last executing test programs:

3m23.542357164s ago: executing program 3 (id=1423):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00')
ioctl$NILFS_IOCTL_GET_SUINFO(r1, 0x80186e84, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x800}, {0x800, 0x1000, 0x2}, {0x3d1, 0x6}, {0x8, 0xfffffffc, 0x1}, {0x8000000000000001, 0x4, 0x2}, {0xfffffffffffffff8, 0x4}, {0x5, 0x7}, {0x4096, 0x3, 0x1}, {0xffffffffffffd173, 0x3}], 0x9, 0x10, 0x9, 0xffffffffffffffff})
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x4)

3m23.340965503s ago: executing program 3 (id=1424):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x500000000000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=default'])

3m23.241327785s ago: executing program 3 (id=1425):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x88ce359bdb00143c, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800e0002800500010000000000140001800800018d0000000108000200ac1e000108000740000000000600124000010000"], 0x6c}}, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000000140)={&(0x7f0000000300)=[0x4, 0x6, 0x1, 0x9, 0x5, 0x401, 0x200, 0x4, 0x0, 0xcb0d, 0x770f, 0xff, 0x4, 0x81, 0x2, 0x5, 0x1d, 0x5, 0x78, 0xb, 0x5, 0x6, 0x8, 0x9, 0x69, 0x5, 0xfffffff4, 0x7fff, 0x8, 0xe00, 0x0, 0x3, 0x10000, 0x7f, 0x0, 0xfffffff4, 0x15a0, 0xffffff7f, 0xb, 0x5d, 0x800, 0xf94, 0xff, 0x8, 0x2, 0xfffffff9, 0xe, 0xffffbb46, 0x7, 0x4, 0x1, 0x4, 0x5, 0x1000, 0x6, 0x3, 0x1, 0x8, 0x80, 0xc, 0x7, 0x8, 0x2, 0x1, 0x3, 0x1800000, 0x3, 0x5, 0x400, 0x5, 0x9, 0x1, 0x8, 0x2, 0x1000, 0x9, 0x3, 0x6d, 0xfffffffc, 0x1ff, 0xffffffc0, 0x0, 0x5, 0x8, 0x2008, 0x2, 0xf0, 0x5, 0x7, 0x6, 0x4469, 0xb, 0xfffffb4c, 0x80000001, 0xe5f6, 0x0, 0x4, 0xd4, 0xffffffff, 0x200000, 0x9, 0x2, 0x4, 0x5, 0x2, 0x3, 0x8f, 0x7, 0x6, 0x5, 0x4, 0x6d03, 0x8001, 0x9, 0x3, 0x0, 0x8e7a, 0x2, 0x8, 0xfffffff1, 0x5, 0x1000000, 0xfff3, 0x1, 0x1, 0x80000000, 0x3f7, 0x81, 0x100, 0x8, 0xfffffffb, 0x4, 0xfffffffc, 0x1, 0x7, 0x6, 0x3e, 0x43, 0xffff6a70, 0xc, 0xa092, 0x8, 0x877, 0x1, 0x3, 0x800, 0x5, 0x0, 0x8001, 0x48c, 0x7, 0x2, 0x13, 0x3, 0x3, 0x9, 0x0, 0x70000000, 0x2, 0x8, 0x2, 0x1b1c, 0x8, 0xb5, 0x8, 0x401, 0xfff, 0x5, 0x1, 0xa008, 0x9, 0x8, 0xe4, 0x898, 0x7, 0x9, 0x0, 0x1ff, 0x5, 0x80000000, 0x1, 0x8, 0x1, 0x5, 0x4251, 0xc, 0x4, 0x6, 0x4008, 0x200, 0x5, 0x73f7, 0x6, 0x8001, 0x80, 0xd5, 0x6, 0x800000, 0x40, 0xfffffe03, 0x2, 0x80000001, 0x7f, 0xfffffffa, 0xff, 0x4, 0x4b031fcb, 0x7, 0xf3, 0x40, 0xffffffff, 0x1, 0x0, 0x3, 0x6, 0x0, 0x5, 0x6, 0x3, 0x9, 0xfd, 0xd, 0x1000, 0x94, 0xd4f, 0x3, 0xfffffeff, 0xba7, 0x400, 0x4, 0x0, 0x80000001, 0x7, 0x10001, 0xfff, 0x9, 0x2, 0x9, 0x1, 0xfffffff9, 0x6, 0x62, 0x668, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x49, 0x2, 0x5f4, 0x3fd, 0xfffffffe, 0x4, 0xa, 0x9, 0x0, 0x5, 0x4, 0x6, 0x3, 0x1ff, 0xc3f6, 0x7, 0xd8b8, 0xfffffffe, 0xff, 0x8000, 0x7, 0x100, 0x43, 0x2, 0xc7b, 0xe2a0, 0x5, 0x6, 0x81, 0x6, 0x0, 0x3, 0x75c, 0x1, 0x10000, 0x3f, 0x24f7, 0x5, 0x9, 0xd8c, 0x7ffffffd, 0x7, 0xfffff6d2, 0x0, 0x3, 0x3, 0x9, 0x800, 0x5, 0x9, 0x80000000, 0x1, 0x9dcb, 0x8, 0x4, 0x8001, 0x9, 0x7, 0x6, 0x7, 0x81, 0x7ff, 0x0, 0x7, 0x1c00000, 0x5, 0x10, 0x2, 0x1, 0x4, 0xac, 0x8001, 0xb2, 0x4, 0x84f4, 0xf, 0x0, 0x6, 0x6, 0x3ef, 0x7, 0x101, 0x3, 0x4, 0xa, 0x7f, 0x5, 0x2, 0x7ff, 0xffff094f, 0xb, 0x80, 0x6, 0xfffffffd, 0x63, 0xd, 0x7, 0x9, 0x200, 0x9, 0x7, 0x8, 0xa, 0x10001, 0x8, 0xa21, 0x2, 0x9, 0x4007, 0xe207, 0xa4, 0x4, 0x5, 0x7, 0x9, 0x0, 0x0, 0x9, 0x1, 0xd, 0x1, 0xf, 0x1, 0x26d1, 0x9, 0x8b000, 0x6, 0x6, 0x5, 0x80000000, 0xfffffffb, 0x8, 0x7, 0xfffffff9, 0x7, 0x4, 0x2, 0x0, 0x80, 0xffff6c99, 0x5, 0x6bed988b, 0x7f, 0x6, 0xffffff7f, 0x7, 0x7, 0x8, 0x4, 0x10000, 0x6, 0x9, 0x40, 0x0, 0x5, 0x0, 0x2, 0x3, 0x10000, 0x8, 0x9, 0x53fa, 0x0, 0x53, 0x9465, 0x9, 0x3, 0x4, 0x36c9, 0x3ff, 0x3, 0x4, 0x8, 0x68, 0x2, 0x81, 0x8, 0xcd94, 0x75e, 0x1000, 0x5, 0x6, 0x0, 0xfffffff7, 0xe, 0x6, 0x3, 0x7, 0x0, 0x6, 0x80000001, 0x731, 0x6, 0x4, 0x8, 0x3, 0x9, 0x80000001, 0x1, 0xfff, 0x4, 0x6, 0x4, 0x4, 0x2, 0x9, 0x6f9, 0x3, 0x8, 0x475e0e15, 0x80000000, 0x5, 0x4, 0xf3e, 0x9, 0x5, 0x0, 0x3, 0xad64, 0xfffffff9, 0x2, 0x3, 0x10000, 0x4, 0xff, 0x400, 0x7f, 0x7f, 0x7, 0x800, 0x40, 0x7, 0x6, 0x8, 0x1a, 0x0, 0x1000, 0xff, 0x10001, 0x8, 0x2, 0xffff, 0x8, 0x100, 0x100, 0x9, 0x9, 0x37, 0x28, 0xa810, 0x7fffffff, 0x4, 0x83b9, 0xb, 0x2, 0x85f2, 0xd7f, 0x7, 0x3ff, 0x1000000, 0x2387c5a4, 0x3, 0x8, 0xbc4e, 0xffff, 0x1, 0x2, 0x408, 0x5, 0x0, 0x5, 0x6, 0x2, 0x6, 0x0, 0x51, 0x5, 0x3, 0x2, 0xfaf0, 0x4a46, 0x4, 0x10001, 0x9, 0x4921bb4d, 0x5c, 0x6, 0x3, 0x7, 0x7fff, 0x80, 0x3, 0x29dc2fdf, 0x200, 0x1, 0x9, 0xd2c, 0x8, 0x3, 0x3, 0x66f, 0x5, 0x4bb6, 0x258d, 0x101, 0x10000, 0x662f, 0x401, 0x5, 0x4, 0x4, 0xd3f6, 0x4, 0x3, 0x4, 0x1, 0xc, 0xbf2, 0xff, 0x7, 0x8002, 0x9, 0x3ff, 0x80000000, 0x9, 0x9, 0x9, 0xf01a, 0x2, 0x1, 0x9, 0x100, 0x0, 0xffffffff, 0x80000001, 0x3, 0x3, 0x6, 0x240000, 0x0, 0x1, 0xfffffffa, 0x45, 0x0, 0x0, 0x8, 0x5, 0x0, 0x3, 0x8a8, 0xa, 0x9, 0x0, 0x7, 0x9, 0x583, 0x8, 0x8, 0x1, 0x10002, 0x9, 0xffffff81, 0x6, 0x400, 0x227, 0x6, 0x8, 0xc442, 0x0, 0x3, 0x3ff, 0x5, 0x82a, 0x4, 0x72d2, 0x7, 0x5, 0x7, 0x4, 0x8, 0x8, 0xea1, 0x0, 0x566, 0x4000000, 0xfffffffe, 0x7, 0x737, 0x4, 0x6, 0x2, 0x1000, 0x4, 0x8, 0xff, 0x9, 0x7, 0x5, 0x3, 0x9, 0xbcea, 0x7, 0x8000, 0x0, 0x1, 0x1, 0x3, 0x7fff, 0x8, 0x2, 0x4, 0x9, 0x101, 0x1, 0x8, 0x1, 0x6, 0x6, 0x9, 0x7f800, 0x9, 0xd8a8, 0x3, 0x9, 0xfffffffb, 0x8, 0xd0f, 0x7, 0x8, 0x4, 0x1, 0x7, 0x7, 0x8e, 0x5, 0x0, 0x7, 0xfffffffe, 0x81, 0xad3, 0x4, 0x80000001, 0x7, 0x8, 0x80, 0x8, 0x3ff, 0x6, 0x30000000, 0x8, 0x80000001, 0xe, 0x1, 0x400002, 0x8000, 0xdd4, 0x3, 0xb, 0x2, 0x2, 0x6, 0x1, 0xe30, 0x3ff, 0xa7a, 0x8, 0x8, 0x9, 0x2, 0x401, 0x9, 0x9659, 0x400, 0xa83, 0x6, 0xfffffffe, 0x5082, 0x5, 0x6e82, 0xffff, 0x9, 0x7ff, 0x200800, 0xfffffffb, 0xfffffffb, 0x2, 0xd, 0x1, 0xffffff46, 0x7, 0x8000, 0x5d, 0x70d, 0x7fff, 0x3, 0x4, 0x6, 0x7, 0xa6a0, 0x7, 0x9, 0x1, 0xe8b0c95b, 0x9, 0x3, 0x8a2, 0x4, 0x6, 0x2, 0x3, 0x0, 0x7, 0x3, 0x4, 0x4, 0x5, 0xfffffff9, 0xbffeffff, 0xc, 0xfffffff7, 0x1ff, 0x8, 0x7ffc, 0x9, 0x3, 0xfffffff8, 0x1, 0x434, 0x8, 0x3ab, 0x8, 0x9, 0x0, 0x7, 0x4389, 0x7, 0x800, 0x400, 0x4, 0x0, 0x3, 0x5, 0xc94, 0x9, 0x4, 0x0, 0x4, 0x2, 0x401, 0x6, 0x401, 0x8, 0x1, 0xb, 0xe664, 0x0, 0xc, 0x96, 0x7, 0x101, 0xd, 0x2, 0x6, 0xdc, 0xf, 0x1000, 0x8, 0x7, 0x0, 0x0, 0x10001, 0x9, 0x7, 0x0, 0x40000fff, 0xf9, 0xc8, 0x2400, 0x1, 0x400, 0x9, 0x0, 0x8, 0x8, 0x7, 0x5, 0x101, 0x6b59b47c, 0x2, 0x4, 0xd64, 0x8, 0xc, 0x0, 0x7, 0x0, 0x9, 0x4, 0x80, 0x3, 0x6, 0x10, 0xc, 0x7, 0x8, 0x8, 0x8000, 0x6, 0x979, 0x385, 0xa0, 0x5, 0x8, 0x3d72e35e, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x1a7, 0x7, 0x8, 0x0, 0x3, 0xe83, 0x3, 0x1, 0x3, 0x0, 0x2, 0x9973, 0x3, 0x4, 0x40, 0x40, 0x4, 0x5, 0x412, 0x4, 0x2, 0x5, 0xb4, 0x1ff, 0xc77c0000, 0xffff2c2c, 0x9, 0x8000, 0x47, 0x9, 0xffffff97, 0xffff, 0x3, 0xffffffc0, 0x10001, 0x2, 0xfffffe01, 0x7fff, 0x78, 0x8, 0x0, 0xf, 0x40, 0x8, 0x5, 0x103, 0x9, 0x8, 0x0, 0x1, 0x1, 0x7, 0x800, 0xb, 0x5, 0x5, 0x9, 0x2, 0xd, 0x2, 0x6, 0x101, 0x4, 0x6, 0xa6d2, 0xd, 0x8000, 0x2, 0x9, 0x2, 0x0, 0x0, 0x3ff, 0x7, 0xffffff00, 0x7, 0x7, 0x40, 0x3, 0x101, 0x20000000, 0xdbffffff, 0x2, 0xfffffffb, 0x401, 0x6, 0x1, 0x9, 0x4, 0xffffffa2, 0x5, 0x5, 0x8015, 0x6, 0x5, 0x5, 0x14b, 0x0, 0x336, 0xcf, 0xd, 0x5, 0xbbe7, 0xa8eb, 0xd0, 0xb, 0x800, 0x2b18, 0x3ec3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x200, 0x2, 0x40000, 0x5, 0xff, 0xc, 0x8, 0x2, 0x2, 0x7, 0x8, 0x10, 0x9, 0x8, 0x1, 0x5dc60e00, 0x4, 0x9, 0x8, 0xd2, 0x9, 0xffff4a7a, 0x88f, 0xbd, 0x4, 0x6, 0x6, 0x8, 0x9, 0xffffffff, 0xda, 0xe, 0x8001000, 0x7b, 0x9, 0x10001, 0x6, 0x136, 0x36, 0x3a12, 0x9, 0x8, 0x4, 0x8], 0x1, 0x400, 0x3ff})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3m23.105691853s ago: executing program 3 (id=1426):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0)
mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x101402, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000080)=0x9)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={<r1=>0xffffffffffffffff, &(0x7f0000000040)='\xa9^+*!:$\x00', 0x60201, &(0x7f00000000c0)={@align=0x3, {0x1200, 0x6, 0x7f, 0x8}}, 0x0, &(0x7f00000002c0), &(0x7f0000000180)=0x2})
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc517, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0xc0, 0x7, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0xc, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0xc20}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x9, 0x7}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x250, 0x9, 0x71, 0x2, 0xff, 0x2}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x4, [{0xf6, &(0x7f00000003c0)=@string={0xf6, 0x3, "4c8316e56167bfb3feb2748e78c167d38ec57329b62958a02fbc90c566a8b9c3a4be3757678616767696d13f9bf7e8fe6cc156472301584f4da3073f0593f2b6d6d7613084c981d7df2c20f0260ef5e25b62ed062ef83449ae40792634c6919a0a333f6928fe36970534bc19789ba39b8410f5e6d4c1a07d9902d7afda03e006378ba811d0660acf78e44695a33744aa4d8f6d606e7281686144543bc08a45d34692afe28c9cec59e55896cf5f0d40e7efde57a26e0dda397a9200f3e8d4713259ce4bb9b3c3fe80a00d392b8e79b27607bd20d2cf236a4ae1bd3c795a05515b64569972e683161662745b351dcbdf8d677125db"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x4ff}}, {0xb6, &(0x7f0000000540)=@string={0xb6, 0x3, "ee037f04d93cf52aee4a0e1a2402f1254bf572c65b1b7b6844b8fd47c582606e1030d5dbc29672d77995af781e187551c1881f56f0a196744b6bf8f8077d8d9ff1e5ba578497ee612fce629d6ae9de1fcb6387667a7c7d90572fc861dfc932edd8e11970aa6b6b198f99fe33543ad019c808b39a481c41bcffd781f42614049f218666139ef409f021d7317e9a3d5081f7c480abb28b09050254922b16c9c180b8f2af9fd908d2581ace8abd58c3316ba7889e08"}}, {0x5e, &(0x7f0000000600)=@string={0x5e, 0x3, "e90f0b80b2718f7622e50b478cfe572dd9887eed54c355df9eeb5e98a41fa54ff06e3d5a22fa1f85310fbab8dfa94da2bfb6c296ac2b0d26914505f6ace0a4c169a8ab813bb5aaae33d1d8d4fa14c1a5e735cdad12c431b2364838a2"}}]})
unlinkat(r1, &(0x7f0000000280)='./file0\x00', 0x0)
ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000140)=0x3)

3m19.901220656s ago: executing program 3 (id=1445):
setpriority(0x0, 0xffffffffffffffff, 0x40084d)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000040)=0x8, 0x4)
socket$alg(0x26, 0x5, 0x0)

3m18.480382438s ago: executing program 3 (id=1450):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x14)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040094)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6800000000000000170100000200000050000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f400000000180000000000000017010000040000007b3ea5b110550600"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xea, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x8b}, {0xd, 0x24, 0xf, 0x1, 0x72, 0x5, 0x7, 0x8d}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x7f, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xfd, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000a00))

3m18.312218977s ago: executing program 32 (id=1450):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x14)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000001}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4040094)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="6800000000000000170100000200000050000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f400000000180000000000000017010000040000007b3ea5b110550600"], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005f", 0xa1}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1", 0x36}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}})
syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0xea, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0x8b}, {0xd, 0x24, 0xf, 0x1, 0x72, 0x5, 0x7, 0x8d}, [@mdlm={0x15, 0x24, 0x12, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf, 0x7f, 0xf}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0xfd, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0)
ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000a00))

1m52.38142839s ago: executing program 4 (id=1768):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/tcp\x00')
lseek(r1, 0x2000, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x28)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r4, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6", 0x2}], 0x1, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r3}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4)
sendmsg$can_raw(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0xd209f6d83486bb56)
recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2fa}], 0x2, 0x40000102, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000000)={0x8d, 0x1, 0x0, 'queue0\x00', 0x9})
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mq_open(&(0x7f0000000200)='(:@#/)-*\x00', 0x40, 0x10, &(0x7f0000000240)={0x9, 0xffffffffffffffc0, 0x1, 0x2})
accept4$x25(r7, 0x0, 0x0, 0x80800)

1m51.650167987s ago: executing program 4 (id=1772):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000500)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000002c0)=0x3)

1m51.405384678s ago: executing program 4 (id=1773):
pipe2(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x880)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$video(&(0x7f00000003c0), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x6dc, 0xdaf1, 0x41595556, 0x2, 0x1, [{0x1, 0x1}, {0x3, 0xa}, {0x10001, 0x200}, {0xc061, 0x5}, {0xfffffff8, 0x7}, {0x1, 0xc00}, {0x4, 0x8}, {0x3, 0x400}], 0x0, 0x9b, 0x0, 0x0, 0x5}})
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r1, @ANYBLOB=',cache=fscache'])
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x74, 0x31, 0x400, 0x70bd29, 0x25dfdbff, {0x4}, [@generic="4c08eb5f1670a74c4c2b252ef05dd3dab494cdf51d54c8db34e1a7af9c6f8552e16cdef4b466f93210ecc24752300a0fb5b55afe7ad7f9a0593d2c3400e1fa1672112aa369491141d0eb4e5da7b2a0ba6631f483314fd61e96ab7a907e06e0fa"]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x80)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc)
io_setup(0x10000, &(0x7f00000001c0))
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0)
socket(0xa, 0x2400000001, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)

1m46.164425373s ago: executing program 0 (id=1779):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r4=>0x0})
r5 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
r6 = fsmount(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x3ff, 0x2, 0x100, 0x6, <r7=>0x0}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000002c0)={r7, @in6={{0xa, 0x4e23, 0x7fff, @loopback, 0x2}}}, 0x84)
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x4, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7cc6, 0x0, 0x0, 0x7, 0x0, 0x4, 0x14, 0x1})
sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r3, 0x831, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x24000040)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000200)={0x101, 0xba19})

1m45.686074749s ago: executing program 4 (id=1780):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
msgsnd(0x0, 0x0, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x3, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x10})

1m42.567491324s ago: executing program 4 (id=1783):
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, 0x0, 0x0)
fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x74, 0x4)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x33, @dev={0xac, 0x14, 0x14, 0x34}, 0x4e21, 0x3, 'lblc\x00', 0xf, 0xc, 0x47}, {@loopback, 0x4e23, 0x2000, 0x2cd, 0x1}}, 0x44)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000200)=0x1100000, 0x4)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1m42.567042906s ago: executing program 0 (id=1784):
add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0x7, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc50000}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x8000)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040)

1m41.954772342s ago: executing program 0 (id=1787):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0xfdfd, 0x1000}]})

1m41.7432524s ago: executing program 4 (id=1788):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0x33, 0x33, 0xe, 0x0, 0x81, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1}}]}, 0x50}}, 0x804)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1m40.970676479s ago: executing program 0 (id=1789):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
fanotify_init(0x4, 0x80000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x9, @vifc_lcl_addr=@loopback, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000005a000d"], 0x14}], 0x1}, 0x0)

1m40.638392162s ago: executing program 0 (id=1790):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005040)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8092}, 0x9080) (fail_nth: 1)

1m38.129990068s ago: executing program 0 (id=1791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fffffff, <r1=>r0, 0x80000})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @dev, @multicast1}, &(0x7f0000000100)=0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64)
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x20, 0xc, 0x101, {0x101, 0x4, "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"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000540)={0x20, 0x12, 0x7f, "c663c699b85d7963118e94895ab3e0dfbc849d07e9cea220526508758f10dd8aeb9224dff414c223cd0bd124baa2306ffefbf965ad51681a24322bb01a512a6c1000c023303b6c8aee1be54597bf39dc01705374087708c8ed90adb292af8ac1b1c0d8932e5719beeeef0ce851fb98dcee93c33bf3980947bb9ae03ef3744a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x4, 0x1, 0x2, 0x1, 0x4, 0x1, 0x0, 0x200, 0x3, 0xc, 0x3, 0x3ff}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7f}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4008af00, &(0x7f00000df400)={0x0, 0x0, "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", "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"})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}, 0x14)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005040)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8092}, 0x9080)

1m25.481143906s ago: executing program 33 (id=1788):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2, 0x10, 0x0, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bbf, 0x10001, {0x6, 0x33, 0x33, 0xe, 0x0, 0x81, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@mcast1}}]}, 0x50}}, 0x804)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})

1m22.494514527s ago: executing program 34 (id=1791):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7fffffff, <r1=>r0, 0x80000})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @dev, @multicast1}, &(0x7f0000000100)=0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_GET_API_VERSION(r4, 0x3b64)
syz_usb_control_io$printer(r3, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x20, 0xc, 0x101, {0x101, 0x4, "443b61975ec342fff028fc89cb36b61bde4aa63bd96b596b7e28bc4ffe2a84b8fd8adac90b2e2c592cd090c2e1dd9c3d57ff54eea14da2e9cebea8a845fca43452e53b1572afbaf0f1040d57dde89f08ba230eed1fcbbffa3312cf213796a5e7ae48afe22d8bf2bfee7e79d7de1b2beded78f6a0f28f910aa2475a851399fd247f006dccdbac4819419d79a7ae3ead56dcb87b647127f7f2960abebce9faced454d64c049a5d43c2d1a2265e7db35b962198072308fc68b72662835ba04a9627ad61dfc0e93a5b15fc18caa7e17d6060bd7885af03bae09ba42dee90d920a677d918a8243abd505817b319a1d097b6a79aed412abba013eeb9a4a7a756754e"}}, &(0x7f0000000440)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000540)={0x20, 0x12, 0x7f, "c663c699b85d7963118e94895ab3e0dfbc849d07e9cea220526508758f10dd8aeb9224dff414c223cd0bd124baa2306ffefbf965ad51681a24322bb01a512a6c1000c023303b6c8aee1be54597bf39dc01705374087708c8ed90adb292af8ac1b1c0d8932e5719beeeef0ce851fb98dcee93c33bf3980947bb9ae03ef3744a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000740)={0x20, 0x80, 0x1c, {0x4, 0x1, 0x2, 0x1, 0x4, 0x1, 0x0, 0x200, 0x3, 0xc, 0x3, 0x3ff}}, &(0x7f0000000780)={0x20, 0x85, 0x4, 0x7f}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000840)={0x20, 0x89, 0x2, 0x1}})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x4008af00, &(0x7f00000df400)={0x0, 0x0, "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", "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"})
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r2}, 0x14)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000005040)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8092}, 0x9080)

45.818424324s ago: executing program 1 (id=1815):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.stat\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="440500000020"}) (fail_nth: 2)

42.796145776s ago: executing program 1 (id=1816):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x7, 0x0, 0x5ec0, 0x3, 0x0, 0x4}]})

41.148659467s ago: executing program 2 (id=1817):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000334000000300883efb930f0187ff0478fa22a61356e72c7551a3a928176b5af96a5464b00000000000000009c37f525cd856170c4c0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00')
preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000400)=""/284, 0x11c}], 0x1, 0x4, 0x20010fa4)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405668, &(0x7f0000000000)={0x22, 0x835, 0xa, 0x820c0})
syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001600)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x17cc, 0x1020, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x2, 0x80, 0x7f, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3, 0x1, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x0, 0x7, {0x8, 0x25, 0x1, 0x2, 0x0, 0x40, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x10, 0x3, 0x3, {0x8, 0x25, 0x1, 0x2, 0x33, 0x3, 0xa03b}}}}}}}}]}}, 0x0)

39.12290982s ago: executing program 1 (id=1818):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000c1300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000600b50085010200040013000a0006"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0)

36.624242227s ago: executing program 2 (id=1819):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
close_range(r0, r1, 0x2)
syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02"], 0x200) (async)
open(&(0x7f0000001880)='./file1\x00', 0x40, 0x0) (async)
truncate(&(0x7f00000000c0)='./file1\x00', 0x42df)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}}, 0x0)
sendfile(r2, r2, 0x0, 0x1000000000001) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100ffff0900030073797a320000000014000480080002400100000000000000000000020900010073797a310000000038000000050a4f010000000000000000010020000c00024000000000000000010900010073797a31000000000c0004800800014000000005140000001100010000000000000000000000000a"], 0xc0}}, 0x0)

31.618724224s ago: executing program 1 (id=1820):
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_simple_pair_complete={{0x36, 0x7}, {0xf, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xa)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x12, 0xc9, 0x2}}}, 0x7)

30.966842348s ago: executing program 2 (id=1821):
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2007)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, 0x0}, {0x0, 0x0}]})
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x2007) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, 0x0}, {0x0, 0x0}]}) (async)

28.361837702s ago: executing program 1 (id=1822):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000008010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c0002400000000000000001"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0)

27.944502336s ago: executing program 2 (id=1823):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x161, 0x103)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff26650042e2dacd300062e2adacd2737d00ad6f9fa9f3d7145e15dd9d6d2e19d211220900ad5def53b911ba5b9da13641f9826d7012a749f54b901ee80ea6132ca6e88c776553e1833052ca376304313c4b37780136a4b8385702ffffff970000000f2d00000000000100"}, 0x80, 0x0}, 0x0)

27.217855448s ago: executing program 2 (id=1824):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x900, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

22.330686778s ago: executing program 2 (id=1825):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
sigaltstack(&(0x7f00000006c0)={0x0, 0x2}, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x45}], 0x20, 0x0, 0x0, 0x45}, 0x2}], 0x1, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="127d58ae7dda76a89163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759", 0x2f}, {&(0x7f00000003c0)="c9d9a10108979adc78d18e770debf3b9caf235365ab0", 0x16}], 0x2}}], 0x1, 0x20e8086)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

15.535028726s ago: executing program 1 (id=1826):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e", 0x9f}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x8e020000)

7.224714009s ago: executing program 35 (id=1825):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c)
sigaltstack(&(0x7f00000006c0)={0x0, 0x2}, 0x0)
connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c)
recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x45}], 0x20, 0x0, 0x0, 0x45}, 0x2}], 0x1, 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="127d58ae7dda76a89163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759", 0x2f}, {&(0x7f00000003c0)="c9d9a10108979adc78d18e770debf3b9caf235365ab0", 0x16}], 0x2}}], 0x1, 0x20e8086)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

0s ago: executing program 36 (id=1826):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000026c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100e000000208000200ac1e00010c000280050001000000000008000740ff"], 0x64}}, 0x0)
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86ae", 0xe0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e", 0x9f}, {&(0x7f0000000ac0)="3fe4c8a3", 0x4}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2d", 0x28}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae", 0x39}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x8e020000)

kernel console output (not intermixed with test programs):

12] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.694468][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.736021][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.736343][ T8229] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.869696][T10436] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  376.874463][T10436] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  376.916201][T10169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  376.986310][T10436] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  377.243659][    C1] Unknown status report in ack skb
[  377.339852][ T5715] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  377.512660][T10169] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.528018][ T6350] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  377.540449][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  377.540488][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  377.540516][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  377.540539][ T5715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  377.540583][ T5715] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  377.540608][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.618501][ T5715] usb 1-1: config 0 descriptor??
[  377.716934][ T6350] usb 2-1: unable to get BOS descriptor or descriptor too short
[  377.746630][ T6350] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  377.746728][ T6350] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.746751][ T6350] usb 2-1: Product: syz
[  377.746778][ T6350] usb 2-1: Manufacturer: syz
[  377.746794][ T6350] usb 2-1: SerialNumber: syz
[  378.145177][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145453][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145488][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145516][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145763][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145794][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145821][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.145849][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.146105][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.146134][ T5715] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  378.363194][ T6350] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  378.368578][ T6350] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  378.424821][   T60] Bluetooth: hci1: command 0x0c1a tx timeout
[  378.611714][ T5715] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  378.675212][ T5715] usb 1-1: USB disconnect, device number 60
[  378.708666][ T6350] usb 2-1: USB disconnect, device number 74
[  378.853035][ T9559] udevd[9559]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.947711][T10477] fido_id[10477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  379.004557][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  379.138255][T10481] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1524'.
[  379.138275][T10481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  379.299488][T10169] veth0_vlan: entered promiscuous mode
[  379.330453][T10169] veth1_vlan: entered promiscuous mode
[  379.433138][T10169] veth0_macvtap: entered promiscuous mode
[  379.512144][T10169] veth1_macvtap: entered promiscuous mode
[  379.637523][T10169] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.716987][T10169] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.717073][T10493] sg_write: data in/out 478684/136 bytes for SCSI command 0x0-- guessing data in;
[  379.717073][T10493]    program syz.0.1529 not setting count and/or reply_len properly
[  379.717679][T10493] FAULT_INJECTION: forcing a failure.
[  379.717679][T10493] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.717715][T10493] CPU: 1 UID: 0 PID: 10493 Comm: syz.0.1529 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  379.717746][T10493] Tainted: [L]=SOFTLOCKUP
[  379.717754][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  379.717769][T10493] Call Trace:
[  379.717777][T10493]  <TASK>
[  379.717798][T10493]  dump_stack_lvl+0xe8/0x150
[  379.717832][T10493]  should_fail_ex+0x46b/0x600
[  379.717870][T10493]  _copy_from_iter+0x1d3/0x1670
[  379.717914][T10493]  ? pfn_valid+0x125/0x4c0
[  379.717936][T10493]  ? pfn_valid+0x440/0x4c0
[  379.717958][T10493]  ? __pfx__copy_from_iter+0x10/0x10
[  379.717992][T10493]  ? bvec_try_merge_page+0x1d4/0x280
[  379.718022][T10493]  ? bio_add_page+0x2e9/0x6f0
[  379.718048][T10493]  copy_page_from_iter+0x220/0x2d0
[  379.718086][T10493]  blk_rq_map_user_iov+0xa14/0x1790
[  379.718134][T10493]  ? __pfx_blk_rq_map_user_iov+0x10/0x10
[  379.718180][T10493]  ? import_ubuf+0xfb/0x1d0
[  379.718203][T10493]  blk_rq_map_user_io+0x2ae/0x440
[  379.718241][T10493]  ? __pfx_blk_rq_map_user_io+0x10/0x10
[  379.718277][T10493]  ? do_raw_spin_lock+0x12b/0x2f0
[  379.718314][T10493]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  379.718343][T10493]  ? lockdep_hardirqs_on+0x7a/0x110
[  379.718371][T10493]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  379.718398][T10493]  ? rt_mutex_slowunlock+0x1cb/0x300
[  379.718421][T10493]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  379.718452][T10493]  sg_common_write+0xcff/0x13e0
[  379.718493][T10493]  ? __pfx_sg_common_write+0x10/0x10
[  379.718518][T10493]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  379.718545][T10493]  ? ___ratelimit+0x58c/0x8d0
[  379.718578][T10493]  sg_write+0xafb/0xf00
[  379.718606][T10493]  ? __pfx_sg_write+0x10/0x10
[  379.718630][T10493]  ? __pfx_aa_file_perm+0x10/0x10
[  379.718689][T10493]  ? rw_verify_area+0x25b/0x4e0
[  379.718715][T10493]  ? __pfx_sg_write+0x10/0x10
[  379.718736][T10493]  vfs_write+0x2a3/0xba0
[  379.718770][T10493]  ? __pfx_vfs_write+0x10/0x10
[  379.718806][T10493]  ? __fget_files+0x2a/0x420
[  379.718831][T10493]  ? __fget_files+0x2a/0x420
[  379.718851][T10493]  ? __fget_files+0x3a6/0x420
[  379.718872][T10493]  ? __fget_files+0x2a/0x420
[  379.718902][T10493]  ksys_write+0x156/0x270
[  379.718932][T10493]  ? __pfx_ksys_write+0x10/0x10
[  379.718966][T10493]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.718989][T10493]  do_syscall_64+0x174/0x580
[  379.719015][T10493]  ? trace_irq_disable+0x3b/0x140
[  379.719040][T10493]  ? clear_bhb_loop+0x40/0x90
[  379.719067][T10493]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.719090][T10493] RIP: 0033:0x7ffbc861ce59
[  379.719112][T10493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.719131][T10493] RSP: 002b:00007ffbc686e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  379.719155][T10493] RAX: ffffffffffffffda RBX: 00007ffbc8895fa0 RCX: 00007ffbc861ce59
[  379.719173][T10493] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000007
[  379.719188][T10493] RBP: 00007ffbc686e090 R08: 0000000000000000 R09: 0000000000000000
[  379.719202][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  379.719215][T10493] R13: 00007ffbc8896038 R14: 00007ffbc8895fa0 R15: 00007ffc42455488
[  379.719248][T10493]  </TASK>
[  380.248313][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  380.279119][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  380.282172][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  380.284649][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  380.507607][   T60] Bluetooth: hci1: command 0x0c1a tx timeout
[  380.864214][T10507] netlink: zone id is out of range
[  380.864233][T10507] netlink: zone id is out of range
[  380.864243][T10507] netlink: zone id is out of range
[  380.864252][T10507] netlink: zone id is out of range
[  380.864261][T10507] netlink: zone id is out of range
[  380.864270][T10507] netlink: zone id is out of range
[  380.864278][T10507] netlink: zone id is out of range
[  380.864287][T10507] netlink: zone id is out of range
[  380.864295][T10507] netlink: zone id is out of range
[  381.579534][T10517] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1535'.
[  381.857274][T10519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'.
[  381.857513][ T7854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.857532][ T7854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.009464][  T166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.009484][  T166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  382.572491][   T37] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  382.594039][   T60] Bluetooth: hci1: command 0x0c1a tx timeout
[  382.685618][ T6350] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  382.756384][   T37] usb 1-1: Using ep0 maxpacket: 32
[  382.759940][   T37] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  382.759969][   T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.805207][   T37] usb 1-1: config 0 descriptor??
[  382.834459][   T37] gspca_main: sunplus-2.14.0 probing 041e:400b
[  382.878077][ T6350] usb 5-1: config 0 has no interfaces?
[  382.878118][ T6350] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  382.878145][ T6350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.922021][ T6350] usb 5-1: config 0 descriptor??
[  383.063564][ T7943] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  383.132995][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.136122][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.192444][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.197263][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.220271][ T7943] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22
[  383.220306][ T7943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.220328][ T7943] usb 2-1: Product: syz
[  383.220344][ T7943] usb 2-1: Manufacturer: syz
[  383.220361][ T7943] usb 2-1: SerialNumber: syz
[  383.239971][ T7943] usb 2-1: config 0 descriptor??
[  383.330221][ T7943] usb 2-1: selecting invalid altsetting 3
[  383.330247][ T7943] comedi comedi5: could not set alternate setting 3 in high speed
[  383.330270][ T7943] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device.
[  383.344649][ T7943] usbdux 2-1:0.0: probe with driver usbdux failed with error -22
[  383.480715][ T7943] usb 2-1: USB disconnect, device number 75
[  384.450805][   T37] gspca_sunplus: reg_w_riv err -71
[  384.450910][   T37] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  384.456363][   T37] usb 1-1: USB disconnect, device number 61
[  384.466664][    T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  384.637251][    T9] usb 2-1: Using ep0 maxpacket: 8
[  384.639507][    T9] usb 2-1: config 1 has an invalid descriptor of length 138, skipping remainder of the config
[  384.639535][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  384.642818][    T9] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40
[  384.642842][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.642857][    T9] usb 2-1: Product: syz
[  384.642868][    T9] usb 2-1: Manufacturer: syz
[  384.642878][    T9] usb 2-1: SerialNumber: syz
[  384.862687][ T7943] usb 5-1: USB disconnect, device number 2
[  384.909627][T10560] hfs: can't find a HFS filesystem on dev loop1
[  384.960257][    T9] usb 2-1: 0:2 : does not exist
[  384.985228][    T9] usb 2-1: cannot find UAC_HEADER
[  385.124274][    T9] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22
[  385.303444][    T9] usb 2-1: invalid MIDI EP
[  385.303470][    T9] usb 2-1: snd-bcd2000: error during probing
[  385.306233][    T9] snd-bcd2000 2-1:1.1: probe with driver snd-bcd2000 failed with error -22
[  385.328205][    T9] usb 2-1: USB disconnect, device number 76
[  385.499331][ T9743] udevd[9743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  385.700288][T10587] nfs: Unknown parameter 'ud~h'
[  385.703973][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'.
[  385.940011][ T7943] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  386.090329][ T7943] usb 5-1: Using ep0 maxpacket: 32
[  386.090571][   T37] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  386.092511][ T7943] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  386.094405][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.094433][ T7943] usb 5-1: config 0 has no interface number 0
[  386.094487][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.094511][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.097462][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.097491][ T7943] usb 5-1: config 0 has no interface number 0
[  386.097541][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.097566][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.099061][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.099088][ T7943] usb 5-1: config 0 has no interface number 0
[  386.099152][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.099177][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.101112][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.101139][ T7943] usb 5-1: config 0 has no interface number 0
[  386.101188][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.101216][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.105595][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.105679][ T7943] usb 5-1: config 0 has no interface number 0
[  386.105797][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.105868][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.113527][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.113611][ T7943] usb 5-1: config 0 has no interface number 0
[  386.113739][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.113805][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.134403][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.134488][ T7943] usb 5-1: config 0 has no interface number 0
[  386.134620][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.134692][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.170856][ T7943] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  386.170959][ T7943] usb 5-1: config 0 has no interface number 0
[  386.171097][ T7943] usb 5-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.171131][ T7943] usb 5-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  386.288852][ T7943] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  386.289108][ T7943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  386.289172][ T7943] usb 5-1: Product: syz
[  386.289225][ T7943] usb 5-1: Manufacturer: syz
[  386.289268][ T7943] usb 5-1: SerialNumber: syz
[  386.410149][ T7943] usb 5-1: config 0 descriptor??
[  386.461394][   T37] usb 2-1: Using ep0 maxpacket: 32
[  386.488182][   T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  386.488219][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  386.488247][   T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  386.488289][   T37] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  386.488316][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.554197][   T37] usb 2-1: config 0 descriptor??
[  386.573560][   T37] hub 2-1:0.0: USB hub found
[  386.616081][ T7943] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  386.818458][   T37] hub 2-1:0.0: 1 port detected
[  386.972965][T10606] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  386.987525][ T7943] etas_es58x 5-1:0.2: could not parse product info: 'â°–'
[  387.563786][   T37] hub 2-1:0.0: activate --> -90
[  387.628690][ T7943] usb 5-1: USB disconnect, device number 3
[  387.665836][ T7943] etas_es58x 5-1:0.2: Disconnecting syz syz
[  388.961176][ T5716] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[  389.180824][   T37] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  389.227590][    T9] usb 2-1: USB disconnect, device number 77
[  389.388168][   T37] usb 5-1: device descriptor read/64, error -71
[  389.647816][   T37] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  389.788043][   T37] usb 5-1: device descriptor read/64, error -71
[  389.898747][   T37] usb usb5-port1: attempt power cycle
[  390.281392][   T37] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  390.299889][   T37] usb 5-1: device descriptor read/8, error -71
[  390.539649][   T37] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  390.565593][   T37] usb 5-1: device descriptor read/8, error -71
[  390.670355][   T37] usb usb5-port1: unable to enumerate USB device
[  391.690469][T10709] fuse: fd is not a fuse device
[  392.014303][T10714] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  392.014333][T10714] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  392.103362][T10721] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1581'.
[  392.104139][T10714] vhci_hcd vhci_hcd.0: Device attached
[  392.243107][ T6350] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  392.407798][ T6350] usb 5-1: unable to get BOS descriptor or descriptor too short
[  392.409305][ T6350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  392.409333][ T6350] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  392.409388][ T6350] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  392.409454][ T6350] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  392.409502][ T6350] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  392.409532][ T6350] usb 5-1: config 1 interface 1 has no altsetting 0
[  392.414160][ T6350] usb 5-1: string descriptor 0 read error: -22
[  392.414309][ T6350] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  392.414336][ T6350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.704306][   T37] usb 36-1: SetAddress Request (2) to port 0
[  392.705677][   T37] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd
[  392.937494][T10736] fuse: fd is not a fuse device
[  393.127480][T10719] vhci_hcd: connection reset by peer
[  393.219146][ T8229] vhci_hcd vhci_hcd.1: stop threads
[  393.222355][ T8229] vhci_hcd vhci_hcd.1: release socket
[  393.332423][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  393.345460][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  393.358789][ T8229] vhci_hcd vhci_hcd.1: disconnect device
[  393.368778][T10718] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  393.368805][T10718] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  393.415334][T10718] vhci_hcd vhci_hcd.0: Device attached
[  393.417226][T10743] vhci_hcd: connection closed
[  393.418304][ T6350] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  393.421080][ T8229] vhci_hcd vhci_hcd.4: stop threads
[  393.421105][ T8229] vhci_hcd vhci_hcd.4: release socket
[  393.421141][ T8229] vhci_hcd vhci_hcd.4: disconnect device
[  393.549851][ T6350] usb 5-1: USB disconnect, device number 8
[  393.577236][ T9559] udevd[9559]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory
[  393.892785][   T38] audit: type=1400 audit(1782015471.362:10): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10748 comm="syz.0.1593"
[  394.226987][ T6350] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  394.317104][ T5716] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  394.381810][ T6350] usb 2-1: Using ep0 maxpacket: 16
[  394.422795][ T6350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.422834][ T6350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.422877][ T6350] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  394.422895][ T6350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.441208][ T6350] usb 2-1: config 0 descriptor??
[  394.499335][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  394.519112][ T5716] usb 5-1: config 0 has an invalid interface number: 246 but max is 0
[  394.519146][ T5716] usb 5-1: config 0 has no interface number 0
[  394.519215][ T5716] usb 5-1: too many endpoints for config 0 interface 246 altsetting 98: 161, using maximum allowed: 30
[  394.519245][ T5716] usb 5-1: config 0 interface 246 altsetting 98 has 0 endpoint descriptors, different from the interface descriptor's value: 161
[  394.519266][ T5716] usb 5-1: config 0 interface 246 has no altsetting 0
[  394.519291][ T5716] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  394.519309][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.657731][ T5716] usb 5-1: config 0 descriptor??
[  394.981415][ T5716] usb 5-1: string descriptor 0 read error: -71
[  395.048886][ T5716] gspca_main: sunplus-2.14.0 probing 041e:400b
[  395.050550][ T5716] gspca_sunplus: reg_w_riv err -71
[  395.050657][ T5716] sunplus 5-1:0.246: probe with driver sunplus failed with error -71
[  395.141064][ T5716] usb 5-1: USB disconnect, device number 9
[  395.265929][T10755] usb usb8: usbfs: process 10755 (syz.1.1594) did not claim interface 0 before use
[  395.357331][ T6350] usb 2-1: string descriptor 0 read error: -71
[  395.468847][ T6350] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  395.468932][ T6350] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -32
[  395.544464][ T6350] usb 2-1: USB disconnect, device number 78
[  395.588972][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1600'.
[  395.860005][ T5716] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  396.010575][ T5716] usb 5-1: Using ep0 maxpacket: 8
[  396.013351][ T5716] usb 5-1: config 3 has an invalid interface number: 45 but max is 0
[  396.013383][ T5716] usb 5-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  396.013405][ T5716] usb 5-1: config 3 has no interface number 0
[  396.013453][ T5716] usb 5-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  396.013483][ T5716] usb 5-1: config 3 interface 45 has no altsetting 0
[  396.017136][ T5716] usb 5-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  396.017169][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.017191][ T5716] usb 5-1: Product: syz
[  396.017206][ T5716] usb 5-1: Manufacturer: syz
[  396.017223][ T5716] usb 5-1: SerialNumber: syz
[  396.164773][T10778] netlink: 'syz.0.1603': attribute type 16 has an invalid length.
[  396.164797][T10778] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1603'.
[  396.330247][ T5716] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  396.447995][ T5716] usb 5-1: USB disconnect, device number 10
[  396.561728][ T5616] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  396.625681][T10385] udevd[10385]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  396.687943][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'.
[  396.687964][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1606'.
[  396.722336][ T5616] usb 1-1: Using ep0 maxpacket: 32
[  396.727086][ T5616] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 57, changing to 7
[  396.729694][ T5616] usb 1-1: New USB device found, idVendor=0e41, idProduct=3020, bcdDevice= 0.40
[  396.729718][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.729733][ T5616] usb 1-1: Product: syz
[  396.729743][ T5616] usb 1-1: Manufacturer: syz
[  396.729754][ T5616] usb 1-1: SerialNumber: syz
[  396.990842][T10782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.992762][T10782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.065809][ T5616] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc
[  397.071677][ T5616] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  397.130417][ T5616] usb 1-1: USB disconnect, device number 62
[  397.184757][ T5716] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  397.335597][ T5716] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  397.335638][ T5716] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  397.335681][ T5716] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  397.335707][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.404071][T10792] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  397.410406][ T5716] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  397.640064][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.671516][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.764615][ T6350] usb 5-1: USB disconnect, device number 11
[  397.796095][T10803] FAULT_INJECTION: forcing a failure.
[  397.796095][T10803] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.796137][T10803] CPU: 0 UID: 0 PID: 10803 Comm: syz.0.1612 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  397.796173][T10803] Tainted: [L]=SOFTLOCKUP
[  397.796181][T10803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  397.796196][T10803] Call Trace:
[  397.796204][T10803]  <TASK>
[  397.796214][T10803]  dump_stack_lvl+0xe8/0x150
[  397.796246][T10803]  should_fail_ex+0x46b/0x600
[  397.796285][T10803]  _copy_from_user+0x2d/0xb0
[  397.796311][T10803]  ___sys_recvmsg+0x175/0x5a0
[  397.796347][T10803]  ? __pfx____sys_recvmsg+0x10/0x10
[  397.796384][T10803]  ? ktime_get_ts64+0xa9/0x410
[  397.796444][T10803]  do_recvmmsg+0x32b/0x7e0
[  397.796484][T10803]  ? __pfx_do_recvmmsg+0x10/0x10
[  397.796527][T10803]  ? get_timespec64+0x119/0x1b0
[  397.796559][T10803]  ? __pfx_get_timespec64+0x10/0x10
[  397.796602][T10803]  __x64_sys_recvmmsg+0x1b7/0x250
[  397.796636][T10803]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  397.796677][T10803]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.796703][T10803]  do_syscall_64+0x174/0x580
[  397.796732][T10803]  ? trace_irq_disable+0x3b/0x140
[  397.796761][T10803]  ? clear_bhb_loop+0x40/0x90
[  397.796790][T10803]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.796813][T10803] RIP: 0033:0x7ffbc861ce59
[  397.796834][T10803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.796855][T10803] RSP: 002b:00007ffbc686e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  397.796887][T10803] RAX: ffffffffffffffda RBX: 00007ffbc8895fa0 RCX: 00007ffbc861ce59
[  397.796904][T10803] RDX: 00000000000006f5 RSI: 0000200000000440 RDI: 0000000000000003
[  397.796919][T10803] RBP: 00007ffbc686e090 R08: 0000200000000480 R09: 0000000000000000
[  397.796934][T10803] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002
[  397.796949][T10803] R13: 00007ffbc8896038 R14: 00007ffbc8895fa0 R15: 00007ffc42455488
[  397.796983][T10803]  </TASK>
[  397.917422][   T37] usb 36-1: device descriptor read/8, error -110
[  398.312116][   T37] usb usb36-port1: attempt power cycle
[  398.374631][ T5757] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  398.385663][    T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  398.524807][ T5757] usb 2-1: Using ep0 maxpacket: 32
[  398.527584][    T9] usb 1-1: device descriptor read/64, error -71
[  398.529685][ T5757] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  398.529846][ T5757] usb 2-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30
[  398.529887][ T5757] usb 2-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  398.529918][ T5757] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  398.529935][ T5757] usb 2-1: config 1 interface 2 has no altsetting 0
[  398.532549][ T5757] usb 2-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40
[  398.532579][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.532601][ T5757] usb 2-1: Product: syz
[  398.532615][ T5757] usb 2-1: Manufacturer: syz
[  398.532630][ T5757] usb 2-1: SerialNumber: syz
[  398.785462][    T9] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  398.885241][ T5757] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  398.893885][ T5757] usb 2-1: unit 4 not found!
[  398.893902][ T5757] usb 2-1: unit 144 not found!
[  398.925821][    T9] usb 1-1: device descriptor read/64, error -71
[  398.943753][   T37] usb usb36-port1: unable to enumerate USB device
[  398.954378][ T5757] usb 2-1: USB disconnect, device number 79
[  399.038127][    T9] usb usb1-port1: attempt power cycle
[  399.386599][    T9] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  399.409551][    T9] usb 1-1: device descriptor read/8, error -71
[  399.442600][T10825] overlayfs: failed to clone upperpath
[  399.556718][ T5757] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  399.666796][    T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  399.699059][    T9] usb 1-1: device descriptor read/8, error -71
[  399.738657][ T5757] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  399.738685][ T5757] usb 5-1: config 0 interface 0 has no altsetting 0
[  399.738710][ T5757] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  399.738727][ T5757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.786234][ T5757] usb 5-1: config 0 descriptor??
[  399.818798][    T9] usb usb1-port1: unable to enumerate USB device
[  399.912933][T10835] batadv_slave_1: entered promiscuous mode
[  399.913635][T10835] batadv_slave_1: left promiscuous mode
[  400.002493][T10837] FAULT_INJECTION: forcing a failure.
[  400.002493][T10837] name failslab, interval 1, probability 0, space 0, times 0
[  400.002534][T10837] CPU: 1 UID: 0 PID: 10837 Comm: syz.1.1624 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  400.002567][T10837] Tainted: [L]=SOFTLOCKUP
[  400.002576][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  400.002591][T10837] Call Trace:
[  400.002599][T10837]  <TASK>
[  400.002610][T10837]  dump_stack_lvl+0xe8/0x150
[  400.002643][T10837]  should_fail_ex+0x46b/0x600
[  400.002692][T10837]  should_failslab+0xa8/0x100
[  400.002721][T10837]  kmem_cache_alloc_noprof+0xa4/0x6c0
[  400.002760][T10837]  ? ima_inode_get+0xea/0x4d0
[  400.002787][T10837]  ? ima_inode_get+0xea/0x4d0
[  400.002823][T10837]  ima_inode_get+0xea/0x4d0
[  400.002859][T10837]  process_measurement+0x470/0x1c90
[  400.002909][T10837]  ? __pfx_process_measurement+0x10/0x10
[  400.002980][T10837]  ? tomoyo_find_next_domain+0x1732/0x1aa0
[  400.003033][T10837]  ima_bprm_check+0x121/0x180
[  400.003067][T10837]  ? __pfx_ima_bprm_check+0x10/0x10
[  400.003094][T10837]  ? tomoyo_bprm_check_security+0xf0/0x180
[  400.003125][T10837]  ? tomoyo_bprm_check_security+0xf0/0x180
[  400.003152][T10837]  ? tomoyo_bprm_check_security+0xf0/0x180
[  400.003179][T10837]  ? tomoyo_bprm_check_security+0x162/0x180
[  400.003212][T10837]  security_bprm_check+0xcd/0x240
[  400.003237][T10837]  bprm_execve+0x8a4/0x1510
[  400.003281][T10837]  ? __pfx_bprm_execve+0x10/0x10
[  400.003306][T10837]  ? rt_spin_unlock+0x160/0x200
[  400.003332][T10837]  ? alloc_bprm+0x5ab/0x660
[  400.003366][T10837]  do_execveat_common+0x510/0x690
[  400.003404][T10837]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.003430][T10837]  __x64_sys_execve+0x97/0xc0
[  400.003460][T10837]  do_syscall_64+0x174/0x580
[  400.003489][T10837]  ? trace_irq_disable+0x3b/0x140
[  400.003519][T10837]  ? clear_bhb_loop+0x40/0x90
[  400.003549][T10837]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  400.003573][T10837] RIP: 0033:0x7fc9be26ce59
[  400.003595][T10837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  400.003617][T10837] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  400.003642][T10837] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  400.003668][T10837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  400.003683][T10837] RBP: 00007fc9bc4be090 R08: 0000000000000000 R09: 0000000000000000
[  400.003698][T10837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  400.003712][T10837] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  400.003750][T10837]  </TASK>
[  400.003812][T10837] Invalid argument reading file caps for ./file0
[  400.343625][ T5757] hid_parser_main: 5 callbacks suppressed
[  400.343732][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343763][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343789][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343816][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343844][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343872][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343899][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343926][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.343954][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.344084][ T5757] hid-led 0003:04D8:F372.0012: unknown main item tag 0x0
[  400.734980][ T5757] hid-led 0003:04D8:F372.0012: hidraw0: USB HID v0.81 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0
[  401.298352][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'.
[  401.399659][T10856] netlink: 'syz.4.1619': attribute type 29 has an invalid length.
[  402.163646][ T5757] hid-led 0003:04D8:F372.0012: Greynut Luxafor initialized
[  402.341715][T10858] 9p: Bad value for 'rfdno'
[  402.663447][ T5715] usb 5-1: USB disconnect, device number 12
[  402.806352][ T8238] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  402.830717][T10842] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  402.850550][   T44] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  402.919493][ T7844] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  402.938492][ T7844] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  402.943131][ T8238] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  402.971692][T10842] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  402.994986][   T44] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  402.997652][   T44] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  403.019508][   T44] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  403.029760][ T8238] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  403.039059][ T8238] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  403.049396][   T44] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  403.061300][   T44] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  403.077281][   T44] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  403.078989][   T44] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  403.136823][ T7844] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  403.151372][ T7844] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  403.215539][T10887] overlayfs: missing 'lowerdir'
[  403.278306][T10887] tipc: Enabled bearer <udp:syz0>, priority 10
[  403.481684][T10900] overlayfs: conflicting options: nfs_export=on,index=off
[  403.663587][ T5715] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  403.813372][ T5715] usb 5-1: Using ep0 maxpacket: 8
[  403.816191][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short
[  403.818797][ T5715] usb 5-1: config 213 has an invalid interface number: 136 but max is 0
[  403.818819][ T5715] usb 5-1: config 213 has no interface number 0
[  403.818854][ T5715] usb 5-1: config 213 interface 136 has no altsetting 0
[  403.823652][ T5715] usb 5-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=9a.ca
[  403.823757][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.823819][ T5715] usb 5-1: Product: syz
[  403.823862][ T5715] usb 5-1: Manufacturer: syz
[  403.823911][ T5715] usb 5-1: SerialNumber: syz
[  404.111902][T10883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1636'.
[  404.196699][ T5715] ttusb_dec_send_command: command bulk message failed: error -22
[  404.196902][ T5715] ttusb-dec 5-1:213.136: probe with driver ttusb-dec failed with error -22
[  404.232737][ T5715] usb 5-1: USB disconnect, device number 13
[  404.793877][ T5757] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  404.844016][T10925] binder: BINDER_SET_CONTEXT_MGR already set
[  404.844030][T10925] binder: 10924:10925 ioctl 40046207 0 returned -16
[  404.964709][ T5757] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  404.964743][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.964766][ T5757] usb 2-1: Product: syz
[  404.964781][ T5757] usb 2-1: Manufacturer: syz
[  404.964797][ T5757] usb 2-1: SerialNumber: syz
[  405.015395][ T5757] usb 2-1: config 0 descriptor??
[  405.037133][ T5757] ch341 2-1:0.0: ch341-uart converter detected
[  405.396248][T10929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.399703][T10929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.491429][ T5757] usb 2-1: failed to receive control message: -71
[  405.491487][ T5757] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  405.525414][ T5757] usb 2-1: USB disconnect, device number 80
[  405.530396][ T5757] ch341 2-1:0.0: device disconnected
[  405.856083][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  405.902365][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  405.921167][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  405.922648][T10931] FAULT_INJECTION: forcing a failure.
[  405.922648][T10931] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  405.922682][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.4.1654 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  405.922711][T10931] Tainted: [L]=SOFTLOCKUP
[  405.922718][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  405.922729][T10931] Call Trace:
[  405.922737][T10931]  <TASK>
[  405.922745][T10931]  dump_stack_lvl+0xe8/0x150
[  405.922773][T10931]  should_fail_ex+0x46b/0x600
[  405.922804][T10931]  prepare_alloc_pages+0x22a/0x6b0
[  405.922833][T10931]  __alloc_frozen_pages_noprof+0x12f/0x380
[  405.922858][T10931]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  405.922885][T10931]  ? __pfx_policy_nodemask+0x10/0x10
[  405.922916][T10931]  alloc_pages_mpol+0xd1/0x380
[  405.922941][T10931]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  405.922966][T10931]  vma_alloc_folio_noprof+0xe1/0x1e0
[  405.922991][T10931]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  405.923023][T10931]  do_wp_page+0x1109/0x3d90
[  405.923051][T10931]  ? rt_spin_lock+0x1e0/0x400
[  405.923081][T10931]  ? preempt_count_add+0x91/0x190
[  405.923109][T10931]  ? __pfx_do_wp_page+0x10/0x10
[  405.923135][T10931]  ? rt_spin_lock+0x2ce/0x400
[  405.923154][T10931]  ? __pfx_rt_spin_lock+0x10/0x10
[  405.923175][T10931]  ? pte_offset_map_rw_nolock+0xea/0x160
[  405.923207][T10931]  handle_mm_fault+0xafb/0x14d0
[  405.923229][T10931]  ? handle_mm_fault+0xed/0x14d0
[  405.923250][T10931]  ? __pfx_handle_mm_fault+0x10/0x10
[  405.923268][T10931]  ? follow_page_pte+0xac0/0xe60
[  405.923293][T10931]  ? __pfx_follow_page_pte+0x10/0x10
[  405.923320][T10931]  __get_user_pages+0x16d4/0x2620
[  405.923357][T10931]  ? __gup_longterm_locked+0xc4e/0x1630
[  405.923415][T10931]  __gup_longterm_locked+0xdcf/0x1630
[  405.923450][T10931]  ? lock_acquire+0x106/0x350
[  405.923480][T10931]  ? sanity_check_pinned_pages+0x7a8/0x870
[  405.923515][T10931]  gup_fast_fallback+0x1cfd/0x2040
[  405.923567][T10931]  ? __pfx_gup_fast_fallback+0x10/0x10
[  405.923600][T10931]  ? pin_user_pages_fast+0x4d/0xb0
[  405.923629][T10931]  iov_iter_extract_pages+0x37b/0x5f0
[  405.923656][T10931]  extract_iter_to_sg+0xefb/0x25d0
[  405.923695][T10931]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  405.923736][T10931]  ? __asan_memset+0x22/0x50
[  405.923763][T10931]  af_alg_get_rsgl+0x4b6/0x8e0
[  405.923800][T10931]  skcipher_recvmsg+0x383/0xe10
[  405.923838][T10931]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  405.923861][T10931]  ? __lock_acquire+0x6b5/0x2d10
[  405.923889][T10931]  ? aa_sock_msg_perm+0x122/0x200
[  405.923908][T10931]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  405.923932][T10931]  sock_recvmsg_nosec+0x130/0x170
[  405.923964][T10931]  ____sys_recvmsg+0x23d/0x4f0
[  405.923995][T10931]  ? __pfx_____sys_recvmsg+0x10/0x10
[  405.924032][T10931]  ? import_iovec+0x73/0xa0
[  405.924055][T10931]  ___sys_recvmsg+0x215/0x5a0
[  405.924085][T10931]  ? __pfx____sys_recvmsg+0x10/0x10
[  405.924114][T10931]  ? __fget_files+0x2a/0x420
[  405.924149][T10931]  ? __fget_files+0x3a6/0x420
[  405.924177][T10931]  __x64_sys_recvmsg+0x1b4/0x290
[  405.924205][T10931]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  405.924246][T10931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.924271][T10931]  do_syscall_64+0x174/0x580
[  405.924298][T10931]  ? trace_irq_disable+0x3b/0x140
[  405.924325][T10931]  ? clear_bhb_loop+0x40/0x90
[  405.924350][T10931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.924368][T10931] RIP: 0033:0x7f297c48ce59
[  405.924396][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.924414][T10931] RSP: 002b:00007f297a6e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  405.924435][T10931] RAX: ffffffffffffffda RBX: 00007f297c705fa0 RCX: 00007f297c48ce59
[  405.924449][T10931] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  405.924459][T10931] RBP: 00007f297a6e6090 R08: 0000000000000000 R09: 0000000000000000
[  405.924470][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  405.924481][T10931] R13: 00007f297c706038 R14: 00007f297c705fa0 R15: 00007ffe4e970078
[  405.924507][T10931]  </TASK>
[  405.958908][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  405.973434][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  406.766037][T10945] netlink: 'syz.0.1657': attribute type 10 has an invalid length.
[  406.972482][T10953] FAULT_INJECTION: forcing a failure.
[  406.972482][T10953] name failslab, interval 1, probability 0, space 0, times 0
[  406.972523][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.1.1660 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  406.972562][T10953] Tainted: [L]=SOFTLOCKUP
[  406.972571][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  406.972585][T10953] Call Trace:
[  406.972594][T10953]  <TASK>
[  406.972604][T10953]  dump_stack_lvl+0xe8/0x150
[  406.972638][T10953]  should_fail_ex+0x46b/0x600
[  406.972677][T10953]  should_failslab+0xa8/0x100
[  406.972706][T10953]  __kmalloc_noprof+0xfe/0x7e0
[  406.972728][T10953]  ? rcu_is_watching+0x15/0xb0
[  406.972763][T10953]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  406.972789][T10953]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  406.972823][T10953]  tomoyo_realpath_from_path+0xe3/0x5d0
[  406.972853][T10953]  ? tomoyo_domain+0xd7/0x130
[  406.972886][T10953]  ? tomoyo_path_number_perm+0x219/0x630
[  406.972922][T10953]  tomoyo_path_number_perm+0x246/0x630
[  406.972965][T10953]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  406.973000][T10953]  ? __lock_acquire+0x6b5/0x2d10
[  406.973034][T10953]  ? do_raw_spin_lock+0x12b/0x2f0
[  406.973094][T10953]  ? __fget_files+0x2a/0x420
[  406.973123][T10953]  ? __fget_files+0x2a/0x420
[  406.973145][T10953]  ? __fget_files+0x3a6/0x420
[  406.973168][T10953]  ? __fget_files+0x2a/0x420
[  406.973202][T10953]  security_file_ioctl+0xc3/0x2a0
[  406.973237][T10953]  __se_sys_ioctl+0x47/0x170
[  406.973267][T10953]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.973291][T10953]  do_syscall_64+0x174/0x580
[  406.973319][T10953]  ? trace_irq_disable+0x3b/0x140
[  406.973347][T10953]  ? clear_bhb_loop+0x40/0x90
[  406.973374][T10953]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.973396][T10953] RIP: 0033:0x7fc9be26ce59
[  406.973417][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.973436][T10953] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  406.973461][T10953] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  406.973478][T10953] RDX: 0000200000001200 RSI: 00000000c0045009 RDI: 0000000000000003
[  406.973494][T10953] RBP: 00007fc9bc4be090 R08: 0000000000000000 R09: 0000000000000000
[  406.973508][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.973523][T10953] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  406.973560][T10953]  </TASK>
[  406.990430][T10953] ERROR: Out of memory at tomoyo_realpath_from_path.
[  407.013373][ T7943] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  407.183419][ T7943] usb 1-1: Using ep0 maxpacket: 8
[  407.213699][ T7943] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  407.213739][ T7943] usb 1-1: can't read configurations, error -22
[  407.398746][ T7943] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  407.563471][ T7943] usb 1-1: Using ep0 maxpacket: 8
[  407.568107][ T7943] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  407.568150][ T7943] usb 1-1: can't read configurations, error -22
[  407.569289][ T7943] usb usb1-port1: attempt power cycle
[  407.793373][    T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  407.949148][ T7943] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  407.962357][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  407.974174][ T7943] usb 1-1: Using ep0 maxpacket: 8
[  407.975812][    T9] usb 2-1: config 5 has an invalid interface number: 159 but max is 0
[  407.975842][    T9] usb 2-1: config 5 has no interface number 0
[  407.975877][    T9] usb 2-1: config 5 interface 159 has no altsetting 0
[  408.017548][ T7943] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  408.017591][ T7943] usb 1-1: can't read configurations, error -22
[  408.063357][    T9] usb 2-1: string descriptor 0 read error: -22
[  408.063516][    T9] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6d.e2
[  408.063544][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.118923][    T9] sr9700 2-1:5.159: probe with driver sr9700 failed with error -22
[  408.153396][ T7943] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  408.174508][ T7943] usb 1-1: Using ep0 maxpacket: 8
[  408.193440][ T7943] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  408.193483][ T7943] usb 1-1: can't read configurations, error -22
[  408.193881][ T7943] usb usb1-port1: unable to enumerate USB device
[  408.291467][T10962] netlink: 'syz.4.1663': attribute type 17 has an invalid length.
[  408.311326][T10959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.311901][T10959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.395738][   T60] Bluetooth: hci4: command tx timeout
[  408.416356][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.445066][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.445894][T10966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  408.462094][T10966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  408.501338][    T9] usb 2-1: USB disconnect, device number 81
[  409.192310][T10973] Invalid logical block size (251658240)
[  409.955623][T10992] loop8: detected capacity change from 0 to 7
[  409.988167][T10992] Dev loop8: unable to read RDB block 7
[  409.988211][T10992]  loop8: unable to read partition table
[  409.988406][T10992] loop8: partition table beyond EOD, truncated
[  409.988445][T10992] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  410.371438][  T148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.479573][   T60] Bluetooth: hci4: command tx timeout
[  410.481916][T10928] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.482310][T10928] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.482572][T10928] bridge_slave_0: entered allmulticast mode
[  410.511071][T10928] bridge_slave_0: entered promiscuous mode
[  410.529881][T10928] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.548801][T10928] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.549215][T10928] bridge_slave_1: entered allmulticast mode
[  410.552695][T10928] bridge_slave_1: entered promiscuous mode
[  410.626504][T10928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  410.644533][T10928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  410.707989][T10928] team0: Port device team_slave_0 added
[  410.722568][T10928] team0: Port device team_slave_1 added
[  410.994016][T11010] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1674'.
[  411.023835][T10928] batman_adv: batadv0: Adding interface: batadv_slave_0
[  411.023848][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.023877][T10928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  411.031070][T11006] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1673'.
[  411.103964][T10928] batman_adv: batadv0: Adding interface: batadv_slave_1
[  411.103983][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  411.104015][T10928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  411.104515][T11004] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1673'.
[  411.472040][  T148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.652461][T10928] hsr_slave_0: entered promiscuous mode
[  411.662823][T10928] hsr_slave_1: entered promiscuous mode
[  412.481368][  T148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.504011][ T7943] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  412.553993][   T60] Bluetooth: hci4: command tx timeout
[  412.653452][ T7943] usb 5-1: Using ep0 maxpacket: 32
[  412.656634][ T7943] usb 5-1: config 0 has an invalid interface number: 146 but max is 0
[  412.656660][ T7943] usb 5-1: config 0 has no interface number 0
[  412.656698][ T7943] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  412.656719][ T7943] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  412.656744][ T7943] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  412.656771][ T7943] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  412.656794][ T7943] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  412.656820][ T7943] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  412.656842][ T7943] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  412.656868][ T7943] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10
[  412.656894][ T7943] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024
[  412.656921][ T7943] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  412.660375][ T7943] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  412.660406][ T7943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.660427][ T7943] usb 5-1: Product: syz
[  412.660442][ T7943] usb 5-1: Manufacturer: syz
[  412.660456][ T7943] usb 5-1: SerialNumber: syz
[  412.840090][ T7943] usb 5-1: config 0 descriptor??
[  412.849834][T11031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  412.850132][T11031] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  412.871390][ T7943] usb 5-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  412.871443][ T7943] usb 5-1: couldn't find an output bulk endpoint. Bailing out.
[  413.061453][ T7943] usb 5-1: USB disconnect, device number 14
[  413.154591][ T5715] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  413.302853][  T148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  413.330901][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  413.331497][ T5715] usb 1-1: not running at top speed; connect to a high speed hub
[  413.349008][ T5715] usb 1-1: config 13 has an invalid interface number: 96 but max is 0
[  413.349037][ T5715] usb 1-1: config 13 has an invalid interface association descriptor of length 2, skipping
[  413.349058][ T5715] usb 1-1: config 13 has no interface number 0
[  413.349109][ T5715] usb 1-1: config 13 interface 96 has no altsetting 0
[  413.389919][ T5715] usb 1-1: New USB device found, idVendor=4766, idProduct=0001, bcdDevice=5b.64
[  413.389952][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.389973][ T5715] usb 1-1: Product: syz
[  413.389988][ T5715] usb 1-1: Manufacturer: syz
[  413.390002][ T5715] usb 1-1: SerialNumber: syz
[  413.827551][ T5715] usb 1-1: active config #13 != 1 ??
[  413.868631][ T5715] usb 1-1: USB disconnect, device number 71
[  414.634449][   T60] Bluetooth: hci4: command tx timeout
[  415.194013][  T148] bridge_slave_1: left allmulticast mode
[  415.194059][  T148] bridge_slave_1: left promiscuous mode
[  415.253119][  T148] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.441472][  T148] bridge_slave_0: left allmulticast mode
[  415.441509][  T148] bridge_slave_0: left promiscuous mode
[  415.481189][  T148] bridge0: port 1(bridge_slave_0) entered disabled state
[  415.865489][  T148] dvmrp0: left allmulticast mode
[  416.193555][ T5715] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  416.343454][ T5715] usb 2-1: Using ep0 maxpacket: 32
[  416.380462][ T5715] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  416.380491][ T5715] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  416.380514][ T5715] usb 2-1: config 0 has no interface number 0
[  416.380552][ T5715] usb 2-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  416.380579][ T5715] usb 2-1: config 0 interface 85 has no altsetting 0
[  416.431370][ T5715] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  416.431403][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.431425][ T5715] usb 2-1: Product: syz
[  416.431441][ T5715] usb 2-1: Manufacturer: syz
[  416.431458][ T5715] usb 2-1: SerialNumber: syz
[  416.468102][ T5715] usb 2-1: config 0 descriptor??
[  416.479146][ T5715] appletouch 2-1:0.85: Could not find int-in endpoint
[  416.479186][ T5715] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  416.480835][ T5715] usbhid 2-1:0.85: couldn't find an input interrupt endpoint
[  416.677710][ T5715] usb 2-1: USB disconnect, device number 82
[  416.980309][T11086] loop8: detected capacity change from 0 to 7
[  417.010716][T11086] Dev loop8: unable to read RDB block 7
[  417.010769][T11086]  loop8: unable to read partition table
[  417.011069][T11086] loop8: partition table beyond EOD, truncated
[  417.011111][T11086] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  417.334842][  T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  417.414231][  T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  417.451896][  T148] bond0 (unregistering): Released all slaves
[  417.566955][ T5757] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  417.598959][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5
[  417.774726][ T5757] usb 2-1: Using ep0 maxpacket: 32
[  417.777945][ T5757] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  417.780336][ T5757] usb 2-1: New USB device found, idVendor=0499, idProduct=1057, bcdDevice= 0.40
[  417.780371][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.780393][ T5757] usb 2-1: Product: syz
[  417.780408][ T5757] usb 2-1: Manufacturer: syz
[  417.780424][ T5757] usb 2-1: SerialNumber: syz
[  418.108426][ T5757] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  418.239977][ T5757] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  418.293922][ T5757] usb 2-1: USB disconnect, device number 83
[  418.323406][ T5715] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  418.345477][ T9743] udevd[9743]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  418.467741][  T148] tipc: Disabling bearer <udp:syz0>
[  418.467908][  T148] tipc: Left network mode
[  418.483162][ T5715] usb 1-1: Using ep0 maxpacket: 8
[  418.504364][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  418.516468][ T5715] usb 1-1: config 1 has an invalid interface number: 32 but max is 0
[  418.516499][ T5715] usb 1-1: config 1 has no interface number 0
[  418.519180][ T5715] usb 1-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40
[  418.519212][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.519234][ T5715] usb 1-1: Product: syz
[  418.519251][ T5715] usb 1-1: Manufacturer: syz
[  418.519268][ T5715] usb 1-1: SerialNumber: syz
[  418.868161][T11100] batadv_slave_1: entered promiscuous mode
[  418.877605][T11100] batadv_slave_1: left promiscuous mode
[  418.926392][ T6350] kernel read not supported for file /vcs (pid: 6350 comm: kworker/1:7)
[  419.017385][T11104] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1704'.
[  419.103018][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.164056][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.339205][T11117] FAULT_INJECTION: forcing a failure.
[  419.339205][T11117] name failslab, interval 1, probability 0, space 0, times 0
[  419.339247][T11117] CPU: 0 UID: 0 PID: 11117 Comm: syz.1.1706 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  419.339278][T11117] Tainted: [L]=SOFTLOCKUP
[  419.339285][T11117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  419.339311][T11117] Call Trace:
[  419.339320][T11117]  <TASK>
[  419.339330][T11117]  dump_stack_lvl+0xe8/0x150
[  419.339365][T11117]  should_fail_ex+0x46b/0x600
[  419.339405][T11117]  should_failslab+0xa8/0x100
[  419.339435][T11117]  __kmalloc_noprof+0xfe/0x7e0
[  419.339457][T11117]  ? rcu_is_watching+0x15/0xb0
[  419.339491][T11117]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  419.339519][T11117]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  419.339554][T11117]  tomoyo_realpath_from_path+0xe3/0x5d0
[  419.339582][T11117]  ? tomoyo_domain+0xd7/0x130
[  419.339614][T11117]  ? tomoyo_path_number_perm+0x219/0x630
[  419.339651][T11117]  tomoyo_path_number_perm+0x246/0x630
[  419.339690][T11117]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  419.339724][T11117]  ? __lock_acquire+0x6b5/0x2d10
[  419.339755][T11117]  ? do_raw_spin_lock+0x12b/0x2f0
[  419.339813][T11117]  ? __fget_files+0x2a/0x420
[  419.339842][T11117]  ? __fget_files+0x2a/0x420
[  419.339864][T11117]  ? __fget_files+0x3a6/0x420
[  419.339886][T11117]  ? __fget_files+0x2a/0x420
[  419.339913][T11117]  security_file_ioctl+0xc3/0x2a0
[  419.339949][T11117]  __se_sys_ioctl+0x47/0x170
[  419.339980][T11117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.340006][T11117]  do_syscall_64+0x174/0x580
[  419.340036][T11117]  ? trace_irq_disable+0x3b/0x140
[  419.340066][T11117]  ? clear_bhb_loop+0x40/0x90
[  419.340095][T11117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  419.340117][T11117] RIP: 0033:0x7fc9be26ce59
[  419.340140][T11117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  419.340160][T11117] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  419.340185][T11117] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  419.340202][T11117] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003
[  419.340218][T11117] RBP: 00007fc9bc4be090 R08: 0000000000000000 R09: 0000000000000000
[  419.340233][T11117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  419.340247][T11117] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  419.340283][T11117]  </TASK>
[  419.340292][T11117] ERROR: Out of memory at tomoyo_realpath_from_path.
[  419.618435][ T5715] snd-usb-audio 1-1:1.32: probe with driver snd-usb-audio failed with error -22
[  419.630952][ T5715] usb 1-1: USB disconnect, device number 72
[  419.924157][ T7943] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  420.097356][ T7943] usb 2-1: unable to get BOS descriptor or descriptor too short
[  420.098162][ T7943] usb 2-1: not running at top speed; connect to a high speed hub
[  420.127514][ T7943] usb 2-1: config 61 has an invalid interface number: 37 but max is 0
[  420.127547][ T7943] usb 2-1: config 61 has no interface number 0
[  420.127583][ T7943] usb 2-1: config 61 interface 37 has no altsetting 0
[  420.158171][ T7943] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  420.158207][ T7943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.158230][ T7943] usb 2-1: Product: syz
[  420.158246][ T7943] usb 2-1: Manufacturer: syz
[  420.158262][ T7943] usb 2-1: SerialNumber: syz
[  420.235004][T11127] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1708'.
[  420.557776][T11130] XFS (nullb0): Invalid superblock magic number
[  420.702141][ T7943] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  420.862512][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6
[  421.733428][   T37] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  421.749621][ T7943] gp8psk: usb out operation failed.
[  421.749639][ T7943] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  421.749681][ T7943] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  421.793923][ T7943] usb 2-1: USB disconnect, device number 84
[  421.884663][   T37] usb 5-1: Using ep0 maxpacket: 16
[  421.908191][   T37] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  421.908235][   T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.908258][   T37] usb 5-1: Product: syz
[  421.908274][   T37] usb 5-1: Manufacturer: syz
[  421.908291][   T37] usb 5-1: SerialNumber: syz
[  421.999544][   T37] usb 5-1: config 0 descriptor??
[  422.031581][   T37] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  422.221487][T11140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1710'.
[  422.954357][ T6350] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[  423.018308][    T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  423.177625][ T6350] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  423.177667][ T6350] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.177751][ T6350] usb 2-1: config 0 has no interface number 0
[  423.177801][ T6350] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  423.177833][ T6350] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  423.177920][ T6350] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  423.177953][ T6350] usb 2-1: config 0 interface 52 has no altsetting 0
[  423.179884][ T6350] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  423.179919][ T6350] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  423.180172][ T6350] usb 2-1: Manufacturer: syz
[  423.235552][    T9] usb 1-1: Using ep0 maxpacket: 16
[  423.240395][    T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  423.240467][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.240565][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  423.240611][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 18726, setting to 1024
[  423.240670][    T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  423.240741][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  423.244268][    T9] usb 1-1: New USB device found, idVendor=c538, idProduct=a4a1, bcdDevice= 0.40
[  423.244301][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  423.244344][    T9] usb 1-1: SerialNumber: syz
[  423.494831][T11159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  423.495089][T11159] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  423.525208][ T6350] usb 2-1: config 0 descriptor??
[  423.581407][ T6350] hub 2-1:0.52: bad descriptor, ignoring hub
[  423.581452][ T6350] hub 2-1:0.52: probe with driver hub failed with error -5
[  423.777005][ T6350] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  423.778887][    T9] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  423.781044][ T6350] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5
[  423.826284][    T9] usb 1-1: USB disconnect, device number 73
[  423.983465][   T37] usb 5-1: clie_3_5_startup: get config number failed: -71
[  423.983745][   T37] visor 5-1:0.0: probe with driver visor failed with error -71
[  423.985270][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.988078][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.092950][   T37] usb 5-1: USB disconnect, device number 15
[  424.144572][ T6350] usb 2-1: USB disconnect, device number 85
[  425.661030][T11180] virtio-fs: tag </dev/loop4> not found
[  425.709737][  T148] hsr_slave_0: left promiscuous mode
[  425.743642][  T148] hsr_slave_1: left promiscuous mode
[  425.744910][  T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  425.744944][  T148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  425.784450][  T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  425.784474][  T148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.004187][  T148] veth1_macvtap: left promiscuous mode
[  426.004304][  T148] veth0_macvtap: left promiscuous mode
[  426.004531][  T148] veth1_vlan: left promiscuous mode
[  426.563454][    T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  426.683417][   T37] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  426.713471][    T9] usb 2-1: Using ep0 maxpacket: 32
[  426.775120][    T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  426.775142][    T9] usb 2-1: config 0 has no interface number 0
[  426.775191][    T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.775213][    T9] usb 2-1: config 0 interface 85 has no altsetting 0
[  426.778035][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  426.778067][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.778089][    T9] usb 2-1: Product: syz
[  426.778110][    T9] usb 2-1: Manufacturer: syz
[  426.778121][    T9] usb 2-1: SerialNumber: syz
[  426.791737][    T9] usb 2-1: config 0 descriptor??
[  426.855495][   T37] usb 1-1: config 0 has an invalid interface number: 231 but max is 0
[  426.855529][   T37] usb 1-1: config 0 has no interface number 0
[  426.855578][   T37] usb 1-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  426.858677][   T37] usb 1-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  426.858705][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.858722][   T37] usb 1-1: Product: syz
[  426.858735][   T37] usb 1-1: Manufacturer: syz
[  426.858747][   T37] usb 1-1: SerialNumber: syz
[  426.932931][   T37] usb 1-1: config 0 descriptor??
[  426.945731][T11192] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  427.260822][    T9] appletouch 2-1:0.85: Geyser mode initialized.
[  427.277758][    T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input23
[  427.684218][  T148] team0 (unregistering): Port device team_slave_1 removed
[  427.744935][  T148] team0 (unregistering): Port device team_slave_0 removed
[  428.081511][T11200] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0
[  428.284935][   T37] plusb 1-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, fa:ec:70:07:b9:bb
[  428.295620][   T37] usb 1-1: USB disconnect, device number 74
[  428.312138][   T37] plusb 1-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.0-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1
[  428.477306][T11209] FAULT_INJECTION: forcing a failure.
[  428.477306][T11209] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.477349][T11209] CPU: 0 UID: 0 PID: 11209 Comm: syz.4.1723 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  428.477380][T11209] Tainted: [L]=SOFTLOCKUP
[  428.477389][T11209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  428.477404][T11209] Call Trace:
[  428.477412][T11209]  <TASK>
[  428.477423][T11209]  dump_stack_lvl+0xe8/0x150
[  428.477457][T11209]  should_fail_ex+0x46b/0x600
[  428.477496][T11209]  _copy_from_iter+0x1d3/0x1670
[  428.477546][T11209]  ? __pfx__copy_from_iter+0x10/0x10
[  428.477588][T11209]  ? file_tty_write+0x2b3/0x990
[  428.477615][T11209]  ? rcu_is_watching+0x15/0xb0
[  428.477657][T11209]  file_tty_write+0x494/0x990
[  428.477692][T11209]  vfs_write+0x629/0xba0
[  428.477729][T11209]  ? __pfx_vfs_write+0x10/0x10
[  428.477777][T11209]  ? __fget_files+0x2a/0x420
[  428.477809][T11209]  ksys_write+0x156/0x270
[  428.477839][T11209]  ? __pfx_ksys_write+0x10/0x10
[  428.477875][T11209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.477898][T11209]  do_syscall_64+0x174/0x580
[  428.477924][T11209]  ? trace_irq_disable+0x3b/0x140
[  428.477950][T11209]  ? clear_bhb_loop+0x40/0x90
[  428.477977][T11209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.478001][T11209] RIP: 0033:0x7f297c48ce59
[  428.478022][T11209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.478041][T11209] RSP: 002b:00007f297a6e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  428.478066][T11209] RAX: ffffffffffffffda RBX: 00007f297c705fa0 RCX: 00007f297c48ce59
[  428.478083][T11209] RDX: 000000000000bfb3 RSI: 00002000000000c0 RDI: 0000000000000005
[  428.478098][T11209] RBP: 00007f297a6e6090 R08: 0000000000000000 R09: 0000000000000000
[  428.478112][T11209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.478126][T11209] R13: 00007f297c706038 R14: 00007f297c705fa0 R15: 00007ffe4e970078
[  428.478162][T11209]  </TASK>
[  429.375015][ T5715] usb 2-1: USB disconnect, device number 86
[  429.418380][   T37] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  429.586017][   T37] usb 1-1: not running at top speed; connect to a high speed hub
[  429.588345][   T37] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  429.588496][   T37] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  429.588572][   T37] usb 1-1: config 1 interface 0 has no altsetting 0
[  429.694908][   T37] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  429.694939][   T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.694961][   T37] usb 1-1: Product: syz
[  429.694977][   T37] usb 1-1: Manufacturer: syz
[  429.694993][   T37] usb 1-1: SerialNumber: syz
[  430.183401][ T5716] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  430.297639][ T5715] appletouch 2-1:0.85: input: appletouch disconnected
[  430.461902][   T37] cdc_ether 1-1:1.0: skipping garbage
[  430.461925][   T37] cdc_ether 1-1:1.0: missing cdc ether descriptor
[  430.488836][ T5716] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  430.488898][ T5716] usb 5-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  430.488932][ T5716] usb 5-1: config 2 interface 0 has no altsetting 0
[  430.532767][   T37] usb 1-1: USB disconnect, device number 75
[  430.560378][ T5716] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  430.560412][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.560433][ T5716] usb 5-1: Product: syz
[  430.560448][ T5716] usb 5-1: Manufacturer: syz
[  430.560462][ T5716] usb 5-1: SerialNumber: syz
[  430.906662][ T5716] ims_pcu 5-1:2.0: Missing CDC union descriptor
[  430.906718][ T5716] ims_pcu 5-1:2.0: probe with driver ims_pcu failed with error -22
[  430.934616][ T5716] usb 5-1: USB disconnect, device number 16
[  430.970095][  T148] IPVS: stop unused estimator thread 0...
[  431.523575][T10928] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  431.588162][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  431.599013][T10928] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  431.700850][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  431.902420][T11240] can0: slcan on ptm0.
[  431.907904][T10928] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  431.994360][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  431.995745][T10928] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  432.104686][T10928] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  432.123383][    T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  432.275936][    T9] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  432.275967][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  432.275988][    T9] usb 5-1: config 0 has no interface number 0
[  432.276050][    T9] usb 5-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  432.279470][    T9] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  432.279503][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.279536][    T9] usb 5-1: Product: syz
[  432.279553][    T9] usb 5-1: Manufacturer: syz
[  432.279569][    T9] usb 5-1: SerialNumber: syz
[  432.362662][    T9] usb 5-1: config 0 descriptor??
[  432.388247][    T9] asix 5-1:0.251: probe with driver asix failed with error -22
[  432.578266][ T5715] usb 5-1: USB disconnect, device number 17
[  432.757144][T11236] can0 (unregistered): slcan off ptm0.
[  433.511753][T11282] Invalid logical block size (-905969665)
[  433.837124][T10928] 8021q: adding VLAN 0 to HW filter on device bond0
[  434.041167][T11299] netlink: 'syz.0.1737': attribute type 4 has an invalid length.
[  434.060049][T11299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1737'.
[  434.092655][T10928] 8021q: adding VLAN 0 to HW filter on device team0
[  434.105521][   T37] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  434.156256][ T8238] bridge0: port 1(bridge_slave_0) entered blocking state
[  434.156445][ T8238] bridge0: port 1(bridge_slave_0) entered forwarding state
[  434.238511][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state
[  434.238637][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state
[  434.263363][   T37] usb 2-1: Using ep0 maxpacket: 16
[  434.278581][   T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.278639][   T37] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  434.278687][   T37] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  434.278713][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.338998][   T37] usb 2-1: config 0 descriptor??
[  434.545618][T11296] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1736'.
[  434.757747][T11296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  434.760386][T11296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  434.827345][   T37] usb 2-1: string descriptor 0 read error: -71
[  434.872484][   T37] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  434.885060][   T37] usb 2-1: USB disconnect, device number 87
[  435.096479][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'.
[  435.385105][T11312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  435.567789][T10928] 8021q: adding VLAN 0 to HW filter on device batadv0
[  435.701379][T10928] veth0_vlan: entered promiscuous mode
[  435.724600][T10928] veth1_vlan: entered promiscuous mode
[  435.803179][T10928] veth0_macvtap: entered promiscuous mode
[  435.816691][T10928] veth1_macvtap: entered promiscuous mode
[  435.856956][ T7943] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  435.897987][T10928] batman_adv: batadv0: Interface activated: batadv_slave_0
[  435.983643][ T7943] usb 2-1: device descriptor read/64, error -71
[  435.988418][T10928] batman_adv: batadv0: Interface activated: batadv_slave_1
[  436.070757][ T7852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  436.104541][ T7852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  436.125401][ T7852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  436.125456][ T7852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  436.254807][ T7943] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  436.453945][ T7943] usb 2-1: device descriptor read/64, error -71
[  436.565983][ T7943] usb usb2-port1: attempt power cycle
[  437.007929][ T7943] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  437.063488][ T5716] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  437.102104][ T7943] usb 2-1: device descriptor read/8, error -71
[  437.264810][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short
[  437.266272][ T5716] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.266299][ T5716] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  437.266357][ T5716] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  437.266393][ T5716] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  437.266433][ T5716] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  437.266461][ T5716] usb 5-1: config 1 interface 1 has no altsetting 0
[  437.271470][ T5716] usb 5-1: string descriptor 0 read error: -22
[  437.271589][ T5716] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  437.271614][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.386648][ T7943] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  437.404486][ T7943] usb 2-1: device descriptor read/8, error -71
[  437.467730][ T8240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  437.467754][ T8240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  437.528575][ T7943] usb usb2-port1: unable to enumerate USB device
[  438.423294][T11336] sysfs: Unknown parameter 'trans'
[  438.646905][ T5716] usb 5-1: 2:0: failed to get current value for ch 1 (-71)
[  438.648443][ T7852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  438.648461][ T7852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  438.693368][ T5716] usb 5-1: Warning! Unlikely small volume range (=176), linear volume or custom curve?
[  438.693401][ T5716] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/176/1
[  439.140061][ T5716] usb 5-1: USB disconnect, device number 18
[  439.410820][T11344] dvmrp0: entered allmulticast mode
[  439.547743][T11351] FAULT_INJECTION: forcing a failure.
[  439.547743][T11351] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.547775][T11351] CPU: 0 UID: 0 PID: 11351 Comm: syz.2.1751 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  439.547798][T11351] Tainted: [L]=SOFTLOCKUP
[  439.547804][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  439.547814][T11351] Call Trace:
[  439.547821][T11351]  <TASK>
[  439.547829][T11351]  dump_stack_lvl+0xe8/0x150
[  439.547855][T11351]  should_fail_ex+0x46b/0x600
[  439.547882][T11351]  strncpy_from_user+0x36/0x2b0
[  439.547908][T11351]  do_getname+0x77/0x250
[  439.547939][T11351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.547958][T11351]  __se_sys_unlinkat+0x4f/0x1a0
[  439.547981][T11351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.547998][T11351]  do_syscall_64+0x174/0x580
[  439.548019][T11351]  ? trace_irq_disable+0x3b/0x140
[  439.548039][T11351]  ? clear_bhb_loop+0x40/0x90
[  439.548059][T11351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.548075][T11351] RIP: 0033:0x7efcd672ce59
[  439.548090][T11351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.548104][T11351] RSP: 002b:00007efcd4986028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  439.548121][T11351] RAX: ffffffffffffffda RBX: 00007efcd69a5fa0 RCX: 00007efcd672ce59
[  439.548133][T11351] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffffffffff9c
[  439.548144][T11351] RBP: 00007efcd4986090 R08: 0000000000000000 R09: 0000000000000000
[  439.548154][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.548164][T11351] R13: 00007efcd69a6038 R14: 00007efcd69a5fa0 R15: 00007ffc73d8e7c8
[  439.548188][T11351]  </TASK>
[  439.880057][T11359] net_ratelimit: 165 callbacks suppressed
[  439.880121][T11359] netlink: get zone limit has 4 unknown bytes
[  439.935301][ T5716] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  440.086048][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  440.086092][ T5716] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  440.086135][ T5716] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  440.086161][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.134040][ T5716] usb 5-1: config 0 descriptor??
[  440.303473][ T6350] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  440.324354][ T5715] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  440.463379][ T6350] usb 3-1: Using ep0 maxpacket: 8
[  440.466198][ T6350] usb 3-1: unable to get BOS descriptor or descriptor too short
[  440.467871][ T6350] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  440.467903][ T6350] usb 3-1: config 0 has no interface number 0
[  440.467988][ T6350] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  440.468009][ T6350] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  440.468027][ T6350] usb 3-1: config 0 interface 88 has no altsetting 0
[  440.470917][ T6350] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  440.470952][ T6350] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  440.471012][ T6350] usb 3-1: Product: syz
[  440.471024][ T6350] usb 3-1: Manufacturer: syz
[  440.471034][ T6350] usb 3-1: SerialNumber: syz
[  440.485250][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  440.624077][ T5716] usbhid 5-1:0.0: can't add hid device: -32
[  440.657863][ T5715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  440.684997][ T6350] usb 3-1: config 0 descriptor??
[  440.697588][ T5715] usb 1-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40
[  440.697655][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.697672][ T5715] usb 1-1: Product: syz
[  440.697683][ T5715] usb 1-1: Manufacturer: syz
[  440.697694][ T5715] usb 1-1: SerialNumber: syz
[  440.773734][ T5716] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  440.993763][   T37] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  441.018112][ T6350] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input24
[  441.019474][ T5715] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  441.094198][ T6350] usb 3-1: USB disconnect, device number 2
[  441.132219][ T5715] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2
[  441.168458][   T37] usb 2-1: Using ep0 maxpacket: 16
[  441.173443][   T37] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  441.173567][   T37] usb 2-1: config 0 has no interface number 0
[  441.173694][   T37] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  441.173770][   T37] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  441.227406][   T37] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  441.227430][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.227465][   T37] usb 2-1: Product: syz
[  441.227481][   T37] usb 2-1: Manufacturer: syz
[  441.227497][   T37] usb 2-1: SerialNumber: syz
[  441.254438][ T5715] usb 1-1: USB disconnect, device number 76
[  441.314828][ T9559] udevd[9559]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  441.318352][   T37] usb 2-1: config 0 descriptor??
[  441.319844][T11367] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  441.319975][T11367] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  441.529905][T11367] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  441.545576][T11367] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  441.748980][   T37] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  442.137793][ T5715] usb 5-1: USB disconnect, device number 19
[  443.346218][   T37] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  443.346543][   T37] asix 2-1:0.34: probe with driver asix failed with error -32
[  443.628050][   T37] libceph: connect (1)[c::]:6789 error -101
[  443.628261][   T37] libceph: mon0 (1)[c::]:6789 connect error
[  443.671949][   T37] libceph: connect (1)[c::]:6789 error -101
[  443.672179][T11367] ceph: No mds server is up or the cluster is laggy
[  443.686100][   T37] libceph: mon0 (1)[c::]:6789 connect error
[  443.952884][ T6350] libceph: connect (1)[c::]:6789 error -101
[  443.953099][ T6350] libceph: mon0 (1)[c::]:6789 connect error
[  444.640380][T11406] Dead loop on virtual device ip6_vti0 (net 164), fix it urgently!
[  444.806688][T11413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1773'.
[  445.433477][ T6350] usb 2-1: USB disconnect, device number 92
[  453.721440][T11455] IPVS: set_ctl: invalid protocol: 51 172.20.20.52:20001
[  454.866231][ T6350] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  455.046777][ T6350] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.046854][ T6350] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  455.046887][ T6350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  455.046917][ T6350] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 108, setting to 64
[  455.046947][ T6350] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  455.130531][ T6350] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  455.130569][ T6350] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  455.130593][ T6350] usb 3-1: Product: syz
[  455.130610][ T6350] usb 3-1: Manufacturer: syz
[  455.130626][ T6350] usb 3-1: SerialNumber: syz
[  455.192602][ T6350] usb 3-1: config 0 descriptor??
[  455.198161][T11459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  455.438589][ T6350] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  455.438620][ T6350] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  455.644991][ T6350] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  455.645021][ T6350] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  455.645045][ T6350] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  455.714035][T11472] FAULT_INJECTION: forcing a failure.
[  455.714035][T11472] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  455.714080][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz.0.1790 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  455.714117][T11472] Tainted: [L]=SOFTLOCKUP
[  455.714125][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  455.714141][T11472] Call Trace:
[  455.714150][T11472]  <TASK>
[  455.714160][T11472]  dump_stack_lvl+0xe8/0x150
[  455.714194][T11472]  should_fail_ex+0x46b/0x600
[  455.714233][T11472]  _copy_from_user+0x2d/0xb0
[  455.714258][T11472]  ___sys_sendmsg+0x1c6/0x360
[  455.714288][T11472]  ? __lock_acquire+0x6b5/0x2d10
[  455.714322][T11472]  ? __pfx____sys_sendmsg+0x10/0x10
[  455.714387][T11472]  ? __fget_files+0x2a/0x420
[  455.714410][T11472]  ? __fget_files+0x3a6/0x420
[  455.714443][T11472]  __x64_sys_sendmsg+0x1b7/0x290
[  455.714483][T11472]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  455.714531][T11472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.714557][T11472]  do_syscall_64+0x174/0x580
[  455.714588][T11472]  ? clear_bhb_loop+0x40/0x90
[  455.714616][T11472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.714639][T11472] RIP: 0033:0x7ffbc861ce59
[  455.714661][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.714681][T11472] RSP: 002b:00007ffbc686e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  455.714705][T11472] RAX: ffffffffffffffda RBX: 00007ffbc8895fa0 RCX: 00007ffbc861ce59
[  455.714723][T11472] RDX: 0000000000009080 RSI: 00002000000002c0 RDI: 0000000000000003
[  455.714737][T11472] RBP: 00007ffbc686e090 R08: 0000000000000000 R09: 0000000000000000
[  455.714763][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  455.714777][T11472] R13: 00007ffbc8896038 R14: 00007ffbc8895fa0 R15: 00007ffc42455488
[  455.714811][T11472]  </TASK>
[  456.899048][ T6350] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110
[  456.957675][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  456.993851][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.063876][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.100315][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.135715][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.207109][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.243025][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.278088][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.314026][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.349068][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.419016][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.455212][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.525148][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.561266][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.631187][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.667172][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.703126][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.738250][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.808124][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.847307][    C1] radio-si470x 3-1:0.0: non-zero urb status (-71)
[  457.911473][ T6350] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -32
[  458.076727][ T6350] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  459.153535][   T32] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  459.339468][   T32] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  459.339504][   T32] usb 1-1: config 0 has no interface number 0
[  459.339564][   T32] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  459.339595][   T32] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  459.341946][   T32] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  459.341981][   T32] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  459.342004][   T32] usb 1-1: Manufacturer: syz
[  459.342020][   T32] usb 1-1: SerialNumber: syz
[  460.339256][   T32] usb 1-1: config 0 descriptor??
[  461.113714][ T6350] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  464.462785][ T6350] usb 2-1: device descriptor read/all, error -71
[  466.729171][   T37] usb 3-1: USB disconnect, device number 3
[  468.874609][   T32] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -110
[  469.903409][ T6350] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  471.077581][   T38] audit: type=1326 audit(1782015805.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.2.1794" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcd672ce59 code=0x7fc00000
[  472.754805][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  472.842751][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  472.852062][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  472.892831][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  472.901319][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  473.217481][   T37] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  473.480390][ T6350] usb 2-1: unable to get BOS descriptor or descriptor too short
[  473.481593][ T6350] usb 2-1: unable to read config index 0 descriptor/start: -71
[  473.481634][ T6350] usb 2-1: can't read configurations, error -71
[  473.504475][ T6350] usb usb2-port1: attempt power cycle
[  475.020945][   T60] Bluetooth: hci0: command tx timeout
[  477.173828][ T5613] Bluetooth: hci0: command tx timeout
[  479.004849][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  479.116941][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  479.129338][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  479.192026][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  479.227398][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  479.275707][   T60] Bluetooth: hci0: command tx timeout
[  480.203756][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  480.285805][T11517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'.
[  481.267218][T11530] tmpfs: Unsupported parameter 'huge'
[  481.353341][ T5613] Bluetooth: hci0: command tx timeout
[  481.433415][ T5613] Bluetooth: hci5: command tx timeout
[  485.451741][ T5613] Bluetooth: hci5: command tx timeout
[  488.659015][ T5613] Bluetooth: hci5: command tx timeout
[  490.747886][ T5613] Bluetooth: hci5: command tx timeout
[  492.364073][   T37] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  492.643572][   T37] usb 3-1: device descriptor read/64, error -71
[  497.482756][   T37] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  498.053439][ T5715] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  498.203329][ T5715] usb 2-1: Using ep0 maxpacket: 8
[  498.205863][ T5715] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  498.205929][ T5715] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  498.205957][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  498.205987][ T5715] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  498.206016][ T5715] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  498.206063][ T5715] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  498.206088][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.266787][   T37] usb 3-1: device descriptor read/64, error -71
[  498.460455][   T37] usb usb3-port1: attempt power cycle
[  498.528668][ T5715] usb 2-1: GET_CAPABILITIES returned 0
[  498.528726][ T5715] usbtmc 2-1:16.0: can't read capabilities
[  498.770160][T11558] FAULT_INJECTION: forcing a failure.
[  498.770160][T11558] name failslab, interval 1, probability 0, space 0, times 0
[  498.770203][T11558] CPU: 1 UID: 0 PID: 11558 Comm: syz.1.1808 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  498.770235][T11558] Tainted: [L]=SOFTLOCKUP
[  498.770244][T11558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  498.770258][T11558] Call Trace:
[  498.770267][T11558]  <TASK>
[  498.770277][T11558]  dump_stack_lvl+0xe8/0x150
[  498.770311][T11558]  should_fail_ex+0x46b/0x600
[  498.770350][T11558]  should_failslab+0xa8/0x100
[  498.770378][T11558]  __kmalloc_cache_noprof+0xa0/0x6d0
[  498.770404][T11558]  ? v9fs_init_fs_context+0x53/0x540
[  498.770430][T11558]  ? v9fs_init_fs_context+0x53/0x540
[  498.770462][T11558]  v9fs_init_fs_context+0x53/0x540
[  498.770490][T11558]  alloc_fs_context+0x9d5/0xd50
[  498.770530][T11558]  do_new_mount+0x187/0xd30
[  498.770551][T11558]  ? apparmor_capable+0x126/0x170
[  498.770585][T11558]  ? security_capable+0x7e/0x2c0
[  498.770620][T11558]  ? __pfx_do_new_mount+0x10/0x10
[  498.770642][T11558]  ? ns_capable+0x89/0xe0
[  498.770678][T11558]  ? path_mount+0x690/0x10e0
[  498.770699][T11558]  ? user_path_at+0xd4/0x160
[  498.770730][T11558]  ? user_path_at+0xd4/0x160
[  498.770759][T11558]  __se_sys_mount+0x31d/0x420
[  498.770789][T11558]  ? __pfx___se_sys_mount+0x10/0x10
[  498.770821][T11558]  ? __x64_sys_mount+0x20/0xc0
[  498.770843][T11558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.770870][T11558]  do_syscall_64+0x174/0x580
[  498.770898][T11558]  ? trace_irq_disable+0x3b/0x140
[  498.770927][T11558]  ? clear_bhb_loop+0x40/0x90
[  498.770956][T11558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  498.770980][T11558] RIP: 0033:0x7fc9be26ce59
[  498.771002][T11558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  498.771022][T11558] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  498.771048][T11558] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  498.771065][T11558] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000
[  498.771081][T11558] RBP: 00007fc9bc4be090 R08: 0000200000000180 R09: 0000000000000000
[  498.771097][T11558] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000002
[  498.771112][T11558] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  498.771159][T11558]  </TASK>
[  500.729322][   T37] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  500.745778][   T37] usb 3-1: Using ep0 maxpacket: 32
[  500.748456][   T37] usb 3-1: config 36 has an invalid interface number: 68 but max is 0
[  500.748485][   T37] usb 3-1: config 36 has no interface number 0
[  500.748535][   T37] usb 3-1: config 36 interface 68 altsetting 64 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  500.748570][   T37] usb 3-1: config 36 interface 68 has no altsetting 0
[  500.753318][   T37] usb 3-1: New USB device found, idVendor=1901, idProduct=0006, bcdDevice=7e.87
[  500.753350][   T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.753373][   T37] usb 3-1: Product: syz
[  500.753389][   T37] usb 3-1: Manufacturer: syz
[  500.753405][   T37] usb 3-1: SerialNumber: syz
[  503.793772][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  504.081762][   T37] usb 3-1: can't set config #36, error -71
[  504.098674][ T5715] usb 2-1: USB disconnect, device number 96
[  504.298544][   T37] usb 3-1: USB disconnect, device number 7
[  505.084212][T11566] FAULT_INJECTION: forcing a failure.
[  505.084212][T11566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  505.084252][T11566] CPU: 1 UID: 0 PID: 11566 Comm: syz.1.1811 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  505.084285][T11566] Tainted: [L]=SOFTLOCKUP
[  505.084293][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  505.084308][T11566] Call Trace:
[  505.084318][T11566]  <TASK>
[  505.084329][T11566]  dump_stack_lvl+0xe8/0x150
[  505.084363][T11566]  should_fail_ex+0x46b/0x600
[  505.084402][T11566]  _copy_from_user+0x2d/0xb0
[  505.084430][T11566]  do_pagemap_cmd+0x13d/0xc50
[  505.084473][T11566]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  505.084525][T11566]  ? __fget_files+0x2a/0x420
[  505.084553][T11566]  ? __fget_files+0x2a/0x420
[  505.084576][T11566]  ? __fget_files+0x3a6/0x420
[  505.084604][T11566]  ? __fget_files+0x2a/0x420
[  505.084632][T11566]  ? bpf_lsm_file_ioctl+0x9/0x20
[  505.084670][T11566]  ? __pfx_do_pagemap_cmd+0x10/0x10
[  505.084705][T11566]  __se_sys_ioctl+0xff/0x170
[  505.084735][T11566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.084762][T11566]  do_syscall_64+0x174/0x580
[  505.084791][T11566]  ? trace_irq_disable+0x3b/0x140
[  505.084819][T11566]  ? clear_bhb_loop+0x40/0x90
[  505.084846][T11566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  505.084869][T11566] RIP: 0033:0x7fc9be26ce59
[  505.084890][T11566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  505.084913][T11566] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  505.084939][T11566] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  505.084957][T11566] RDX: 0000200000000100 RSI: 00000000c0606610 RDI: 0000000000000003
[  505.084972][T11566] RBP: 00007fc9bc4be090 R08: 0000000000000000 R09: 0000000000000000
[  505.084987][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  505.085002][T11566] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  505.085038][T11566]  </TASK>
[  505.779814][T11570] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  506.643342][ T5715] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  506.839393][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  506.839442][ T5715] usb 3-1: config 0 interface 0 has no altsetting 0
[  506.839480][ T5715] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  506.839507][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.909708][ T5715] usb 3-1: config 0 descriptor??
[  506.937932][ T5715] gspca_main: spca501-2.14.0 probing 0000:0000
[  507.025279][ T6350] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  507.248109][T11568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  507.252942][T11568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  507.263373][ T6350] usb 2-1: device descriptor read/64, error -71
[  508.370569][ T5715] gspca_spca501: reg write: error -110
[  508.370594][ T5715] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00
[  508.370694][ T5715] spca501 3-1:0.0: probe with driver spca501 failed with error -22
[  509.019894][ T6350] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  510.300022][T11574] FAULT_INJECTION: forcing a failure.
[  510.300022][T11574] name failslab, interval 1, probability 0, space 0, times 0
[  510.300066][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.1.1815 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  510.300099][T11574] Tainted: [L]=SOFTLOCKUP
[  510.300109][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  510.300125][T11574] Call Trace:
[  510.300135][T11574]  <TASK>
[  510.300154][T11574]  dump_stack_lvl+0xe8/0x150
[  510.300190][T11574]  should_fail_ex+0x46b/0x600
[  510.300228][T11574]  should_failslab+0xa8/0x100
[  510.300258][T11574]  __kmalloc_noprof+0xfe/0x7e0
[  510.300284][T11574]  ? tomoyo_encode+0x28b/0x550
[  510.300312][T11574]  ? tomoyo_encode+0x28b/0x550
[  510.300343][T11574]  tomoyo_encode+0x28b/0x550
[  510.300376][T11574]  tomoyo_realpath_from_path+0x58d/0x5d0
[  510.300404][T11574]  ? tomoyo_domain+0xd7/0x130
[  510.300439][T11574]  ? tomoyo_path_number_perm+0x219/0x630
[  510.300475][T11574]  tomoyo_path_number_perm+0x246/0x630
[  510.300514][T11574]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  510.300549][T11574]  ? __lock_acquire+0x6b5/0x2d10
[  510.300582][T11574]  ? do_raw_spin_lock+0x12b/0x2f0
[  510.300644][T11574]  ? __fget_files+0x2a/0x420
[  510.300670][T11574]  ? __fget_files+0x2a/0x420
[  510.300693][T11574]  ? __fget_files+0x3a6/0x420
[  510.300716][T11574]  ? __fget_files+0x2a/0x420
[  510.300773][T11574]  security_file_ioctl+0xc3/0x2a0
[  510.300810][T11574]  __se_sys_ioctl+0x47/0x170
[  510.300861][T11574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.300888][T11574]  do_syscall_64+0x174/0x580
[  510.300917][T11574]  ? trace_irq_disable+0x3b/0x140
[  510.300946][T11574]  ? clear_bhb_loop+0x40/0x90
[  510.300975][T11574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.300998][T11574] RIP: 0033:0x7fc9be26ce59
[  510.301021][T11574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  510.301040][T11574] RSP: 002b:00007fc9bc4be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  510.301065][T11574] RAX: ffffffffffffffda RBX: 00007fc9be4e5fa0 RCX: 00007fc9be26ce59
[  510.301083][T11574] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003
[  510.301099][T11574] RBP: 00007fc9bc4be090 R08: 0000000000000000 R09: 0000000000000000
[  510.301114][T11574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.301128][T11574] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 00007fffe4d15ae8
[  510.301165][T11574]  </TASK>
[  510.569422][T11574] ERROR: Out of memory at tomoyo_realpath_from_path.
[  515.687441][  T825] usb 3-1: USB disconnect, device number 8
[  516.980655][T11592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'.
[  517.523404][  T825] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  518.275537][  T825] usb 3-1: Using ep0 maxpacket: 32
[  520.433043][  T825] usb 3-1: device descriptor read/all, error -71
[  521.806340][ T5613] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  521.810108][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1819'.
[  525.573372][  T825] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  525.738042][  T825] usb 3-1: unable to get BOS descriptor or descriptor too short
[  525.738807][  T825] usb 3-1: not running at top speed; connect to a high speed hub
[  525.740326][  T825] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  525.740353][  T825] usb 3-1: config 0 has no interface number 0
[  525.740403][  T825] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10
[  525.740434][  T825] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  525.740460][  T825] usb 3-1: config 0 interface 88 has no altsetting 0
[  525.808239][  T825] usb 3-1: language id specifier not provided by device, defaulting to English
[  525.838518][  T825] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  525.838553][  T825] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  525.838577][  T825] usb 3-1: Product: syz
[  525.838594][  T825] usb 3-1: SerialNumber: syz
[  526.179320][  T825] usb 3-1: config 0 descriptor??
[  527.253035][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  527.266787][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  527.378546][  T825] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input26
[  527.864119][T11612] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1822'.
[  528.952543][T11616] netlink: 'syz.2.1824': attribute type 10 has an invalid length.
[  528.952570][T11616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1824'.
[  529.739392][ T5613] Bluetooth: hci4: command 0x0406 tx timeout
[  530.082134][T11616] team0: entered promiscuous mode
[  530.082161][T11616] team_slave_0: entered promiscuous mode
[  530.082415][T11616] team_slave_1: entered promiscuous mode
[  530.105597][T11616] team0: entered allmulticast mode
[  530.105625][T11616] team_slave_0: entered allmulticast mode
[  530.105655][T11616] team_slave_1: entered allmulticast mode
[  530.108364][T11616] bridge0: port 3(team0) entered blocking state
[  530.110995][T11616] bridge0: port 3(team0) entered disabled state
[  530.213672][T11616] bridge0: port 3(team0) entered blocking state
[  530.213903][T11616] bridge0: port 3(team0) entered forwarding state
[  533.925516][  T825] usb 3-1: USB disconnect, device number 11
[  537.074250][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  537.330634][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  537.519089][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  537.531554][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  537.862278][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  542.926443][ T5610] Bluetooth: hci1: command tx timeout
[  544.981000][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  545.390441][T11602] udevd[11602]: Error opening device "/dev/input/event4": No such file or directory
[  545.390588][T11602] udevd[11602]: Unable to EVIOCGABS device "/dev/input/event4"
[  545.390712][T11602] udevd[11602]: Unable to EVIOCGABS device "/dev/input/event4"
[  545.987261][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  546.009914][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  546.011354][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  546.012318][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  550.130759][ T5610] Bluetooth: hci1: command tx timeout
[  550.993463][ T5610] Bluetooth: hci2: command tx timeout
[  552.463348][ T5610] Bluetooth: hci1: command tx timeout
[  552.613127][  T825] usb 1-1: USB disconnect, device number 77
[  553.033426][ T5610] Bluetooth: hci2: command tx timeout
[  554.473382][ T5610] Bluetooth: hci1: command tx timeout
[  555.113378][ T5610] Bluetooth: hci2: command tx timeout
[  555.509310][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  555.619812][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  555.634867][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  555.754432][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  555.756956][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  557.243344][ T5610] Bluetooth: hci2: command tx timeout
[  557.913364][ T5610] Bluetooth: hci6: command tx timeout
[  558.001059][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  558.066612][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  558.080972][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  558.082501][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  558.109001][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  559.993416][ T5610] Bluetooth: hci6: command tx timeout
[  560.291825][T11497] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  560.314484][ T5610] Bluetooth: hci7: command tx timeout
[  562.180532][T11490] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR
[  562.533282][ T5610] Bluetooth: hci6: command tx timeout
[  562.533325][ T5610] Bluetooth: hci7: command tx timeout
[  564.553355][   T60] Bluetooth: hci7: command tx timeout
[  564.553394][   T60] Bluetooth: hci6: command tx timeout
[  569.607541][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  569.625854][ T5610] Bluetooth: hci7: command tx timeout
[  595.710314][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  595.784582][   T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  595.789499][   T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  595.818834][   T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  595.819926][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  598.431117][ T5610] Bluetooth: hci0: command tx timeout
[  600.473526][ T5610] Bluetooth: hci0: command tx timeout
[  601.056038][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  601.125379][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  601.131950][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  601.162574][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  601.201966][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  602.553349][   T60] Bluetooth: hci0: command tx timeout
[  603.353413][   T60] Bluetooth: hci3: command tx timeout
[  604.741835][   T60] Bluetooth: hci0: command tx timeout
[  605.474306][   T60] Bluetooth: hci3: command tx timeout
[  607.634730][   T60] Bluetooth: hci3: command tx timeout
[  610.071474][   T60] Bluetooth: hci3: command tx timeout
[  610.991382][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  611.046040][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  611.050855][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  611.052359][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  611.102789][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  613.273778][ T5610] Bluetooth: hci4: command tx timeout
[  615.939527][ T5610] Bluetooth: hci4: command tx timeout
[  617.672505][   T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  617.750741][   T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  617.764886][   T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  617.803702][   T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  617.810266][   T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  618.000716][   T60] Bluetooth: hci4: command tx timeout
[  621.001704][ T5610] Bluetooth: hci4: command tx timeout
[  621.001799][   T60] Bluetooth: hci5: command tx timeout
[  623.033974][   T60] Bluetooth: hci5: command tx timeout
[  625.673738][   T60] Bluetooth: hci5: command tx timeout
[  627.755153][   T60] Bluetooth: hci5: command tx timeout
[  629.935912][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  643.871023][ T7852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.831737][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  656.912954][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  656.959829][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  656.982635][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  657.028147][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  659.193670][   T60] Bluetooth: hci1: command tx timeout
[  661.206056][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  661.271518][ T5610] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  661.275876][ T5613] Bluetooth: hci1: command tx timeout
[  661.321206][ T5610] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  661.381652][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  661.421196][ T5610] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  664.640076][T11695] bridge0: port 1(bridge_slave_0) entered blocking state
[  664.640420][T11695] bridge0: port 1(bridge_slave_0) entered disabled state
[  664.640819][T11695] bridge_slave_0: entered allmulticast mode
[  664.673327][T11695] bridge_slave_0: entered promiscuous mode
[  664.711146][ T5610] Bluetooth: hci1: command tx timeout
[  664.711859][ T5610] Bluetooth: hci2: command tx timeout
[  665.375860][T11695] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.376524][T11695] bridge0: port 2(bridge_slave_1) entered disabled state
[  665.376895][T11695] bridge_slave_1: entered allmulticast mode
[  665.422400][T11695] bridge_slave_1: entered promiscuous mode
[  666.796840][   T60] Bluetooth: hci2: command tx timeout
[  666.796880][   T60] Bluetooth: hci1: command tx timeout
[  667.695724][T11687] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.696084][T11687] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.724710][T11687] bridge_slave_0: entered allmulticast mode
[  667.956569][T11687] bridge_slave_0: entered promiscuous mode
[  668.940953][T11695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  669.076404][ T5610] Bluetooth: hci2: command tx timeout
[  670.027751][T11687] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.104341][T11687] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.104725][T11687] bridge_slave_1: entered allmulticast mode
[  670.131777][T11687] bridge_slave_1: entered promiscuous mode
[  671.113331][ T5610] Bluetooth: hci2: command tx timeout
[  672.516244][T11695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  674.482431][T11695] team0: Port device team_slave_0 added
[  674.767266][T11695] team0: Port device team_slave_1 added
[  675.032530][   T60] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  675.168621][   T60] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  675.184393][   T60] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  675.221485][   T60] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  675.237310][   T60] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  677.683375][   T60] Bluetooth: hci6: command tx timeout
[  679.699632][ T5610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  679.756423][ T5613] Bluetooth: hci6: command tx timeout
[  679.769357][ T5610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  679.781784][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  679.817850][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  679.821043][ T5610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  681.833288][ T5610] Bluetooth: hci6: command tx timeout
[  682.073303][ T5610] Bluetooth: hci0: command tx timeout
[  684.331618][ T5610] Bluetooth: hci6: command tx timeout
[  684.331659][ T5610] Bluetooth: hci0: command tx timeout
[  686.329090][T11695] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.329111][T11695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.329142][T11695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  687.048395][ T5610] Bluetooth: hci0: command tx timeout
[  689.205985][ T5610] Bluetooth: hci0: command tx timeout
[  691.360230][ T1341] ieee802154 phy1 wpan1: encryption failed: -22
[  720.724920][   T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  720.769232][   T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  720.801523][   T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  720.803030][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  720.829180][   T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  722.954203][ T5610] Bluetooth: hci3: command tx timeout
[  723.040470][   T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  723.099100][   T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  723.110577][   T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  723.140536][   T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  723.141728][   T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  726.335074][   T60] Bluetooth: hci4: command tx timeout
[  726.335881][ T5610] Bluetooth: hci3: command tx timeout
[  728.393913][   T60] Bluetooth: hci4: command tx timeout
[  728.399803][ T5610] Bluetooth: hci3: command tx timeout
[  730.772131][ T5610] Bluetooth: hci3: command tx timeout
[  730.772180][ T5610] Bluetooth: hci4: command tx timeout
[  733.807881][   T60] Bluetooth: hci4: command tx timeout
[  740.593056][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  740.661747][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  740.713549][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  740.810454][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  740.811396][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  741.235120][   T60] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  741.301460][   T60] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  741.350362][   T60] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  741.383247][   T60] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  741.420910][   T60] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  743.193618][ T5610] Bluetooth: hci5: command tx timeout
[  743.838681][ T5610] Bluetooth: hci7: command tx timeout
[  745.273522][ T5610] Bluetooth: hci5: command tx timeout
[  745.913661][ T5610] Bluetooth: hci7: command tx timeout
[  747.353853][ T5610] Bluetooth: hci5: command tx timeout
[  747.993467][ T5610] Bluetooth: hci7: command tx timeout
[  748.953666][   T39] INFO: task syz.1.1489:10343 blocked for more than 144 seconds.
[  748.953698][   T39]       Tainted: G             L      syzkaller #0
[  748.953712][   T39]       Blocked by coredump.
[  748.953721][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  748.953754][   T39] task:syz.1.1489      state:D stack:25528 pid:10343 tgid:10343 ppid:5608   task_flags:0x40044c flags:0x00080003
[  748.953846][   T39] Call Trace:
[  748.953856][   T39]  <TASK>
[  748.953873][   T39]  __schedule+0x172b/0x5550
[  748.953910][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  748.953970][   T39]  ? __pfx___schedule+0x10/0x10
[  748.954015][   T39]  rt_mutex_schedule+0x76/0xf0
[  748.954048][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  748.954131][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  748.954158][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  748.954183][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  748.954219][   T39]  ? rcu_barrier+0x4c/0x580
[  748.954248][   T39]  ? rcu_barrier+0x4c/0x580
[  748.954277][   T39]  ? rcu_barrier+0x4c/0x580
[  748.954299][   T39]  mutex_lock_nested+0x168/0x1d0
[  748.954335][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  748.954363][   T39]  rcu_barrier+0x4c/0x580
[  748.954397][   T39]  netdev_run_todo+0x2ff/0x12c0
[  748.954434][   T39]  ? rtnl_is_locked+0x9/0x20
[  748.954469][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  748.954503][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  748.954540][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  748.954578][   T39]  ? netdev_state_change+0x1ca/0x220
[  748.954607][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  748.954633][   T39]  tun_chr_close+0x13f/0x1c0
[  748.954660][   T39]  __fput+0x461/0xa70
[  748.954697][   T39]  task_work_run+0x1d9/0x270
[  748.954731][   T39]  ? __pfx_task_work_run+0x10/0x10
[  748.954774][   T39]  ? do_exit+0x70a/0x22c0
[  748.954799][   T39]  ? kmem_cache_free+0x187/0x6c0
[  748.954826][   T39]  ? put_net+0x191/0x260
[  748.954857][   T39]  ? do_exit+0x70a/0x22c0
[  748.954889][   T39]  do_exit+0x70f/0x22c0
[  748.955168][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  748.955208][   T39]  ? __pfx_do_exit+0x10/0x10
[  748.955234][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  748.955258][   T39]  ? reacquire_held_locks+0x104/0x190
[  748.955293][   T39]  ? rt_spin_lock+0x1e0/0x400
[  748.955329][   T39]  do_group_exit+0x21b/0x2d0
[  748.955359][   T39]  ? rt_spin_unlock+0x160/0x200
[  748.955386][   T39]  get_signal+0x1284/0x1330
[  748.955442][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  748.955470][   T39]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  748.955499][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  748.955534][   T39]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  748.955571][   T39]  exit_to_user_mode_loop+0x104/0x710
[  748.955601][   T39]  ? rcu_is_watching+0x15/0xb0
[  748.955636][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.955663][   T39]  do_syscall_64+0x353/0x580
[  748.955693][   T39]  ? trace_irq_disable+0x3b/0x140
[  748.955722][   T39]  ? clear_bhb_loop+0x40/0x90
[  748.955751][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.955789][   T39] RIP: 0033:0x7fc9be22d68e
[  748.955812][   T39] RSP: 002b:00007fc9bc4bdf58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  748.955838][   T39] RAX: fffffffffffffdfc RBX: 00007fc9bc4be6c0 RCX: 00007fc9be22d68e
[  748.955858][   T39] RDX: 00007fc9bc4bdfb0 RSI: 0000000000000000 RDI: 0000000000000000
[  748.955874][   T39] RBP: 00007fc9be302e6f R08: 0000000000000000 R09: 0000000000000000
[  748.955890][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  748.955906][   T39] R13: 00007fc9be4e6038 R14: 00007fc9be4e5fa0 R15: 0000000000000000
[  748.955943][   T39]  </TASK>
[  748.955965][   T39] INFO: task syz-executor:10928 blocked for more than 144 seconds.
[  748.955994][   T39]       Tainted: G             L      syzkaller #0
[  748.956008][   T39]       Blocked by coredump.
[  748.956016][   T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  748.956028][   T39] task:syz-executor    state:D stack:20640 pid:10928 tgid:10928 ppid:1      task_flags:0x40054c flags:0x00080003
[  748.956101][   T39] Call Trace:
[  748.956110][   T39]  <TASK>
[  748.956124][   T39]  __schedule+0x172b/0x5550
[  748.956153][   T39]  ? __lock_acquire+0x6b5/0x2d10
[  748.956210][   T39]  ? __pfx___schedule+0x10/0x10
[  748.956254][   T39]  rt_mutex_schedule+0x76/0xf0
[  748.956286][   T39]  rt_mutex_slowlock_block+0x505/0x670
[  748.956344][   T39]  rt_mutex_slowlock+0x2dc/0x780
[  748.956370][   T39]  ? rt_mutex_slowlock+0x1fd/0x780
[  748.956414][   T39]  ? __pfx_rt_mutex_slowlock+0x10/0x10
[  748.956450][   T39]  ? rcu_barrier+0x4c/0x580
[  748.956478][   T39]  ? rcu_barrier+0x4c/0x580
[  748.956507][   T39]  ? rcu_barrier+0x4c/0x580
[  748.956528][   T39]  mutex_lock_nested+0x168/0x1d0
[  748.956563][   T39]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  748.956590][   T39]  rcu_barrier+0x4c/0x580
[  748.956657][   T39]  netdev_run_todo+0x2ff/0x12c0
[  748.956694][   T39]  ? rtnl_is_locked+0x9/0x20
[  748.956729][   T39]  ? __pfx_netdev_run_todo+0x10/0x10
[  748.956772][   T39]  ? kasan_quarantine_put+0xbb/0x1f0
[  748.956810][   T39]  ? lockdep_hardirqs_on+0x7a/0x110
[  748.956848][   T39]  ? netdev_state_change+0x1ca/0x220
[  748.956877][   T39]  ? __pfx_tun_chr_close+0x10/0x10
[  748.956904][   T39]  tun_chr_close+0x13f/0x1c0
[  748.956930][ [  748.956930][   T39]  __fput+0x461/0xa70
[  748.956967][   T39]  task_work_run+0x1d9/0x270
[  748.957000][   T39]  ? __pfx_task_work_run+0x10/0x10
[  748.957030][   T39]  ? do_exit+0x70a/0x22c0
[  748.957055][   T39]  ? kmem_cache_free+0x187/0x6c0
[  748.957080][   T39]  ? put_net+0x191/0x260
[  748.957113][   T39]  ? do_exit+0x70a/0x22c0
[  748.957146][   T39]  do_exit+0x70f/0x22c0
[  748.957177][   T39]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  748.957212][   T39]  ? __pfx_do_exit+0x10/0x10
[  748.957237][   T39]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  748.957261][   T39]  ? reacquire_held_locks+0x104/0x190
[  748.957296][   T39]  ? rt_spin_lock+0x1e0/0x400
[  748.957332][   T39]  do_group_exit+0x21b/0x2d0
[  748.957360][   T39]  ? rt_spin_unlock+0x160/0x200
[  748.957387][   T39]  get_signal+0x1284/0x1330
[  748.957443][   T39]  arch_do_signal_or_restart+0xbc/0x840
[  748.957470][   T39]  ? __pfx___x64_sys_wait4+0x10/0x10
[  748.957502][   T39]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  748.957549][   T39]  exit_to_user_mode_loop+0x104/0x710
[  748.957579][   T39]  ? rcu_is_watching+0x15/0xb0
[  748.957616][   T39]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.957643][   T39]  do_syscall_64+0x353/0x580
[  748.957673][   T39]  ? trace_irq_disable+0x3b/0x140
[  748.957702][   T39]  ? clear_bhb_loop+0x40/0x90
[  748.957732][   T39]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  748.957756][   T39] RIP: 0033:0x7efcd66ed68e
[  748.957790][   T39] RSP: 002b:00007ffc73d8eac8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  748.957814][   T39] RAX: fffffffffffffe00 RBX: 0000555590588500 RCX: 00007efcd66ed68e
[  748.957832][   T39] RDX: 0000000040000000 RSI: 00007ffc73d8eb6c RDI: ffffffffffffffff
[  748.957850][   T39] RBP: 00007ffc73d8eb6c R08: 0000000000000000 R09: 0000000000000000
[  748.957865][   T39] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c
[  748.957881][   T39] R13: 000055559059ba00 R14: 0000000000082635 R15: 00007ffc73d8ebc0
[  748.957917][   T39]  </TASK>
[  748.957981][   T39] 
[  748.957981][   T39] Showing all locks held in the system:
[  748.958073][   T39] 3 locks held by kworker/u8:1/13:
[  748.958123][   T39]  #0: ffff888032a0f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  748.958281][   T39]  #1: ffffc90000127c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  748.958349][   T39]  #2: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  748.958411][   T39] 5 locks held by ktimers/0/16:
[  748.958424][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  748.958490][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  748.958554][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  748.958608][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  748.958667][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  748.958733][   T39] 4 locks held by ksoftirqd/1/31:
[  748.958747][   T39]  #0: ffffffff8e261520 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  748.958876][   T39]  #1: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420
[  748.958942][   T39]  #2: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60
[  748.958996][   T39]  #3: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0
[  748.959065][   T39] 1 lock held by khungtaskd/39:
[  748.959079][   T39]  #0: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  748.959140][   T39] 3 locks held by kworker/u8:7/155:
[  748.959155][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  748.959220][   T39]  #1: ffffc9000393fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  748.959288][   T39]  #2: ffff888060e908d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xbe/0x440
[  748.959369][   T39] 2 locks held by getty/5361:
[  748.959383][   T39]  #0: ffff8880367cc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  748.959441][   T39]  #1: ffffc90003cb62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x465/0x1490
[  748.959511][   T39] 6 locks held by kworker/u8:16/7852:
[  748.959525][   T39]  #0: ffff88801be9e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  748.959589][   T39]  #1: ffffc9001b2efc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  748.959653][   T39]  #2: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  748.959709][   T39]  #3: ffff88802b491160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  748.959783][   T39]  #4: ffff88803aaac310 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  748.959855][   T39]  #5: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.959910][   T39] 2 locks held by kworker/u8:24/8238:
[  748.959923][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  748.959989][   T39]  #1: ffffc9001b977c40 ((work_completion)(&(&mrt->work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  748.960057][   T39] 2 locks held by kworker/u8:25/8240:
[  748.960071][   T39]  #0: ffff88801ae94138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630
[  748.960138][   T39]  #1: ffffc9001b997c40 ((work_completion)(&(&mrt->work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630
[  748.960205][   T39] 1 lock held by syz.1.1489/10343:
[  748.960219][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960276][   T39] 1 lock held by syz-executor/10928:
[  748.960290][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960346][   T39] 1 lock held by syz.4.1788/11466:
[  748.960365][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960420][   T39] 1 lock held by syz-executor/11490:
[  748.960433][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960488][   T39] 1 lock held by syz-executor/11497:
[  748.960502][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960556][   T39] 1 lock held by syz-executor/11673:
[  748.960570][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960624][   T39] 1 lock held by syz-executor/11680:
[  748.960638][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960691][   T39] 1 lock held by syz-executor/11687:
[  748.960704][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960758][   T39] 1 lock held by syz-executor/11695:
[  748.960783][   T39]  #0: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.960839][   T39] 1 lock held by syz-executor/11739:
[  748.960852][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0
[  748.960907][   T39] 2 locks held by syz-executor/11748:
[  748.960921][   T39]  #0: ffff88805e124f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x22a/0x5b0
[  748.960979][   T39]  #1: ffff88805e1240b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x67c/0x1150
[  748.961046][   T39] 2 locks held by syz-executor/11779:
[  748.961060][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  748.961113][   T39]  #1: ffffffff8e3d1470 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  748.961168][   T39] 5 locks held by syz-executor/11786:
[  748.961182][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  748.961234][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x940
[  748.961289][   T39]  #2: ffff88802667cd80 (&net->mpls.platform_mutex){+.+.}-{4:4}, at: mpls_dev_notify+0x78/0xd10
[  748.961351][   T39]  #3: ffffffff8e512450 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60
[  748.961416][   T39]  #4: ffffffff8e3cb2a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa6/0x2550
[  748.961481][   T39] 2 locks held by syz-executor/11808:
[  748.961495][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  748.961548][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[  748.961603][   T39] 2 locks held by syz-executor/11815:
[  748.961616][   T39]  #0: ffffffff8f7a1620 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  748.961668][   T39]  #1: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x850
[  748.961725][   T39] 1 lock held by syz-executor/11839:
[  748.961738][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  748.961815][   T39] 1 lock held by syz-executor/11843:
[  748.961830][   T39]  #0: ffffffff8f7b0bb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  748.961894][   T39] 
[  748.961977][   T39] =============================================
[  748.961977][   T39] 
[  748.962025][   T39] NMI backtrace for cpu 1
[  748.962047][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  748.962078][   T39] Tainted: [L]=SOFTLOCKUP
[  748.962087][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  748.962102][   T39] Call Trace:
[  748.962111][   T39]  <TASK>
[  748.962122][   T39]  dump_stack_lvl+0xe8/0x150
[  748.962153][   T39]  nmi_cpu_backtrace+0x274/0x2d0
[  748.962178][   T39]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  748.962208][   T39]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  748.962235][   T39]  sys_info+0x135/0x170
[  748.962268][   T39]  watchdog+0xfd3/0x1030
[  748.962305][   T39]  ? watchdog+0x1c9/0x1030
[  748.962338][   T39]  kthread+0x388/0x470
[  748.962366][   T39]  ? __pfx_watchdog+0x10/0x10
[  748.962391][   T39]  ? __pfx_kthread+0x10/0x10
[  748.962419][   T39]  ret_from_fork+0x514/0xb70
[  748.962450][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  748.962478][   T39]  ? __switch_to+0xc79/0x1410
[  748.962504][   T39]  ? __pfx_kthread+0x10/0x10
[  748.962532][   T39]  ret_from_fork_asm+0x1a/0x30
[  748.962579][   T39]  </TASK>
[  748.962590][   T39] Sending NMI from CPU 1 to CPUs 0:
[  748.962631][    C0] NMI backtrace for cpu 0
[  748.962651][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  748.962678][    C0] Tainted: [L]=SOFTLOCKUP
[  748.962686][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  748.962698][    C0] RIP: 0010:stack_trace_consume_entry+0x12e/0x280
[  748.962726][    C0] Code: 80 00 49 89 e8 4c 89 e2 48 89 de 49 89 37 41 8b 18 41 0f b6 44 15 00 84 c0 0f 85 34 01 00 00 41 3b 1e 0f 92 c0 48 83 c4 18 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 c1 80 e1 07 80
[  748.962743][    C0] RSP: 0018:ffffc90000156d58 EFLAGS: 00000296
[  748.962761][    C0] RAX: 0000000000000001 RBX: ffffc90000156e40 RCX: 0000000000000000
[  748.962775][    C0] RDX: dffffc0000000000 RSI: ffffffff89a373f6 RDI: ffffc90000156e40
[  748.962791][    C0] RBP: 1ffff9200002adca R08: ffffc90000156e50 R09: 000000000000000a
[  748.962805][    C0] R10: ffffc90000156dd8 R11: ffffffff81b0ac80 R12: 0000000000000000
[  748.962819][    C0] R13: 1ffff9200002adc9 R14: ffffc90000156e48 R15: ffffc90000156f20
[  748.962834][    C0] FS:  0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000
[  748.962850][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  748.962863][    C0] CR2: 000055b152ffc678 CR3: 0000000033c94000 CR4: 00000000003526f0
[  748.962881][    C0] Call Trace:
[  748.962888][    C0]  <TASK>
[  748.962896][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  748.962920][    C0]  arch_stack_walk+0x10f/0x150
[  748.962948][    C0]  ? NF_HOOK+0x336/0x3c0
[  748.962974][    C0]  stack_trace_save+0xa9/0x100
[  748.962995][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  748.963016][    C0]  ? kfree+0x1c5/0x6c0
[  748.963045][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  748.963078][    C0]  kasan_save_track+0x3e/0x80
[  748.963095][    C0]  ? kasan_save_track+0x3e/0x80
[  748.963111][    C0]  ? kasan_save_free_info+0x46/0x50
[  748.963136][    C0]  ? __kasan_slab_free+0x5c/0x80
[  748.963156][    C0]  ? kmem_cache_free+0x187/0x6c0
[  748.963174][    C0]  ? nft_synproxy_eval_v4+0x352/0x4e0
[  748.963204][    C0]  ? nft_synproxy_do_eval+0x305/0x580
[  748.963231][    C0]  ? nft_do_chain+0x48d/0x1ae0
[  748.963249][    C0]  ? nft_do_chain_inet+0x360/0x4b0
[  748.963272][    C0]  ? nf_hook_slow+0xc5/0x220
[  748.963298][    C0]  ? NF_HOOK+0x21f/0x3c0
[  748.963320][    C0]  ? NF_HOOK+0x336/0x3c0
[  748.963364][    C0]  ? nft_synproxy_eval_v4+0x352/0x4e0
[  748.963393][    C0]  kasan_save_free_info+0x46/0x50
[  748.963417][    C0]  __kasan_slab_free+0x5c/0x80
[  748.963436][    C0]  kmem_cache_free+0x187/0x6c0
[  748.963456][    C0]  ? nft_synproxy_eval_v4+0x352/0x4e0
[  748.963506][    C0]  nft_synproxy_eval_v4+0x352/0x4e0
[  748.963538][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  748.963570][    C0]  ? nf_ip_checksum+0x13c/0x510
[  748.963591][    C0]  nft_synproxy_do_eval+0x305/0x580
[  748.963623][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  748.963655][    C0]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  748.963683][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  748.963710][    C0]  nft_do_chain+0x48d/0x1ae0
[  748.963736][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  748.963770][    C0]  ? __lock_acquire+0x6b5/0x2d10
[  748.963797][    C0]  nft_do_chain_inet+0x360/0x4b0
[  748.963816][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  748.963839][    C0]  ? NF_HOOK+0x9e/0x3c0
[  748.963862][    C0]  ? NF_HOOK+0x9e/0x3c0
[  748.963884][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  748.963903][    C0]  nf_hook_slow+0xc5/0x220
[  748.963931][    C0]  NF_HOOK+0x21f/0x3c0
[  748.963955][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  748.963979][    C0]  ? NF_HOOK+0x9e/0x3c0
[  748.964001][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  748.964023][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  748.964048][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  748.964075][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  748.964101][    C0]  NF_HOOK+0x336/0x3c0
[  748.964122][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  748.964147][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  748.964170][    C0]  ? NF_HOOK+0x9e/0x3c0
[  748.964192][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  748.964215][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  748.964242][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  748.964271][    C0]  ? process_backlog+0x271/0xc60
[  748.964289][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  748.964312][    C0]  process_backlog+0x569/0xc60
[  748.964332][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  748.964362][    C0]  __napi_poll+0xab/0x550
[  748.964392][    C0]  net_rx_action+0x696/0xe00
[  748.964418][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  748.964451][    C0]  handle_softirqs+0x1de/0x6d0
[  748.964483][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  748.964501][    C0]  run_ktimerd+0x69/0x100
[  748.964519][    C0]  smpboot_thread_fn+0x541/0xa50
[  748.964538][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  748.964561][    C0]  kthread+0x388/0x470
[  748.964581][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  748.964598][    C0]  ? __pfx_kthread+0x10/0x10
[  748.964619][    C0]  ret_from_fork+0x514/0xb70
[  748.964642][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  748.964663][    C0]  ? __switch_to+0xc79/0x1410
[  748.964682][    C0]  ? __pfx_kthread+0x10/0x10
[  748.964703][    C0]  ret_from_fork_asm+0x1a/0x30
[  748.964735][    C0]  </TASK>
[  749.433364][ T5610] Bluetooth: hci5: command tx timeout
[  749.537320][   T39] Kernel panic - not syncing: hung_task: blocked tasks
[  749.537349][   T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.537390][   T39] Tainted: [L]=SOFTLOCKUP
[  749.537399][   T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  749.537414][   T39] Call Trace:
[  749.537424][   T39]  <TASK>
[  749.537436][   T39]  vpanic+0x56c/0xa60
[  749.537476][   T39]  ? __pfx___schedule+0x10/0x10
[  749.537504][   T39]  ? __pfx_vpanic+0x10/0x10
[  749.537549][   T39]  panic+0xc5/0xd0
[  749.537581][   T39]  ? __pfx_panic+0x10/0x10
[  749.537616][   T39]  ? preempt_schedule_thunk+0x16/0x40
[  749.537660][   T39]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  749.537690][   T39]  watchdog+0x102c/0x1030
[  749.537727][   T39]  ? watchdog+0x1c9/0x1030
[  749.537762][   T39]  kthread+0x388/0x470
[  749.537789][   T39]  ? __pfx_watchdog+0x10/0x10
[  749.537815][   T39]  ? __pfx_kthread+0x10/0x10
[  749.537844][   T39]  ret_from_fork+0x514/0xb70
[  749.537876][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  749.537904][   T39]  ? __switch_to+0xc79/0x1410
[  749.537931][   T39]  ? __pfx_kthread+0x10/0x10
[  749.537959][   T39]  ret_from_fork_asm+0x1a/0x30
[  749.538008][   T39]  </TASK>
[  749.538550][   T39] Kernel Offset: disabled