last executing test programs:

8.095496645s ago: executing program 4 (id=1481):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0x0)

6.968748049s ago: executing program 1 (id=1485):
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000047000701ec560dbbffffffff017c"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80)

6.866063629s ago: executing program 4 (id=1486):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = syz_open_dev$loop(&(0x7f0000000480), 0x653, 0x29100)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r3, 0x1, 0x4070bd2b, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x18)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
close(r6)
recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r8 = syz_open_procfs(0x0, &(0x7f0000000040))
readv(r8, &(0x7f0000000100)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1)
connect$bt_rfcomm(r7, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000017c0)={'wlan1\x00'})
getpeername(r7, 0x0, &(0x7f0000000080))
setsockopt(r1, 0x84, 0x19, &(0x7f00000002c0)="1a00000002000000", 0x8)
ioctl$BLKFLSBUF(r0, 0x1261, 0x0)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f00000000c0))
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x74, 0x30, 0x1, 0x10, 0x3, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x6, 0x0, 0x200000}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000100)=@qipcrtr, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/18, 0x12}, {&(0x7f00000001c0)=""/24, 0x18}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f00000004c0)=""/83, 0x53}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000000580)=""/246, 0xf6}, {&(0x7f0000000680)=""/34, 0x22}], 0x9, &(0x7f0000000780)=""/4096, 0x1000}, 0x40000000)

6.770287494s ago: executing program 1 (id=1490):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50ab2, 0x24823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r1 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000000)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000500)={{}, {0x0, 0x989680}}, 0x0)
timer_getoverrun(r2)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50)
r5 = socket(0xa, 0x801, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r6=>r4}, './file0\x00'})
ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f00000002c0)={0xffffffffffffffff})
getsockopt(r5, 0x29, 0x5, 0x0, &(0x7f0000001ffc))
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00"/12, @ANYRES32=r4, @ANYBLOB="ff0f000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000af2266f9000000000000000000000000000000000000000000f0fbff4a5cd1d1d8da88a11083f4f78b25598fcf61c05f8537d8c1eaa5b79309b5c964968d2e9aa443ea6462659c564aece677b9c269c923d6672fe48c6c30b39b544f1e659bc9d1473115f7fb8bdcdb817ab278c790b7da45a43f9af7a76391d8759369a286007ba11941bd54cd014aa82593839012211ae426dec4a55d6af7d6d2"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={<r8=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x105, @empty, 0xa098}, {0xa, 0x4ea6, 0x9, @mcast1, 0x4}, r8, 0x8001}}, 0x48)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
writev(r7, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10)
openat$kvm(0xffffffffffffff9c, 0xfffffffffffffffd, 0x200, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_sfeatures={0x51, 0x1, [{0x8, 0x2}]}})
bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r11, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10)

5.682016451s ago: executing program 4 (id=1502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb012018000000000000004000000040000000020000000000000000000009030000000000000000000089010500000008000000000000000000000d000000000000000000000003000000000100000002000000000000000000f71d4429c035081396c0c2a37b8ebb1ef224e8f0ff8ae033759bc9ed056f0560fc8e7554236d91ff4fb786f89f1c3a5d53ac063d4b4a5afd54bd8b0661f4214bf158620a22e6a05ee7638b0e9ea56eb96b095e3828ed476f7f923ac8622c9085e62aff609936a5ad226543de84ceb9457e146f9604a27c71104d8f9e1b27b20c6a437a4f452b8df7191ee55ad0cf5537e624dea4574eb7dc997c", @ANYBLOB, @ANYRES32], 0x0, 0x5a}, 0x28)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$unix(r2, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}})
set_mempolicy(0x3, 0x0, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
getrlimit(0x7, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="66baa10066edc4837960a756ee00000766ba420066ed6426420f2318c744240028000000c744240221d30000ff1c240fc79d000000000f01b20300000067440f22c5c4a22dbad0f345a7", 0x4a}], 0x1, 0x1f, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000ffffffffffffffe3000a14000000000a070000000000000000000200000090000000030a01020000000000000000020000060900010073797a30000000006d000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452b9a7d7000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0)

5.659547073s ago: executing program 1 (id=1504):
socket$nl_audit(0x10, 0x3, 0x9)
syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff)
setns(0xc9, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082294"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x25}, 0x94)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c00660000001190780a010101e000000100004e66fb089078"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884)
socket$netlink(0x10, 0x3, 0x0)
epoll_create1(0x80000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.890770876s ago: executing program 2 (id=1507):
r0 = fanotify_init(0x0, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = socket$inet(0x2, 0x1, 0x6)
bind(r2, &(0x7f0000000300)=@in={0x2, 0x4908, @loopback}, 0x10)
listen(r2, 0x5)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
r4 = socket$inet(0x2, 0x1, 0x6)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000019080)={{0x33, @multicast1, 0x4e24, 0x3, 'dh\x00', 0x12, 0x2, 0x78}, {@remote, 0x4e24, 0x2000, 0x0, 0x5}}, 0x44)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil)
r5 = syz_open_procfs(0x0, &(0x7f0000019240)='net/dev_mcast\x00')
pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
connect(r4, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000280)={'nat\x00', 0x0, 0x3, 0x11, [0x4, 0x100000001, 0x8, 0x8, 0x3, 0x7], 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000180)=""/17}, &(0x7f0000000380)=0x78)
accept(r2, 0x0, 0x0)
write(r4, &(0x7f0000000400)='PASV\r\n', 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)

4.490172833s ago: executing program 1 (id=1508):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x2)
fchdir(r2)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x9, 0x0, 0x70}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

4.03681618s ago: executing program 4 (id=1509):
timer_create(0x1, &(0x7f0000000040)={0x0, 0x3f, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000100)=<r0=>0x0)
timer_delete(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0)
syz_clone(0x80100, &(0x7f0000000000)="8af6e8675128937f03cf5e", 0xb, 0x0, &(0x7f0000000080), &(0x7f00000000c0)="80a594d7f18d83c2ea")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="250027bd7000fddbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="14005080050002000500000008000700000002"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48880)
socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/usb/usbmon/0s\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4040044}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_ifreq(r6, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_mtu=0x140000})
fanotify_init(0x200, 0x8000)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x80000)
splice(r9, 0x0, r11, 0x0, 0x38f9, 0x0)
splice(r10, 0x0, r9, 0x0, 0x7fffffffffffffff, 0x1)
write(r8, &(0x7f0000000040), 0xffffff4a)

4.029723214s ago: executing program 3 (id=1510):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40046f41, &(0x7f0000000180)={0xfffffffc, 0x0, 0x3f, 0x1, '\x00', 0x10003})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x2ffbb424}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', <r4=>0x0, 0x8, 0x7800, 0x3, 0x98, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x4d, 0x0, 0x1, [0xfffeffff]}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000380)=""/182, 0x2a, 0xb6, 0x1, 0x7}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000500)=""/249, 0xf9, <r6=>0x0, &(0x7f0000000600)=""/90, 0x5a}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf91c, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xb, 0x0, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x7, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x6, 0xd, 0x3, 0x1, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0x9, 0xb, 0x4, 0x4}, @alu={0x7, 0x1, 0x1, 0xb, 0x8, 0x20, 0x10}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x56, &(0x7f0000000240)=""/86, 0x41100, 0x4b, '\x00', r4, @fallback=0x9, r5, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x2, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r7], &(0x7f0000000840)=[{0x3, 0x4, 0x6, 0x7}, {0x0, 0x5, 0x5, 0x6}, {0x3, 0x1, 0x6, 0x6}, {0x35, 0x5, 0xd, 0x8}], 0x10, 0x7fff}, 0x94)
write(r0, &(0x7f0000000680)="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", 0xfc)

3.926398703s ago: executing program 3 (id=1512):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000280))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
r5 = socket$kcm(0x29, 0x2, 0x0)
close(r5)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x10}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000e0ffffff17110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf090000000000002609010000000000950000000000000018320000040000000000000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004040)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x2, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000))
setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f00000000c0), 0xfe11)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r1}, 0x20)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r10 = accept4(r9, 0x0, 0x0, 0x0)
sendmsg$alg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r10, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}], 0x1}, 0x3}], 0x1, 0x10100, 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901)
r12 = fspick(r11, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r12, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r12, 0x7, 0x0, 0x0, 0x0)

3.738219221s ago: executing program 3 (id=1515):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$clear(0x3, 0xfffffffffffffffd)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x0, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

3.677624734s ago: executing program 1 (id=1517):
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000200)={0x1ff, <r0=>0xffffffffffffffff, 0x80000})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x20048004)
r1 = fsopen(&(0x7f0000000300)='nfs4\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a580000000c0a3d0100000000000000150a0000060900020073797a31000000000900010073797a31000000002c0003801c0000840c00018006000100d10300000c000440000000002df31ab30c0000800800034000000002"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x4000801)
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a4})
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)
ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000380))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f00004bd000/0xe000)=nil, 0x3000, 0x2, 0x2})
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect(0x3, 0x3f, &(0x7f0000000a00)=ANY=[@ANYBLOB="12010002bcdf6a40240400787ef10102030109022d0001fe06003209045e1003"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0xfffffffffffffc7f, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdf}, 0x94)
socket$inet6(0xa, 0x80002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

3.63295314s ago: executing program 3 (id=1518):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000040)=0x401, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1e7", @ANYRESDEC], 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000080)={@any, 0x1})
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r3=>0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
io_uring_setup(0x7, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x34, r5, 0x1, 0x0, 0x0, {0x54}, [@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00075f12f5f5000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)

3.267534204s ago: executing program 2 (id=1522):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40046f41, &(0x7f0000000180)={0xfffffffc, 0x0, 0x3f, 0x1, '\x00', 0x10003})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x2ffbb424}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', <r4=>0x0, 0x8, 0x7800, 0x3, 0x98, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x4d, 0x0, 0x1, [0xfffeffff]}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000380)=""/182, 0x2a, 0xb6, 0x1, 0x7}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000500)=""/249, 0xf9, <r6=>0x0, &(0x7f0000000600)=""/90, 0x5a}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf91c, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xb, 0x0, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x7, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x6, 0xd, 0x3, 0x1, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0x9, 0xb, 0x4, 0x4}, @alu={0x7, 0x1, 0x1, 0xb, 0x8, 0x20, 0x10}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x56, &(0x7f0000000240)=""/86, 0x41100, 0x4b, '\x00', r4, @fallback=0x9, r5, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x2, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r7], &(0x7f0000000840)=[{0x3, 0x4, 0x6, 0x7}, {0x0, 0x5, 0x5, 0x6}, {0x3, 0x1, 0x6, 0x6}, {0x35, 0x5, 0xd, 0x8}], 0x10, 0x7fff}, 0x94)
write(r0, &(0x7f0000000680)="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", 0xfc)

3.150079012s ago: executing program 2 (id=1523):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f0000000400)=""/61, 0x3d}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f00000039c0)=""/4083, 0xff3}, {&(0x7f0000001a80)=""/234, 0xea}, {&(0x7f0000000340)=""/172, 0xac}], 0x7}, 0x22)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80)

3.05808683s ago: executing program 0 (id=1524):
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$rxrpc(0x21, 0x2, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
inotify_init1(0x80800)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$KDMKTONE(r0, 0x4b30, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r1, &(0x7f0000000000), 0xd)

2.938354277s ago: executing program 0 (id=1525):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0)=0x1, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x1, 0x4) (async)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10) (async, rerun: 64)
listen(r0, 0x5) (async, rerun: 64)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) (async)
ioprio_get$uid(0x3, 0xffffffffffffffff) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r2 = getpgrp(0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
r3 = getpid() (rerun: 64)
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) (async)
r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) (async, rerun: 64)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (rerun: 64)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r6, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
shutdown(r6, 0x1) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f00000001c0)={0x30000009}) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000004c0)=0x17)
r7 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000140)={0xc0, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$lan78xx(r7, 0x0, 0x0)
syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000340)={0x40, 0xa0}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.221587774s ago: executing program 0 (id=1526):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, 0x0, 0x4008804)
recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40010040)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket(0xa, 0x5, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
socket$inet6(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048004807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.146083869s ago: executing program 4 (id=1527):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = syz_open_dev$dvb_dvr(&(0x7f0000000080), 0x3, 0x4c0082)
close(r1)
openat$binfmt(0xffffff9c, r0, 0x41, 0x1ff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd}', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
syz_fuse_handle_req(r2, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x208000000000203, {0x7, 0x29, 0xdb56, 0x4040008, 0xfffd, 0x1a7a, 0x2, 0x1801, 0x0, 0x0, 0x100, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000db40)={0x78, 0x0, 0x1741, {0x1, 0x0, 0x0, {0x6, 0x2000000000007, 0xfffffffffffffffd, 0x7, 0x40000000000003, 0x3, 0xfffffffc, 0xc, 0xfffffffd, 0x6000, 0x8, 0x0, 0x0, 0x9244, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x300000000000000)

2.145678467s ago: executing program 2 (id=1528):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$clear(0x3, 0xfffffffffffffffd)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x0, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80045510, &(0x7f0000000040)={0x0, 0x200000})

2.144312869s ago: executing program 3 (id=1529):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xffffffffefffffff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000380)={0x8, 0xe5de, 0x2, {0xd, @sdr}})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x6, 0x7}, 0x50)
close(0x3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10)

2.071188413s ago: executing program 0 (id=1530):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb012018000000000000004000000040000000020000000000000000000009030000000000000000000089010500000008000000000000000000000d000000000000000000000003000000000100000002000000000000000000f71d4429c035081396c0c2a37b8ebb1ef224e8f0ff8ae033759bc9ed056f0560fc8e7554236d91ff4fb786f89f1c3a5d53ac063d4b4a5afd54bd8b0661f4214bf158620a22e6a05ee7638b0e9ea56eb96b095e3828ed476f7f923ac8622c9085e62aff609936a5ad226543de84ceb9457e146f9604a27c71104d8f9e1b27b20c6a437a4f452b8df7191ee55ad0cf5537e624dea4574eb7dc997c1be9", @ANYBLOB, @ANYRES32], 0x0, 0x5a}, 0x28)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$unix(r2, &(0x7f00000025c0)=@file={0x0, './file0\x00'}, 0x6e)
r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0xcf8, 0x34424752, 0x9, 0x0, 0x0, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}})
set_mempolicy(0x3, 0x0, 0x6)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1)
getrlimit(0x7, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000440)="66baa10066edc4837960a756ee00000766ba420066ed6426420f2318c744240028000000c744240221d30000ff1c240fc79d000000000f01b20300000067440f22c5c4a22dbad0f345a7", 0x4a}], 0x1, 0x1f, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001000000ffffffffffffffe3000a14000000000a070000000000000000000200000090000000030a01020000000000000000020000060900010073797a30000000006d000300fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4999bf4d277be1203e812a25bea54f1839749e2fcf0c6c1bb457b5bfa52e41edd07d452b9a7d7000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0)

1.147915626s ago: executing program 3 (id=1531):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0xfffffffc, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x800006, 0x102, 0x1, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x4, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x7, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x81, 0x0, 0x2, 0x3, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x0, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x100, 0x2, 0x2f, 0xe, 0x312, 0xffffffff, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x0, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x5f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x1, 0x3, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0xb8, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x800001ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x7, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x8, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0x7, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x4, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x7, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
r3 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0x4c, 0x3, 0x3}, @ra={0x94, 0x4, 0x1}]}}}], 0x38}, 0x200040c4)

1.089893551s ago: executing program 0 (id=1532):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff)
close(r0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
mount$9p_fd(0x700, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})

1.087697916s ago: executing program 2 (id=1533):
r0 = socket(0x10, 0x3, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x8001, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40046f41, &(0x7f0000000180)={0xfffffffc, 0x0, 0x3f, 0x1, '\x00', 0x10003})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x2ffbb424}}, './file0\x00'})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000002c0)={'gre0\x00', <r4=>0x0, 0x8, 0x7800, 0x3, 0x98, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x64, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @local, {[@timestamp={0x44, 0x8, 0x4d, 0x0, 0x1, [0xfffeffff]}]}}}}})
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x8, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x61, 0x30, 0x30]}}, &(0x7f0000000380)=""/182, 0x2a, 0xb6, 0x1, 0x7}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f0000000500)=""/249, 0xf9, <r6=>0x0, &(0x7f0000000600)=""/90, 0x5a}}, 0x10)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xc, 0x2b, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf91c, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0xb, 0x0, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0xc, 0x7, 0x3, 0xfffffffffffffffc, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x6, 0xd, 0x3, 0x1, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x4, 0x1, 0xb, 0x9, 0xb, 0x4, 0x4}, @alu={0x7, 0x1, 0x1, 0xb, 0x8, 0x20, 0x10}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x56, &(0x7f0000000240)=""/86, 0x41100, 0x4b, '\x00', r4, @fallback=0x9, r5, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x2, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000800)=[r7], &(0x7f0000000840)=[{0x3, 0x4, 0x6, 0x7}, {0x0, 0x5, 0x5, 0x6}, {0x3, 0x1, 0x6, 0x6}, {0x35, 0x5, 0xd, 0x8}], 0x10, 0x7fff}, 0x94)
write(r0, &(0x7f0000000680)="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", 0xfc)

1.057689465s ago: executing program 1 (id=1534):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x14, &(0x7f00000003c0)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$clear(0x3, 0xfffffffffffffffd)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182)
ioctl$OCFS2_IOC_UNRESVSP64(r4, 0x4030582b, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x0, 0x2})
listen(r2, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)

854.008684ms ago: executing program 4 (id=1535):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

853.624067ms ago: executing program 0 (id=1536):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000040)=r0}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
r4 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NFC_CMD_GET_SE(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}}, 0x20004040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="8ebf", 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffa}, 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

0s ago: executing program 2 (id=1537):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000040)={0xa, {0x3, 0x4, 0x6, 0x3}, {0x7, 0x4, 0x1, 0x7fffffff}, {0x2, 0x5}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x5, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ldst={0x0, 0x0, 0x6, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @exit], &(0x7f0000000280)='GPL\x00', 0x4, 0xed, &(0x7f0000000100)=""/237, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94)
r2 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0))
ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000240)={0x60, 0x1, &(0x7f0000001000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, 0xc0000, 0x0, 0x2c, 0x0, 0x11, 0x30, 0x2e, 0x33})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00'/13], 0x48)
open(&(0x7f0000000200)='./file0\x00', 0x888c0, 0x43)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="83fcf3cfe85d06eeaa5eaf1b6d00", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

kernel console output (not intermixed with test programs):

T9741]  ? bpf_prog_alloc+0x2a/0x1a0
[  403.680629][ T9741]  bpf_prog_alloc+0x3c/0x1a0
[  403.680651][ T9741]  bpf_prog_load+0x7f8/0x1c00
[  403.680684][ T9741]  ? __pfx_bpf_prog_load+0x10/0x10
[  403.680724][ T9741]  __sys_bpf+0xd0d/0xd90
[  403.680760][ T9741]  ? __pfx___sys_bpf+0x10/0x10
[  403.680783][ T9741]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  403.680813][ T9741]  ? rt_mutex_slowunlock+0x219/0x460
[  403.680850][ T9741]  ? ksys_write+0x248/0x270
[  403.680876][ T9741]  ? __pfx_ksys_write+0x10/0x10
[  403.680904][ T9741]  __x64_sys_bpf+0xba/0xd0
[  403.680934][ T9741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.680955][ T9741]  do_syscall_64+0x174/0x580
[  403.680979][ T9741]  ? trace_irq_disable+0x3b/0x140
[  403.680998][ T9741]  ? clear_bhb_loop+0x40/0x90
[  403.681021][ T9741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.681040][ T9741] RIP: 0033:0x7fbd6058e0d9
[  403.681058][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.681074][ T9741] RSP: 002b:00007fbd5e7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  403.681095][ T9741] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  403.681109][ T9741] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  403.681121][ T9741] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  403.681133][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.681145][ T9741] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  403.681174][ T9741]  </TASK>
[  403.690638][ T9741] warn_alloc: 1 callbacks suppressed
[  403.690775][ T9741] syz.4.1202: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  403.690905][ T9741] CPU: 0 UID: 0 PID: 9741 Comm: syz.4.1202 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  403.690932][ T9741] Tainted: [L]=SOFTLOCKUP
[  403.690938][ T9741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  403.690950][ T9741] Call Trace:
[  403.690958][ T9741]  <TASK>
[  403.690967][ T9741]  dump_stack_lvl+0xe8/0x150
[  403.691006][ T9741]  warn_alloc+0x24c/0x270
[  403.691030][ T9741]  ? kasan_quarantine_put+0xbb/0x1f0
[  403.691052][ T9741]  ? __pfx_warn_alloc+0x10/0x10
[  403.691073][ T9741]  ? __get_vm_area_node+0x20b/0x300
[  403.691107][ T9741]  ? __get_vm_area_node+0x20b/0x300
[  403.691140][ T9741]  __vmalloc_node_range_noprof+0x37d/0x1730
[  403.691167][ T9741]  ? is_bpf_text_address+0x26/0x2b0
[  403.691206][ T9741]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  403.691225][ T9741]  ? is_bpf_text_address+0x26/0x2b0
[  403.691249][ T9741]  ? kernel_text_address+0xa5/0xe0
[  403.691276][ T9741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  403.691295][ T9741]  __vmalloc_noprof+0xd2/0x120
[  403.691314][ T9741]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  403.691337][ T9741]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  403.691357][ T9741]  ? bpf_prog_alloc+0x2a/0x1a0
[  403.691379][ T9741]  bpf_prog_alloc+0x3c/0x1a0
[  403.691401][ T9741]  bpf_prog_load+0x7f8/0x1c00
[  403.691433][ T9741]  ? __pfx_bpf_prog_load+0x10/0x10
[  403.691475][ T9741]  __sys_bpf+0xd0d/0xd90
[  403.691503][ T9741]  ? __pfx___sys_bpf+0x10/0x10
[  403.691524][ T9741]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  403.691563][ T9741]  ? rt_mutex_slowunlock+0x219/0x460
[  403.691600][ T9741]  ? ksys_write+0x248/0x270
[  403.691626][ T9741]  ? __pfx_ksys_write+0x10/0x10
[  403.691655][ T9741]  __x64_sys_bpf+0xba/0xd0
[  403.691683][ T9741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.691704][ T9741]  do_syscall_64+0x174/0x580
[  403.691728][ T9741]  ? trace_irq_disable+0x3b/0x140
[  403.691747][ T9741]  ? clear_bhb_loop+0x40/0x90
[  403.691770][ T9741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  403.691788][ T9741] RIP: 0033:0x7fbd6058e0d9
[  403.691807][ T9741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.691824][ T9741] RSP: 002b:00007fbd5e7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  403.691842][ T9741] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  403.691856][ T9741] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005
[  403.691868][ T9741] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  403.691880][ T9741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.691892][ T9741] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  403.691922][ T9741]  </TASK>
[  403.697000][ T9741] Mem-Info:
[  403.697016][ T9741] active_anon:211 inactive_anon:6603 isolated_anon:0
[  403.697016][ T9741]  active_file:9031 inactive_file:36925 isolated_file:0
[  403.697016][ T9741]  unevictable:768 dirty:238 writeback:0
[  403.697016][ T9741]  slab_reclaimable:11999 slab_unreclaimable:107724
[  403.697016][ T9741]  mapped:31073 shmem:1304 pagetables:1439
[  403.697016][ T9741]  sec_pagetables:0 bounce:0
[  403.697016][ T9741]  kernel_misc_reclaimable:0
[  403.697016][ T9741]  free:1317205 free_pcp:1435 free_cma:0
[  403.697069][ T9741] Node 0 active_anon:844kB inactive_anon:26412kB active_file:35816kB inactive_file:147700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124188kB dirty:952kB writeback:0kB shmem:3680kB kernel_stack:13860kB pagetables:5608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  403.698622][ T9741] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  403.698672][ T9741] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.699444][ T9741] lowmem_reserve[]: 0 2500 2502 2502 2502
[  403.699478][ T9741] Node 0 DMA32 free:1312824kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:844kB inactive_anon:26412kB active_file:35816kB inactive_file:147700kB unevictable:1536kB writepending:952kB zspages:852kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:5720kB local_pcp:3764kB free_cma:0kB
[  403.700365][ T5733] usb 2-1: Using ep0 maxpacket: 32
[  403.700909][ T9741] lowmem_reserve[]: 0 0 1 1 1
[  403.700943][ T9741] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB
[  403.701463][ T9741] lowmem_reserve[]: 0 0 0 0 0
[  403.701939][ T9741] Node 1 Normal free:3940636kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  403.702388][ T9741] lowmem_reserve[]: 0 0 0 0 0
[  403.702423][ T9741] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  403.703393][ T9741] Node 0 DMA32: 1044*4kB (UME) 735*8kB (UME) 632*16kB (UME) 495*32kB (UME) 394*64kB (ME) 254*128kB (UME) 144*256kB (UME) 75*512kB (UME) 
[  403.703874][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short
[  403.703882][ T9741] 21*1024kB (UME) 10*2048kB (M) 269*4096kB (UM) = 1312808kB
[  403.703923][ T9741] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  403.705153][ T9741] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 7*16kB (U) 6*32kB (U) 3*64kB 
[  403.705660][ T5733] usb 2-1: config 14 has an invalid interface number: 226 but max is 0
[  403.705685][ T5733] usb 2-1: config 14 has no interface number 0
[  403.705716][ T5733] usb 2-1: config 14 interface 226 has no altsetting 0
[  403.706066][ T9741] (U) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940636kB
[  403.706157][ T9741] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.706551][ T9741] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.706578][ T9741] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.706593][ T9741] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.706609][ T9741] 47274 total pagecache pages
[  403.706616][ T9741] 18 pages in swap cache
[  403.706623][ T9741] Free swap  = 122192kB
[  403.706630][ T9741] Total swap = 124996kB
[  403.706638][ T9741] 2097051 pages RAM
[  403.706645][ T9741] 0 pages HighMem/MovableOnly
[  403.707196][ T9741] 424834 pages reserved
[  403.707205][ T9741] 0 pages cma reserved
[  403.723375][ T5733] usb 2-1: language id specifier not provided by device, defaulting to English
[  403.727316][ T5733] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b
[  403.727346][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.727424][ T5733] usb 2-1: Product: syz
[  403.727439][ T5733] usb 2-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻
[  403.727462][ T5733] usb 2-1: SerialNumber: syz
[  404.081525][ T5735] usb 4-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32)
[  404.286085][ T5735] usb 4-1: Firmware: build 
[  404.501871][ T5735] usb 4-1: failed to fetch extended address, random address set
[  404.501903][ T5735] usb 4-1: atusb_probe: initialization failed, error = -524
[  404.502125][ T5735] atusb 4-1:0.0: probe with driver atusb failed with error -524
[  404.545829][   T31] usbhid 3-1:0.0: can't add hid device: -71
[  404.545954][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  404.651005][ T9750] vxcan1: tx drop: invalid da for name 0x00000000000000f5
[  404.793607][ T5735] usb 4-1: USB disconnect, device number 25
[  405.005223][ T5733] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  405.035635][ T9755] binder: 9753:9755 ioctl c0306201 200000000180 returned -22
[  405.807192][   T31] usb 3-1: USB disconnect, device number 21
[  405.821185][ T5733] usb 2-1: USB disconnect, device number 27
[  406.606358][ T9773] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  406.949875][ T9781] FAULT_INJECTION: forcing a failure.
[  406.949875][ T9781] name failslab, interval 1, probability 0, space 0, times 0
[  406.949910][ T9781] CPU: 0 UID: 0 PID: 9781 Comm: syz.0.1217 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  406.949936][ T9781] Tainted: [L]=SOFTLOCKUP
[  406.949943][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  406.949954][ T9781] Call Trace:
[  406.949962][ T9781]  <TASK>
[  406.949970][ T9781]  dump_stack_lvl+0xe8/0x150
[  406.950005][ T9781]  should_fail_ex+0x467/0x600
[  406.950040][ T9781]  should_failslab+0xa8/0x100
[  406.950066][ T9781]  kmem_cache_alloc_noprof+0xa4/0x650
[  406.950086][ T9781]  ? skb_clone+0x212/0x3a0
[  406.950141][ T9781]  ? skb_clone+0x212/0x3a0
[  406.950170][ T9781]  skb_clone+0x212/0x3a0
[  406.950199][ T9781]  __netlink_deliver_tap+0x413/0x860
[  406.950243][ T9781]  ? netlink_deliver_tap+0x2e/0x1b0
[  406.950270][ T9781]  netlink_deliver_tap+0x19c/0x1b0
[  406.950297][ T9781]  netlink_unicast+0x7b8/0x990
[  406.950330][ T9781]  netlink_sendmsg+0x813/0xb40
[  406.950364][ T9781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.950392][ T9781]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  406.950430][ T9781]  ? __kernel_text_address+0xd/0x30
[  406.950451][ T9781]  ? unwind_get_return_address+0x4d/0x90
[  406.950480][ T9781]  ? __pfx_netlink_sendmsg+0x10/0x10
[  406.950505][ T9781]  sock_sendmsg_nosec+0x13a/0x180
[  406.950538][ T9781]  ____sys_sendmsg+0x565/0x870
[  406.950563][ T9781]  ? __might_fault+0xaf/0x130
[  406.950596][ T9781]  ? __pfx_____sys_sendmsg+0x10/0x10
[  406.950630][ T9781]  ? import_iovec+0x73/0xa0
[  406.950658][ T9781]  ___sys_sendmsg+0x2a5/0x360
[  406.950683][ T9781]  ? __lock_acquire+0x683/0x2ce0
[  406.950715][ T9781]  ? __pfx____sys_sendmsg+0x10/0x10
[  406.950775][ T9781]  ? __fget_files+0x2a/0x420
[  406.950800][ T9781]  ? __fget_files+0x3a8/0x420
[  406.950836][ T9781]  __x64_sys_sendmsg+0x1b7/0x290
[  406.950865][ T9781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  406.950904][ T9781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.950923][ T9781]  do_syscall_64+0x174/0x580
[  406.950946][ T9781]  ? trace_irq_disable+0x3b/0x140
[  406.950966][ T9781]  ? clear_bhb_loop+0x40/0x90
[  406.950988][ T9781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.951008][ T9781] RIP: 0033:0x7f097112e0d9
[  406.951026][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.951043][ T9781] RSP: 002b:00007f096f365028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  406.951064][ T9781] RAX: ffffffffffffffda RBX: 00007f09713b6090 RCX: 00007f097112e0d9
[  406.951079][ T9781] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  406.951092][ T9781] RBP: 00007f096f365090 R08: 0000000000000000 R09: 0000000000000000
[  406.951104][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.951116][ T9781] R13: 00007f09713b6128 R14: 00007f09713b6090 R15: 00007ffe1f6786b8
[  406.951147][ T9781]  </TASK>
[  407.081092][ T9784] FAULT_INJECTION: forcing a failure.
[  407.081092][ T9784] name failslab, interval 1, probability 0, space 0, times 0
[  407.081127][ T9784] CPU: 0 UID: 0 PID: 9784 Comm: syz.4.1219 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  407.081154][ T9784] Tainted: [L]=SOFTLOCKUP
[  407.081161][ T9784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  407.081172][ T9784] Call Trace:
[  407.081180][ T9784]  <TASK>
[  407.081188][ T9784]  dump_stack_lvl+0xe8/0x150
[  407.081222][ T9784]  should_fail_ex+0x467/0x600
[  407.081257][ T9784]  should_failslab+0xa8/0x100
[  407.081281][ T9784]  kmem_cache_alloc_noprof+0xa4/0x650
[  407.081301][ T9784]  ? skb_clone+0x212/0x3a0
[  407.081323][ T9784]  ? skb_clone+0x212/0x3a0
[  407.081346][ T9784]  ? irqentry_exit+0x218/0x8f0
[  407.081375][ T9784]  skb_clone+0x212/0x3a0
[  407.081402][ T9784]  __netlink_deliver_tap+0x413/0x860
[  407.081438][ T9784]  ? netlink_deliver_tap+0x2e/0x1b0
[  407.081464][ T9784]  netlink_deliver_tap+0x19c/0x1b0
[  407.081490][ T9784]  netlink_unicast+0x7b8/0x990
[  407.081523][ T9784]  netlink_sendmsg+0x813/0xb40
[  407.081555][ T9784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.081581][ T9784]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  407.081611][ T9784]  ? __kernel_text_address+0xd/0x30
[  407.081630][ T9784]  ? unwind_get_return_address+0x4d/0x90
[  407.081654][ T9784]  ? __pfx_netlink_sendmsg+0x10/0x10
[  407.081678][ T9784]  sock_sendmsg_nosec+0x13a/0x180
[  407.081700][ T9784]  ____sys_sendmsg+0x565/0x870
[  407.081727][ T9784]  ? __might_fault+0xaf/0x130
[  407.081752][ T9784]  ? __pfx_____sys_sendmsg+0x10/0x10
[  407.081785][ T9784]  ? import_iovec+0x73/0xa0
[  407.081817][ T9784]  ___sys_sendmsg+0x2a5/0x360
[  407.081841][ T9784]  ? __lock_acquire+0x683/0x2ce0
[  407.081864][ T9784]  ? __pfx____sys_sendmsg+0x10/0x10
[  407.081921][ T9784]  ? __fget_files+0x2a/0x420
[  407.081940][ T9784]  ? __fget_files+0x3a8/0x420
[  407.081970][ T9784]  __x64_sys_sendmsg+0x1b7/0x290
[  407.081996][ T9784]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  407.082038][ T9784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.082058][ T9784]  do_syscall_64+0x174/0x580
[  407.082082][ T9784]  ? trace_irq_disable+0x3b/0x140
[  407.082102][ T9784]  ? clear_bhb_loop+0x40/0x90
[  407.082125][ T9784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  407.082144][ T9784] RIP: 0033:0x7fbd6058e0d9
[  407.082162][ T9784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  407.082177][ T9784] RSP: 002b:00007fbd5e7e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  407.082198][ T9784] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  407.082212][ T9784] RDX: 0000000000040044 RSI: 0000200000001200 RDI: 0000000000000003
[  407.082224][ T9784] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  407.082236][ T9784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  407.082247][ T9784] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  407.082277][ T9784]  </TASK>
[  407.360227][ T9793] netlink: 'syz.4.1223': attribute type 1 has an invalid length.
[  407.360251][ T9793] netlink: 'syz.4.1223': attribute type 2 has an invalid length.
[  407.660342][ T5844] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  407.660538][ T5720] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  407.661015][ T5735] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  407.821295][ T5844] usb 2-1: Using ep0 maxpacket: 32
[  407.821451][ T5735] usb 5-1: Using ep0 maxpacket: 16
[  407.824091][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0
[  407.824131][ T5735] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00
[  407.824214][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.826275][ T5720] usb 4-1: Using ep0 maxpacket: 32
[  407.828241][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.830398][ T5720] usb 4-1: unable to get BOS descriptor or descriptor too short
[  407.835257][ T5720] usb 4-1: config 14 has an invalid interface number: 226 but max is 0
[  407.835281][ T5720] usb 4-1: config 14 has no interface number 0
[  407.835311][ T5720] usb 4-1: config 14 interface 226 has no altsetting 0
[  407.839128][ T5844] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  407.839158][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.839226][ T5844] usb 2-1: Product: syz
[  407.839241][ T5844] usb 2-1: Manufacturer: syz
[  407.839255][ T5844] usb 2-1: SerialNumber: syz
[  407.891814][ T5720] usb 4-1: language id specifier not provided by device, defaulting to English
[  407.895845][ T5720] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b
[  407.895873][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.895893][ T5720] usb 4-1: Product: syz
[  407.895908][ T5720] usb 4-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻
[  407.895929][ T5720] usb 4-1: SerialNumber: syz
[  407.912107][ T5735] usb 5-1: config 0 descriptor??
[  407.924476][ T5844] usb 2-1: config 0 descriptor??
[  407.995276][ T5844] gs_usb 2-1:0.0: Required endpoints not found
[  408.205181][ T5720] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  408.209572][ T5582] usb 2-1: USB disconnect, device number 28
[  408.272849][ T5720] usb 4-1: USB disconnect, device number 26
[  408.379273][ T5735] usbhid 5-1:0.0: can't add hid device: -71
[  408.379393][ T5735] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  408.402680][ T5735] usb 5-1: USB disconnect, device number 45
[  408.604383][ T9804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.652987][ T9823] FAULT_INJECTION: forcing a failure.
[  409.652987][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  409.653016][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.4.1234 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  409.653036][ T9823] Tainted: [L]=SOFTLOCKUP
[  409.653042][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  409.653056][ T9823] Call Trace:
[  409.653062][ T9823]  <TASK>
[  409.653069][ T9823]  dump_stack_lvl+0xe8/0x150
[  409.653096][ T9823]  should_fail_ex+0x467/0x600
[  409.653123][ T9823]  _copy_to_user+0x31/0xb0
[  409.653142][ T9823]  simple_read_from_buffer+0xe1/0x170
[  409.653164][ T9823]  proc_fail_nth_read+0x1be/0x230
[  409.653203][ T9823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  409.653222][ T9823]  ? rw_verify_area+0x250/0x4d0
[  409.653241][ T9823]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  409.653262][ T9823]  vfs_read+0x219/0xa90
[  409.653286][ T9823]  ? __pfx_vfs_read+0x10/0x10
[  409.653305][ T9823]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  409.653325][ T9823]  ? lockdep_hardirqs_on+0x7a/0x110
[  409.653343][ T9823]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  409.653361][ T9823]  ? mutex_lock_nested+0x152/0x1d0
[  409.653376][ T9823]  ? fdget_pos+0x252/0x320
[  409.653397][ T9823]  ksys_read+0x156/0x270
[  409.653416][ T9823]  ? __pfx_ksys_read+0x10/0x10
[  409.653439][ T9823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.653454][ T9823]  do_syscall_64+0x174/0x580
[  409.653473][ T9823]  ? trace_irq_disable+0x3b/0x140
[  409.653487][ T9823]  ? clear_bhb_loop+0x40/0x90
[  409.653505][ T9823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  409.653519][ T9823] RIP: 0033:0x7fbd6054e90e
[  409.653534][ T9823] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  409.653546][ T9823] RSP: 002b:00007fbd5e7e5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  409.653563][ T9823] RAX: ffffffffffffffda RBX: 00007fbd5e7e66c0 RCX: 00007fbd6054e90e
[  409.653573][ T9823] RDX: 000000000000000f RSI: 00007fbd5e7e60a0 RDI: 0000000000000003
[  409.653582][ T9823] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  409.653591][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.653600][ T9823] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  409.653623][ T9823]  </TASK>
[  411.070305][ T5733] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  411.091134][ T5720] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  411.222342][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.222392][ T5733] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  411.222417][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.243533][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.243594][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  411.243619][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  411.243641][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  411.243681][ T5720] usb 3-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  411.243704][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.270662][ T5733] usb 4-1: config 0 descriptor??
[  411.282218][ T5720] usb 3-1: config 0 descriptor??
[  411.353511][ T9839] netlink: 'syz.0.1239': attribute type 1 has an invalid length.
[  411.353598][ T9839] netlink: 'syz.0.1239': attribute type 2 has an invalid length.
[  411.404824][ T9839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.419532][ T9839] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.478968][ T5733] usbhid 4-1:0.0: can't add hid device: -71
[  411.479090][ T5733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  411.513249][ T5733] usb 4-1: USB disconnect, device number 27
[  412.158308][ T5720] usbhid 3-1:0.0: can't add hid device: -71
[  412.158431][ T5720] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  412.183450][ T5720] usb 3-1: USB disconnect, device number 22
[  412.260358][ T5733] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  412.413143][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  412.413193][ T5733] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  412.413219][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  412.463210][ T5733] usb 4-1: config 0 descriptor??
[  412.957292][ T9868] Invalid option length (1047669) for dns_resolver key
[  413.792339][ T5733] aiptek 4-1:0.0: Aiptek using 400 ms programming speed
[  413.809889][ T5733] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  413.852800][ T6827] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  414.104869][ T6827] usb 2-1: config 0 has an invalid interface number: 117 but max is 0
[  414.104898][ T6827] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  414.104918][ T6827] usb 2-1: config 0 has no interface number 0
[  414.105022][ T6827] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  414.105046][ T6827] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  414.163135][ T6827] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  414.163167][ T6827] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.163245][ T6827] usb 2-1: Product: syz
[  414.163261][ T6827] usb 2-1: Manufacturer: syz
[  414.163276][ T6827] usb 2-1: SerialNumber: syz
[  414.419176][ T6827] usb 2-1: config 0 descriptor??
[  414.587529][ T9880] netlink: 'syz.4.1254': attribute type 1 has an invalid length.
[  414.587649][ T9880] netlink: 'syz.4.1254': attribute type 2 has an invalid length.
[  415.377946][ T5733] usb 4-1: USB disconnect, device number 28
[  415.378037][    C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  415.430290][ T5582] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  415.580351][ T5582] usb 5-1: Using ep0 maxpacket: 16
[  415.581464][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1256'.
[  415.588915][ T5582] usb 5-1: config 0 interface 0 has no altsetting 0
[  415.588959][ T5582] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00
[  415.588981][ T5582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  415.666867][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.694176][ T5583] usb 2-1: USB disconnect, device number 29
[  415.695897][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  415.697373][ T5582] usb 5-1: config 0 descriptor??
[  417.011385][ T5582] usbhid 5-1:0.0: can't add hid device: -71
[  417.011507][ T5582] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  417.019935][ T5582] usb 5-1: USB disconnect, device number 46
[  417.100329][ T5733] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  417.256313][ T5733] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  417.256366][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.256393][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.256415][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  417.256456][ T5733] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  417.256479][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.274628][ T5733] usb 2-1: config 0 descriptor??
[  417.365147][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  417.367360][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  417.450754][ T9899] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 !
[  418.419456][ T5733] usbhid 2-1:0.0: can't add hid device: -71
[  418.419581][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  418.467737][ T5733] usb 2-1: USB disconnect, device number 30
[  419.391206][ T5582] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  419.409921][ T9930] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  419.543360][ T5582] usb 4-1: Using ep0 maxpacket: 32
[  419.547608][ T5582] usb 4-1: unable to get BOS descriptor or descriptor too short
[  419.548925][ T5582] usb 4-1: config 14 has an invalid interface number: 226 but max is 0
[  419.548950][ T5582] usb 4-1: config 14 has no interface number 0
[  419.548983][ T5582] usb 4-1: config 14 interface 226 has no altsetting 0
[  419.609504][ T5582] usb 4-1: language id specifier not provided by device, defaulting to English
[  419.635786][ T5582] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice=16.9b
[  419.635818][ T5582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.635840][ T5582] usb 4-1: Product: syz
[  419.635855][ T5582] usb 4-1: Manufacturer: 檮㙣꣒⪅暓衋汦﭅￸㈙峄˴柝吢㗳鋇䴡垦Ⅲ傀ᤌ良㐮釥炓᪎䱜乄홏쳸㥎ؾ隃ָ器헔萺폋톤窶庸䮻
[  419.635877][ T5582] usb 4-1: SerialNumber: syz
[  419.750792][ T6827] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  419.918875][ T5582] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  419.947658][ T6827] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  419.947685][ T6827] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  419.947719][ T6827] usb 5-1: config 220 interface 0 has no altsetting 0
[  419.947855][ T5582] usb 4-1: USB disconnect, device number 29
[  420.076724][ T6827] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  420.076755][ T6827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.076774][ T6827] usb 5-1: Product: syz
[  420.076789][ T6827] usb 5-1: Manufacturer: syz
[  420.076808][ T6827] usb 5-1: SerialNumber: syz
[  420.630836][ T9929] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1267'.
[  420.631124][ T9929] netlink: 'syz.4.1267': attribute type 9 has an invalid length.
[  420.631158][ T9929] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1267'.
[  420.631191][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1267'.
[  420.702074][ T9939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  420.702582][ T9939] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  424.102079][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.102280][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.102438][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.102588][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.102746][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.102895][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.103041][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.103198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.680533][ T5713] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  425.723736][ T5713] usb 4-1: Using ep0 maxpacket: 32
[  425.735934][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  425.735965][ T5713] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.736000][ T5713] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  425.736021][ T5713] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.828252][ T5713] usb 4-1: config 0 descriptor??
[  425.829032][ T6827] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07)
[  425.829054][ T6827] uvcvideo 5-1:220.0: No valid video chain found.
[  425.864284][ T6827] usb 5-1: USB disconnect, device number 47
[  426.112230][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1284'.
[  426.230953][ T9978] bond0: (slave bond_slave_1): Releasing backup interface
[  426.525619][ T5713] usbhid 4-1:0.0: can't add hid device: -71
[  426.525740][ T5713] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  426.541933][ T5713] usb 4-1: USB disconnect, device number 30
[  427.977375][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.977575][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.977908][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.978107][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  427.978288][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  428.149618][T10009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.222319][T10009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  429.177724][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'.
[  431.423299][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1306'.
[  431.430014][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1306'.
[  431.431038][T10046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1306'.
[  434.657190][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.657658][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.657912][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.659276][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  434.659513][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.791501][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1318'.
[  438.158560][T10096] bond1: option primary: mode dependency failed, not supported in mode broadcast(3)
[  438.882183][T10096] bond1 (unregistering): Released all slaves
[  439.288334][T10108] Invalid option length (1047669) for dns_resolver key
[  439.467343][T10134] FAULT_INJECTION: forcing a failure.
[  439.467343][T10134] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  439.467392][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.3.1327 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  439.467419][T10134] Tainted: [L]=SOFTLOCKUP
[  439.467426][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  439.467441][T10134] Call Trace:
[  439.467449][T10134]  <TASK>
[  439.467458][T10134]  dump_stack_lvl+0xe8/0x150
[  439.467500][T10134]  should_fail_ex+0x467/0x600
[  439.467536][T10134]  prepare_alloc_pages+0x223/0x690
[  439.467566][T10134]  __alloc_frozen_pages_noprof+0x12f/0x380
[  439.467594][T10134]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  439.467622][T10134]  ? __pfx_policy_nodemask+0x10/0x10
[  439.467647][T10134]  ? __lock_acquire+0x683/0x2ce0
[  439.467675][T10134]  alloc_pages_mpol+0xce/0x280
[  439.467703][T10134]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  439.467731][T10134]  vma_alloc_folio_noprof+0xe1/0x1e0
[  439.467758][T10134]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  439.467783][T10134]  ? __pte_offset_map+0x29/0x200
[  439.467818][T10134]  do_pte_missing+0x835/0x28f0
[  439.467849][T10134]  ? handle_mm_fault+0xe8/0x13f0
[  439.467873][T10134]  handle_mm_fault+0xd28/0x13f0
[  439.467900][T10134]  ? handle_mm_fault+0xe8/0x13f0
[  439.467931][T10134]  ? __pfx_handle_mm_fault+0x10/0x10
[  439.467949][T10134]  ? lock_vma_under_rcu+0x45a/0x500
[  439.468037][T10134]  ? do_sys_openat2+0x14e/0x200
[  439.468079][T10134]  do_user_addr_fault+0xa4d/0x1340
[  439.468108][T10134]  ? trace_page_fault_user+0x84/0x1e0
[  439.468128][T10134]  exc_page_fault+0x6a/0xc0
[  439.468154][T10134]  asm_exc_page_fault+0x26/0x30
[  439.468183][T10134] RIP: 0033:0x7f03d7fa5966
[  439.468201][T10134] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 91 01 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c cb fe ff 4d 85 ed 0f 84 2b 0a 00
[  439.468216][T10134] RSP: 002b:00007f03d6333f60 EFLAGS: 00010206
[  439.468234][T10134] RAX: 0000000000000000 RBX: 00007f03d8365fa0 RCX: 0000000000000000
[  439.468253][T10134] RDX: 00002000000000c0 RSI: 00002000000000c0 RDI: 00007f03d8175ae1
[  439.468267][T10134] RBP: 00007f03d6336090 R08: 00007f03d7f92850 R09: 0000000000000000
[  439.468280][T10134] R10: 0000000000000002 R11: 00002000000000c0 R12: 000000000000003f
[  439.468293][T10134] R13: 00002000000000c0 R14: 0000000000000002 R15: 00007ffcf889e748
[  439.468324][T10134]  </TASK>
[  439.468664][T10134] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  439.730244][ T5844] usb 4-1: new full-speed USB device number 31 using dummy_hcd
[  440.809215][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.809605][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.809794][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.809970][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.811327][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  440.825295][ T1340] ieee802154 phy0 wpan0: encryption failed: -22
[  440.825359][ T1340] ieee802154 phy1 wpan1: encryption failed: -22
[  440.832070][ T5844] usb 4-1: not running at top speed; connect to a high speed hub
[  440.833215][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  440.833245][ T5844] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  440.835986][ T5844] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  440.836011][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.836031][ T5844] usb 4-1: Product: syz
[  440.836045][ T5844] usb 4-1: Manufacturer: syz
[  440.836066][ T5844] usb 4-1: SerialNumber: syz
[  440.861563][T10134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  440.861813][T10134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  441.373361][ T5582] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  441.528784][ T5582] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  441.528816][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.528889][ T5582] usb 5-1: Product: syz
[  441.528904][ T5582] usb 5-1: Manufacturer: syz
[  441.528919][ T5582] usb 5-1: SerialNumber: syz
[  441.542426][ T5582] usb 5-1: config 0 descriptor??
[  441.675266][ T5844] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  441.675379][ T5844] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  441.675400][ T5844] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  441.736300][ T5844] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  441.791180][ T5844] usb 4-1: USB disconnect, device number 31
[  442.085160][ T5582] usb 5-1: Firmware: major: 212, minor: 98, hardware type: UNKNOWN (32)
[  442.303227][ T5582] usb 5-1: Firmware: build ���[B��<q��
[  442.477823][T10168] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1338'.
[  442.512883][ T5582] usb 5-1: failed to fetch extended address, random address set
[  442.512916][ T5582] usb 5-1: atusb_probe: initialization failed, error = -524
[  442.513147][ T5582] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  442.572561][ T5582] usb 5-1: USB disconnect, device number 48
[  443.209088][T10174] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  443.565876][T10175] FAULT_INJECTION: forcing a failure.
[  443.565876][T10175] name failslab, interval 1, probability 0, space 0, times 0
[  443.565914][T10175] CPU: 1 UID: 0 PID: 10175 Comm: syz.2.1340 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  443.565942][T10175] Tainted: [L]=SOFTLOCKUP
[  443.565949][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  443.565960][T10175] Call Trace:
[  443.565968][T10175]  <TASK>
[  443.565976][T10175]  dump_stack_lvl+0xe8/0x150
[  443.566011][T10175]  should_fail_ex+0x467/0x600
[  443.566046][T10175]  should_failslab+0xa8/0x100
[  443.566071][T10175]  kmem_cache_alloc_noprof+0xa4/0x650
[  443.566092][T10175]  ? skb_clone+0x212/0x3a0
[  443.566117][T10175]  ? skb_clone+0x212/0x3a0
[  443.566146][T10175]  skb_clone+0x212/0x3a0
[  443.566174][T10175]  __netlink_deliver_tap+0x413/0x860
[  443.566211][T10175]  ? netlink_deliver_tap+0x2e/0x1b0
[  443.566237][T10175]  netlink_deliver_tap+0x19c/0x1b0
[  443.566263][T10175]  netlink_unicast+0x7b8/0x990
[  443.566297][T10175]  netlink_sendmsg+0x813/0xb40
[  443.566330][T10175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.566356][T10175]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  443.566385][T10175]  ? __kernel_text_address+0xd/0x30
[  443.566403][T10175]  ? unwind_get_return_address+0x4d/0x90
[  443.566424][T10175]  ? __pfx_netlink_sendmsg+0x10/0x10
[  443.566447][T10175]  sock_sendmsg_nosec+0x13a/0x180
[  443.566466][T10175]  ____sys_sendmsg+0x565/0x870
[  443.566488][T10175]  ? __might_fault+0xaf/0x130
[  443.566514][T10175]  ? __pfx_____sys_sendmsg+0x10/0x10
[  443.566546][T10175]  ? import_iovec+0x73/0xa0
[  443.566573][T10175]  ___sys_sendmsg+0x2a5/0x360
[  443.566594][T10175]  ? __lock_acquire+0x683/0x2ce0
[  443.566619][T10175]  ? __pfx____sys_sendmsg+0x10/0x10
[  443.566684][T10175]  ? __fget_files+0x2a/0x420
[  443.566704][T10175]  ? __fget_files+0x3a8/0x420
[  443.566736][T10175]  __x64_sys_sendmsg+0x1b7/0x290
[  443.566763][T10175]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  443.566806][T10175]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.566827][T10175]  do_syscall_64+0x174/0x580
[  443.566853][T10175]  ? trace_irq_disable+0x3b/0x140
[  443.566872][T10175]  ? clear_bhb_loop+0x40/0x90
[  443.566893][T10175]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  443.566911][T10175] RIP: 0033:0x7f245573e0d9
[  443.566930][T10175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  443.566946][T10175] RSP: 002b:00007f2453975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  443.566967][T10175] RAX: ffffffffffffffda RBX: 00007f24559c6090 RCX: 00007f245573e0d9
[  443.566981][T10175] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003
[  443.566994][T10175] RBP: 00007f2453975090 R08: 0000000000000000 R09: 0000000000000000
[  443.567007][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  443.567018][T10175] R13: 00007f24559c6128 R14: 00007f24559c6090 R15: 00007ffd2abe5ca8
[  443.567050][T10175]  </TASK>
[  444.838607][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.838833][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.839021][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.981253][T10181] overlayfs: missing 'lowerdir'
[  446.474154][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.476924][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.560163][ T5844] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  446.811523][T10201] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.814802][ T5844] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  446.814831][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.814852][ T5844] usb 2-1: Product: syz
[  446.814866][ T5844] usb 2-1: Manufacturer: syz
[  446.814880][ T5844] usb 2-1: SerialNumber: syz
[  446.846663][ T5844] usb 2-1: config 0 descriptor??
[  446.869903][ T5844] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 031
[  446.930161][ T6827] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  447.060189][ T6827] usb 5-1: device descriptor read/64, error -71
[  447.070197][ T5600] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  447.131259][T10203] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1351'.
[  447.230207][ T5600] usb 4-1: Using ep0 maxpacket: 32
[  447.232765][ T5600] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  447.232792][ T5600] usb 4-1: config 0 has no interface number 0
[  447.232825][ T5600] usb 4-1: config 0 interface 153 has no altsetting 0
[  447.236426][ T5600] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  447.236453][ T5600] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  447.236474][ T5600] usb 4-1: Product: syz
[  447.236488][ T5600] usb 4-1: Manufacturer: syz
[  447.236563][ T5600] usb 4-1: SerialNumber: syz
[  447.290894][ T5600] usb 4-1: config 0 descriptor??
[  447.471109][ T6827] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  447.507802][T10205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  447.508525][T10205] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  447.610201][ T6827] usb 5-1: device descriptor read/64, error -71
[  447.717209][ T5600] hub 4-1:0.153: bad descriptor, ignoring hub
[  447.717321][ T5600] hub 4-1:0.153: probe with driver hub failed with error -5
[  447.724176][ T5600] sierra 4-1:0.153: Sierra USB modem converter detected
[  447.748332][ T6827] usb usb5-port1: attempt power cycle
[  447.786532][ T5600] usb 4-1: USB disconnect, device number 32
[  447.795391][ T5600] sierra 4-1:0.153: device disconnected
[  447.945870][T10201] [U] �
[  447.950267][    C1] net_ratelimit: 1 callbacks suppressed
[  447.950376][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.950584][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.950770][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  447.950966][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.090930][ T6827] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  448.120900][ T6827] usb 5-1: device descriptor read/8, error -71
[  448.756834][T10221] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  448.845026][ T6827] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  449.169014][ T6827] usb 5-1: device descriptor read/8, error -71
[  449.280870][ T6827] usb usb5-port1: unable to enumerate USB device
[  449.465992][ T5844] i2c i2c-1: failure reading functionality
[  449.674773][ T5844] i2c i2c-1: connected i2c-tiny-usb device
[  449.734837][T10227] overlayfs: missing 'lowerdir'
[  450.949800][ T5713] usb 2-1: USB disconnect, device number 31
[  451.095039][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.096225][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  451.424961][T10249] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  451.773667][ T6827] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  451.884169][T10262] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1369'.
[  451.921330][ T6827] usb 5-1: Using ep0 maxpacket: 32
[  451.923369][ T6827] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  451.923393][ T6827] usb 5-1: config 0 has no interface number 0
[  451.923421][ T6827] usb 5-1: config 0 interface 153 has no altsetting 0
[  451.925590][ T6827] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  451.925618][ T6827] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  451.925639][ T6827] usb 5-1: Product: syz
[  451.925653][ T6827] usb 5-1: Manufacturer: syz
[  451.925668][ T6827] usb 5-1: SerialNumber: syz
[  451.996975][ T6827] usb 5-1: config 0 descriptor??
[  452.363488][   T31] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  452.409379][ T6827] hub 5-1:0.153: bad descriptor, ignoring hub
[  452.409421][ T6827] hub 5-1:0.153: probe with driver hub failed with error -5
[  452.455476][ T6827] sierra 5-1:0.153: Sierra USB modem converter detected
[  452.551597][ T6827] usb 5-1: USB disconnect, device number 53
[  452.552562][T10248] [U] �	
[  452.552988][ T6827] sierra 5-1:0.153: device disconnected
[  452.580370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.580573][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.580755][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.662020][   T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  452.662050][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  452.662071][   T31] usb 3-1: config 0 has no interface number 0
[  452.662119][   T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  452.662151][   T31] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  452.664518][   T31] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  452.664548][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.664567][   T31] usb 3-1: Product: syz
[  452.664581][   T31] usb 3-1: Manufacturer: syz
[  452.664596][   T31] usb 3-1: SerialNumber: syz
[  452.976519][   T31] usb 3-1: config 0 descriptor??
[  453.052536][T10284] FAULT_INJECTION: forcing a failure.
[  453.052536][T10284] name failslab, interval 1, probability 0, space 0, times 0
[  453.052586][T10284] CPU: 0 UID: 0 PID: 10284 Comm: syz.0.1376 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  453.052603][T10284] Tainted: [L]=SOFTLOCKUP
[  453.052607][T10284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  453.052614][T10284] Call Trace:
[  453.052619][T10284]  <TASK>
[  453.052624][T10284]  dump_stack_lvl+0xe8/0x150
[  453.052654][T10284]  should_fail_ex+0x467/0x600
[  453.052675][T10284]  should_failslab+0xa8/0x100
[  453.052690][T10284]  kmem_cache_alloc_noprof+0xa4/0x650
[  453.052705][T10284]  ? skb_clone+0x212/0x3a0
[  453.052719][T10284]  ? skb_clone+0x212/0x3a0
[  453.052736][T10284]  skb_clone+0x212/0x3a0
[  453.052751][T10284]  __netlink_deliver_tap+0x413/0x860
[  453.052772][T10284]  ? netlink_deliver_tap+0x2e/0x1b0
[  453.052786][T10284]  netlink_deliver_tap+0x19c/0x1b0
[  453.052801][T10284]  netlink_unicast+0x7b8/0x990
[  453.052818][T10284]  netlink_sendmsg+0x813/0xb40
[  453.052837][T10284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.052852][T10284]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  453.052871][T10284]  ? __pfx_netlink_sendmsg+0x10/0x10
[  453.052884][T10284]  sock_sendmsg_nosec+0x13a/0x180
[  453.052896][T10284]  ____sys_sendmsg+0x565/0x870
[  453.052910][T10284]  ? __might_fault+0xaf/0x130
[  453.052925][T10284]  ? __pfx_____sys_sendmsg+0x10/0x10
[  453.052943][T10284]  ? import_iovec+0x73/0xa0
[  453.052962][T10284]  ___sys_sendmsg+0x2a5/0x360
[  453.052975][T10284]  ? __lock_acquire+0x683/0x2ce0
[  453.052989][T10284]  ? __pfx____sys_sendmsg+0x10/0x10
[  453.053011][T10284]  ? kstrtouint+0x6e/0xe0
[  453.053055][T10284]  ? __fget_files+0x2a/0x420
[  453.053067][T10284]  ? __fget_files+0x3a8/0x420
[  453.053086][T10284]  __sys_sendmmsg+0x279/0x4d0
[  453.053103][T10284]  ? __pfx___sys_sendmmsg+0x10/0x10
[  453.053121][T10284]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  453.053140][T10284]  ? ksys_write+0x248/0x270
[  453.053155][T10284]  ? __pfx_ksys_write+0x10/0x10
[  453.053171][T10284]  __x64_sys_sendmmsg+0xa0/0xc0
[  453.053185][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.053196][T10284]  do_syscall_64+0x174/0x580
[  453.053210][T10284]  ? trace_irq_disable+0x3b/0x140
[  453.053221][T10284]  ? clear_bhb_loop+0x40/0x90
[  453.053234][T10284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.053244][T10284] RIP: 0033:0x7f097112e0d9
[  453.053255][T10284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  453.053264][T10284] RSP: 002b:00007f096f386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  453.053276][T10284] RAX: ffffffffffffffda RBX: 00007f09713b5fa0 RCX: 00007f097112e0d9
[  453.053284][T10284] RDX: 0000000004924b68 RSI: 0000200000000140 RDI: 0000000000000004
[  453.053290][T10284] RBP: 00007f096f386090 R08: 0000000000000000 R09: 0000000000000000
[  453.053297][T10284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  453.053303][T10284] R13: 00007f09713b6038 R14: 00007f09713b5fa0 R15: 00007ffe1f6786b8
[  453.053319][T10284]  </TASK>
[  454.988799][ T5582] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  455.065745][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.065961][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.066125][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.640000][ T5582] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.640051][ T5582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  455.640076][ T5582] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.640097][ T5582] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  455.640134][ T5582] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  455.640156][ T5582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.657630][ T5582] usb 2-1: config 0 descriptor??
[  455.746265][ T6827] usb 3-1: USB disconnect, device number 23
[  455.809536][T10310] FAULT_INJECTION: forcing a failure.
[  455.809536][T10310] name failslab, interval 1, probability 0, space 0, times 0
[  455.809574][T10310] CPU: 0 UID: 0 PID: 10310 Comm: syz.4.1383 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  455.809604][T10310] Tainted: [L]=SOFTLOCKUP
[  455.809612][T10310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  455.809624][T10310] Call Trace:
[  455.809632][T10310]  <TASK>
[  455.809642][T10310]  dump_stack_lvl+0xe8/0x150
[  455.809676][T10310]  should_fail_ex+0x467/0x600
[  455.809709][T10310]  should_failslab+0xa8/0x100
[  455.809733][T10310]  kmem_cache_alloc_noprof+0xa4/0x650
[  455.809754][T10310]  ? fuse_get_req+0x8ee/0xd40
[  455.809861][T10310]  ? fuse_get_req+0x8ee/0xd40
[  455.809891][T10310]  fuse_get_req+0x8ee/0xd40
[  455.809923][T10310]  ? __pfx_fuse_get_req+0x10/0x10
[  455.809951][T10310]  ? __lock_acquire+0x683/0x2ce0
[  455.809977][T10310]  fuse_chan_send+0x2cf/0x1ad0
[  455.810009][T10310]  ? from_kgid+0x1c6/0x660
[  455.810101][T10310]  ? __pfx_fuse_chan_send+0x10/0x10
[  455.810125][T10310]  ? __pfx_from_kgid+0x10/0x10
[  455.810188][T10310]  ? pid_nr_ns+0xcb/0x140
[  455.810246][T10310]  ? fuse_req_prep+0x5cc/0x9b0
[  455.810315][T10310]  ? __fuse_simple_request+0x7a/0xb0
[  455.810343][T10310]  fuse_do_getattr+0x370/0x690
[  455.810371][T10310]  ? __pfx_fuse_do_getattr+0x10/0x10
[  455.810392][T10310]  ? __pfx___css_rstat_updated+0x10/0x10
[  455.810468][T10310]  ? rcu_is_watching+0x15/0xb0
[  455.810548][T10310]  ? trace_hrtimer_start+0x82/0x200
[  455.810625][T10310]  ? hrtimer_start_range_ns_common+0x818/0xb90
[  455.810651][T10310]  fuse_update_get_attr+0x600/0x1300
[  455.810679][T10310]  ? __pfx_fuse_update_get_attr+0x10/0x10
[  455.810699][T10310]  ? rcu_is_watching+0x15/0xb0
[  455.810721][T10310]  ? trace_sched_exit_tp+0x3a/0x130
[  455.810779][T10310]  ? __schedule+0x16f2/0x5500
[  455.810858][T10310]  ? __pfx___schedule+0x10/0x10
[  455.810891][T10310]  ? irqentry_exit+0x218/0x8f0
[  455.810914][T10310]  ? lockdep_hardirqs_on+0x7a/0x110
[  455.810936][T10310]  ? irqentry_exit+0x218/0x8f0
[  455.810957][T10310]  ? trace_irq_disable+0x3b/0x140
[  455.810986][T10310]  ? fuse_getattr+0x306/0x610
[  455.811012][T10310]  vfs_getattr_nosec+0x2e1/0x430
[  455.811048][T10310]  vfs_statx_path+0x2b/0x230
[  455.811066][T10310]  ? vfs_statx+0x107/0x200
[  455.811085][T10310]  vfs_statx+0x12e/0x200
[  455.811100][T10310]  ? strncpy_from_user+0x150/0x2c0
[  455.811136][T10310]  ? __pfx_vfs_statx+0x10/0x10
[  455.811168][T10310]  ? __getname_maybe_null+0xea/0x210
[  455.811189][T10310]  vfs_fstatat+0x11b/0x170
[  455.811217][T10310]  __x64_sys_newfstatat+0x151/0x200
[  455.811238][T10310]  ? __pfx___x64_sys_newfstatat+0x10/0x10
[  455.811280][T10310]  ? __pfx_ksys_write+0x10/0x10
[  455.811311][T10310]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.811332][T10310]  do_syscall_64+0x174/0x580
[  455.811359][T10310]  ? clear_bhb_loop+0x40/0x90
[  455.811381][T10310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  455.811399][T10310] RIP: 0033:0x7fbd6058e0d9
[  455.811418][T10310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  455.811433][T10310] RSP: 002b:00007fbd5e7c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106
[  455.811453][T10310] RAX: ffffffffffffffda RBX: 00007fbd60816090 RCX: 00007fbd6058e0d9
[  455.811467][T10310] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c
[  455.811480][T10310] RBP: 00007fbd5e7c5090 R08: 0000000000000000 R09: 0000000000000000
[  455.811492][T10310] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000001
[  455.811504][T10310] R13: 00007fbd60816128 R14: 00007fbd60816090 R15: 00007ffeef2b1a38
[  455.811533][T10310]  </TASK>
[  456.020751][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.020939][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.021249][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.021446][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.004595][ T5582] usbhid 2-1:0.0: can't add hid device: -71
[  457.004724][ T5582] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  457.057766][ T5582] usb 2-1: USB disconnect, device number 32
[  457.221127][T10324] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  458.410145][ T5582] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  458.538474][T10337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1387'.
[  458.561247][ T5582] usb 4-1: Using ep0 maxpacket: 32
[  458.563535][ T5582] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  458.563562][ T5582] usb 4-1: config 0 has no interface number 0
[  458.563596][ T5582] usb 4-1: config 0 interface 153 has no altsetting 0
[  458.566067][ T5582] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  458.566094][ T5582] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  458.566115][ T5582] usb 4-1: Product: syz
[  458.566129][ T5582] usb 4-1: Manufacturer: syz
[  458.566143][ T5582] usb 4-1: SerialNumber: syz
[  458.598115][ T5582] usb 4-1: config 0 descriptor??
[  458.611120][T10338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  458.843022][ T5582] hub 4-1:0.153: bad descriptor, ignoring hub
[  458.843061][ T5582] hub 4-1:0.153: probe with driver hub failed with error -5
[  458.856358][ T5582] sierra 4-1:0.153: Sierra USB modem converter detected
[  458.859468][T10323] [U] �	
[  458.940171][ T5582] usb 4-1: USB disconnect, device number 33
[  458.941393][ T5582] sierra 4-1:0.153: device disconnected
[  459.026374][T10351] FAULT_INJECTION: forcing a failure.
[  459.026374][T10351] name failslab, interval 1, probability 0, space 0, times 0
[  459.026410][T10351] CPU: 0 UID: 0 PID: 10351 Comm: syz.4.1394 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  459.026430][T10351] Tainted: [L]=SOFTLOCKUP
[  459.026434][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.026443][T10351] Call Trace:
[  459.026449][T10351]  <TASK>
[  459.026457][T10351]  dump_stack_lvl+0xe8/0x150
[  459.026488][T10351]  should_fail_ex+0x467/0x600
[  459.026517][T10351]  should_failslab+0xa8/0x100
[  459.026537][T10351]  __kmalloc_node_noprof+0x107/0x7d0
[  459.026554][T10351]  ? __get_vm_area_node+0x1f2/0x300
[  459.026576][T10351]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  459.026589][T10351]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  459.026609][T10351]  __vmalloc_node_range_noprof+0x5d9/0x1730
[  459.026632][T10351]  ? is_bpf_text_address+0x26/0x2b0
[  459.026663][T10351]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  459.026678][T10351]  ? is_bpf_text_address+0x26/0x2b0
[  459.026698][T10351]  ? kernel_text_address+0xa5/0xe0
[  459.026720][T10351]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.026737][T10351]  __vmalloc_noprof+0xd2/0x120
[  459.026753][T10351]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.026770][T10351]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.026784][T10351]  ? bpf_prog_alloc+0x2a/0x1a0
[  459.026800][T10351]  bpf_prog_alloc+0x3c/0x1a0
[  459.026817][T10351]  bpf_prog_load+0x7f8/0x1c00
[  459.026844][T10351]  ? __pfx_bpf_prog_load+0x10/0x10
[  459.026876][T10351]  __sys_bpf+0xd0d/0xd90
[  459.026896][T10351]  ? __pfx___sys_bpf+0x10/0x10
[  459.026915][T10351]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  459.026941][T10351]  ? rt_mutex_slowunlock+0x219/0x460
[  459.026970][T10351]  ? ksys_write+0x248/0x270
[  459.026990][T10351]  ? __pfx_ksys_write+0x10/0x10
[  459.027011][T10351]  __x64_sys_bpf+0xba/0xd0
[  459.027035][T10351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.027059][T10351]  do_syscall_64+0x174/0x580
[  459.027081][T10351]  ? trace_irq_disable+0x3b/0x140
[  459.027098][T10351]  ? clear_bhb_loop+0x40/0x90
[  459.027124][T10351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.027140][T10351] RIP: 0033:0x7fbd6058e0d9
[  459.027157][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.027174][T10351] RSP: 002b:00007fbd5e7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  459.027189][T10351] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  459.027200][T10351] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005
[  459.027208][T10351] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  459.027217][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.027225][T10351] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  459.027247][T10351]  </TASK>
[  459.027255][T10351] syz.4.1394: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  459.027321][T10351] CPU: 0 UID: 0 PID: 10351 Comm: syz.4.1394 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  459.027340][T10351] Tainted: [L]=SOFTLOCKUP
[  459.027345][T10351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  459.027353][T10351] Call Trace:
[  459.027359][T10351]  <TASK>
[  459.027365][T10351]  dump_stack_lvl+0xe8/0x150
[  459.027390][T10351]  warn_alloc+0x24c/0x270
[  459.027412][T10351]  ? __pfx_warn_alloc+0x10/0x10
[  459.027433][T10351]  ? __kmalloc_node_noprof+0x5a2/0x7d0
[  459.027451][T10351]  ? __get_vm_area_node+0x1f2/0x300
[  459.027474][T10351]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  459.027490][T10351]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  459.027514][T10351]  __vmalloc_node_range_noprof+0xa81/0x1730
[  459.027534][T10351]  ? is_bpf_text_address+0x26/0x2b0
[  459.027564][T10351]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  459.027577][T10351]  ? is_bpf_text_address+0x26/0x2b0
[  459.027595][T10351]  ? kernel_text_address+0xa5/0xe0
[  459.027614][T10351]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.027631][T10351]  __vmalloc_noprof+0xd2/0x120
[  459.027646][T10351]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.027662][T10351]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  459.027677][T10351]  ? bpf_prog_alloc+0x2a/0x1a0
[  459.027693][T10351]  bpf_prog_alloc+0x3c/0x1a0
[  459.027709][T10351]  bpf_prog_load+0x7f8/0x1c00
[  459.027735][T10351]  ? __pfx_bpf_prog_load+0x10/0x10
[  459.027767][T10351]  __sys_bpf+0xd0d/0xd90
[  459.027788][T10351]  ? __pfx___sys_bpf+0x10/0x10
[  459.027807][T10351]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  459.027832][T10351]  ? rt_mutex_slowunlock+0x219/0x460
[  459.027864][T10351]  ? ksys_write+0x248/0x270
[  459.027883][T10351]  ? __pfx_ksys_write+0x10/0x10
[  459.027903][T10351]  __x64_sys_bpf+0xba/0xd0
[  459.027925][T10351]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.027940][T10351]  do_syscall_64+0x174/0x580
[  459.027958][T10351]  ? trace_irq_disable+0x3b/0x140
[  459.027972][T10351]  ? clear_bhb_loop+0x40/0x90
[  459.027990][T10351]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  459.028004][T10351] RIP: 0033:0x7fbd6058e0d9
[  459.028018][T10351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.028030][T10351] RSP: 002b:00007fbd5e7e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  459.028045][T10351] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  459.028055][T10351] RDX: 0000000000000094 RSI: 00002000000009c0 RDI: 0000000000000005
[  459.028064][T10351] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  459.028074][T10351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.028082][T10351] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  459.028104][T10351]  </TASK>
[  459.028123][T10351] Mem-Info:
[  459.028131][T10351] active_anon:197 inactive_anon:15618 isolated_anon:0
[  459.028131][T10351]  active_file:8895 inactive_file:44213 isolated_file:0
[  459.028131][T10351]  unevictable:768 dirty:110 writeback:0
[  459.028131][T10351]  slab_reclaimable:12009 slab_unreclaimable:106122
[  459.028131][T10351]  mapped:40508 shmem:10497 pagetables:1529
[  459.028131][T10351]  sec_pagetables:6 bounce:0
[  459.028131][T10351]  kernel_misc_reclaimable:0
[  459.028131][T10351]  free:1300303 free_pcp:4919 free_cma:0
[  459.028180][T10351] Node 0 active_anon:788kB inactive_anon:62472kB active_file:35272kB inactive_file:176852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161920kB dirty:428kB writeback:0kB shmem:40452kB kernel_stack:13900kB pagetables:5968kB sec_pagetables:24kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  459.028222][T10351] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112kB dirty:12kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  459.028266][T10351] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  459.028306][T10351] lowmem_reserve[]: 0 2500 2502 2502 2502
[  459.028328][T10351] Node 0 DMA32 free:1245216kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:788kB inactive_anon:62472kB active_file:35272kB inactive_file:176852kB unevictable:1536kB writepending:428kB zspages:852kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:19668kB local_pcp:1268kB free_cma:0kB
[  459.028371][T10351] lowmem_reserve[]: 0 0 1 1 1
[  459.028393][T10351] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB
[  459.028436][T10351] lowmem_reserve[]: 0 0 0 0 0
[  459.028457][T10351] Node 1 Normal free:3940636kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  459.028504][T10351] lowmem_reserve[]: 0 0 0 0 0
[  459.028530][T10351] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  459.028619][T10351] Node 0 DMA32: 404*4kB (UME) 43*8kB (UE) 16*16kB (ME) 61*32kB (UE) 14*64kB (UME) 160*128kB (UME) 146*256kB (UME) 77*512kB (UME) 20*1024kB (UME) 10*2048kB (M) 269*4096kB (UM) = 1245128kB
[  459.028720][T10351] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  459.028785][T10351] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 7*16kB (U) 6*32kB (U) 3*64kB (U) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940636kB
[  459.028884][T10351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  459.028896][T10351] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.028908][T10351] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  459.028920][T10351] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  459.028934][T10351] 63621 total pagecache pages
[  459.028947][T10351] 20 pages in swap cache
[  459.028953][T10351] Free swap  = 121016kB
[  459.028960][T10351] Total swap = 124996kB
[  459.028967][T10351] 2097051 pages RAM
[  459.028972][T10351] 0 pages HighMem/MovableOnly
[  459.028977][T10351] 424834 pages reserved
[  459.028982][T10351] 0 pages cma reserved
[  459.446303][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.446518][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  460.846793][T10367] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1398'.
[  461.591651][ T5582] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  461.744407][ T5582] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.744460][ T5582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  461.744489][ T5582] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  461.744512][ T5582] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  461.744555][ T5582] usb 5-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  461.744578][ T5582] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.753931][T10394] FAULT_INJECTION: forcing a failure.
[  461.753931][T10394] name failslab, interval 1, probability 0, space 0, times 0
[  461.753966][T10394] CPU: 0 UID: 0 PID: 10394 Comm: syz.0.1406 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  461.753993][T10394] Tainted: [L]=SOFTLOCKUP
[  461.754000][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  461.754012][T10394] Call Trace:
[  461.754019][T10394]  <TASK>
[  461.754027][T10394]  dump_stack_lvl+0xe8/0x150
[  461.754062][T10394]  should_fail_ex+0x467/0x600
[  461.754096][T10394]  should_failslab+0xa8/0x100
[  461.754121][T10394]  __kmalloc_cache_noprof+0xa0/0x6b0
[  461.754142][T10394]  ? wakeup_source_sysfs_add+0x57/0x2c0
[  461.754309][T10394]  ? wakeup_source_sysfs_add+0x57/0x2c0
[  461.754352][T10394]  wakeup_source_sysfs_add+0x57/0x2c0
[  461.754383][T10394]  wakeup_source_register+0x17f/0x390
[  461.754429][T10394]  ep_insert+0x112c/0x1990
[  461.754507][T10394]  ? __pfx_ep_insert+0x10/0x10
[  461.754540][T10394]  ? lockdep_hardirqs_on+0x7a/0x110
[  461.754564][T10394]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  461.754590][T10394]  ? mutex_lock_nested+0x152/0x1d0
[  461.754608][T10394]  ? do_epoll_ctl_file+0xc94/0xf00
[  461.754635][T10394]  do_epoll_ctl_file+0x8d5/0xf00
[  461.754666][T10394]  ? __pfx_do_epoll_ctl_file+0x10/0x10
[  461.754693][T10394]  ? __fget_files+0x3a8/0x420
[  461.754713][T10394]  ? __fget_files+0x2a/0x420
[  461.754741][T10394]  __se_sys_epoll_ctl+0x162/0x230
[  461.754768][T10394]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[  461.754801][T10394]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.754821][T10394]  do_syscall_64+0x174/0x580
[  461.754845][T10394]  ? trace_irq_disable+0x3b/0x140
[  461.754865][T10394]  ? clear_bhb_loop+0x40/0x90
[  461.754888][T10394]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.754906][T10394] RIP: 0033:0x7f097112e0d9
[  461.754924][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.754940][T10394] RSP: 002b:00007f096f365028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  461.754960][T10394] RAX: ffffffffffffffda RBX: 00007f09713b6090 RCX: 00007f097112e0d9
[  461.754974][T10394] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[  461.754986][T10394] RBP: 00007f096f365090 R08: 0000000000000000 R09: 0000000000000000
[  461.754998][T10394] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[  461.755010][T10394] R13: 00007f09713b6128 R14: 00007f09713b6090 R15: 00007ffe1f6786b8
[  461.755041][T10394]  </TASK>
[  461.756326][ T5582] usb 5-1: config 0 descriptor??
[  461.990973][T10393] [U] �
[  462.367498][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'.
[  462.367522][T10400] netlink: 145 bytes leftover after parsing attributes in process `syz.0.1409'.
[  462.394631][ T5582] usbhid 5-1:0.0: can't add hid device: -71
[  462.394808][ T5582] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  462.451596][ T5582] usb 5-1: USB disconnect, device number 54
[  462.726424][T10407] netlink: 'syz.0.1411': attribute type 22 has an invalid length.
[  462.781181][T10410] FAULT_INJECTION: forcing a failure.
[  462.781181][T10410] name failslab, interval 1, probability 0, space 0, times 0
[  462.781218][T10410] CPU: 0 UID: 0 PID: 10410 Comm: syz.1.1412 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  462.781243][T10410] Tainted: [L]=SOFTLOCKUP
[  462.781249][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  462.781260][T10410] Call Trace:
[  462.781268][T10410]  <TASK>
[  462.781276][T10410]  dump_stack_lvl+0xe8/0x150
[  462.781309][T10410]  should_fail_ex+0x467/0x600
[  462.781343][T10410]  should_failslab+0xa8/0x100
[  462.781377][T10410]  __kmalloc_noprof+0xfe/0x780
[  462.781400][T10410]  ? ___neigh_create+0x719/0x2390
[  462.781422][T10410]  ? ___neigh_create+0x719/0x2390
[  462.781448][T10410]  ___neigh_create+0x719/0x2390
[  462.781473][T10410]  ? rt6_get_dflt_router+0x84/0x7f0
[  462.781609][T10410]  ? neigh_lookup+0xb6/0x610
[  462.781630][T10410]  ? __pfx_neigh_lookup+0x10/0x10
[  462.781661][T10410]  ndisc_router_discovery+0x643/0x4150
[  462.781729][T10410]  ? ndisc_router_discovery+0x770/0x4150
[  462.781759][T10410]  ? __pfx_ndisc_router_discovery+0x10/0x10
[  462.781796][T10410]  ? skb_checksum+0xadf/0xbe0
[  462.781842][T10410]  ? ndisc_rcv+0x4dc/0x8e0
[  462.781863][T10410]  icmpv6_rcv+0x14d4/0x1f40
[  462.781930][T10410]  ? __pfx_icmpv6_rcv+0x10/0x10
[  462.781958][T10410]  ip6_protocol_deliver_rcu+0xe8c/0x1680
[  462.782043][T10410]  ip6_input_finish+0x191/0x370
[  462.782074][T10410]  NF_HOOK+0x336/0x3c0
[  462.782102][T10410]  ? __pfx_ip6_input_finish+0x10/0x10
[  462.782127][T10410]  ? NF_HOOK+0x9e/0x3c0
[  462.782152][T10410]  ? __pfx_NF_HOOK+0x10/0x10
[  462.782180][T10410]  ? __pfx_ip6_input_finish+0x10/0x10
[  462.782208][T10410]  ? ipv6_chk_mcast_addr+0x2e/0x860
[  462.782238][T10410]  ip6_input+0x16a/0x270
[  462.782262][T10410]  ? ip6_input+0x23/0x270
[  462.782288][T10410]  ip6_mc_input+0x64d/0xbc0
[  462.782318][T10410]  ? __pfx_ip6_mc_input+0x10/0x10
[  462.782349][T10410]  ? ip6_rcv_finish+0x265/0x280
[  462.782383][T10410]  NF_HOOK+0x336/0x3c0
[  462.782406][T10410]  ? __pfx_sock_wfree+0x10/0x10
[  462.782432][T10410]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  462.782457][T10410]  ? NF_HOOK+0x9e/0x3c0
[  462.782481][T10410]  ? __pfx_NF_HOOK+0x10/0x10
[  462.782505][T10410]  ? ip6_rcv_core+0xa1/0x1870
[  462.782535][T10410]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  462.782568][T10410]  ? netif_receive_skb+0x102/0xbf0
[  462.782660][T10410]  netif_receive_skb+0x278/0xbf0
[  462.782697][T10410]  ? __pfx_netif_receive_skb+0x10/0x10
[  462.782726][T10410]  ? rcu_is_watching+0x15/0xb0
[  462.782750][T10410]  ? __local_bh_disable_ip+0x3c/0x420
[  462.782816][T10410]  ? tun_rx_batched+0x194/0x760
[  462.782920][T10410]  ? tun_rx_batched+0x194/0x760
[  462.782942][T10410]  tun_rx_batched+0x1f1/0x760
[  462.782965][T10410]  ? rcu_is_watching+0x15/0xb0
[  462.782991][T10410]  ? __pfx_tun_rx_batched+0x10/0x10
[  462.783021][T10410]  ? tun_get_user+0x26f8/0x4380
[  462.783042][T10410]  ? tun_get_user+0x26f8/0x4380
[  462.783066][T10410]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  462.783090][T10410]  ? lockdep_hardirqs_on+0x7a/0x110
[  462.783123][T10410]  tun_get_user+0x2b3b/0x4380
[  462.783142][T10410]  ? is_bpf_text_address+0x292/0x2b0
[  462.783170][T10410]  ? tun_get_user+0x26f8/0x4380
[  462.783209][T10410]  ? __pfx_tun_get_user+0x10/0x10
[  462.783239][T10410]  ? __lock_acquire+0x683/0x2ce0
[  462.783279][T10410]  ? ref_tracker_alloc+0x353/0x4c0
[  462.783299][T10410]  ? get_pid_task+0x20/0x1f0
[  462.783330][T10410]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  462.783352][T10410]  ? tun_get+0x1c/0x2f0
[  462.783379][T10410]  ? tun_get+0x1c/0x2f0
[  462.783403][T10410]  ? tun_get+0x1c/0x2f0
[  462.783420][T10410]  ? tun_get+0x1c/0x2f0
[  462.783443][T10410]  tun_chr_write_iter+0x119/0x200
[  462.783467][T10410]  vfs_write+0x61e/0xbb0
[  462.783503][T10410]  ? __pfx_vfs_write+0x10/0x10
[  462.783539][T10410]  ? __fget_files+0x2a/0x420
[  462.783570][T10410]  ksys_write+0x156/0x270
[  462.783599][T10410]  ? __pfx_ksys_write+0x10/0x10
[  462.783633][T10410]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.783656][T10410]  do_syscall_64+0x174/0x580
[  462.783682][T10410]  ? trace_irq_disable+0x3b/0x140
[  462.783703][T10410]  ? clear_bhb_loop+0x40/0x90
[  462.783728][T10410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.783748][T10410] RIP: 0033:0x7f624435e90e
[  462.783768][T10410] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  462.783784][T10410] RSP: 002b:00007f62425d4fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  462.783805][T10410] RAX: ffffffffffffffda RBX: 00007f62425d56c0 RCX: 00007f624435e90e
[  462.783819][T10410] RDX: 0000000000000046 RSI: 00002000000009c0 RDI: 00000000000000c8
[  462.783832][T10410] RBP: 00007f62425d5090 R08: 0000000000000000 R09: 0000000000000000
[  462.783845][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  462.783857][T10410] R13: 00007f6244626128 R14: 00007f6244626090 R15: 00007fff7ae09338
[  462.783890][T10410]  </TASK>
[  462.811418][T10403] FAULT_INJECTION: forcing a failure.
[  462.811418][T10403] name failslab, interval 1, probability 0, space 0, times 0
[  462.811451][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.3.1410 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  462.811477][T10403] Tainted: [L]=SOFTLOCKUP
[  462.811484][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  462.811495][T10403] Call Trace:
[  462.811503][T10403]  <TASK>
[  462.811511][T10403]  dump_stack_lvl+0xe8/0x150
[  462.811546][T10403]  should_fail_ex+0x467/0x600
[  462.811579][T10403]  should_failslab+0xa8/0x100
[  462.811603][T10403]  kmem_cache_alloc_noprof+0xa4/0x650
[  462.811623][T10403]  ? fuse_get_req+0x8ee/0xd40
[  462.811646][T10403]  ? fuse_get_req+0x8ee/0xd40
[  462.811674][T10403]  fuse_get_req+0x8ee/0xd40
[  462.811707][T10403]  ? __pfx_fuse_get_req+0x10/0x10
[  462.811731][T10403]  ? __pfx_autoremove_wake_function+0x10/0x10
[  462.811871][T10403]  ? __kernel_text_address+0xd/0x30
[  462.811890][T10403]  ? unwind_get_return_address+0x4d/0x90
[  462.811915][T10403]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  462.811941][T10403]  fuse_chan_send+0x2cf/0x1ad0
[  462.811969][T10403]  ? stack_trace_save+0xa9/0x100
[  462.811987][T10403]  ? __pfx_stack_trace_save+0x10/0x10
[  462.812005][T10403]  ? from_kgid+0x1c6/0x660
[  462.812032][T10403]  ? __pfx_fuse_chan_send+0x10/0x10
[  462.812056][T10403]  ? __pfx_from_kgid+0x10/0x10
[  462.812084][T10403]  ? kasan_save_track+0x4f/0x80
[  462.812103][T10403]  ? kasan_save_track+0x3e/0x80
[  462.812121][T10403]  ? kasan_save_free_info+0x40/0x50
[  462.812144][T10403]  ? __kasan_slab_free+0x5c/0x80
[  462.812162][T10403]  ? pid_nr_ns+0xcb/0x140
[  462.812191][T10403]  ? fuse_req_prep+0x5cc/0x9b0
[  462.812223][T10403]  ? __fuse_simple_request+0x7a/0xb0
[  462.812249][T10403]  fuse_update_get_attr+0x923/0x1300
[  462.812280][T10403]  ? __pfx_fuse_update_get_attr+0x10/0x10
[  462.812316][T10403]  ? tomoyo_path_perm+0x251/0x560
[  462.812371][T10403]  ? smack_inode_getattr+0x1ca/0x240
[  462.812441][T10403]  ? fuse_getattr+0x306/0x610
[  462.812464][T10403]  vfs_getattr_nosec+0x2e1/0x430
[  462.812496][T10403]  vfs_statx_path+0x2b/0x230
[  462.812516][T10403]  ? vfs_statx+0x107/0x200
[  462.812535][T10403]  vfs_statx+0x12e/0x200
[  462.812554][T10403]  ? __pfx_vfs_statx+0x10/0x10
[  462.812589][T10403]  __se_sys_statx+0x1e9/0x2a0
[  462.812607][T10403]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  462.812639][T10403]  ? __pfx___se_sys_statx+0x10/0x10
[  462.812674][T10403]  ? __pfx_ksys_write+0x10/0x10
[  462.812702][T10403]  ? __x64_sys_statx+0x20/0xc0
[  462.812721][T10403]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.812741][T10403]  do_syscall_64+0x174/0x580
[  462.812766][T10403]  ? trace_irq_disable+0x3b/0x140
[  462.812785][T10403]  ? clear_bhb_loop+0x40/0x90
[  462.812807][T10403]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  462.812826][T10403] RIP: 0033:0x7f03d80de0d9
[  462.812844][T10403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  462.812859][T10403] RSP: 002b:00007f03d6336028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  462.812879][T10403] RAX: ffffffffffffffda RBX: 00007f03d8365fa0 RCX: 00007f03d80de0d9
[  462.812893][T10403] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  462.812907][T10403] RBP: 00007f03d6336090 R08: 0000000000000000 R09: 0000000000000000
[  462.812919][T10403] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  462.812930][T10403] R13: 00007f03d8366038 R14: 00007f03d8365fa0 R15: 00007ffcf889e748
[  462.812960][T10403]  </TASK>
[  464.767082][T10436] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  464.806928][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  464.811801][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.056581][T10435] [U] �	
[  465.120171][ T5713] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  465.224462][   T31] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  465.234220][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.234418][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.234587][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.424436][ T5713] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.424464][ T5713] usb 2-1: config 0 has no interfaces?
[  465.427333][   T31] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[  465.427355][   T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  465.427372][   T31] usb 3-1: config 0 has no interface number 0
[  465.427453][   T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  465.427478][   T31] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  465.427499][   T31] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  465.479020][   T31] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  465.481156][ T5713] usb 2-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  465.481185][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.481206][ T5713] usb 2-1: Product: syz
[  465.481221][ T5713] usb 2-1: Manufacturer: syz
[  465.481234][ T5713] usb 2-1: SerialNumber: syz
[  465.494515][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.494541][   T31] usb 3-1: Product: syz
[  465.494556][   T31] usb 3-1: Manufacturer: syz
[  465.494571][   T31] usb 3-1: SerialNumber: syz
[  465.590381][ T5713] usb 2-1: config 0 descriptor??
[  465.596294][   T31] usb 3-1: config 0 descriptor??
[  465.826901][T10457] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1427'.
[  465.858406][   T10] usb 2-1: USB disconnect, device number 33
[  465.858463][T10460] overlayfs: missing 'lowerdir'
[  465.861933][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  465.862140][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  466.160703][   T31] usb 3-1: USB disconnect, device number 24
[  466.640109][ T5582] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  466.666349][T10483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  466.850648][ T5582] usb 5-1: Using ep0 maxpacket: 16
[  466.858848][ T5582] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  466.858879][ T5582] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.858901][ T5582] usb 5-1: Product: syz
[  466.858916][ T5582] usb 5-1: Manufacturer: syz
[  466.858931][ T5582] usb 5-1: SerialNumber: syz
[  466.890888][ T5582] usb 5-1: config 0 descriptor??
[  467.000816][   T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  467.059397][ T5582] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  467.136270][T10487] overlayfs: missing 'workdir'
[  467.160047][   T10] usb 4-1: Using ep0 maxpacket: 32
[  467.161917][   T10] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  467.161943][   T10] usb 4-1: config 0 has no interface number 0
[  467.161966][   T10] usb 4-1: config 0 interface 153 has no altsetting 0
[  467.165154][   T10] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  467.165377][   T10] usb 4-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  467.165390][   T10] usb 4-1: Product: syz
[  467.165398][   T10] usb 4-1: Manufacturer: syz
[  467.165405][   T10] usb 4-1: SerialNumber: syz
[  467.186703][   T10] usb 4-1: config 0 descriptor??
[  467.461969][T10482] [U] �	
[  467.465456][   T10] hub 4-1:0.153: bad descriptor, ignoring hub
[  467.466006][   T10] hub 4-1:0.153: probe with driver hub failed with error -5
[  467.484092][   T10] sierra 4-1:0.153: Sierra USB modem converter detected
[  467.506494][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  467.507877][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  467.510445][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1443'.
[  467.528052][   T10] usb 4-1: USB disconnect, device number 34
[  467.543053][   T10] sierra 4-1:0.153: device disconnected
[  467.819349][   T37] kauditd_printk_skb: 55 callbacks suppressed
[  467.819369][   T37] audit: type=1326 audit(1786019477.709:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.819419][   T37] audit: type=1326 audit(1786019477.709:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.829230][   T37] audit: type=1326 audit(1786019477.719:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.851279][   T37] audit: type=1326 audit(1786019477.749:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.854866][   T37] audit: type=1326 audit(1786019477.749:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.855359][   T37] audit: type=1326 audit(1786019477.749:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.860613][   T37] audit: type=1326 audit(1786019477.759:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.860661][   T37] audit: type=1326 audit(1786019477.759:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.861126][   T37] audit: type=1326 audit(1786019477.759:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.872604][   T37] audit: type=1326 audit(1786019477.759:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10478 comm="syz.4.1436" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fbd6058e0d9 code=0x7ffc0000
[  467.920385][ T5582] ssu100 5-1:0.0: probe with driver ssu100 failed with error -110
[  467.995254][T10503] FAULT_INJECTION: forcing a failure.
[  467.995254][T10503] name failslab, interval 1, probability 0, space 0, times 0
[  467.995291][T10503] CPU: 0 UID: 0 PID: 10503 Comm: syz.1.1445 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  467.995318][T10503] Tainted: [L]=SOFTLOCKUP
[  467.995325][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  467.995337][T10503] Call Trace:
[  467.995344][T10503]  <TASK>
[  467.995352][T10503]  dump_stack_lvl+0xe8/0x150
[  467.995387][T10503]  should_fail_ex+0x467/0x600
[  467.995421][T10503]  should_failslab+0xa8/0x100
[  467.995446][T10503]  __kmalloc_node_noprof+0x107/0x7d0
[  467.995468][T10503]  ? __get_vm_area_node+0x1f2/0x300
[  467.995496][T10503]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  467.995514][T10503]  ? __vmalloc_node_range_noprof+0x5d9/0x1730
[  467.995539][T10503]  __vmalloc_node_range_noprof+0x5d9/0x1730
[  467.995564][T10503]  ? is_bpf_text_address+0x26/0x2b0
[  467.995601][T10503]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  467.995620][T10503]  ? is_bpf_text_address+0x26/0x2b0
[  467.995644][T10503]  ? kernel_text_address+0xa5/0xe0
[  467.995668][T10503]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  467.995688][T10503]  __vmalloc_noprof+0xd2/0x120
[  467.995706][T10503]  ? bpf_prog_alloc_no_stats+0x47/0x4f0
[  467.995729][T10503]  bpf_prog_alloc_no_stats+0x47/0x4f0
[  467.995748][T10503]  ? bpf_prog_alloc+0x2a/0x1a0
[  467.995770][T10503]  bpf_prog_alloc+0x3c/0x1a0
[  467.995792][T10503]  bpf_prog_load+0x7f8/0x1c00
[  467.995823][T10503]  ? __pfx_bpf_prog_load+0x10/0x10
[  467.995866][T10503]  __sys_bpf+0xd0d/0xd90
[  467.995892][T10503]  ? __pfx___sys_bpf+0x10/0x10
[  467.995918][T10503]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  467.995948][T10503]  ? rt_mutex_slowunlock+0x219/0x460
[  467.995984][T10503]  ? ksys_write+0x248/0x270
[  467.996010][T10503]  ? __pfx_ksys_write+0x10/0x10
[  467.996044][T10503]  __x64_sys_bpf+0xba/0xd0
[  467.996072][T10503]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.996093][T10503]  do_syscall_64+0x174/0x580
[  467.996117][T10503]  ? trace_irq_disable+0x3b/0x140
[  467.996136][T10503]  ? clear_bhb_loop+0x40/0x90
[  467.996157][T10503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  467.996176][T10503] RIP: 0033:0x7f624439e0d9
[  467.996194][T10503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  467.996210][T10503] RSP: 002b:00007f62425f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  467.996231][T10503] RAX: ffffffffffffffda RBX: 00007f6244625fa0 RCX: 00007f624439e0d9
[  467.996245][T10503] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005
[  467.996257][T10503] RBP: 00007f62425f6090 R08: 0000000000000000 R09: 0000000000000000
[  467.996269][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  467.996280][T10503] R13: 00007f6244626038 R14: 00007f6244625fa0 R15: 00007fff7ae09338
[  467.996309][T10503]  </TASK>
[  468.258187][T10509] netlink: 'syz.0.1448': attribute type 3 has an invalid length.
[  468.508171][T10514] bond0: (slave syz_tun): Releasing backup interface
[  468.652299][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1452'.
[  468.652332][T10519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1452'.
[  468.728429][T10514] bridge_slave_0: left allmulticast mode
[  468.728452][T10514] bridge_slave_0: left promiscuous mode
[  468.800774][T10514] bridge0: port 1(bridge_slave_0) entered disabled state
[  468.993238][T10514] bridge_slave_1: left allmulticast mode
[  468.993266][T10514] bridge_slave_1: left promiscuous mode
[  468.993495][T10514] bridge0: port 2(bridge_slave_1) entered disabled state
[  469.184416][T10514] bond0: (slave bond_slave_0): Releasing backup interface
[  469.263751][T10514] bond0: (slave 
5
@0�): Releasing backup interface
[  469.375858][T10514] team0: Port device team_slave_0 removed
[  469.582291][T10514] team0: Port device team_slave_1 removed
[  469.586793][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  469.586823][T10514] batman_adv: batadv0: Removing interface: batadv_slave_0
[  469.614370][ T5844] usb 5-1: USB disconnect, device number 55
[  469.714708][T10533] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  469.728628][T10514] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  469.728656][T10514] batman_adv: batadv0: Removing interface: batadv_slave_1
[  469.788594][T10514] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.011540][T10541] FAULT_INJECTION: forcing a failure.
[  470.011540][T10541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  470.011570][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.2.1459 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  470.011591][T10541] Tainted: [L]=SOFTLOCKUP
[  470.011597][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  470.011607][T10541] Call Trace:
[  470.011613][T10541]  <TASK>
[  470.011619][T10541]  dump_stack_lvl+0xe8/0x150
[  470.011649][T10541]  should_fail_ex+0x467/0x600
[  470.011679][T10541]  _copy_from_iter+0x1d3/0x1660
[  470.011699][T10541]  ? rcu_is_watching+0x15/0xb0
[  470.011721][T10541]  ? trace_kmem_cache_alloc+0x29/0xe0
[  470.011739][T10541]  ? __pfx__copy_from_iter+0x10/0x10
[  470.011753][T10541]  ? __alloc_skb+0x276/0x7a0
[  470.011769][T10541]  ? __alloc_skb+0x276/0x7a0
[  470.011788][T10541]  ? netlink_sendmsg+0x650/0xb40
[  470.011807][T10541]  ? skb_put+0x112/0x210
[  470.011826][T10541]  netlink_sendmsg+0x6c0/0xb40
[  470.011850][T10541]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.011870][T10541]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  470.011892][T10541]  ? __kernel_text_address+0xd/0x30
[  470.011907][T10541]  ? unwind_get_return_address+0x4d/0x90
[  470.011925][T10541]  ? __pfx_netlink_sendmsg+0x10/0x10
[  470.011954][T10541]  sock_sendmsg_nosec+0x13a/0x180
[  470.011972][T10541]  ____sys_sendmsg+0x565/0x870
[  470.011992][T10541]  ? __might_fault+0xaf/0x130
[  470.012014][T10541]  ? __pfx_____sys_sendmsg+0x10/0x10
[  470.012038][T10541]  ? import_iovec+0x73/0xa0
[  470.012060][T10541]  ___sys_sendmsg+0x2a5/0x360
[  470.012078][T10541]  ? __lock_acquire+0x683/0x2ce0
[  470.012099][T10541]  ? __pfx____sys_sendmsg+0x10/0x10
[  470.012146][T10541]  ? __fget_files+0x2a/0x420
[  470.012160][T10541]  ? __fget_files+0x3a8/0x420
[  470.012182][T10541]  __x64_sys_sendmsg+0x1b7/0x290
[  470.012203][T10541]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  470.012235][T10541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.012250][T10541]  do_syscall_64+0x174/0x580
[  470.012270][T10541]  ? trace_irq_disable+0x3b/0x140
[  470.012288][T10541]  ? clear_bhb_loop+0x40/0x90
[  470.012310][T10541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.012327][T10541] RIP: 0033:0x7f245573e0d9
[  470.012344][T10541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  470.012361][T10541] RSP: 002b:00007f2453996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  470.012380][T10541] RAX: ffffffffffffffda RBX: 00007f24559c5fa0 RCX: 00007f245573e0d9
[  470.012394][T10541] RDX: 0000000004000000 RSI: 00002000000005c0 RDI: 0000000000000004
[  470.012406][T10541] RBP: 00007f2453996090 R08: 0000000000000000 R09: 0000000000000000
[  470.012418][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.012429][T10541] R13: 00007f24559c6038 R14: 00007f24559c5fa0 R15: 00007ffd2abe5ca8
[  470.012456][T10541]  </TASK>
[  470.030130][ T5720] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  470.101392][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.101614][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.101793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  470.194021][ T5720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.194076][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.194103][ T5720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.194125][ T5720] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  470.194166][ T5720] usb 2-1: New USB device found, idVendor=047e, idProduct=ffff, bcdDevice= 0.00
[  470.194189][ T5720] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.219416][ T5720] usb 2-1: config 0 descriptor??
[  470.220139][ T5844] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  470.371799][ T5844] usb 5-1: Using ep0 maxpacket: 32
[  470.385840][ T5844] usb 5-1: config 0 has an invalid interface number: 153 but max is 0
[  470.385868][ T5844] usb 5-1: config 0 has no interface number 0
[  470.385902][ T5844] usb 5-1: config 0 interface 153 has no altsetting 0
[  470.398074][ T5844] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  470.398104][ T5844] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  470.398175][ T5844] usb 5-1: Product: syz
[  470.398190][ T5844] usb 5-1: Manufacturer: syz
[  470.398205][ T5844] usb 5-1: SerialNumber: syz
[  470.457964][ T5844] usb 5-1: config 0 descriptor??
[  470.730917][ T5844] hub 5-1:0.153: bad descriptor, ignoring hub
[  470.731013][ T5844] hub 5-1:0.153: probe with driver hub failed with error -5
[  470.735098][T10532] [U] �	
[  470.738063][ T5844] sierra 5-1:0.153: Sierra USB modem converter detected
[  470.781374][ T5844] usb 5-1: USB disconnect, device number 56
[  470.784434][ T5844] sierra 5-1:0.153: device disconnected
[  470.850495][ T5706] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  470.890863][ T5720] usbhid 2-1:0.0: can't add hid device: -71
[  470.890939][ T5720] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  470.915037][ T5720] usb 2-1: USB disconnect, device number 34
[  471.003222][ T5706] usb 3-1: config 1 interface 0 altsetting 64 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  471.003255][ T5706] usb 3-1: config 1 interface 0 has no altsetting 0
[  471.005362][ T5706] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  471.005393][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.005413][ T5706] usb 3-1: Product: 幨跼․颒蠢摏펜壄ꚶ萕ꡟ咝겵蘲쵃
[  471.005429][ T5706] usb 3-1: Manufacturer: 츑矫韦쵚濉뺶ᘱ쪞ᛎ礵ፇỆ抪뷸ᵴ罓섃싎ꃹ玻뽿邭ਖ਼땻汀㌲裝ີ಴℀㡓跲ᖔ᳞أ걨߃้㢜s㼘ꂓ䕻䳕ᦅ촄ৗ捛韩⸰뒯筓䓝븭氵ꑓ哦炼ꈖ뒣직럊抔鈤橲饭맡ປ➁୽喝굝➋
[  471.005453][ T5706] usb 3-1: SerialNumber: 股㴨晁褺翣옧뮋ⷙ㾈찰︓ༀ儞ᦔﯴ櫰迋搁㳇䩿붅潋馀奋鿜㡡ỵ䳚蓢ャ윶憕榸꧔줶旱셾孤實똨࢘ほ㟣앰玡良顫⌫堞샯豞ﶬ楜埲도軏׊寭Ὗ㒙渲䅕ᔌᨁ䨊滃ವ쓯鑤车產鼸~
[  471.113528][T10548] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  471.375732][T10570] FAULT_INJECTION: forcing a failure.
[  471.375732][T10570] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  471.375769][T10570] CPU: 1 UID: 0 PID: 10570 Comm: syz.4.1472 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  471.375796][T10570] Tainted: [L]=SOFTLOCKUP
[  471.375803][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  471.375814][T10570] Call Trace:
[  471.375821][T10570]  <TASK>
[  471.375832][T10570]  dump_stack_lvl+0xe8/0x150
[  471.375866][T10570]  should_fail_ex+0x467/0x600
[  471.375900][T10570]  prepare_alloc_pages+0x223/0x690
[  471.375930][T10570]  __alloc_frozen_pages_noprof+0x12f/0x380
[  471.375957][T10570]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  471.375980][T10570]  ? __alloc_frozen_pages_noprof+0x1db/0x380
[  471.376006][T10570]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  471.376033][T10570]  ? __pfx_policy_nodemask+0x10/0x10
[  471.376057][T10570]  ? lockdep_hardirqs_on+0x7a/0x110
[  471.376086][T10570]  __alloc_pages_noprof+0x10/0x100
[  471.376109][T10570]  alloc_pages_bulk_noprof+0x67e/0x890
[  471.376130][T10570]  ? alloc_pages_mpol+0x115/0x280
[  471.376155][T10570]  ? alloc_pages_noprof+0x161/0x2f0
[  471.376181][T10570]  __kasan_populate_vmalloc+0xb7/0x1c0
[  471.376210][T10570]  ? rt_spin_unlock+0x163/0x200
[  471.376234][T10570]  alloc_vmap_area+0xd1a/0x1420
[  471.376276][T10570]  ? __pfx_alloc_vmap_area+0x10/0x10
[  471.376304][T10570]  ? __kmalloc_cache_node_noprof+0x47b/0x6a0
[  471.376328][T10570]  ? __get_vm_area_node+0x136/0x300
[  471.376354][T10570]  ? __get_vm_area_node+0x136/0x300
[  471.376387][T10570]  __get_vm_area_node+0x1f2/0x300
[  471.376421][T10570]  __vmalloc_node_range_noprof+0x358/0x1730
[  471.376441][T10570]  ? copy_process+0x820/0x4390
[  471.376552][T10570]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  471.376614][T10570]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  471.376635][T10570]  ? rcu_is_watching+0x15/0xb0
[  471.376659][T10570]  ? trace_kmem_cache_alloc+0x29/0xe0
[  471.376685][T10570]  ? memcpy_and_pad+0x48/0x80
[  471.376716][T10570]  __vmalloc_node_noprof+0xc2/0x100
[  471.376736][T10570]  ? copy_process+0x820/0x4390
[  471.376758][T10570]  ? copy_process+0x820/0x4390
[  471.376783][T10570]  dup_task_struct+0x2a0/0x8f0
[  471.376834][T10570]  ? rt_spin_unlock+0x163/0x200
[  471.376855][T10570]  copy_process+0x820/0x4390
[  471.376885][T10570]  ? kstrtouint+0x6e/0xe0
[  471.376920][T10570]  ? __pfx_copy_process+0x10/0x10
[  471.376953][T10570]  kernel_clone+0x2d2/0x8d0
[  471.376978][T10570]  ? __pfx_kernel_clone+0x10/0x10
[  471.377009][T10570]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  471.377039][T10570]  __x64_sys_clone+0x1b6/0x230
[  471.377067][T10570]  ? __pfx___x64_sys_clone+0x10/0x10
[  471.377107][T10570]  ? __pfx_ksys_write+0x10/0x10
[  471.377140][T10570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.377162][T10570]  do_syscall_64+0x174/0x580
[  471.377188][T10570]  ? clear_bhb_loop+0x40/0x90
[  471.377212][T10570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.377231][T10570] RIP: 0033:0x7fbd6058e0d9
[  471.377250][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.377266][T10570] RSP: 002b:00007fbd5e7e5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  471.377286][T10570] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  471.377301][T10570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411
[  471.377313][T10570] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  471.377325][T10570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  471.377337][T10570] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  471.377367][T10570]  </TASK>
[  471.377517][T10570] warn_alloc: 1 callbacks suppressed
[  471.377528][T10570] syz.4.1472: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  471.377644][T10570] CPU: 1 UID: 0 PID: 10570 Comm: syz.4.1472 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  471.377681][T10570] Tainted: [L]=SOFTLOCKUP
[  471.377688][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  471.377699][T10570] Call Trace:
[  471.377707][T10570]  <TASK>
[  471.377717][T10570]  dump_stack_lvl+0xe8/0x150
[  471.377748][T10570]  warn_alloc+0x24c/0x270
[  471.377771][T10570]  ? kasan_quarantine_put+0xbb/0x1f0
[  471.377793][T10570]  ? __pfx_warn_alloc+0x10/0x10
[  471.377815][T10570]  ? __get_vm_area_node+0x20b/0x300
[  471.377849][T10570]  ? __get_vm_area_node+0x20b/0x300
[  471.377883][T10570]  __vmalloc_node_range_noprof+0x37d/0x1730
[  471.377920][T10570]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  471.377948][T10570]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  471.377968][T10570]  ? rcu_is_watching+0x15/0xb0
[  471.377993][T10570]  ? trace_kmem_cache_alloc+0x29/0xe0
[  471.378013][T10570]  ? memcpy_and_pad+0x48/0x80
[  471.378043][T10570]  __vmalloc_node_noprof+0xc2/0x100
[  471.378063][T10570]  ? copy_process+0x820/0x4390
[  471.378085][T10570]  ? copy_process+0x820/0x4390
[  471.378109][T10570]  dup_task_struct+0x2a0/0x8f0
[  471.378132][T10570]  ? rt_spin_unlock+0x163/0x200
[  471.378155][T10570]  copy_process+0x820/0x4390
[  471.378188][T10570]  ? kstrtouint+0x6e/0xe0
[  471.378229][T10570]  ? __pfx_copy_process+0x10/0x10
[  471.378265][T10570]  kernel_clone+0x2d2/0x8d0
[  471.378292][T10570]  ? __pfx_kernel_clone+0x10/0x10
[  471.378324][T10570]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  471.378355][T10570]  __x64_sys_clone+0x1b6/0x230
[  471.378382][T10570]  ? __pfx___x64_sys_clone+0x10/0x10
[  471.378418][T10570]  ? __pfx_ksys_write+0x10/0x10
[  471.378445][T10570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.378465][T10570]  do_syscall_64+0x174/0x580
[  471.378489][T10570]  ? clear_bhb_loop+0x40/0x90
[  471.378511][T10570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  471.378529][T10570] RIP: 0033:0x7fbd6058e0d9
[  471.378546][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.378561][T10570] RSP: 002b:00007fbd5e7e5fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  471.378580][T10570] RAX: ffffffffffffffda RBX: 00007fbd60815fa0 RCX: 00007fbd6058e0d9
[  471.378594][T10570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100411
[  471.378606][T10570] RBP: 00007fbd5e7e6090 R08: 0000000000000000 R09: 0000000000000000
[  471.378618][T10570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001
[  471.378653][T10570] R13: 00007fbd60816038 R14: 00007fbd60815fa0 R15: 00007ffeef2b1a38
[  471.378690][T10570]  </TASK>
[  471.378757][T10570] Mem-Info:
[  471.378766][T10570] active_anon:201 inactive_anon:7511 isolated_anon:0
[  471.378766][T10570]  active_file:13546 inactive_file:41527 isolated_file:0
[  471.378766][T10570]  unevictable:768 dirty:55 writeback:0
[  471.378766][T10570]  slab_reclaimable:12108 slab_unreclaimable:105792
[  471.378766][T10570]  mapped:33748 shmem:2490 pagetables:1456
[  471.378766][T10570]  sec_pagetables:0 bounce:0
[  471.378766][T10570]  kernel_misc_reclaimable:0
[  471.378766][T10570]  free:1307778 free_pcp:1659 free_cma:0
[  471.378818][T10570] Node 0 active_anon:804kB inactive_anon:30044kB active_file:53876kB inactive_file:166108kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134888kB dirty:220kB writeback:0kB shmem:8424kB kernel_stack:13824kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  471.378921][T10570] Node 1 active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  471.378969][T10570] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  471.379076][T10570] lowmem_reserve[]: 0 2500 2502 2502 2502
[  471.379109][T10570] Node 0 DMA32 free:1275116kB boost:0kB min:3920kB low:6452kB high:8984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:804kB inactive_anon:30044kB active_file:53876kB inactive_file:166108kB unevictable:1536kB writepending:220kB zspages:852kB present:3129332kB managed:2560556kB mlocked:0kB bounce:0kB free_pcp:6628kB local_pcp:2636kB free_cma:0kB
[  471.379168][T10570] lowmem_reserve[]: 0 0 1 1 1
[  471.379250][T10570] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1852kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:4kB free_cma:0kB
[  471.379304][T10570] lowmem_reserve[]: 0 0 0 0 0
[  471.379334][T10570] Node 1 Normal free:3940636kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:308kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  471.379437][T10570] lowmem_reserve[]: 0 0 0 0 0
[  471.379466][T10570] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  471.379628][T10570] Node 0 DMA32: 829*4kB (UME) 965*8kB (UM) 567*16kB (UME) 539*32kB (UME) 173*64kB (UME) 135*128kB (UME) 138*256kB (UME) 77*512kB (UME) 20*1024kB (UME) 10*2048kB (M) 267*4096kB (UM) = 1275052kB
[  471.379833][T10570] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  471.441591][T10570] Node 1 Normal: 1*4kB (U) 5*8kB (UM) 7*16kB (U) 6*32kB (U) 3*64kB (U) 2*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940636kB
[  471.441728][T10570] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  471.441745][T10570] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  471.441760][T10570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  471.441775][T10570] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  471.441791][T10570] 57854 total pagecache pages
[  471.441798][T10570] 20 pages in swap cache
[  471.441805][T10570] Free swap  = 121016kB
[  471.441812][T10570] Total swap = 124996kB
[  471.441820][T10570] 2097051 pages RAM
[  471.441827][T10570] 0 pages HighMem/MovableOnly
[  471.441834][T10570] 424834 pages reserved
[  471.441841][T10570] 0 pages cma reserved
[  471.859167][ T5706] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  472.485306][ T5706] usb 3-1: USB disconnect, device number 25
[  472.797196][T10597] FAULT_INJECTION: forcing a failure.
[  472.797196][T10597] name failslab, interval 1, probability 0, space 0, times 0
[  472.797257][T10597] CPU: 0 UID: 0 PID: 10597 Comm: syz.0.1480 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  472.797285][T10597] Tainted: [L]=SOFTLOCKUP
[  472.797293][T10597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  472.797305][T10597] Call Trace:
[  472.797313][T10597]  <TASK>
[  472.797322][T10597]  dump_stack_lvl+0xe8/0x150
[  472.797358][T10597]  should_fail_ex+0x467/0x600
[  472.797393][T10597]  should_failslab+0xa8/0x100
[  472.797419][T10597]  __kmalloc_cache_noprof+0xa0/0x6b0
[  472.797441][T10597]  ? hfsplus_init_fs_context+0x52/0x120
[  472.797541][T10597]  ? hfsplus_init_fs_context+0x52/0x120
[  472.797571][T10597]  hfsplus_init_fs_context+0x52/0x120
[  472.797598][T10597]  alloc_fs_context+0x9a3/0xd00
[  472.797692][T10597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.797714][T10597]  __se_sys_fsopen+0xa5/0x2c0
[  472.797742][T10597]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.797763][T10597]  do_syscall_64+0x174/0x580
[  472.797792][T10597]  ? clear_bhb_loop+0x40/0x90
[  472.797816][T10597]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.797836][T10597] RIP: 0033:0x7f097112e0d9
[  472.797855][T10597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  472.797873][T10597] RSP: 002b:00007f096f344028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae
[  472.797895][T10597] RAX: ffffffffffffffda RBX: 00007f09713b6180 RCX: 00007f097112e0d9
[  472.797910][T10597] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000500
[  472.797922][T10597] RBP: 00007f096f344090 R08: 0000000000000000 R09: 0000000000000000
[  472.797935][T10597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  472.797947][T10597] R13: 00007f09713b6218 R14: 00007f09713b6180 R15: 00007ffe1f6786b8
[  472.797979][T10597]  </TASK>
[  473.300183][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  473.565525][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'.
[  473.565568][T10603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  473.794948][T10619] bond1: option xmit_hash_policy: invalid value (6)
[  473.799660][T10623] FAULT_INJECTION: forcing a failure.
[  473.799660][T10623] name failslab, interval 1, probability 0, space 0, times 0
[  473.799694][T10623] CPU: 1 UID: 0 PID: 10623 Comm: syz.0.1492 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  473.799722][T10623] Tainted: [L]=SOFTLOCKUP
[  473.799729][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  473.799741][T10623] Call Trace:
[  473.799749][T10623]  <TASK>
[  473.799758][T10623]  dump_stack_lvl+0xe8/0x150
[  473.799795][T10623]  should_fail_ex+0x467/0x600
[  473.799830][T10623]  should_failslab+0xa8/0x100
[  473.799855][T10623]  __kmalloc_cache_noprof+0xa0/0x6b0
[  473.799878][T10623]  ? iopt_alloc_pages+0x85/0x4a0
[  473.799919][T10623]  ? iopt_alloc_pages+0x85/0x4a0
[  473.799943][T10623]  ? rt_spin_unlock+0x163/0x200
[  473.799968][T10623]  iopt_alloc_pages+0x85/0x4a0
[  473.799997][T10623]  iopt_alloc_user_pages+0x42/0xe0
[  473.800023][T10623]  iopt_map_user_pages+0x4e/0xd0
[  473.800047][T10623]  iommufd_ioas_map+0x391/0x4c0
[  473.800080][T10623]  ? __pfx_iommufd_ioas_map+0x10/0x10
[  473.800112][T10623]  iommufd_fops_ioctl+0x468/0x600
[  473.800143][T10623]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  473.800181][T10623]  ? __fget_files+0x2a/0x420
[  473.800206][T10623]  ? bpf_lsm_file_ioctl+0x9/0x20
[  473.800235][T10623]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  473.800261][T10623]  __se_sys_ioctl+0xff/0x170
[  473.800286][T10623]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.800309][T10623]  do_syscall_64+0x174/0x580
[  473.800334][T10623]  ? trace_irq_disable+0x3b/0x140
[  473.800355][T10623]  ? clear_bhb_loop+0x40/0x90
[  473.800378][T10623]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.800398][T10623] RIP: 0033:0x7f097112e0d9
[  473.800416][T10623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.800432][T10623] RSP: 002b:00007f096f386028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  473.800453][T10623] RAX: ffffffffffffffda RBX: 00007f09713b5fa0 RCX: 00007f097112e0d9
[  473.800468][T10623] RDX: 00002000000002c0 RSI: 0000000000003b85 RDI: 0000000000000003
[  473.800502][T10623] RBP: 00007f096f386090 R08: 0000000000000000 R09: 0000000000000000
[  473.800515][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  473.800527][T10623] R13: 00007f09713b6038 R14: 00007f09713b5fa0 R15: 00007ffe1f6786b8
[  473.800558][T10623]  </TASK>
[  473.937964][ T5706] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  474.123281][ T5706] usb 3-1: Using ep0 maxpacket: 32
[  474.123383][T10619] bond1 (unregistering): Released all slaves
[  474.126072][ T5706] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  474.126097][ T5706] usb 3-1: config 0 has no interface number 0
[  474.126128][ T5706] usb 3-1: config 0 interface 153 has no altsetting 0
[  474.128661][ T5706] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5
[  474.128688][ T5706] usb 3-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3
[  474.128709][ T5706] usb 3-1: Product: syz
[  474.128723][ T5706] usb 3-1: Manufacturer: syz
[  474.128738][ T5706] usb 3-1: SerialNumber: syz
[  474.238603][ T5706] usb 3-1: config 0 descriptor??
[  474.539384][ T5706] hub 3-1:0.153: bad descriptor, ignoring hub
[  474.539419][ T5706] hub 3-1:0.153: probe with driver hub failed with error -5
[  474.636202][ T5706] sierra 3-1:0.153: Sierra USB modem converter detected
[  474.640271][T10599] [U] �	
[  474.689357][ T5706] usb 3-1: USB disconnect, device number 26
[  474.690911][ T5706] sierra 3-1:0.153: device disconnected
[  476.448873][T10675] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20004
[  476.492808][T10680] netlink: 'syz.3.1510': attribute type 3 has an invalid length.
[  476.581608][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.581809][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.581984][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.582179][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.582345][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.770971][ T5583] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  476.930063][ T5583] usb 5-1: Using ep0 maxpacket: 32
[  476.932319][ T5583] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  476.932349][ T5583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.939091][ T5583] usb 5-1: config 0 descriptor??
[  476.984482][ T5583] gspca_main: sq930x-2.14.0 probing 041e:403c
[  476.986857][T10706] FAULT_INJECTION: forcing a failure.
[  476.986857][T10706] name failslab, interval 1, probability 0, space 0, times 0
[  476.986890][T10706] CPU: 0 UID: 0 PID: 10706 Comm: syz.0.1521 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  476.986917][T10706] Tainted: [L]=SOFTLOCKUP
[  476.986924][T10706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  476.986935][T10706] Call Trace:
[  476.986942][T10706]  <TASK>
[  476.986951][T10706]  dump_stack_lvl+0xe8/0x150
[  476.986985][T10706]  should_fail_ex+0x467/0x600
[  476.987021][T10706]  should_failslab+0xa8/0x100
[  476.987047][T10706]  kmem_cache_alloc_noprof+0xa4/0x650
[  476.987068][T10706]  ? skb_clone+0x212/0x3a0
[  476.987093][T10706]  ? skb_clone+0x212/0x3a0
[  476.987121][T10706]  skb_clone+0x212/0x3a0
[  476.987149][T10706]  __netlink_deliver_tap+0x413/0x860
[  476.987188][T10706]  ? netlink_deliver_tap+0x2e/0x1b0
[  476.987215][T10706]  netlink_deliver_tap+0x19c/0x1b0
[  476.987241][T10706]  netlink_unicast+0x7b8/0x990
[  476.987271][T10706]  netlink_sendmsg+0x813/0xb40
[  476.987303][T10706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.987331][T10706]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  476.987361][T10706]  ? __kernel_text_address+0xd/0x30
[  476.987381][T10706]  ? unwind_get_return_address+0x4d/0x90
[  476.987406][T10706]  ? __pfx_netlink_sendmsg+0x10/0x10
[  476.987430][T10706]  sock_sendmsg_nosec+0x13a/0x180
[  476.987462][T10706]  ____sys_sendmsg+0x565/0x870
[  476.987488][T10706]  ? __might_fault+0xaf/0x130
[  476.987515][T10706]  ? __pfx_____sys_sendmsg+0x10/0x10
[  476.987548][T10706]  ? import_iovec+0x73/0xa0
[  476.987573][T10706]  ___sys_sendmsg+0x2a5/0x360
[  476.987594][T10706]  ? __lock_acquire+0x683/0x2ce0
[  476.987618][T10706]  ? __pfx____sys_sendmsg+0x10/0x10
[  476.987676][T10706]  ? __fget_files+0x2a/0x420
[  476.987697][T10706]  ? __fget_files+0x3a8/0x420
[  476.987726][T10706]  __x64_sys_sendmsg+0x1b7/0x290
[  476.987754][T10706]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  476.987795][T10706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.987816][T10706]  do_syscall_64+0x174/0x580
[  476.987842][T10706]  ? trace_irq_disable+0x3b/0x140
[  476.987862][T10706]  ? clear_bhb_loop+0x40/0x90
[  476.987883][T10706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.987903][T10706] RIP: 0033:0x7f097112e0d9
[  476.987921][T10706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  476.987936][T10706] RSP: 002b:00007f096f386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  476.987956][T10706] RAX: ffffffffffffffda RBX: 00007f09713b5fa0 RCX: 00007f097112e0d9
[  476.987971][T10706] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  476.987983][T10706] RBP: 00007f096f386090 R08: 0000000000000000 R09: 0000000000000000
[  476.987995][T10706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  476.988007][T10706] R13: 00007f09713b6038 R14: 00007f09713b5fa0 R15: 00007ffe1f6786b8
[  476.988038][T10706]  </TASK>
[  477.253735][T10708] netlink: 'syz.2.1522': attribute type 3 has an invalid length.
[  477.450030][ T5720] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  477.450101][ T5706] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  477.601884][ T5720] usb 2-1: config 254 has an invalid interface number: 94 but max is 0
[  477.601914][ T5720] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  477.601933][ T5720] usb 2-1: config 254 has no interface number 0
[  477.601971][ T5720] usb 2-1: config 254 interface 94 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  477.601998][ T5720] usb 2-1: config 254 interface 94 has no altsetting 0
[  477.602205][ T5706] usb 4-1: Using ep0 maxpacket: 16
[  477.605360][ T5720] usb 2-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=f1.7e
[  477.605387][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.605406][ T5720] usb 2-1: Product: syz
[  477.605420][ T5720] usb 2-1: Manufacturer: syz
[  477.605434][ T5720] usb 2-1: SerialNumber: syz
[  477.609116][ T5706] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config
[  477.609168][ T5706] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  477.609196][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  477.609276][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  477.632575][ T5706] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  477.632606][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.632627][ T5706] usb 4-1: Product: syz
[  477.632642][ T5706] usb 4-1: Manufacturer: syz
[  477.634044][ T5706] usb 4-1: SerialNumber: syz
[  477.670682][ T5706] usb 4-1: config 0 descriptor??
[  477.895206][ T5720] usb 2-1: USB disconnect, device number 35
[  478.001089][ T5583] gspca_sq930x: ucbus_write failed -110
[  478.001210][ T5583] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[  478.081347][ T5706] appledisplay 4-1:0.0: Error while getting initial brightness: -110
[  478.081431][    C1] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -1
[  478.085777][ T5706] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110
[  478.261463][ T5706] usb 4-1: USB disconnect, device number 35
[  479.335169][T10732] fuse: Unknown parameter 'fd}0x0000000000000004'
[  479.503305][T10740] netlink: 'syz.2.1533': attribute type 3 has an invalid length.
[  480.587390][   T31] ------------[ cut here ]------------
[  480.587406][   T31] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  480.587432][   T31] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:0/31
[  480.587584][   T31] Modules linked in:
[  480.587604][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  480.587631][   T31] Tainted: [L]=SOFTLOCKUP
[  480.587639][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  480.587650][   T31] Workqueue: events drm_fb_helper_damage_work
[  480.587731][   T31] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560
[  480.587757][   T31] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49
[  480.587774][   T31] RSP: 0018:ffffc90000a5f7e0 EFLAGS: 00010246
[  480.587790][   T31] RAX: 1ffff11004caae00 RBX: 0000000000000000 RCX: 0000000000000000
[  480.587804][   T31] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550
[  480.587819][   T31] RBP: ffffc90000a5f8c8 R08: 0000000000000000 R09: 0000000000000000
[  480.587831][   T31] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020
[  480.587846][   T31] R13: ffff888026557000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60
[  480.587860][   T31] FS:  0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000
[  480.587877][   T31] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.587891][   T31] CR2: 0000200000404030 CR3: 000000000dfb0000 CR4: 00000000003526f0
[  480.587908][   T31] Call Trace:
[  480.587917][   T31]  <TASK>
[  480.587930][   T31]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  480.587953][   T31]  ? rt_spin_unlock+0x157/0x200
[  480.587975][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  480.588008][   T31]  ? rt_spin_unlock+0x163/0x200
[  480.588031][   T31]  ? drm_vblank_get+0x147/0x280
[  480.588057][   T31]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  480.588110][   T31]  drm_fb_helper_damage_work+0x6cf/0xf00
[  480.588153][   T31]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  480.588200][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  480.588231][   T31]  ? rcu_is_watching+0x15/0xb0
[  480.588258][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  480.588282][   T31]  process_scheduled_works+0xa8e/0x14e0
[  480.588337][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  480.588377][   T31]  ? assign_work+0x3cf/0x5d0
[  480.588407][   T31]  worker_thread+0xa47/0xfb0
[  480.588459][   T31]  kthread+0x388/0x470
[  480.588521][   T31]  ? __pfx_worker_thread+0x10/0x10
[  480.588543][   T31]  ? __pfx_kthread+0x10/0x10
[  480.588572][   T31]  ret_from_fork+0x514/0xb70
[  480.588616][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  480.588644][   T31]  ? __switch_to+0xc89/0x1420
[  480.588704][   T31]  ? __pfx_kthread+0x10/0x10
[  480.588734][   T31]  ret_from_fork_asm+0x1a/0x30
[  480.588809][   T31]  </TASK>
[  480.588824][   T31] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  480.588841][   T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  480.588867][   T31] Tainted: [L]=SOFTLOCKUP
[  480.588874][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  480.588886][   T31] Workqueue: events drm_fb_helper_damage_work
[  480.588911][   T31] Call Trace:
[  480.588920][   T31]  <TASK>
[  480.588928][   T31]  vpanic+0x56c/0xa60
[  480.588953][   T31]  ? __pfx__printk+0x10/0x10
[  480.588977][   T31]  ? __pfx_vpanic+0x10/0x10
[  480.588994][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  480.589018][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  480.589050][   T31]  panic+0xc5/0xd0
[  480.589069][   T31]  ? __pfx_panic+0x10/0x10
[  480.589099][   T31]  ? ret_from_fork_asm+0x1a/0x30
[  480.589123][   T31]  __warn+0x315/0x4c0
[  480.589147][   T31]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[  480.589175][   T31]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[  480.589199][   T31]  __report_bug+0x276/0x570
[  480.589302][   T31]  ? drm_crtc_wait_one_vblank+0x3bc/0x560
[  480.589329][   T31]  ? __pfx___report_bug+0x10/0x10
[  480.589365][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  480.589392][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  480.589417][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  480.589447][   T31]  report_bug_entry+0x19a/0x290
[  480.589474][   T31]  ? drm_crtc_wait_one_vblank+0x51a/0x560
[  480.589496][   T31]  ? drm_crtc_wait_one_vblank+0x51f/0x560
[  480.589519][   T31]  handle_bug+0xce/0x200
[  480.589548][   T31]  exc_invalid_op+0x1a/0x50
[  480.589577][   T31]  asm_exc_invalid_op+0x1a/0x20
[  480.589595][   T31] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560
[  480.589620][   T31] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49
[  480.589636][   T31] RSP: 0018:ffffc90000a5f7e0 EFLAGS: 00010246
[  480.589651][   T31] RAX: 1ffff11004caae00 RBX: 0000000000000000 RCX: 0000000000000000
[  480.589665][   T31] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550
[  480.589680][   T31] RBP: ffffc90000a5f8c8 R08: 0000000000000000 R09: 0000000000000000
[  480.589692][   T31] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020
[  480.589707][   T31] R13: ffff888026557000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60
[  480.589744][   T31]  ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10
[  480.589768][   T31]  ? rt_spin_unlock+0x157/0x200
[  480.589788][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[  480.589820][   T31]  ? rt_spin_unlock+0x163/0x200
[  480.589844][   T31]  ? drm_vblank_get+0x147/0x280
[  480.589871][   T31]  drm_client_modeset_wait_for_vblank+0xc5/0xf0
[  480.589891][   T31]  drm_fb_helper_damage_work+0x6cf/0xf00
[  480.589923][   T31]  ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[  480.589969][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  480.589999][   T31]  ? rcu_is_watching+0x15/0xb0
[  480.590027][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  480.590051][   T31]  process_scheduled_works+0xa8e/0x14e0
[  480.590104][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  480.590135][   T31]  ? assign_work+0x3cf/0x5d0
[  480.590171][   T31]  worker_thread+0xa47/0xfb0
[  480.590224][   T31]  kthread+0x388/0x470
[  480.590251][   T31]  ? __pfx_worker_thread+0x10/0x10
[  480.590274][   T31]  ? __pfx_kthread+0x10/0x10
[  480.590302][   T31]  ret_from_fork+0x514/0xb70
[  480.590334][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  480.590362][   T31]  ? __switch_to+0xc89/0x1420
[  480.590398][   T31]  ? __pfx_kthread+0x10/0x10
[  480.590428][   T31]  ret_from_fork_asm+0x1a/0x30
[  480.590464][   T31]  </TASK>
[  480.590768][   T31] Kernel Offset: disabled