/0x6c0
[ 3563.481338][T32222]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 3563.481369][T32222]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 3563.481397][T32222]  ? tomoyo_domain+0xd7/0x130
[ 3563.481427][T32222]  ? tomoyo_path_number_perm+0x219/0x630
[ 3563.481471][T32222]  tomoyo_path_number_perm+0x246/0x630
[ 3563.481508][T32222]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 3563.481539][T32222]  ? __lock_acquire+0x6b5/0x2cf0
[ 3563.481576][T32222]  ? do_raw_spin_lock+0x12b/0x2f0
[ 3563.481639][T32222]  ? __fget_files+0x2a/0x420
[ 3563.481666][T32222]  ? __fget_files+0x2a/0x420
[ 3563.481687][T32222]  ? __fget_files+0x3a6/0x420
[ 3563.481707][T32222]  ? __fget_files+0x2a/0x420
[ 3563.481732][T32222]  security_file_ioctl+0xc3/0x2a0
[ 3563.481770][T32222]  __se_sys_ioctl+0x47/0x170
[ 3563.481800][T32222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.481826][T32222]  do_syscall_64+0x15f/0x560
[ 3563.481859][T32222]  ? trace_irq_disable+0x3b/0x140
[ 3563.481886][T32222]  ? clear_bhb_loop+0x40/0x90
[ 3563.481916][T32222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.481932][T32222] RIP: 0033:0x7f0f135cce59
[ 3563.481966][T32222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3563.481987][T32222] RSP: 002b:00007f0f11826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3563.482011][T32222] RAX: ffffffffffffffda RBX: 00007f0f13845fa0 RCX: 00007f0f135cce59
[ 3563.482028][T32222] RDX: 0000000000000000 RSI: 0000000040103e05 RDI: 0000000000000007
[ 3563.482042][T32222] RBP: 00007f0f11826090 R08: 0000000000000000 R09: 0000000000000000
[ 3563.482056][T32222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3563.482069][T32222] R13: 00007f0f13846038 R14: 00007f0f13845fa0 R15: 00007ffc7249be58
[ 3563.482104][T32222]  </TASK>
[ 3563.489542][T32222] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3563.774131][T30759] ==================================================================
[ 3563.774150][T30759] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60
[ 3563.774206][T30759] Read of size 1 at addr ffff888075127e08 by task syz-executor/30759
[ 3563.774309][T30759] 
[ 3563.774326][T30759] CPU: 1 UID: 0 PID: 30759 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3563.774358][T30759] Tainted: [L]=SOFTLOCKUP
[ 3563.774367][T30759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3563.774382][T30759] Call Trace:
[ 3563.774391][T30759]  <TASK>
[ 3563.774402][T30759]  dump_stack_lvl+0xe8/0x150
[ 3563.774430][T30759]  print_address_description+0x55/0x1e0
[ 3563.774465][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.774496][T30759]  print_report+0x58/0x70
[ 3563.774520][T30759]  kasan_report+0x117/0x150
[ 3563.774563][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.774598][T30759]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.774624][T30759]  __kasan_check_byte+0x2a/0x40
[ 3563.774650][T30759]  lock_acquire+0x84/0x350
[ 3563.774682][T30759]  ? preempt_schedule_common+0x82/0xd0
[ 3563.774725][T30759]  ? preempt_schedule_thunk+0x16/0x30
[ 3563.774759][T30759]  ? rcu_is_watching+0x15/0xb0
[ 3563.774793][T30759]  _raw_spin_lock_irqsave+0x40/0x60
[ 3563.774824][T30759]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.774851][T30759]  rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.774881][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.774910][T30759]  ? __rcu_read_unlock+0x83/0xe0
[ 3563.774937][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.774965][T30759]  shrink_dentry_list+0x2e3/0x5e0
[ 3563.774993][T30759]  shrink_dcache_tree+0xe9/0x5d0
[ 3563.775019][T30759]  ? __pfx_select_collect+0x10/0x10
[ 3563.775048][T30759]  ? __pfx_shrink_dcache_tree+0x10/0x10
[ 3563.775073][T30759]  ? reacquire_held_locks+0x104/0x190
[ 3563.775106][T30759]  ? rt_spin_lock+0x1e0/0x400
[ 3563.775131][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.775159][T30759]  ? rt_spin_unlock+0x14f/0x200
[ 3563.775187][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.775214][T30759]  d_invalidate+0xde/0x210
[ 3563.775237][T30759]  ? __pfx_d_invalidate+0x10/0x10
[ 3563.775261][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.775291][T30759]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[ 3563.775362][T30759]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[ 3563.775408][T30759]  release_task+0x1207/0x16f0
[ 3563.775446][T30759]  ? wait_consider_task+0x1966/0x2e30
[ 3563.775485][T30759]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 3563.775513][T30759]  ? __pfx_release_task+0x10/0x10
[ 3563.775556][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.775589][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.775617][T30759]  wait_consider_task+0x1966/0x2e30
[ 3563.775663][T30759]  ? __do_wait+0x155/0x740
[ 3563.775694][T30759]  ? __pfx_wait_consider_task+0x10/0x10
[ 3563.775727][T30759]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 3563.775757][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.775787][T30759]  __do_wait+0x155/0x740
[ 3563.775819][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.775847][T30759]  do_wait+0x1e7/0x510
[ 3563.775879][T30759]  ? do_wait+0x17d/0x510
[ 3563.775913][T30759]  kernel_wait4+0x232/0x2b0
[ 3563.775944][T30759]  ? count_memcg_event_mm+0x21/0x260
[ 3563.775972][T30759]  ? __pfx_kernel_wait4+0x10/0x10
[ 3563.776008][T30759]  ? __pfx_child_wait_callback+0x10/0x10
[ 3563.776044][T30759]  ? handle_mm_fault+0xe7/0x13c0
[ 3563.776071][T30759]  __x64_sys_wait4+0x166/0x240
[ 3563.776108][T30759]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 3563.776152][T30759]  ? do_user_addr_fault+0xc6f/0x1340
[ 3563.776183][T30759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.776208][T30759]  do_syscall_64+0x15f/0x560
[ 3563.776239][T30759]  ? trace_irq_disable+0x3b/0x140
[ 3563.776267][T30759]  ? clear_bhb_loop+0x40/0x90
[ 3563.776294][T30759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.776319][T30759] RIP: 0033:0x7f0f1358d68e
[ 3563.776340][T30759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3563.776362][T30759] RSP: 002b:00007ffc7249c158 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 3563.776387][T30759] RAX: ffffffffffffffda RBX: 0000555588183500 RCX: 00007f0f1358d68e
[ 3563.776405][T30759] RDX: 0000000040000001 RSI: 00007ffc7249c1fc RDI: ffffffffffffffff
[ 3563.776424][T30759] RBP: 00007ffc7249c1fc R08: 0000000000000000 R09: 0000000000000000
[ 3563.776440][T30759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 3563.776454][T30759] R13: 00000000000927c0 R14: 0000000000326b1f R15: 00007ffc7249c250
[ 3563.776482][T30759]  </TASK>
[ 3563.776491][T30759] 
[ 3563.776504][T30759] Allocated by task 32222:
[ 3563.776558][T30759]  kasan_save_track+0x3e/0x80
[ 3563.776581][T30759]  __kasan_slab_alloc+0x6c/0x80
[ 3563.776603][T30759]  kmem_cache_alloc_lru_noprof+0x33c/0x680
[ 3563.776628][T30759]  __d_alloc+0x37/0x6f0
[ 3563.776650][T30759]  d_alloc_parallel+0xe6/0x1610
[ 3563.776673][T30759]  __lookup_slow+0x152/0x440
[ 3563.776693][T30759]  lookup_slow+0x53/0x70
[ 3563.776712][T30759]  link_path_walk+0x1273/0x18d0
[ 3563.776732][T30759]  path_openat+0x2d5/0x38a0
[ 3563.776756][T30759]  do_file_open+0x23e/0x4a0
[ 3563.776779][T30759]  do_sys_openat2+0x113/0x200
[ 3563.776810][T30759]  __x64_sys_openat+0x138/0x170
[ 3563.776842][T30759]  do_syscall_64+0x15f/0x560
[ 3563.776872][T30759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.776894][T30759] 
[ 3563.776901][T30759] Freed by task 28:
[ 3563.776912][T30759]  kasan_save_track+0x3e/0x80
[ 3563.776932][T30759]  kasan_save_free_info+0x46/0x50
[ 3563.776962][T30759]  __kasan_slab_free+0x5c/0x80
[ 3563.776984][T30759]  kmem_cache_free+0x187/0x6c0
[ 3563.777008][T30759]  rcu_cpu_kthread+0x99e/0x1470
[ 3563.777037][T30759]  smpboot_thread_fn+0x541/0xa50
[ 3563.777098][T30759]  kthread+0x388/0x470
[ 3563.777152][T30759]  ret_from_fork+0x514/0xb70
[ 3563.777175][T30759]  ret_from_fork_asm+0x1a/0x30
[ 3563.777203][T30759] 
[ 3563.777210][T30759] Last potentially related work creation:
[ 3563.777219][T30759]  kasan_save_stack+0x3e/0x60
[ 3563.777240][T30759]  kasan_record_aux_stack+0xbd/0xd0
[ 3563.777270][T30759]  call_rcu+0xee/0x890
[ 3563.777300][T30759]  __dentry_kill+0x4a9/0x690
[ 3563.777325][T30759]  finish_dput+0xc9/0x480
[ 3563.777344][T30759]  proc_invalidate_siblings_dcache+0x3db/0x6c0
[ 3563.777368][T30759]  release_task+0x1207/0x16f0
[ 3563.777397][T30759]  do_exit+0x1674/0x22c0
[ 3563.777424][T30759]  do_group_exit+0x21b/0x2d0
[ 3563.777453][T30759]  get_signal+0x1284/0x1330
[ 3563.777473][T30759]  arch_do_signal_or_restart+0xbc/0x840
[ 3563.777506][T30759]  exit_to_user_mode_loop+0x8c/0x4d0
[ 3563.777542][T30759]  do_syscall_64+0x33e/0x560
[ 3563.777571][T30759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.777592][T30759] 
[ 3563.777598][T30759] The buggy address belongs to the object at ffff888075127d38
[ 3563.777598][T30759]  which belongs to the cache dentry of size 376
[ 3563.777618][T30759] The buggy address is located 208 bytes inside of
[ 3563.777618][T30759]  freed 376-byte region [ffff888075127d38, ffff888075127eb0)
[ 3563.777642][T30759] 
[ 3563.777649][T30759] The buggy address belongs to the physical page:
[ 3563.777672][T30759] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75126
[ 3563.777694][T30759] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 3563.777714][T30759] memcg:ffff888075127ef1
[ 3563.777724][T30759] flags: 0x80000000000040(head|node=0|zone=1)
[ 3563.777749][T30759] page_type: f5(slab)
[ 3563.777769][T30759] raw: 0080000000000040 ffff88801b6e83c0 dead000000000100 dead000000000122
[ 3563.777788][T30759] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff888075127ef1
[ 3563.777808][T30759] head: 0080000000000040 ffff88801b6e83c0 dead000000000100 dead000000000122
[ 3563.777827][T30759] head: 0000000000000000 0000000800120012 00000000f5000000 ffff888075127ef1
[ 3563.777846][T30759] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 3563.777864][T30759] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 3563.777877][T30759] page dumped because: kasan: bad access detected
[ 3563.777893][T30759] page_owner tracks the page as allocated
[ 3563.777902][T30759] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14600, tgid 14599 (syz.2.2539), ts 1193317313653, free_ts 1112452729789
[ 3563.777945][T30759]  post_alloc_hook+0x22d/0x280
[ 3563.778001][T30759]  get_page_from_freelist+0x27c8/0x2840
[ 3563.778028][T30759]  __alloc_frozen_pages_noprof+0x18d/0x380
[ 3563.778058][T30759]  allocate_slab+0x77/0x660
[ 3563.778089][T30759]  refill_objects+0x33c/0x3d0
[ 3563.778117][T30759]  __pcs_replace_empty_main+0x373/0x720
[ 3563.778148][T30759]  kmem_cache_alloc_lru_noprof+0x433/0x680
[ 3563.778171][T30759]  __d_alloc+0x37/0x6f0
[ 3563.778192][T30759]  d_alloc+0x4b/0x190
[ 3563.778211][T30759]  lookup_one_qstr_excl+0xd8/0x360
[ 3563.778233][T30759]  start_dirop+0x5c/0x90
[ 3563.778265][T30759]  simple_start_creating+0xcc/0x110
[ 3563.778288][T30759]  debugfs_start_creating+0xdb/0x1a0
[ 3563.778396][T30759]  __debugfs_create_file+0x6f/0x400
[ 3563.778423][T30759]  debugfs_create_file_full+0x3f/0x60
[ 3563.778451][T30759]  kvm_create_vm_debugfs+0x6ec/0x8f0
[ 3563.778488][T30759] page last free pid 5862 tgid 5862 stack trace:
[ 3563.778501][T30759]  __free_frozen_pages+0xfa6/0x10f0
[ 3563.778526][T30759]  __slab_free+0x252/0x2a0
[ 3563.778556][T30759]  qlist_free_all+0x99/0x100
[ 3563.778575][T30759]  kasan_quarantine_reduce+0x148/0x160
[ 3563.778596][T30759]  __kasan_slab_alloc+0x22/0x80
[ 3563.778618][T30759]  kmem_cache_alloc_noprof+0x33b/0x680
[ 3563.778640][T30759]  do_getname+0x2e/0x250
[ 3563.778668][T30759]  do_sys_openat2+0xca/0x200
[ 3563.778699][T30759]  __x64_sys_openat+0x138/0x170
[ 3563.778732][T30759]  do_syscall_64+0x15f/0x560
[ 3563.778762][T30759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.778783][T30759] 
[ 3563.778789][T30759] Memory state around the buggy address:
[ 3563.778801][T30759]  ffff888075127d00: fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb
[ 3563.778817][T30759]  ffff888075127d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3563.778833][T30759] >ffff888075127e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 3563.778843][T30759]                       ^
[ 3563.778885][T30759]  ffff888075127e80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[ 3563.778901][T30759]  ffff888075127f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 3563.778912][T30759] ==================================================================
[ 3563.778931][T30759] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 3563.778951][T30759] CPU: 1 UID: 0 PID: 30759 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 3563.778984][T30759] Tainted: [L]=SOFTLOCKUP
[ 3563.778993][T30759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 3563.779008][T30759] Call Trace:
[ 3563.779018][T30759]  <TASK>
[ 3563.779028][T30759]  vpanic+0x56c/0xa60
[ 3563.779060][T30759]  ? __pfx_vpanic+0x10/0x10
[ 3563.779094][T30759]  panic+0xc5/0xd0
[ 3563.779121][T30759]  ? __pfx_panic+0x10/0x10
[ 3563.779150][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779182][T30759]  ? rcu_is_watching+0x15/0xb0
[ 3563.779218][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779251][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779282][T30759]  check_panic_on_warn+0x89/0xb0
[ 3563.779316][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779348][T30759]  end_report+0x73/0x170
[ 3563.779375][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779408][T30759]  kasan_report+0x128/0x150
[ 3563.779436][T30759]  ? _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779472][T30759]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.779499][T30759]  __kasan_check_byte+0x2a/0x40
[ 3563.779526][T30759]  lock_acquire+0x84/0x350
[ 3563.779565][T30759]  ? preempt_schedule_common+0x82/0xd0
[ 3563.779596][T30759]  ? preempt_schedule_thunk+0x16/0x30
[ 3563.779630][T30759]  ? rcu_is_watching+0x15/0xb0
[ 3563.779665][T30759]  _raw_spin_lock_irqsave+0x40/0x60
[ 3563.779695][T30759]  ? rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.779723][T30759]  rt_mutex_slowunlock+0xbf/0x8b0
[ 3563.779754][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.779783][T30759]  ? __rcu_read_unlock+0x83/0xe0
[ 3563.779810][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.779837][T30759]  shrink_dentry_list+0x2e3/0x5e0
[ 3563.779864][T30759]  shrink_dcache_tree+0xe9/0x5d0
[ 3563.779892][T30759]  ? __pfx_select_collect+0x10/0x10
[ 3563.779921][T30759]  ? __pfx_shrink_dcache_tree+0x10/0x10
[ 3563.779947][T30759]  ? reacquire_held_locks+0x104/0x190
[ 3563.779980][T30759]  ? rt_spin_lock+0x1e0/0x400
[ 3563.780008][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.780037][T30759]  ? rt_spin_unlock+0x14f/0x200
[ 3563.780067][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.780095][T30759]  d_invalidate+0xde/0x210
[ 3563.780118][T30759]  ? __pfx_d_invalidate+0x10/0x10
[ 3563.780144][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.780173][T30759]  proc_invalidate_siblings_dcache+0x3d3/0x6c0
[ 3563.780199][T30759]  ? proc_invalidate_siblings_dcache+0x2b/0x6c0
[ 3563.780228][T30759]  release_task+0x1207/0x16f0
[ 3563.780264][T30759]  ? wait_consider_task+0x1966/0x2e30
[ 3563.780301][T30759]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 3563.780328][T30759]  ? __pfx_release_task+0x10/0x10
[ 3563.780360][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.780392][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.780421][T30759]  wait_consider_task+0x1966/0x2e30
[ 3563.780466][T30759]  ? __do_wait+0x155/0x740
[ 3563.780498][T30759]  ? __pfx_wait_consider_task+0x10/0x10
[ 3563.780557][T30759]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[ 3563.780589][T30759]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[ 3563.780619][T30759]  __do_wait+0x155/0x740
[ 3563.780651][T30759]  ? rt_spin_unlock+0x160/0x200
[ 3563.780678][T30759]  do_wait+0x1e7/0x510
[ 3563.780709][T30759]  ? do_wait+0x17d/0x510
[ 3563.780743][T30759]  kernel_wait4+0x232/0x2b0
[ 3563.780776][T30759]  ? count_memcg_event_mm+0x21/0x260
[ 3563.780802][T30759]  ? __pfx_kernel_wait4+0x10/0x10
[ 3563.780837][T30759]  ? __pfx_child_wait_callback+0x10/0x10
[ 3563.780875][T30759]  ? handle_mm_fault+0xe7/0x13c0
[ 3563.780906][T30759]  __x64_sys_wait4+0x166/0x240
[ 3563.780941][T30759]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 3563.780985][T30759]  ? do_user_addr_fault+0xc6f/0x1340
[ 3563.781014][T30759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.781037][T30759]  do_syscall_64+0x15f/0x560
[ 3563.781068][T30759]  ? trace_irq_disable+0x3b/0x140
[ 3563.781095][T30759]  ? clear_bhb_loop+0x40/0x90
[ 3563.781122][T30759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3563.781161][T30759] RIP: 0033:0x7f0f1358d68e
[ 3563.781182][T30759] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 3563.781203][T30759] RSP: 002b:00007ffc7249c158 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 3563.781228][T30759] RAX: ffffffffffffffda RBX: 0000555588183500 RCX: 00007f0f1358d68e
[ 3563.781246][T30759] RDX: 0000000040000001 RSI: 00007ffc7249c1fc RDI: ffffffffffffffff
[ 3563.781265][T30759] RBP: 00007ffc7249c1fc R08: 0000000000000000 R09: 0000000000000000
[ 3563.781282][T30759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[ 3563.781297][T30759] R13: 00000000000927c0 R14: 0000000000326b1f R15: 00007ffc7249c250
[ 3563.781325][T30759]  </TASK>
[ 3563.782346][T30759] Kernel Offset: disabled