last executing test programs:

3m55.578120217s ago: executing program 3 (id=1855):
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e, 0x11, 0xffffffffffffffff, 0x8a6d6000)

3m55.474013945s ago: executing program 3 (id=1856):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x2f6}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x301040, 0x184, 0x38}, &(0x7f00000001c0)='./file0\x00', 0x47, 0x0, 0x23456})
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = gettid()
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x50, 0x0)
tkill(r5, 0x12)
tkill(r5, 0x14)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f00000000c0)={'netdevsim0\x00', @random="013301300108"})
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900ff00000028001a000a01010200000000000000000076d0f8b62ac1e2d5ed0e43e58c3f6d65e808c7eb5ab6"], 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES32=r8], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r11 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
r12 = fsmount(r11, 0x0, 0x82)
fchdir(r12)
bind$inet(r12, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10)
utimensat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
r13 = memfd_secret(0x80000)
sendto$rxrpc(r13, &(0x7f0000000000)="1c85a926e74ffe8b449f2f17f9f0e6f9cd8b99859b347a377bd151823096f9aade0231fd051ee40255139c85bb46667121a3ec746ce3008946c4ff4f152bce7ee767b4044df156fc3045bc468da57260e9918633c807c3cc1847b2bfcba99e75afb4df54", 0x64, 0x44941, 0x0, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
setsockopt$XDP_RX_RING(r14, 0x11b, 0x2, &(0x7f0000000300)=0x20, 0x4)
ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009a, 0x0, 0x8000000000000001}]})
ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000140)={0x7, 0xffffffffffffffff, 0x1})

3m52.803953815s ago: executing program 3 (id=1864):
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e, 0x11, 0xffffffffffffffff, 0x8a6d6000)

3m51.698113874s ago: executing program 3 (id=1869):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0)
umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4) (fail_nth: 5)

3m51.351450942s ago: executing program 3 (id=1871):
r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x54b}}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r5, &(0x7f0000000080)='THAWED\x00', 0x7)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346869e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b57eaee05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fe, {0x0, 0x3, 0xdc, 0x5, 0x2, 0x1006, {0x6, 0x63a, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xa000, 0x4, r2, r3, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r2, &(0x7f0000000240))
ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write(r9, 0x0, 0x0)
recvmmsg$unix(r9, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0)
connect$unix(r10, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_NR_MMU_PAGES(r7, 0xae44, 0x18b)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8, 0xa, 0x7ffffffe}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc850}, 0x44)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000001100)=""/4099, &(0x7f00000010c0)=0x1003)
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3m50.973226879s ago: executing program 3 (id=1873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x2000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000661000/0x4000)=nil})

3m50.529485309s ago: executing program 32 (id=1873):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0)
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f00000000c0)={0xdf, 0x0, 0x2000})
ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x10000, 0x0, &(0x7f0000661000/0x4000)=nil})

3m39.920602265s ago: executing program 2 (id=1902):
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x8)
r1 = openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000004000)={0x2020}, 0x2020)

3m39.79404358s ago: executing program 2 (id=1903):
r0 = syz_open_dev$loop(0x0, 0x20b, 0xcc002)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000e, 0x11, r0, 0x8a6d6000)

3m39.71640514s ago: executing program 2 (id=1904):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x18b)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3m38.674504528s ago: executing program 2 (id=1907):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='sys_link\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50841, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
linkat(r0, &(0x7f0000000180)='sys_link\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x1000)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file0/file0/..\x00', 0x0, 0x1a474dc, 0x0)
umount2(&(0x7f0000000140)='./file0/file0/..\x00', 0x4)

3m38.513866344s ago: executing program 2 (id=1908):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000080)={0xb, @output={0x0, 0x0, {0x2383, 0x48f2}, 0xfffff000, 0x9}})
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000200))
socket(0x9, 0x4, 0x2)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x18, 0x1e})
r3 = semget$private(0x0, 0x3, 0x220)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='veno', 0x4)
shutdown(r4, 0x1)
semctl$SETVAL(r3, 0x3, 0x10, 0x0)

3m37.717178505s ago: executing program 2 (id=1909):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r2, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0x3ff}, 0x8)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040), 0x1, 0x40800)

3m37.106558682s ago: executing program 33 (id=1909):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
listen(r2, 0x4)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r1, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000001c0)="15", 0x1}], 0x1}}], 0x1, 0x20000000)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000180)={0x0, 0x4, 0x3ff}, 0x8)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040), 0x1, 0x40800)

10.675082683s ago: executing program 1 (id=2622):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000100))
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
listen(r2, 0x5)
setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080), 0x4)
syz_open_dev$hiddev(&(0x7f00000001c0), 0x22ef, 0x200000)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_connect$uac1(0x4, 0x103, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf1, 0x3, 0x1, 0x8, 0x80, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x40}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x6, 0x2b, "b95adeb7b287"}, @extension_unit={0x8, 0x24, 0x8, 0x4, 0x4, 0xc9, 't'}, @selector_unit={0x7, 0x24, 0x5, 0x2, 0x63, 'w5'}, @extension_unit={0x9, 0x24, 0x8, 0x2, 0x668f, 0xfe, 'Y\\'}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x3, 0xfd}, @extension_unit={0xa, 0x24, 0x8, 0x3, 0xb074, 0x6, "f42f21"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x4, 0x4, 0x2, 0x10, "2de654e7182208"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xf35, 0xbbed, 0x7, 0xca}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x57f, 0x4, 0x6, "c93aaec2"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xa, 0x1, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xfb, 0x8a, 0x7, {0x7, 0x25, 0x1, 0xc, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x6, 0xf2, 0x43, "fdaba8c35476b587"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0x3, 0x2, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x81, 0x1, 0x3, 0x4, "", "be1aa4"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x7, 0x1, {0x7, 0x25, 0x1, 0x4, 0x1, 0x9}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x2, 0x6, 0xda, 0xff}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x7, [{0x5c, &(0x7f00000003c0)=@string={0x5c, 0x3, "f5f6e31694d718a56fb09a7e0506a0044c2be06a5d7ec0484299944ccb452d1d9f8b9c5f647c7498de1a7a3ce97c1d5f6e651a585d0eed6d5ee506e25cb71f0c6c92263b34bf314737a4dedac41ac1db650a6eea2698dbbdabbd"}}, {0xab, &(0x7f0000000440)=@string={0xab, 0x3, "012b0315db597000e494221168db2054018d91b03ba6c732b5718f35b2d12470743a269af62963535016c37c5cd063defa95fb660de8c1a5afa70445bd2ef51d7942ed8cf71daf2fe3095b15ace2dff48ed5d641e59b22a7a18435f860a30b7adb4bae9089e99ec2d5aa9b642d1b0393c73580e95bb3d3b7e61a0ab431d5446faf4ca768f40cc177cb59a0e1f0ca838260b1afa09096eb611bf00d9c3f2b3504c57c51006be3319a04"}}, {0xb7, &(0x7f0000000500)=@string={0xb7, 0x3, "4d4b360ecb88d745b61b595c90df8f209068838c7f34a9611b260206044b2d4fa23e2097ce03a35bd48a8ec5c56e62550c85e14a86d56a4531bec9efe4aef7331d4f57fa47caa43ff01ae228953b155066d0540ebcd02798c385692beba67b6d08443aafeed16299b790e90b5f841219d29b1b15f2ca37844147c5ced8b58133bfb15a58f7d059be00f68a5fc1b23f2056516ed18cfb1386f238fb0c4a21cd6e9cf0630bec9aa4dd632ea83bb7e8b1a0033617b0c4"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x200a}}, {0x33, &(0x7f0000000640)=@string={0x33, 0x3, "157bf2f4c0468e7de6ba954027f2890fcc49b1f4f6212726da95cc613e4d489c060c2c6ba68a1b117914558d4b2d2d6e9c"}}, {0xd2, &(0x7f00000006c0)=@string={0xd2, 0x3, "ecc22b38efa708658e05d557fe7f9a3acf70fc66d53b106b2b521197a51759e7911951a5746ed0d618789dfa6925a9f6669cbf037a4cdaf4f230d8680bc96584fdb6618a17f22c6ec681b0f6086c5343d5f9b443c0e7454ddd5d5f7c57958a92c313411cf06a1c80ee262da5580bc802bf3771c19a26e4c54c4d35df0d506e03869c6e8f36310a802f4b274671afa5aad4bb123853cc1eec7f330419ef472e2e3d9b775ae231b6783f7721ab62b0e3b9529573486e9d1c6621c7f315dd47c2cb4d1fc3d2f505c4a8610000760bf1ad6a"}}]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
r3 = memfd_secret(0x0)
shutdown(r3, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000016a00)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r3}, 0x68)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0)

7.43810934s ago: executing program 1 (id=2631):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = syz_usb_connect$uac1(0x1, 0xd1, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x582, 0x42, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x3, 0x1, 0x79, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x1c}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x306, 0x1, 0x5}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x404, 0x3, 0x3, 0xf1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x62, 0x4}, @as_header={0x7, 0x24, 0x1, 0x0, 0x7, 0x3}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0x4, "cb13ff", "8e47"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x7, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x87, 0x54, 0x7, {0x7, 0x25, 0x1, 0xc, 0xa3, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xfd, 0xc, 0x8, 0x8, 0x3}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xba, 0x1, 0x9c, 0x75, "b6c88d408c1c9e1a"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x0, 0xfff1, 0xe, "6d14d103618458bffd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x3, 0xe6, {0x7, 0x25, 0x1, 0x8, 0x3, 0xd}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x33bf5a3381ef4381, 0x2, 0x1e, 0x0, 0x10, 0xfb}, 0x1a, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f1a0002bd3804000f0000000300"/26], 0x7, [{0x26, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}, {0x76, &(0x7f0000000240)=@string={0x76, 0x3, "d5c0c03417ad9b61b0f1b0cd1b44f0de993959c6f44557652262fbc93c8845d1145f817b2512d4d920c32de4674d4ee459364fda42983f8570233301db747c692abff559fe2140daf0d561d319da8e3c80eab684707dcc73237a668e73ea847a22c5295374c72b5240b5d61ab91133da4434e5f1"}}, {0x6b, &(0x7f00000002c0)=@string={0x6b, 0x3, "9bae2eb819dcee08cc6df930aa6f5f3e21ba774e0f01a1cbd8af0dd460c7412f9f53e56a745be342400d80f776c9fc9fd96bdf96f3de3c682fb9a5b72d6ceb802e0e1d876a541a74a4802be97e67f5635c70c9f479daa9cdd9a0600d8b5edc1c0a4dd2d7ee6f29a765"}}, {0xee, &(0x7f0000000340)=@string={0xee, 0x3, "1f4a5e5ad83fb0b4f57ed8a7eec62ce29deeab3db013c8695609355ae9e41df4a995bac112ad33351c5abad7f4fc166e9219797f21175937397abdd6334e8f74e04c8d54dd654d2e4b1b83cc82d31474ff0b0f48fe81e7e8a4e71248dbcd6c5556f41a52cf0c59f305a027d4ba879abfe39a6377ccec7b265c58151a11dd4b57ae2d198d0cb2041c4515fb18e8d0b4a90ab80e39665a84776fd9c01bd050830c6656fa45dd5eeece367a144cf0882ecacec3f84cc1288b1f1262262398ad95279f1281851822170ec80ed413276fc69dcd9c05243c57faafc76214d9fe7a62ea5d1d1fd37345fb16bc4c0dad"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2801}}]})
syz_usb_ep_write(r1, 0x22, 0x4b, &(0x7f0000000640)="187ba6059d7ff0ac2ba1f533f13be200f06f8a6d9f6cdcaa1efeaf6a77c7928e7b5fc512e7c1c4ade50facc4033cb92707e705a5df776614a342aa25b3560a4f0a524c07a8226a9aca12d9") (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000840)={0x1c, &(0x7f00000006c0)={0x20, 0x15, 0x4, "e8008914"}, 0x0, 0x0})

6.253775424s ago: executing program 0 (id=2636):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='maps\x00')
pipe2$9p(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r6, @ANYBLOB="050003"], 0x28}}, 0x0)
r7 = creat(&(0x7f0000000240)='./file1\x00', 0x0)
r8 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x80000)
write$P9_RLINK(r10, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7)
preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000040)=<r11=>0x0)
r12 = eventfd2(0x8000, 0x80000)
io_submit(r11, 0x7, &(0x7f0000000880)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x7f, r8, &(0x7f0000000280)="55445af30753568ae959e1584aa57580c08aab4594500d5ed38b6b5088081b568921d09a4196fd1aaf1e756cbdf63413e7a5ca6c62f17ef1c98612b1df319ff694d75847e328ef3b18c6068f124693c092239393f95cfa408bff8bc158ab798e22594aaef57ae3f62b57b60c52641a58cb2ab73cf533dc5c871592f22a142439e6b1fc793296670a376336115bda9e996cb1fa079a73f27bf34b2d2811540838e316226a0c945a3be3fd174b67e012e8110b499e946d1392dda5c9d8da27111eccee16b395ea629fceabb9f48f3ae2c9c371d4fd9e1e9ca5712945950a", 0xdd, 0x1, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f00000003c0)="f1d038f084bf1aaca334", 0xa, 0x7, 0x0, 0x1, r0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x400, r8, &(0x7f0000000480)="4cfb14e2b198da6aa6f708506532bb184a308db12df1df423fc725747f0795cf147d689d7766f23dd2c68e24d85e328434f2353fba36451d96e0cdf63b077533c62a4784f438f93d8dab23eedc844d866669f27b38f54d826bace7c8edb60a84df34f1c3f5fd", 0x66, 0x68, 0x0, 0x1, r12}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f0000000540), 0x0, 0x5, 0x0, 0x2, r9}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x81, r2, &(0x7f00000005c0)="50adcc07f721637ec14535512cc04fd3d83f9b0f2f8126c2ef96d489eca0365afcd285061e0575b716f06b6e42864bad0e6019c89bbbcfef1ce2369754fa82c18c8b71b2b84cdd37a7fc48f98e4f78fd409c461b1ac29798d0b9085b623cea26a3d31485cc310e8d10", 0x69, 0x7c580a2a, 0x0, 0x2, r9}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000680)="02fbae71cceb210c620c02be47be78ebc62e0104c64cf9144c4854d37d9e8e27121b4fe47bac41533e86c6a10c827fc561143e99978ab0d267dd5e645dbd03bd4af6bc561438451ba70bb4a399fbedbfd9a02e4c375f7dc948d547cb0837e520556459d021f05ae2684b5823b525f223c64ac0e01de076072dfaad49a8c44b33fa781cc27dfc47e3060e5fca642a2fa2a3e0253181faa1ee42fcbd819cf9688355c1f8cffdba0a30c2c8549f19d2ec22eb2eb9c266aaac673efd01fad527563bbf4cea6b8e46e87d28f772ad1cfba8a17b9edca872ed9bd85dc8409ff090f2311e14287c7dac04916ad3", 0xea, 0x10000}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0xa, r1, &(0x7f00000007c0)="e303b8faf12116183e468ffc586851729abb62c73020e3ff119c5e45a5f8aa45dffa111c54c4b0d51e81e39ba03ef937553b56ed0380e2111e8b26d90bcb578815ea91a60f8bd8b412f1cfb7687df4d1a7b36e68800b9c6464e4736fe44bee0640", 0x61, 0x80000001, 0x0, 0x3, r0}])
syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924"], 0x0)

4.922187787s ago: executing program 0 (id=2639):
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, 0x0, 0x0)

4.754158752s ago: executing program 0 (id=2642):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f00000002c0)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0xf1, {0xf1, 0x22, "054ab97996df175e1b762e21a5fb2ac73ad6a71b67975a22d9f860bf5b92c358b1611b17403dca624e7d97320660b8b0c296f6d744b17e4ebb10f0894fcf3729dd875cfbe546fa9f666d7378844a5e4f105a6ce0edcb2809c5818d4bbd003440c0bc51c2ecffabc9d09ae327268a243503a475382c3743ac49e4a69224aa13cc8a2257bd4c9a629b372f90f3e16283a8cb1544833b93d5f222ce9afe458c6d3e629d8702270d692e6741802e93706ec08080181584944fb5817debbe69807149e8764f959647aba22d1eca78c74aa7261589ff320e0de0f8a0df439e4be5f17b42ca9ba573842951d4a66cdb2db5b6"}}, &(0x7f00000001c0)={0x0, 0x3, 0xc0, @string={0xc0, 0x3, "ea829a66d49c95ba3426fd6d3390a0ee686fc6aaac62491d977297fe9d834a15812fe9859bf917b43c81abf0e4ab3705e44d6e8db64b987fde173da633354941ea5a1981b6c44caf110ad11d3376d750fbe56e21e490b791242eb05c4ec37e263b350197e8f79e4d8dbdd1a710a3139ff330e2afaf9b9d5cb0c9df312ae09b443874dcd42c4f15f5afbbe1b08cce23ae5cd8095cffc3275d9d8529aa698be11e3cbf5cab1c09b05aa1890b7af0bfae00a19014278f95a1b03ac927f6330e"}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x0, 0x14, 0x8c, "d1632eb32d99aa74141e36e31644f01eb7c842ce643b52c0a52ed37039708b2545905a61a5a2f830186f6a3bec722684ea4f752dbc510cbbf219ed4ec9bc7e0056a969217069a4e223779c67636781ac5d7790197f86783ab361552667199115f8a0f4f17dc2dac617eb199c5ff2be97b794aa4afdf3ee0ac080643e77934cd49859666f3808cc1de203526e"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xd3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)={0xc0, 0x5, 0x6, "8be06db5a608"}, &(0x7f0000000680)={0x40, 0x5, 0x2, "941d"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.722679132s ago: executing program 4 (id=2643):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880)

4.459722638s ago: executing program 4 (id=2644):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190)
fcntl$setlease(r0, 0x400, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
fcntl$getflags(r1, 0x401)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20741, 0x0)
writev(r2, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000100)='H', 0x1}], 0x2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x1000)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getpeername$netlink(r4, &(0x7f0000000400), &(0x7f0000000440)=0xc)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x1, 0x1, {0x4, @struct={0x0, 0x2}, 0x0, 0xff, 0xc033, 0x100000001, 0xf, 0x47, 0x150, @struct={0x9, 0x1ff}, 0x9, 0x0, [0x6, 0xff, 0x1, 0x3, 0x2f1, 0x7fffffff]}, {0x4fcd, @usage=0x40, 0x0, 0x7fff, 0xf7, 0xfb5, 0x8000000000000001, 0xffffffffffffff80, 0x444, @struct={0xad8, 0x7fff}, 0x81, 0xcef, [0x9, 0x5, 0x9, 0x5f, 0x2, 0x2300aaed]}, {0xf, @struct={0x2, 0x7}, <r6=>0x0, 0x401, 0x9e7, 0x5, 0x7f, 0x4, 0x7, @struct={0x5, 0x7}, 0x1000, 0x400, [0x3, 0x4, 0x8, 0x7ff, 0x7, 0x2]}, {0x7, 0x401, 0x10001}})
ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000a00)={r6, "97929ba9ebe6d102a597e08f6a67c01c"})
r7 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400))
setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

4.350057206s ago: executing program 1 (id=2645):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0)
setpriority(0x0, 0xffffffffffffffff, 0x5)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffe000/0x1000)=nil)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/40, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r4)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x20, r5, 0xc1c28ea43d955c09, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x10000001)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0x97, &(0x7f0000000440)=""/151}]})
shmat(r2, &(0x7f0000ffe000/0x1000)=nil, 0x1000)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x2010, r1, 0xaf17e000)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000700)={0x2710, 0x3, 0x100000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x52, &(0x7f0000000040)={0x0, 0x0}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040850}, 0x2404c004)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2710, 0x3, 0xb000, 0x1000, &(0x7f0000ffd000/0x1000)=nil})

4.238099982s ago: executing program 4 (id=2646):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x2, 0x80805, 0x0)
close(0x3)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800)
sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="001603000000a401aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00z', @ANYRES16=r6, @ANYBLOB="080029bd7000fedbdf25570000000c009900000000005d00000006009500ff0f000006009500c30300000600950004000000060095000900000006009500070000000600950007000000"], 0x50}, 0x1, 0x0, 0x0, 0x44000004}, 0x240440c0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r10], 0x1c}}, 0x0)

3.55022138s ago: executing program 1 (id=2648):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a80)="d80000001d0081054e81f783db4cb9040a00000000000000e8fc3ca10a0015000600142603600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000feea60d8a8a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9", 0x9d}, {&(0x7f0000000b80)="be4f71a644e991bed27a0baa1ef2ed47a34814b13bcbf833d740ba4d5b3bdc7edb7b6490df37e0fe6a3acf1db4fa2c284720c50c93c8a5da613da5", 0x3b}], 0x2}, 0x40080)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000054c0), 0x100)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000005500)={0xf, 0x2, 'client0\x00', 0x0, "b35a0c4c62b5b72b", "ba7bf4d1ee887aeeee95c7e4b17de773271ff1f352317dc27c0e318d25200b87", 0xc, 0x1})

3.297075183s ago: executing program 1 (id=2650):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b010203010902120001000000000904"], 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0xfbd3)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140)=0x1, 0x4)
sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x7b36b6c2013113ea, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000080))
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001fae7f11f83ce629e6e581c2885396d0102030109021b00010001000b0904c80201030102"], 0x0)

2.638137787s ago: executing program 5 (id=2652):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880)

2.569398544s ago: executing program 5 (id=2653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0xfffc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44)

2.512908027s ago: executing program 5 (id=2654):
mmap(&(0x7f0000873000/0x4000)=nil, 0x4000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc)
socket$qrtr(0x2a, 0x2, 0x0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x8000)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x5, 0x204, 0x670f5bdb, 0x9, 0xd42, 0x200, 0xfae}, 0x20)
select(0x40, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffff9, 0x1, 0x75, 0x8000000000000000, 0x3, 0x8, 0x8}, &(0x7f0000000300)={0x6, 0x9, 0x101, 0x9, 0x10000, 0x7, 0xfffffffffffffff8, 0x6}, &(0x7f00000003c0)={0x2, 0x9, 0x9, 0x0, 0x6, 0x101, 0x7, 0x9}, &(0x7f0000000400))
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10)
setresuid(0x0, 0xee01, 0x0)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0)
r5 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, 0x0, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r6 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100)
lseek(r6, 0x4, 0x0)
getdents(r6, &(0x7f0000001440)=""/4096, 0x1000)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x40805}, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000140)="55612d45d6bf8acb07ee76dc86a2590da3fa44a13838a4c7e8551c262db7ae8fc4be7d6697f1efd32ec7ae25eece0691a5fed0114dc551f47698b77d85baa722f4492472f2359c907a5d24693549fd34a24006b0c3b7f876fee354b73f64bbc838", 0x61)

2.398132362s ago: executing program 5 (id=2655):
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc850}, 0x44)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.232660592s ago: executing program 4 (id=2656):
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0)
r2 = openat(r1, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0)
r3 = openat(r2, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0)
openat(r3, &(0x7f0000000440)='product\x00', 0x2, 0x0)
io_setup(0x81, &(0x7f0000000400))
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00')
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
write$binfmt_misc(r4, &(0x7f0000000000)="725feb66bdf294f4f32404c1d01badf43b86af55581aa97b7d2dae40a5b3a33978f7d2c179b84f7beb780d40987fd57480a2599ca683a93705c64d50e91c630449a5574ee070b5d0c9cda0f9a5a2ed9141b3f882914c353de6b595f825600c415335e0381c237e7bc9ded6a400a3dfc828b42b224615b3f733f91a3079ca81", 0x7f)
lseek(r4, 0x2004, 0x0)

1.677943344s ago: executing program 0 (id=2657):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0900080001022d000500ff0f7c00a584ce711f76"], 0x18)

1.39790078s ago: executing program 5 (id=2658):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f00000000c0)={0x0, 0x0, {0x583, 0x5, 0x1002, 0x5, 0x9, 0x1, 0x1, 0x7}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x27)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0xc8040, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r9, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x0, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x4, 0x0, 0x9, 0x7, 0x6, 0x3, 0x93, 0x3, '\x00', 0x6b, 0xc})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x1, 0xb000, 0xc, 0x0, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0xe000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0x10, 0x0, 0x0, 0x1, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13, 0x0, 0xfe}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x3000, [0xff, 0x0, 0x401]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.173240382s ago: executing program 0 (id=2659):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x8fd, 0x12)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4)
kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x10001}], 0x0)

1.030441699s ago: executing program 0 (id=2660):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
r2 = open(&(0x7f00000001c0)='.\x00', 0x8400, 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000140)={0x100004, 0x1, 0x20000, {r2}}, 0x20)
pread64(r1, &(0x7f0000000200)=""/102390, 0x18ff6, 0x6)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, '\b\x00', {0x1, 0x8, 0x5, 0x40}})
syz_io_uring_setup(0x57d1, 0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"])

959.499655ms ago: executing program 4 (id=2661):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x38, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x38}}, 0x880)

894.079275ms ago: executing program 5 (id=2662):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

780.635155ms ago: executing program 4 (id=2663):
syz_usb_connect(0x0, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003185d9f4004041203c142010203010902560001a01380050904a80806f03b6f010905011020008103080705f4ba35c2ba09050701ff0306033902c309050710200006020109040a10ff030504730705e97b"], &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00033c0000005d03"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000001200)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_disconnect(r0)

0s ago: executing program 1 (id=2664):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_0\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r4=>0x0})
r5 = socket(0x2, 0x80805, 0x0)
close(0x3)
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r6, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$uac3(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="001603000000a401aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00z', @ANYRES16=r7, @ANYBLOB="080029bd7000fedbdf25570000000c009900000000005d00000006009500ff0f000006009500c30300000600950004000000060095000900000006009500070000000600950007000000"], 0x50}, 0x1, 0x0, 0x0, 0x44000004}, 0x240440c0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="379500000000000003e77200000008000300", @ANYRES32=r11], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

x_kvm_vcpu_ioctl+0x10/0x10
[  621.387944][T13152]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  621.387963][T13152]  ? lockdep_hardirqs_on+0x7a/0x110
[  621.388007][T13152]  ? __fget_files+0x2a/0x420
[  621.388032][T13152]  ? __fget_files+0x3a8/0x420
[  621.388049][T13152]  ? __fget_files+0x2a/0x420
[  621.388070][T13152]  ? bpf_lsm_file_ioctl+0x9/0x20
[  621.388099][T13152]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  621.388129][T13152]  __se_sys_ioctl+0xff/0x170
[  621.388164][T13152]  do_syscall_64+0x17b/0x530
[  621.388184][T13152]  ? irqentry_exit+0x10f/0x8f0
[  621.388201][T13152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.388220][T13152]  ? clear_bhb_loop+0x40/0x90
[  621.388241][T13152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  621.388257][T13152] RIP: 0033:0x7f6f5724de99
[  621.388274][T13152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  621.388288][T13152] RSP: 002b:00007f6f554a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  621.388306][T13152] RAX: ffffffffffffffda RBX: 00007f6f574d5fa0 RCX: 00007f6f5724de99
[  621.388319][T13152] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[  621.388329][T13152] RBP: 00007f6f554a6090 R08: 0000000000000000 R09: 0000000000000000
[  621.388340][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  621.388350][T13152] R13: 00007f6f574d6038 R14: 00007f6f574d5fa0 R15: 00007ffe0c6a9668
[  621.388376][T13152]  </TASK>
[  621.659117][T11741] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  621.937675][T11741] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  621.937702][T11741] usb 1-1: config 0 has no interface number 0
[  621.937741][T11741] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  621.937756][T11741] usb 1-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.937768][T11741] usb 1-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  621.937781][T11741] usb 1-1: config 0 interface 1 has no altsetting 0
[  621.937799][T11741] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  621.937811][T11741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.951851][T11741] usb 1-1: config 0 descriptor??
[  622.029554][ T5706] rc_core: IR keymap rc-snapstream-firefly not found
[  622.029576][ T5706] Registered IR keymap rc-empty
[  622.030717][ T5706] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  622.033132][ T5706] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input72
[  622.132704][ T5706] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input73
[  622.405865][ T5706] usb 6-1: USB disconnect, device number 40
[  622.405938][    C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  622.407306][T13169] FAULT_INJECTION: forcing a failure.
[  622.407306][T13169] name failslab, interval 1, probability 0, space 0, times 0
[  622.407341][T13169] CPU: 0 UID: 0 PID: 13169 Comm: syz.4.2354 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  622.407368][T13169] Tainted: [L]=SOFTLOCKUP
[  622.407375][T13169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  622.407388][T13169] Call Trace:
[  622.407396][T13169]  <TASK>
[  622.407405][T13169]  dump_stack_lvl+0xe8/0x150
[  622.407434][T13169]  should_fail_ex+0x467/0x600
[  622.407465][T13169]  should_failslab+0xa8/0x100
[  622.407487][T13169]  kmem_cache_alloc_node_noprof+0xac/0x660
[  622.407517][T13169]  ? __alloc_skb+0x1d7/0x7a0
[  622.407541][T13169]  ? __alloc_skb+0x1d7/0x7a0
[  622.407572][T13169]  __alloc_skb+0x1d7/0x7a0
[  622.407601][T13169]  netlink_dump+0x1e7/0xee0
[  622.407629][T13169]  ? rcu_is_watching+0x15/0xb0
[  622.407654][T13169]  ? rcu_is_watching+0x15/0xb0
[  622.407677][T13169]  ? cap_capable+0x123/0x460
[  622.407699][T13169]  ? safesetid_security_capable+0xa9/0x1a0
[  622.407726][T13169]  ? __pfx_netlink_dump+0x10/0x10
[  622.407753][T13169]  ? security_capable+0x74/0x280
[  622.407801][T13169]  __netlink_dump_start+0x589/0x7b0
[  622.407835][T13169]  inet_diag_rcv_msg_compat+0x214/0x420
[  622.407860][T13169]  ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10
[  622.407880][T13169]  ? save_netdev_trace_buffer+0x18f/0x5e0
[  622.407908][T13169]  ? lock_acquire+0x115/0x350
[  622.407939][T13169]  ? __pfx_inet_diag_dump_start_compat+0x10/0x10
[  622.407963][T13169]  ? __pfx_inet_diag_dump_compat+0x10/0x10
[  622.407977][T13169]  ? __pfx_inet_diag_dump_done+0x10/0x10
[  622.407999][T13169]  ? sock_diag_rcv_msg+0x184/0x5f0
[  622.408026][T13169]  sock_diag_rcv_msg+0x4b0/0x5f0
[  622.408053][T13169]  netlink_rcv_skb+0x226/0x4a0
[  622.408091][T13169]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  622.408117][T13169]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  622.408157][T13169]  ? netlink_deliver_tap+0x2e/0x1b0
[  622.408190][T13169]  ? netlink_deliver_tap+0x2e/0x1b0
[  622.408224][T13169]  netlink_unicast+0x7f5/0x990
[  622.408261][T13169]  netlink_sendmsg+0x813/0xb40
[  622.408298][T13169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.408331][T13169]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  622.408364][T13169]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  622.408394][T13169]  ? arch_stack_walk+0xfb/0x150
[  622.408423][T13169]  ? __pfx_netlink_sendmsg+0x10/0x10
[  622.408451][T13169]  sock_sendmsg_nosec+0x13a/0x180
[  622.408476][T13169]  ____sys_sendmsg+0x565/0x870
[  622.408513][T13169]  ? __pfx_____sys_sendmsg+0x10/0x10
[  622.408551][T13169]  ? import_iovec+0x73/0xa0
[  622.408585][T13169]  ___sys_sendmsg+0x2a5/0x360
[  622.408613][T13169]  ? __lock_acquire+0x6df/0x2e40
[  622.408636][T13169]  ? __pfx____sys_sendmsg+0x10/0x10
[  622.408699][T13169]  ? __fget_files+0x2a/0x420
[  622.408719][T13169]  ? __fget_files+0x3a8/0x420
[  622.408748][T13169]  __x64_sys_sendmsg+0x1b7/0x290
[  622.408779][T13169]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  622.408826][T13169]  do_syscall_64+0x17b/0x530
[  622.408846][T13169]  ? irqentry_exit+0x10f/0x8f0
[  622.408865][T13169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.408885][T13169]  ? clear_bhb_loop+0x40/0x90
[  622.408908][T13169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  622.408926][T13169] RIP: 0033:0x7f6f5724de99
[  622.408946][T13169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  622.408963][T13169] RSP: 002b:00007f6f554a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  622.408983][T13169] RAX: ffffffffffffffda RBX: 00007f6f574d5fa0 RCX: 00007f6f5724de99
[  622.408997][T13169] RDX: 00000000000400dc RSI: 0000200000000080 RDI: 0000000000000003
[  622.409010][T13169] RBP: 00007f6f554a6090 R08: 0000000000000000 R09: 0000000000000000
[  622.409022][T13169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  622.409032][T13169] R13: 00007f6f574d6038 R14: 00007f6f574d5fa0 R15: 00007ffe0c6a9668
[  622.409060][T13169]  </TASK>
[  622.890884][T11741] usbhid 1-1:0.1: can't add hid device: -71
[  622.891006][T11741] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  622.942840][ T5924] ati_remote 6-1:0.0: ati_remote_open: usb_submit_urb failed!
[  622.995660][T11741] usb 1-1: USB disconnect, device number 37
[  623.257352][T13176] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  623.459273][ T5706] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  623.533679][T13186] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  623.534613][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2360'.
[  623.587627][T13189] FAULT_INJECTION: forcing a failure.
[  623.587627][T13189] name failslab, interval 1, probability 0, space 0, times 0
[  623.587650][T13189] CPU: 1 UID: 0 PID: 13189 Comm: syz.0.2362 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  623.587665][T13189] Tainted: [L]=SOFTLOCKUP
[  623.587669][T13189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  623.587676][T13189] Call Trace:
[  623.587680][T13189]  <TASK>
[  623.587685][T13189]  dump_stack_lvl+0xe8/0x150
[  623.587704][T13189]  should_fail_ex+0x467/0x600
[  623.587721][T13189]  should_failslab+0xa8/0x100
[  623.587732][T13189]  __kmalloc_noprof+0xfb/0x790
[  623.587747][T13189]  ? tomoyo_encode+0x2ad/0x570
[  623.587762][T13189]  ? tomoyo_encode+0x2ad/0x570
[  623.587780][T13189]  tomoyo_encode+0x2ad/0x570
[  623.587797][T13189]  tomoyo_realpath_from_path+0x5fa/0x640
[  623.587817][T13189]  ? tomoyo_path_number_perm+0x219/0x5f0
[  623.587830][T13189]  tomoyo_path_number_perm+0x246/0x5f0
[  623.587843][T13189]  ? __lock_acquire+0x6df/0x2e40
[  623.587853][T13189]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  623.587867][T13189]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  623.587879][T13189]  ? lockdep_hardirqs_on+0x7a/0x110
[  623.587908][T13189]  ? __pfx_current_check_access_path+0x10/0x10
[  623.587924][T13189]  tomoyo_path_mknod+0x14a/0x1a0
[  623.587934][T13189]  ? d_alloc_parallel+0x3cf/0x16c0
[  623.587948][T13189]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[  623.587958][T13189]  ? __d_lookup+0x66/0x790
[  623.587980][T13189]  security_path_mknod+0x16c/0x330
[  623.587998][T13189]  may_o_create+0x2d/0x370
[  623.588012][T13189]  ? mode_strip_sgid+0xa1/0x1b0
[  623.588027][T13189]  path_openat+0xfb5/0x3850
[  623.588043][T13189]  ? __kasan_slab_alloc+0x6c/0x80
[  623.588071][T13189]  do_file_open+0x23e/0x4a0
[  623.588083][T13189]  ? lockdep_hardirqs_on+0x7a/0x110
[  623.588095][T13189]  ? __pfx_do_file_open+0x10/0x10
[  623.588120][T13189]  ? alloc_fd+0x654/0x6d0
[  623.588136][T13189]  do_sys_openat2+0x115/0x200
[  623.588153][T13189]  ? __pfx_do_sys_openat2+0x10/0x10
[  623.588171][T13189]  ? ksys_write+0x248/0x270
[  623.588184][T13189]  ? __pfx_ksys_write+0x10/0x10
[  623.588197][T13189]  __x64_sys_openat+0x138/0x170
[  623.588215][T13189]  do_syscall_64+0x17b/0x530
[  623.588225][T13189]  ? irqentry_exit+0x10f/0x8f0
[  623.588235][T13189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.588246][T13189]  ? clear_bhb_loop+0x40/0x90
[  623.588259][T13189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  623.588269][T13189] RIP: 0033:0x7fcabfebde99
[  623.588280][T13189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  623.588289][T13189] RSP: 002b:00007fcabe116028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  623.588301][T13189] RAX: ffffffffffffffda RBX: 00007fcac0145fa0 RCX: 00007fcabfebde99
[  623.588308][T13189] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c
[  623.588316][T13189] RBP: 00007fcabe116090 R08: 0000000000000000 R09: 0000000000000000
[  623.588322][T13189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  623.588328][T13189] R13: 00007fcac0146038 R14: 00007fcac0145fa0 R15: 00007ffd4fb08af8
[  623.588344][T13189]  </TASK>
[  623.588357][T13189] ERROR: Out of memory at tomoyo_realpath_from_path.
[  623.625165][ T5706] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  623.625194][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.625213][ T5706] usb 6-1: Product: syz
[  623.625227][ T5706] usb 6-1: Manufacturer: syz
[  623.625241][ T5706] usb 6-1: SerialNumber: syz
[  623.654341][ T5706] usb 6-1: config 0 descriptor??
[  623.672505][ T5706] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  623.895608][ T5706] gspca_stk1135: reg_w 0x2 err -71
[  623.896723][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896736][ T5706] gspca_stk1135: Sensor write failed
[  623.896788][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896799][ T5706] gspca_stk1135: Sensor write failed
[  623.896825][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896834][ T5706] gspca_stk1135: Sensor read failed
[  623.896860][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896869][ T5706] gspca_stk1135: Sensor read failed
[  623.896888][ T5706] gspca_stk1135: Detected sensor type unknown (0x0)
[  623.896916][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896927][ T5706] gspca_stk1135: Sensor read failed
[  623.896959][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.896969][ T5706] gspca_stk1135: Sensor read failed
[  623.896992][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.897002][ T5706] gspca_stk1135: Sensor write failed
[  623.897027][ T5706] gspca_stk1135: serial bus timeout: status=0x00
[  623.897037][ T5706] gspca_stk1135: Sensor write failed
[  623.897123][ T5706] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[  623.913738][ T5706] usb 6-1: USB disconnect, device number 41
[  624.022298][T11741] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  624.169541][T11741] usb 5-1: Using ep0 maxpacket: 32
[  624.172728][T11741] usb 5-1: unable to get BOS descriptor or descriptor too short
[  624.173658][T11741] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  624.173675][T11741] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1104, setting to 1024
[  624.177453][T11741] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  624.177470][T11741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.177480][T11741] usb 5-1: Product: ﲬ
[  624.177488][T11741] usb 5-1: SerialNumber: syz
[  624.378664][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  624.378871][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  624.392812][  T959] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  624.408823][T11741] usb 5-1: 1:1 : bogus bTerminalLink 127
[  624.409659][T11741] usb 5-1: unit 81 not found!
[  624.409680][T11741] usb 5-1: unit 3 not found!
[  624.409695][T11741] usb 5-1: unit 253 not found!
[  624.474965][T11741] usb 5-1: USB disconnect, device number 38
[  624.539531][  T959] usb 1-1: Using ep0 maxpacket: 16
[  624.541366][  T959] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00
[  624.541392][  T959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  624.548257][  T959] usb 1-1: config 0 descriptor??
[  624.963023][  T959] hid (null): nested delimiters
[  624.976769][  T959] hid_parser_main: 5 callbacks suppressed
[  624.976846][  T959] uclogic 0003:5543:0042.002E: unknown main item tag 0x4
[  624.977149][  T959] uclogic 0003:5543:0042.002E: reserved main item tag 0xd
[  624.977182][  T959] uclogic 0003:5543:0042.002E: nested delimiters
[  624.977196][  T959] uclogic 0003:5543:0042.002E: item 0 4 2 10 parsing failed
[  624.978015][  T959] uclogic 0003:5543:0042.002E: parse failed
[  624.978118][  T959] uclogic 0003:5543:0042.002E: probe with driver uclogic failed with error -22
[  624.983882][T13197] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2366'.
[  625.036967][ T5706] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  625.082664][T13197] UDC core: g1: couldn't find an available UDC or it's busy
[  625.170757][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.171358][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.194913][  T959] usb 1-1: USB disconnect, device number 38
[  625.219195][ T5706] usb 6-1: Using ep0 maxpacket: 16
[  625.220866][ T5706] usb 6-1: config 251 has an invalid interface number: 202 but max is 0
[  625.220887][ T5706] usb 6-1: config 251 has no interface number 0
[  625.220921][ T5706] usb 6-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16
[  625.220934][ T5706] usb 6-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  625.220946][ T5706] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  625.220960][ T5706] usb 6-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  625.220973][ T5706] usb 6-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.220987][ T5706] usb 6-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  625.221001][ T5706] usb 6-1: config 251 interface 202 has no altsetting 0
[  625.222910][ T5706] usb 6-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  625.222927][ T5706] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.222937][ T5706] usb 6-1: Product: syz
[  625.222944][ T5706] usb 6-1: Manufacturer: syz
[  625.222952][ T5706] usb 6-1: SerialNumber: syz
[  625.230848][T13195] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  625.306357][T13200] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  625.455787][T13195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.457306][T13195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.475800][ T5706] cxacru 6-1:251.202: cxacru_bind: interface has incorrect endpoints
[  625.475946][ T5706] cxacru 6-1:251.202: usbatm_usb_probe: bind failed: -19!
[  625.515324][ T5706] usb 6-1: USB disconnect, device number 42
[  625.935151][T13211] FAULT_INJECTION: forcing a failure.
[  625.935151][T13211] name failslab, interval 1, probability 0, space 0, times 0
[  625.935180][T13211] CPU: 0 UID: 0 PID: 13211 Comm: syz.0.2370 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  625.935200][T13211] Tainted: [L]=SOFTLOCKUP
[  625.935206][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  625.935214][T13211] Call Trace:
[  625.935220][T13211]  <TASK>
[  625.935227][T13211]  dump_stack_lvl+0xe8/0x150
[  625.935251][T13211]  should_fail_ex+0x467/0x600
[  625.935274][T13211]  should_failslab+0xa8/0x100
[  625.935299][T13211]  __kmalloc_cache_noprof+0xa1/0x670
[  625.935321][T13211]  ? binder_transaction+0x20b0/0x6fc0
[  625.935340][T13211]  ? binder_transaction+0x20b0/0x6fc0
[  625.935362][T13211]  binder_transaction+0x20b0/0x6fc0
[  625.935400][T13211]  ? trace_sched_exit_tp+0x3a/0x130
[  625.935429][T13211]  ? __pfx_binder_transaction+0x10/0x10
[  625.935450][T13211]  ? __lock_acquire+0x6df/0x2e40
[  625.935468][T13211]  ? __lock_acquire+0x6df/0x2e40
[  625.935486][T13211]  ? __lock_acquire+0x6df/0x2e40
[  625.935506][T13211]  ? __lock_acquire+0x6df/0x2e40
[  625.935521][T13211]  ? lock_acquire+0x115/0x350
[  625.935548][T13211]  ? lock_acquire+0x115/0x350
[  625.935587][T13211]  binder_ioctl_write_read+0xb5c/0xa5d0
[  625.935609][T13211]  ? arch_stack_walk+0xfb/0x150
[  625.935657][T13211]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  625.935685][T13211]  ? do_raw_spin_lock+0x12b/0x2f0
[  625.935716][T13211]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  625.935740][T13211]  ? reacquire_held_locks+0x117/0x1a0
[  625.935755][T13211]  ? rt_spin_lock+0x1e0/0x400
[  625.935779][T13211]  ? rt_spin_unlock+0x157/0x200
[  625.935805][T13211]  ? binder_get_thread+0x59b/0x6d0
[  625.935826][T13211]  binder_ioctl+0x420/0x1b10
[  625.935850][T13211]  ? do_vfs_ioctl+0x1184/0x1550
[  625.935868][T13211]  ? __pfx_binder_ioctl+0x10/0x10
[  625.935885][T13211]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  625.935913][T13211]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  625.935927][T13211]  ? lockdep_hardirqs_on+0x7a/0x110
[  625.935953][T13211]  ? __fget_files+0x2a/0x420
[  625.935971][T13211]  ? __fget_files+0x3a8/0x420
[  625.935985][T13211]  ? __fget_files+0x2a/0x420
[  625.936001][T13211]  ? bpf_lsm_file_ioctl+0x9/0x20
[  625.936023][T13211]  ? __pfx_binder_ioctl+0x10/0x10
[  625.936040][T13211]  __se_sys_ioctl+0xff/0x170
[  625.936060][T13211]  do_syscall_64+0x17b/0x530
[  625.936075][T13211]  ? irqentry_exit+0x10f/0x8f0
[  625.936089][T13211]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.936104][T13211]  ? clear_bhb_loop+0x40/0x90
[  625.936124][T13211]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.936139][T13211] RIP: 0033:0x7fcabfebde99
[  625.936156][T13211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.936169][T13211] RSP: 002b:00007fcabe0f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  625.936186][T13211] RAX: ffffffffffffffda RBX: 00007fcac0146090 RCX: 00007fcabfebde99
[  625.936197][T13211] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000004
[  625.936207][T13211] RBP: 00007fcabe0f5090 R08: 0000000000000000 R09: 0000000000000000
[  625.936217][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.936226][T13211] R13: 00007fcac0146128 R14: 00007fcac0146090 R15: 00007ffd4fb08af8
[  625.936249][T13211]  </TASK>
[  626.007911][T13213] 9p: Bad value for 'rfdno'
[  626.671521][T13226] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2375'.
[  627.305278][T13245] FAULT_INJECTION: forcing a failure.
[  627.305278][T13245] name failslab, interval 1, probability 0, space 0, times 0
[  627.305411][T13245] CPU: 1 UID: 0 PID: 13245 Comm: syz.1.2379 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  627.305439][T13245] Tainted: [L]=SOFTLOCKUP
[  627.305447][T13245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  627.305460][T13245] Call Trace:
[  627.305467][T13245]  <TASK>
[  627.305476][T13245]  dump_stack_lvl+0xe8/0x150
[  627.305508][T13245]  should_fail_ex+0x467/0x600
[  627.305539][T13245]  should_failslab+0xa8/0x100
[  627.305561][T13245]  __kmalloc_cache_noprof+0xa1/0x670
[  627.305591][T13245]  ? binder_alloc_new_buf+0x26d/0x31f0
[  627.305613][T13245]  ? binder_alloc_new_buf+0x26d/0x31f0
[  627.305641][T13245]  binder_alloc_new_buf+0x26d/0x31f0
[  627.305669][T13245]  ? binder_debug+0x155/0x1d0
[  627.305698][T13245]  ? __pfx_binder_debug+0x10/0x10
[  627.305725][T13245]  ? __kasan_kmalloc+0x93/0xb0
[  627.305762][T13245]  ? __pfx_binder_alloc_new_buf+0x10/0x10
[  627.305782][T13245]  ? __kmalloc_cache_noprof+0x3cd/0x670
[  627.305811][T13245]  ? binder_transaction+0x20b0/0x6fc0
[  627.305835][T13245]  ? binder_transaction+0x20b0/0x6fc0
[  627.305867][T13245]  binder_transaction+0x288c/0x6fc0
[  627.305917][T13245]  ? arch_stack_walk+0xfb/0x150
[  627.305957][T13245]  ? __pfx_binder_transaction+0x10/0x10
[  627.305984][T13245]  ? __lock_acquire+0x6df/0x2e40
[  627.306005][T13245]  ? __lock_acquire+0x6df/0x2e40
[  627.306031][T13245]  ? __lock_acquire+0x6df/0x2e40
[  627.306055][T13245]  ? __lock_acquire+0x6df/0x2e40
[  627.306085][T13245]  ? lock_acquire+0x115/0x350
[  627.306137][T13245]  binder_ioctl_write_read+0xe2c/0xa5d0
[  627.306167][T13245]  ? is_bpf_text_address+0x26/0x2b0
[  627.306220][T13245]  ? __pfx_binder_ioctl_write_read+0x10/0x10
[  627.306246][T13245]  ? kasan_save_track+0x4f/0x80
[  627.306276][T13245]  ? stack_depot_save_flags+0x33/0x800
[  627.306305][T13245]  ? do_raw_spin_lock+0x12b/0x2f0
[  627.306342][T13245]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  627.306363][T13245]  ? lockdep_hardirqs_on+0x7a/0x110
[  627.306382][T13245]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  627.306401][T13245]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  627.306431][T13245]  ? reacquire_held_locks+0x117/0x1a0
[  627.306466][T13245]  ? rt_spin_unlock+0x157/0x200
[  627.306500][T13245]  ? binder_get_thread+0x176/0x6d0
[  627.306524][T13245]  ? binder_ioctl+0x189/0x1b10
[  627.306551][T13245]  binder_ioctl+0x420/0x1b10
[  627.306583][T13245]  ? do_vfs_ioctl+0x1184/0x1550
[  627.306610][T13245]  ? __pfx_binder_ioctl+0x10/0x10
[  627.306633][T13245]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  627.306674][T13245]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  627.306693][T13245]  ? lockdep_hardirqs_on+0x7a/0x110
[  627.306729][T13245]  ? __fget_files+0x2a/0x420
[  627.306753][T13245]  ? __fget_files+0x3a8/0x420
[  627.306779][T13245]  ? __fget_files+0x2a/0x420
[  627.306802][T13245]  ? bpf_lsm_file_ioctl+0x9/0x20
[  627.306831][T13245]  ? __pfx_binder_ioctl+0x10/0x10
[  627.306853][T13245]  __se_sys_ioctl+0xff/0x170
[  627.306882][T13245]  do_syscall_64+0x17b/0x530
[  627.306902][T13245]  ? irqentry_exit+0x10f/0x8f0
[  627.306921][T13245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.306941][T13245]  ? clear_bhb_loop+0x40/0x90
[  627.306966][T13245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.306986][T13245] RIP: 0033:0x7f049015de99
[  627.307004][T13245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  627.307021][T13245] RSP: 002b:00007f048e395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  627.307043][T13245] RAX: ffffffffffffffda RBX: 00007f04903e6090 RCX: 00007f049015de99
[  627.307058][T13245] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000006
[  627.307072][T13245] RBP: 00007f048e395090 R08: 0000000000000000 R09: 0000000000000000
[  627.307085][T13245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.307097][T13245] R13: 00007f04903e6128 R14: 00007f04903e6090 R15: 00007ffc0ac7d348
[  627.307129][T13245]  </TASK>
[  628.062167][T13261] FAULT_INJECTION: forcing a failure.
[  628.062167][T13261] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  628.062212][T13261] CPU: 0 UID: 0 PID: 13261 Comm: syz.5.2385 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  628.062239][T13261] Tainted: [L]=SOFTLOCKUP
[  628.062247][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  628.062259][T13261] Call Trace:
[  628.062267][T13261]  <TASK>
[  628.062276][T13261]  dump_stack_lvl+0xe8/0x150
[  628.062304][T13261]  should_fail_ex+0x467/0x600
[  628.062334][T13261]  _copy_to_user+0x31/0xb0
[  628.062355][T13261]  simple_read_from_buffer+0xe1/0x170
[  628.062382][T13261]  proc_fail_nth_read+0x1be/0x230
[  628.062406][T13261]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  628.062430][T13261]  ? rw_verify_area+0x250/0x4d0
[  628.062454][T13261]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  628.062475][T13261]  vfs_read+0x219/0xa90
[  628.062506][T13261]  ? __pfx_vfs_read+0x10/0x10
[  628.062531][T13261]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  628.062552][T13261]  ? lockdep_hardirqs_on+0x7a/0x110
[  628.062571][T13261]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  628.062591][T13261]  ? mutex_lock_nested+0x152/0x1d0
[  628.062615][T13261]  ? fdget_pos+0x252/0x320
[  628.062643][T13261]  ksys_read+0x156/0x270
[  628.062668][T13261]  ? __pfx_ksys_read+0x10/0x10
[  628.062699][T13261]  do_syscall_64+0x17b/0x530
[  628.062718][T13261]  ? irqentry_exit+0x10f/0x8f0
[  628.062736][T13261]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.062756][T13261]  ? clear_bhb_loop+0x40/0x90
[  628.062779][T13261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.062797][T13261] RIP: 0033:0x7f822b28e6ce
[  628.062815][T13261] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  628.062832][T13261] RSP: 002b:00007f8229525fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  628.062853][T13261] RAX: ffffffffffffffda RBX: 00007f82295266c0 RCX: 00007f822b28e6ce
[  628.062867][T13261] RDX: 000000000000000f RSI: 00007f82295260a0 RDI: 0000000000000007
[  628.062880][T13261] RBP: 00007f8229526090 R08: 0000000000000000 R09: 0000000000000000
[  628.062892][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.062905][T13261] R13: 00007f822b556038 R14: 00007f822b555fa0 R15: 00007ffd6fa6a758
[  628.062936][T13261]  </TASK>
[  628.844610][T13269] FAULT_INJECTION: forcing a failure.
[  628.844610][T13269] name failslab, interval 1, probability 0, space 0, times 0
[  628.844647][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.5.2387 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  628.844675][T13269] Tainted: [L]=SOFTLOCKUP
[  628.844683][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  628.844695][T13269] Call Trace:
[  628.844703][T13269]  <TASK>
[  628.844712][T13269]  dump_stack_lvl+0xe8/0x150
[  628.844744][T13269]  should_fail_ex+0x467/0x600
[  628.844777][T13269]  should_failslab+0xa8/0x100
[  628.844799][T13269]  __kmalloc_cache_noprof+0xa1/0x670
[  628.844833][T13269]  ? vkms_plane_duplicate_state+0x51/0x110
[  628.844855][T13269]  ? vkms_plane_duplicate_state+0x51/0x110
[  628.844885][T13269]  vkms_plane_duplicate_state+0x51/0x110
[  628.844910][T13269]  drm_atomic_get_plane_state+0x27b/0x720
[  628.844943][T13269]  drm_client_modeset_commit_atomic+0x227/0x7e0
[  628.844983][T13269]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  628.845010][T13269]  ? do_raw_spin_lock+0x12b/0x2f0
[  628.845059][T13269]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  628.845080][T13269]  ? lockdep_hardirqs_on+0x7a/0x110
[  628.845103][T13269]  ? mutex_lock_nested+0x152/0x1d0
[  628.845127][T13269]  ? drm_client_modeset_commit_locked+0x4c/0x4d0
[  628.845159][T13269]  drm_client_modeset_commit_locked+0xce/0x4d0
[  628.845193][T13269]  drm_fb_helper_pan_display+0x3ec/0xbe0
[  628.845230][T13269]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[  628.845252][T13269]  fb_pan_display+0x3a3/0x6a0
[  628.845286][T13269]  bit_update_start+0x4c/0x1e0
[  628.845315][T13269]  fbcon_modechanged+0xb30/0x1140
[  628.845348][T13269]  fb_set_var_from_user+0x99/0xc0
[  628.845374][T13269]  do_fb_ioctl+0x5d9/0x750
[  628.845405][T13269]  ? __pfx_do_fb_ioctl+0x10/0x10
[  628.845451][T13269]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  628.845472][T13269]  ? lockdep_hardirqs_on+0x7a/0x110
[  628.845511][T13269]  ? __fget_files+0x2a/0x420
[  628.845538][T13269]  ? __fget_files+0x3a8/0x420
[  628.845557][T13269]  ? __fget_files+0x2a/0x420
[  628.845589][T13269]  ? bpf_lsm_file_ioctl+0x9/0x20
[  628.845621][T13269]  ? __pfx_fb_ioctl+0x10/0x10
[  628.845650][T13269]  __se_sys_ioctl+0xff/0x170
[  628.845680][T13269]  do_syscall_64+0x17b/0x530
[  628.845701][T13269]  ? irqentry_exit+0x10f/0x8f0
[  628.845720][T13269]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.845741][T13269]  ? clear_bhb_loop+0x40/0x90
[  628.845767][T13269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.845787][T13269] RIP: 0033:0x7f822b2cde99
[  628.845807][T13269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.845824][T13269] RSP: 002b:00007f8229526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  628.845846][T13269] RAX: ffffffffffffffda RBX: 00007f822b555fa0 RCX: 00007f822b2cde99
[  628.845861][T13269] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003
[  628.845875][T13269] RBP: 00007f8229526090 R08: 0000000000000000 R09: 0000000000000000
[  628.845888][T13269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  628.845901][T13269] R13: 00007f822b556038 R14: 00007f822b555fa0 R15: 00007ffd6fa6a758
[  628.845935][T13269]  </TASK>
[  629.154201][T13276] IPVS: set_ctl: invalid protocol: 255 172.20.20.170:20003
[  630.059743][ T5706] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  630.209575][ T5706] usb 6-1: Using ep0 maxpacket: 32
[  630.211898][ T5706] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 31, changing to 8
[  630.211929][ T5706] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  630.216766][ T5706] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  630.216794][ T5706] usb 6-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131
[  630.216814][ T5706] usb 6-1: Product: syz
[  630.216830][ T5706] usb 6-1: Manufacturer: syz
[  630.216844][ T5706] usb 6-1: SerialNumber: syz
[  630.263947][ T5706] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input74
[  630.549684][ T5706] usb 6-1: USB disconnect, device number 43
[  630.644373][T13303] kvm: emulating exchange as write
[  630.725888][ T5706] appletouch 6-1:1.0: input: appletouch disconnected
[  631.156364][T13320] FAULT_INJECTION: forcing a failure.
[  631.156364][T13320] name failslab, interval 1, probability 0, space 0, times 0
[  631.156405][T13320] CPU: 0 UID: 0 PID: 13320 Comm: syz.1.2401 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  631.156430][T13320] Tainted: [L]=SOFTLOCKUP
[  631.156438][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  631.156450][T13320] Call Trace:
[  631.156458][T13320]  <TASK>
[  631.156466][T13320]  dump_stack_lvl+0xe8/0x150
[  631.156498][T13320]  should_fail_ex+0x467/0x600
[  631.156526][T13320]  should_failslab+0xa8/0x100
[  631.156548][T13320]  kmem_cache_alloc_node_noprof+0xac/0x660
[  631.156577][T13320]  ? alloc_vmap_area+0x21c/0x1420
[  631.156599][T13320]  ? alloc_vmap_area+0x21c/0x1420
[  631.156630][T13320]  alloc_vmap_area+0x21c/0x1420
[  631.156664][T13320]  ? rcu_is_watching+0x15/0xb0
[  631.156690][T13320]  ? __pfx_alloc_vmap_area+0x10/0x10
[  631.156715][T13320]  ? __kmalloc_cache_node_noprof+0x459/0x670
[  631.156745][T13320]  ? __get_vm_area_node+0x136/0x300
[  631.156768][T13320]  ? __get_vm_area_node+0x136/0x300
[  631.156797][T13320]  __get_vm_area_node+0x1f2/0x300
[  631.156829][T13320]  __vmalloc_node_range_noprof+0x34e/0x1560
[  631.156856][T13320]  ? copy_process+0x820/0x43f0
[  631.156883][T13320]  ? percpu_ref_get_many+0x19/0x140
[  631.156910][T13320]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  631.156961][T13320]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  631.156989][T13320]  ? trace_kmem_cache_alloc+0x29/0xe0
[  631.157015][T13320]  ? memcpy_and_pad+0x48/0x80
[  631.157043][T13320]  __vmalloc_node_noprof+0xc2/0x100
[  631.157069][T13320]  ? copy_process+0x820/0x43f0
[  631.157087][T13320]  ? copy_process+0x820/0x43f0
[  631.157109][T13320]  dup_task_struct+0x2a0/0x8e0
[  631.157130][T13320]  ? rt_spin_unlock+0x163/0x200
[  631.157161][T13320]  copy_process+0x820/0x43f0
[  631.157212][T13320]  ? __pfx_copy_process+0x10/0x10
[  631.157247][T13320]  vhost_task_create+0x1f9/0x380
[  631.157275][T13320]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  631.157296][T13320]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  631.157319][T13320]  ? __pfx_vhost_task_create+0x10/0x10
[  631.157354][T13320]  ? __pfx_vhost_task_fn+0x10/0x10
[  631.157384][T13320]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  631.157404][T13320]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.157422][T13320]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  631.157441][T13320]  ? mutex_lock_nested+0x152/0x1d0
[  631.157464][T13320]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  631.157490][T13320]  kvm_mmu_post_init_vm+0x147/0x2b0
[  631.157515][T13320]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  631.157557][T13320]  kvm_vcpu_ioctl+0xa64/0xfe0
[  631.157591][T13320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  631.157622][T13320]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  631.157643][T13320]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.157681][T13320]  ? __fget_files+0x2a/0x420
[  631.157708][T13320]  ? __fget_files+0x3a8/0x420
[  631.157729][T13320]  ? __fget_files+0x2a/0x420
[  631.157754][T13320]  ? bpf_lsm_file_ioctl+0x9/0x20
[  631.157786][T13320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  631.157817][T13320]  __se_sys_ioctl+0xff/0x170
[  631.157849][T13320]  do_syscall_64+0x17b/0x530
[  631.157866][T13320]  ? irqentry_exit+0x10f/0x8f0
[  631.157885][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.157907][T13320]  ? clear_bhb_loop+0x40/0x90
[  631.157941][T13320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.157962][T13320] RIP: 0033:0x7f049015de99
[  631.157983][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.158001][T13320] RSP: 002b:00007f048e3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  631.158025][T13320] RAX: ffffffffffffffda RBX: 00007f04903e5fa0 RCX: 00007f049015de99
[  631.158041][T13320] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  631.158054][T13320] RBP: 00007f048e3b6090 R08: 0000000000000000 R09: 0000000000000000
[  631.158068][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.158080][T13320] R13: 00007f04903e6038 R14: 00007f04903e5fa0 R15: 00007ffc0ac7d348
[  631.158114][T13320]  </TASK>
[  631.170624][T13320] syz.1.2401: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  631.170808][T13320] CPU: 1 UID: 0 PID: 13320 Comm: syz.1.2401 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  631.170836][T13320] Tainted: [L]=SOFTLOCKUP
[  631.170843][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  631.170854][T13320] Call Trace:
[  631.170862][T13320]  <TASK>
[  631.170871][T13320]  dump_stack_lvl+0xe8/0x150
[  631.170901][T13320]  warn_alloc+0x24c/0x270
[  631.170929][T13320]  ? kasan_quarantine_put+0xbb/0x1f0
[  631.170959][T13320]  ? __pfx_warn_alloc+0x10/0x10
[  631.170989][T13320]  ? __get_vm_area_node+0x20b/0x300
[  631.171018][T13320]  ? __get_vm_area_node+0x20b/0x300
[  631.171049][T13320]  __vmalloc_node_range_noprof+0x376/0x1560
[  631.171081][T13320]  ? percpu_ref_get_many+0x19/0x140
[  631.171108][T13320]  ? __memcg_slab_post_alloc_hook+0x4d6/0xf60
[  631.171146][T13320]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  631.171173][T13320]  ? trace_kmem_cache_alloc+0x29/0xe0
[  631.171198][T13320]  ? memcpy_and_pad+0x48/0x80
[  631.171224][T13320]  __vmalloc_node_noprof+0xc2/0x100
[  631.171250][T13320]  ? copy_process+0x820/0x43f0
[  631.171269][T13320]  ? copy_process+0x820/0x43f0
[  631.171291][T13320]  dup_task_struct+0x2a0/0x8e0
[  631.171310][T13320]  ? rt_spin_unlock+0x163/0x200
[  631.171339][T13320]  copy_process+0x820/0x43f0
[  631.171391][T13320]  ? __pfx_copy_process+0x10/0x10
[  631.171430][T13320]  vhost_task_create+0x1f9/0x380
[  631.171458][T13320]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  631.171478][T13320]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  631.171501][T13320]  ? __pfx_vhost_task_create+0x10/0x10
[  631.171535][T13320]  ? __pfx_vhost_task_fn+0x10/0x10
[  631.171566][T13320]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  631.171585][T13320]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.171604][T13320]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  631.171623][T13320]  ? mutex_lock_nested+0x152/0x1d0
[  631.171648][T13320]  ? kvm_mmu_post_init_vm+0x8f/0x2b0
[  631.171674][T13320]  kvm_mmu_post_init_vm+0x147/0x2b0
[  631.171699][T13320]  kvm_arch_vcpu_ioctl_run+0x7c/0x1920
[  631.171743][T13320]  kvm_vcpu_ioctl+0xa64/0xfe0
[  631.171777][T13320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  631.171807][T13320]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  631.171826][T13320]  ? lockdep_hardirqs_on+0x7a/0x110
[  631.171861][T13320]  ? __fget_files+0x2a/0x420
[  631.171886][T13320]  ? __fget_files+0x3a8/0x420
[  631.171904][T13320]  ? __fget_files+0x2a/0x420
[  631.171926][T13320]  ? bpf_lsm_file_ioctl+0x9/0x20
[  631.171956][T13320]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  631.171985][T13320]  __se_sys_ioctl+0xff/0x170
[  631.172013][T13320]  do_syscall_64+0x17b/0x530
[  631.172032][T13320]  ? irqentry_exit+0x10f/0x8f0
[  631.172050][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.172069][T13320]  ? clear_bhb_loop+0x40/0x90
[  631.172094][T13320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.172112][T13320] RIP: 0033:0x7f049015de99
[  631.172130][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  631.172146][T13320] RSP: 002b:00007f048e3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  631.172165][T13320] RAX: ffffffffffffffda RBX: 00007f04903e5fa0 RCX: 00007f049015de99
[  631.172180][T13320] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  631.172192][T13320] RBP: 00007f048e3b6090 R08: 0000000000000000 R09: 0000000000000000
[  631.172205][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  631.172216][T13320] R13: 00007f04903e6038 R14: 00007f04903e5fa0 R15: 00007ffc0ac7d348
[  631.172248][T13320]  </TASK>
[  631.176115][T13320] Mem-Info:
[  631.176127][T13320] active_anon:49412 inactive_anon:0 isolated_anon:0
[  631.176127][T13320]  active_file:0 inactive_file:58071 isolated_file:0
[  631.176127][T13320]  unevictable:768 dirty:39 writeback:0
[  631.176127][T13320]  slab_reclaimable:7050 slab_unreclaimable:99175
[  631.176127][T13320]  mapped:34617 shmem:43669 pagetables:1660
[  631.176127][T13320]  sec_pagetables:5 bounce:0
[  631.176127][T13320]  kernel_misc_reclaimable:0
[  631.176127][T13320]  free:1252980 free_pcp:2967 free_cma:0
[  631.176188][T13320] Node 0 active_anon:197648kB inactive_anon:0kB active_file:0kB inactive_file:232024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138408kB dirty:156kB writeback:0kB shmem:173140kB kernel_stack:13680kB pagetables:6488kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  631.176238][T13320] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  631.176283][T13320] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  631.176338][T13320] lowmem_reserve[]: 0 2490 2490 2490 2490
[  631.176385][T13320] Node 0 DMA32 free:1065932kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:197648kB inactive_anon:0kB active_file:0kB inactive_file:232024kB unevictable:1536kB writepending:156kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:11868kB local_pcp:7768kB free_cma:0kB
[  631.176451][T13320] lowmem_reserve[]: 0 0 0 0 0
[  631.176481][T13320] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  631.176537][T13320] lowmem_reserve[]: 0 0 0 0 0
[  631.176568][T13320] Node 1 Normal free:3930628kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:260kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  631.176625][T13320] lowmem_reserve[]: 0 0 0 0 0
[  631.176656][T13320] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  631.177108][T13320] Node 0 DMA32: 10*4kB (UM) 90*8kB (UME) 14*16kB (E) 133*32kB (UE) 105*64kB (UE) 36*128kB (UME) 19*256kB (UME) 8*512kB (UE) 16*1024kB (M) 6*2048kB (UME) 247*4096kB (UM) = 1065912kB
[  631.177258][T13320] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  631.177352][T13320] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 11*16kB (UM) 8*32kB (UM) 13*64kB (UM) 4*128kB (UM) 5*256kB (UM) 5*512kB (UM) 1*1024kB (M) 2*2048kB (UM) 957*4096kB (M) = 3930676kB
[  631.177510][T13320] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  631.177527][T13320] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  631.177557][T13320] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  631.177573][T13320] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  631.177589][T13320] 101736 total pagecache pages
[  631.180350][T13320] 0 pages in swap cache
[  631.180361][T13320] Free swap  = 124996kB
[  631.180370][T13320] Total swap = 124996kB
[  631.180379][T13320] 2097051 pages RAM
[  631.180386][T13320] 0 pages HighMem/MovableOnly
[  631.180393][T13320] 427780 pages reserved
[  631.180401][T13320] 0 pages cma reserved
[  632.470072][T13323] smpboot: CPU 1 is now offline
[  632.794098][T13330] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  633.132980][T13343] ublk_ctrl_add_dev: invalid recovery flags 10
[  633.229972][T13344] netlink: 'syz.5.2407': attribute type 2 has an invalid length.
[  633.229986][T13344] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2407'.
[  633.328936][T13346] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2407'.
[  633.680693][T13352] binder_alloc: 13347: binder_alloc_buf, no vma
[  633.765356][T13354] binder: 13347:13354 ioctl c0306201 200000000300 returned -14
[  633.788794][T13352] binder: 13347:13352 ioctl 4068aea3 200000000240 returned -22
[  634.413521][T13338] configfs-gadget.g1 gadget.0: HOST MAC 36:ce:83:bd:57:49
[  634.413539][T13338] configfs-gadget.g1 gadget.0: MAC fe:99:d8:04:eb:0a
[  634.638732][T13346] team0: Port device team_slave_1 removed
[  636.138333][T13390] ublk_ctrl_add_dev: invalid recovery flags 10
[  636.658243][T13402] FAULT_INJECTION: forcing a failure.
[  636.658243][T13402] name failslab, interval 1, probability 0, space 0, times 0
[  636.658266][T13402] CPU: 0 UID: 0 PID: 13402 Comm: syz.4.2420 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  636.658281][T13402] Tainted: [L]=SOFTLOCKUP
[  636.658285][T13402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  636.658292][T13402] Call Trace:
[  636.658297][T13402]  <TASK>
[  636.658302][T13402]  dump_stack_lvl+0xe8/0x150
[  636.658321][T13402]  should_fail_ex+0x467/0x600
[  636.658338][T13402]  should_failslab+0xa8/0x100
[  636.658350][T13402]  __kvmalloc_node_noprof+0x176/0x880
[  636.658369][T13402]  ? __kmalloc_cache_noprof+0x3cd/0x670
[  636.658385][T13402]  ? io_alloc_cache_init+0x42/0x140
[  636.658398][T13402]  ? io_alloc_cache_init+0x42/0x140
[  636.658414][T13402]  io_alloc_cache_init+0x42/0x140
[  636.658429][T13402]  io_ring_ctx_alloc+0x537/0xba0
[  636.658444][T13402]  io_uring_create+0x50/0x990
[  636.658457][T13402]  __se_sys_io_uring_setup+0x2a8/0x2c0
[  636.658473][T13402]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  636.658489][T13402]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[  636.658511][T13402]  ? __pfx_ksys_write+0x10/0x10
[  636.658527][T13402]  do_syscall_64+0x17b/0x530
[  636.658538][T13402]  ? irqentry_exit+0x10f/0x8f0
[  636.658548][T13402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.658559][T13402]  ? clear_bhb_loop+0x40/0x90
[  636.658580][T13402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.658590][T13402] RIP: 0033:0x7f6f5724de99
[  636.658601][T13402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.658610][T13402] RSP: 002b:00007f6f554a5ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[  636.658623][T13402] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f6f5724de99
[  636.658631][T13402] RDX: 0000000000000088 RSI: 0000000000000008 RDI: 00000000000003c9
[  636.658637][T13402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  636.658643][T13402] R10: 0000000000000090 R11: 0000000000000206 R12: 0000000000000088
[  636.658650][T13402] R13: 0000000000000090 R14: 00007f6f554a5fd8 R15: 0000000000000000
[  636.658664][T13402]  </TASK>
[  637.460755][ T5787] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  637.619806][ T5787] usb 5-1: Using ep0 maxpacket: 8
[  637.631970][ T5787] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  637.631988][ T5787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.631998][ T5787] usb 5-1: Product: syz
[  637.632006][ T5787] usb 5-1: Manufacturer: syz
[  637.632013][ T5787] usb 5-1: SerialNumber: syz
[  637.637767][ T5787] usb 5-1: config 0 descriptor??
[  637.883894][ T5787] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  638.173229][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.173671][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.253889][T13382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  638.264744][T13382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  638.491087][   T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  638.624722][ T4921] Bluetooth: hci1: Malformed LE Event: 0x0b
[  638.642160][T13426] FAULT_INJECTION: forcing a failure.
[  638.642160][T13426] name failslab, interval 1, probability 0, space 0, times 0
[  638.642184][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.1.2423 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  638.642198][T13426] Tainted: [L]=SOFTLOCKUP
[  638.642202][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  638.642208][T13426] Call Trace:
[  638.642213][T13426]  <TASK>
[  638.642218][T13426]  dump_stack_lvl+0xe8/0x150
[  638.642237][T13426]  should_fail_ex+0x467/0x600
[  638.642252][T13426]  ? __d_alloc+0x37/0x6f0
[  638.642268][T13426]  should_failslab+0xa8/0x100
[  638.642279][T13426]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[  638.642295][T13426]  ? __d_alloc+0x37/0x6f0
[  638.642309][T13426]  __d_alloc+0x37/0x6f0
[  638.642324][T13426]  d_alloc_parallel+0xde/0x16c0
[  638.642337][T13426]  ? lock_acquire+0x115/0x350
[  638.642359][T13426]  ? __d_lookup+0x66/0x790
[  638.642371][T13426]  ? __d_lookup+0x66/0x790
[  638.642391][T13426]  ? __pfx_d_alloc_parallel+0x10/0x10
[  638.642404][T13426]  ? d_lookup+0x1f/0xc0
[  638.642417][T13426]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  638.642432][T13426]  path_openat+0xbf0/0x3850
[  638.642449][T13426]  ? do_syscall_64+0x17b/0x530
[  638.642473][T13426]  do_file_open+0x23e/0x4a0
[  638.642485][T13426]  ? lockdep_hardirqs_on+0x7a/0x110
[  638.642497][T13426]  ? __pfx_do_file_open+0x10/0x10
[  638.642522][T13426]  ? alloc_fd+0x654/0x6d0
[  638.642537][T13426]  do_sys_openat2+0x115/0x200
[  638.642555][T13426]  ? __pfx_do_sys_openat2+0x10/0x10
[  638.642571][T13426]  ? ksys_write+0x248/0x270
[  638.642584][T13426]  ? __pfx_ksys_write+0x10/0x10
[  638.642598][T13426]  __x64_sys_creat+0x8f/0xc0
[  638.642610][T13426]  do_syscall_64+0x17b/0x530
[  638.642620][T13426]  ? irqentry_exit+0x10f/0x8f0
[  638.642630][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.642641][T13426]  ? clear_bhb_loop+0x40/0x90
[  638.642654][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  638.642665][T13426] RIP: 0033:0x7f049015de99
[  638.642675][T13426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.642684][T13426] RSP: 002b:00007f048e3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  638.642696][T13426] RAX: ffffffffffffffda RBX: 00007f04903e5fa0 RCX: 00007f049015de99
[  638.642704][T13426] RDX: 0000000000000000 RSI: 00000000000000ae RDI: 00002000000000c0
[  638.642710][T13426] RBP: 00007f048e3b6090 R08: 0000000000000000 R09: 0000000000000000
[  638.642717][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  638.642723][T13426] R13: 00007f04903e6038 R14: 00007f04903e5fa0 R15: 00007ffc0ac7d348
[  638.642740][T13426]  </TASK>
[  638.644782][   T10] usb 1-1: Dual-Role OTG device on HNP port
[  638.645083][   T10] usb 1-1: New USB device found, idVendor=17b3, idProduct=0004, bcdDevice= 7.02
[  638.645097][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.645107][   T10] usb 1-1: Product: ACMESynth
[  638.645115][   T10] usb 1-1: Manufacturer: ACME
[  639.495460][ T4921] Bluetooth: hci1: unexpected event for opcode 0x2012
[  639.545329][   T10] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, 16:1a:e7:9f:1c:16
[  639.888012][ T5787] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  639.973375][ T5787] usb 5-1: USB disconnect, device number 39
[  640.240173][T13442] netlink: 'syz.5.2429': attribute type 12 has an invalid length.
[  641.449882][T13445] block nbd0: shutting down sockets
[  643.241674][T13462] FAULT_INJECTION: forcing a failure.
[  643.241674][T13462] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  643.241700][T13462] CPU: 0 UID: 0 PID: 13462 Comm: syz.0.2433 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  643.241716][T13462] Tainted: [L]=SOFTLOCKUP
[  643.241720][T13462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  643.241726][T13462] Call Trace:
[  643.241731][T13462]  <TASK>
[  643.241739][T13462]  dump_stack_lvl+0xe8/0x150
[  643.241757][T13462]  should_fail_ex+0x467/0x600
[  643.241774][T13462]  prepare_alloc_pages+0x223/0x650
[  643.241793][T13462]  __alloc_frozen_pages_noprof+0x193/0x5b0
[  643.241811][T13462]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  643.241829][T13462]  ? __pfx_policy_nodemask+0x10/0x10
[  643.241840][T13462]  ? try_to_migrate+0x33d/0x400
[  643.241850][T13462]  ? __pfx_try_to_migrate+0x10/0x10
[  643.241861][T13462]  alloc_pages_mpol+0xd4/0x280
[  643.241874][T13462]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  643.241886][T13462]  migrate_pages_batch+0x7d2/0x43d0
[  643.241905][T13462]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  643.241921][T13462]  ? __pfx_migrate_pages_batch+0x10/0x10
[  643.241932][T13462]  ? lockdep_hardirqs_on+0x7a/0x110
[  643.241946][T13462]  ? __css_rstat_updated+0x235/0x540
[  643.241962][T13462]  ? __lock_acquire+0x6df/0x2e40
[  643.241981][T13462]  ? update_se+0x90/0xf30
[  643.241997][T13462]  migrate_pages+0x1b96/0x2900
[  643.242015][T13462]  ? __pfx_alloc_migration_target_by_mpol+0x10/0x10
[  643.242032][T13462]  ? __pfx_migrate_pages+0x10/0x10
[  643.242043][T13462]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  643.242059][T13462]  ? wake_up_q+0x99/0xd0
[  643.242077][T13462]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  643.242087][T13462]  ? lockdep_hardirqs_on+0x7a/0x110
[  643.242097][T13462]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  643.242110][T13462]  __se_sys_mbind+0xe82/0x10e0
[  643.242134][T13462]  ? __pfx___se_sys_mbind+0x10/0x10
[  643.242155][T13462]  ? fput+0xa0/0xd0
[  643.242170][T13462]  ? ksys_write+0x248/0x270
[  643.242183][T13462]  ? __pfx_ksys_write+0x10/0x10
[  643.242196][T13462]  ? __x64_sys_mbind+0x21/0xf0
[  643.242213][T13462]  do_syscall_64+0x17b/0x530
[  643.242224][T13462]  ? irqentry_exit+0x10f/0x8f0
[  643.242233][T13462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.242244][T13462]  ? clear_bhb_loop+0x40/0x90
[  643.242257][T13462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  643.242267][T13462] RIP: 0033:0x7fcabfebde99
[  643.242278][T13462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  643.242288][T13462] RSP: 002b:00007fcabe116028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed
[  643.242300][T13462] RAX: ffffffffffffffda RBX: 00007fcac0145fa0 RCX: 00007fcabfebde99
[  643.242307][T13462] RDX: 0000000000000000 RSI: 0100000000004000 RDI: 00002000005b4000
[  643.242315][T13462] RBP: 00007fcabe116090 R08: 0000000000000000 R09: 0000000000000002
[  643.242322][T13462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  643.242328][T13462] R13: 00007fcac0146038 R14: 00007fcac0145fa0 R15: 00007ffd4fb08af8
[  643.242343][T13462]  </TASK>
[  644.795867][T13494] FAULT_INJECTION: forcing a failure.
[  644.795867][T13494] name failslab, interval 1, probability 0, space 0, times 0
[  644.795890][T13494] CPU: 0 UID: 0 PID: 13494 Comm: syz.4.2441 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  644.795906][T13494] Tainted: [L]=SOFTLOCKUP
[  644.795909][T13494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  644.795917][T13494] Call Trace:
[  644.795921][T13494]  <TASK>
[  644.795928][T13494]  dump_stack_lvl+0xe8/0x150
[  644.795944][T13494]  should_fail_ex+0x467/0x600
[  644.795960][T13494]  should_failslab+0xa8/0x100
[  644.795972][T13494]  kmem_cache_alloc_node_noprof+0xac/0x660
[  644.795987][T13494]  ? __alloc_skb+0x1d7/0x7a0
[  644.796000][T13494]  ? __alloc_skb+0x1d7/0x7a0
[  644.796016][T13494]  __alloc_skb+0x1d7/0x7a0
[  644.796031][T13494]  netlink_ack+0x136/0xb30
[  644.796045][T13494]  ? __pfx_genl_rcv_msg+0x10/0x10
[  644.796055][T13494]  ? ref_tracker_free+0x668/0x820
[  644.796069][T13494]  ? __pfx_nl80211_post_doit+0x10/0x10
[  644.796082][T13494]  ? ____sys_sendmsg+0x565/0x870
[  644.796096][T13494]  ? ___sys_sendmsg+0x2a5/0x360
[  644.796109][T13494]  ? __x64_sys_sendmsg+0x1b7/0x290
[  644.796123][T13494]  ? do_syscall_64+0x17b/0x530
[  644.796134][T13494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.796149][T13494]  netlink_rcv_skb+0x2a4/0x4a0
[  644.796164][T13494]  ? __pfx_genl_rcv_msg+0x10/0x10
[  644.796177][T13494]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  644.796202][T13494]  genl_rcv+0x28/0x40
[  644.796213][T13494]  netlink_unicast+0x7f5/0x990
[  644.796232][T13494]  netlink_sendmsg+0x813/0xb40
[  644.796252][T13494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  644.796268][T13494]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  644.796286][T13494]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  644.796301][T13494]  ? arch_stack_walk+0xfb/0x150
[  644.796319][T13494]  ? __pfx_netlink_sendmsg+0x10/0x10
[  644.796334][T13494]  sock_sendmsg_nosec+0x13a/0x180
[  644.796347][T13494]  ____sys_sendmsg+0x565/0x870
[  644.796366][T13494]  ? __pfx_____sys_sendmsg+0x10/0x10
[  644.796385][T13494]  ? import_iovec+0x73/0xa0
[  644.796404][T13494]  ___sys_sendmsg+0x2a5/0x360
[  644.796418][T13494]  ? __lock_acquire+0x6df/0x2e40
[  644.796430][T13494]  ? __pfx____sys_sendmsg+0x10/0x10
[  644.796463][T13494]  ? __fget_files+0x2a/0x420
[  644.796473][T13494]  ? __fget_files+0x3a8/0x420
[  644.796489][T13494]  __x64_sys_sendmsg+0x1b7/0x290
[  644.796505][T13494]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  644.796530][T13494]  do_syscall_64+0x17b/0x530
[  644.796540][T13494]  ? irqentry_exit+0x10f/0x8f0
[  644.796550][T13494]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.796560][T13494]  ? clear_bhb_loop+0x40/0x90
[  644.796573][T13494]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  644.796583][T13494] RIP: 0033:0x7f6f5724de99
[  644.796598][T13494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.796607][T13494] RSP: 002b:00007f6f554a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.796625][T13494] RAX: ffffffffffffffda RBX: 00007f6f574d5fa0 RCX: 00007f6f5724de99
[  644.796633][T13494] RDX: 000000000600c800 RSI: 0000200000000180 RDI: 0000000000000003
[  644.796640][T13494] RBP: 00007f6f554a6090 R08: 0000000000000000 R09: 0000000000000000
[  644.796647][T13494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  644.796653][T13494] R13: 00007f6f574d6038 R14: 00007f6f574d5fa0 R15: 00007ffe0c6a9668
[  644.796670][T13494]  </TASK>
[  644.940025][ T5714] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  645.157397][ T5714] usb 6-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11
[  645.295846][ T5714] usb 6-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  645.311369][ T5714] usb 6-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  645.311385][ T5714] usb 6-1: Manufacturer: syz
[  645.311394][ T5714] usb 6-1: SerialNumber: syz
[  646.890564][ T5714] usbhid 6-1:36.0: couldn't find an input interrupt endpoint
[  646.938558][ T5714] usb 6-1: USB disconnect, device number 44
[  647.872073][T13531] FAULT_INJECTION: forcing a failure.
[  647.872073][T13531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  647.872138][T13531] CPU: 0 UID: 0 PID: 13531 Comm: syz.5.2446 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  647.872154][T13531] Tainted: [L]=SOFTLOCKUP
[  647.872157][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  647.872164][T13531] Call Trace:
[  647.872169][T13531]  <TASK>
[  647.872174][T13531]  dump_stack_lvl+0xe8/0x150
[  647.872192][T13531]  should_fail_ex+0x467/0x600
[  647.872208][T13531]  _copy_from_iter+0x1d3/0x1660
[  647.872226][T13531]  ? trace_kmem_cache_alloc+0x29/0xe0
[  647.872244][T13531]  ? __pfx__copy_from_iter+0x10/0x10
[  647.872258][T13531]  ? __alloc_skb+0x276/0x7a0
[  647.872270][T13531]  ? __alloc_skb+0x276/0x7a0
[  647.872286][T13531]  ? netlink_sendmsg+0x650/0xb40
[  647.872301][T13531]  ? skb_put+0x112/0x210
[  647.872316][T13531]  netlink_sendmsg+0x6c0/0xb40
[  647.872335][T13531]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.872351][T13531]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  647.872368][T13531]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  647.872384][T13531]  ? arch_stack_walk+0xfb/0x150
[  647.872401][T13531]  ? __pfx_netlink_sendmsg+0x10/0x10
[  647.872416][T13531]  sock_sendmsg_nosec+0x13a/0x180
[  647.872429][T13531]  sock_write_iter+0x2e4/0x3f0
[  647.872441][T13531]  ? __pfx_sock_write_iter+0x10/0x10
[  647.872460][T13531]  do_iter_readv_writev+0x624/0x8d0
[  647.872474][T13531]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  647.872489][T13531]  ? bpf_lsm_file_permission+0x9/0x20
[  647.872505][T13531]  ? security_file_permission+0x68/0x220
[  647.872517][T13531]  ? rw_verify_area+0x209/0x4d0
[  647.872530][T13531]  vfs_writev+0x34c/0x990
[  647.872546][T13531]  ? do_raw_spin_lock+0x12b/0x2f0
[  647.872562][T13531]  ? __pfx_vfs_writev+0x10/0x10
[  647.872583][T13531]  ? __fget_files+0x2a/0x420
[  647.872595][T13531]  ? __fget_files+0x3a8/0x420
[  647.872605][T13531]  ? __fget_files+0x2a/0x420
[  647.872619][T13531]  do_writev+0x15a/0x2e0
[  647.872634][T13531]  ? __pfx_do_writev+0x10/0x10
[  647.872653][T13531]  do_syscall_64+0x17b/0x530
[  647.872664][T13531]  ? irqentry_exit+0x10f/0x8f0
[  647.872674][T13531]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.872685][T13531]  ? clear_bhb_loop+0x40/0x90
[  647.872698][T13531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  647.872708][T13531] RIP: 0033:0x7f822b2cde99
[  647.872719][T13531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  647.872728][T13531] RSP: 002b:00007f8229505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  647.872739][T13531] RAX: ffffffffffffffda RBX: 00007f822b556090 RCX: 00007f822b2cde99
[  647.872747][T13531] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000004
[  647.872753][T13531] RBP: 00007f8229505090 R08: 0000000000000000 R09: 0000000000000000
[  647.872760][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  647.872766][T13531] R13: 00007f822b556128 R14: 00007f822b556090 R15: 00007ffd6fa6a758
[  647.872781][T13531]  </TASK>
[  648.574602][T13538] FAULT_INJECTION: forcing a failure.
[  648.574602][T13538] name failslab, interval 1, probability 0, space 0, times 0
[  648.574667][T13538] CPU: 0 UID: 0 PID: 13538 Comm: syz.1.2448 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  648.574683][T13538] Tainted: [L]=SOFTLOCKUP
[  648.574687][T13538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  648.574694][T13538] Call Trace:
[  648.574698][T13538]  <TASK>
[  648.574704][T13538]  dump_stack_lvl+0xe8/0x150
[  648.574721][T13538]  should_fail_ex+0x467/0x600
[  648.574737][T13538]  should_failslab+0xa8/0x100
[  648.574750][T13538]  __kmalloc_noprof+0xfb/0x790
[  648.574764][T13538]  ? rt_spin_unlock+0x157/0x200
[  648.574780][T13538]  ? ___neigh_create+0x719/0x23a0
[  648.574791][T13538]  ? ___neigh_create+0x719/0x23a0
[  648.574807][T13538]  ___neigh_create+0x719/0x23a0
[  648.574821][T13538]  ? lock_acquire+0x115/0x350
[  648.574839][T13538]  ? lock_acquire+0x115/0x350
[  648.574867][T13538]  ip_neigh_gw4+0x27e/0x3a0
[  648.574884][T13538]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  648.574903][T13538]  ip_finish_output2+0xe6e/0x1100
[  648.574917][T13538]  ? ip_finish_output2+0x3de/0x1100
[  648.574930][T13538]  ? ip_skb_dst_mtu+0x109/0xa50
[  648.574944][T13538]  ? ip_finish_output+0x40b/0x530
[  648.574959][T13538]  ip_output+0x29f/0x450
[  648.574971][T13538]  ? ip_output+0x5a/0x450
[  648.574985][T13538]  ip_push_pending_frames+0x8b/0x110
[  648.575000][T13538]  raw_sendmsg+0x1486/0x1a20
[  648.575020][T13538]  ? __pfx_raw_sendmsg+0x10/0x10
[  648.575031][T13538]  ? __lock_acquire+0x6df/0x2e40
[  648.575058][T13538]  ? sock_rps_record_flow+0x19/0x350
[  648.575073][T13538]  ? inet_sendmsg+0x298/0x320
[  648.575088][T13538]  ? __pfx_inet_sendmsg+0x10/0x10
[  648.575100][T13538]  sock_sendmsg_nosec+0x10e/0x180
[  648.575113][T13538]  __sys_sendto+0x41e/0x5d0
[  648.575130][T13538]  ? __pfx___sys_sendto+0x10/0x10
[  648.575158][T13538]  ? __pfx_ksys_write+0x10/0x10
[  648.575172][T13538]  __x64_sys_sendto+0xde/0x100
[  648.575188][T13538]  do_syscall_64+0x17b/0x530
[  648.575198][T13538]  ? irqentry_exit+0x10f/0x8f0
[  648.575208][T13538]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.575219][T13538]  ? clear_bhb_loop+0x40/0x90
[  648.575232][T13538]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.575243][T13538] RIP: 0033:0x7f049015de99
[  648.575253][T13538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.575262][T13538] RSP: 002b:00007f048e3b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  648.575274][T13538] RAX: ffffffffffffffda RBX: 00007f04903e5fa0 RCX: 00007f049015de99
[  648.575282][T13538] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003
[  648.575289][T13538] RBP: 00007f048e3b6090 R08: 00002000000000c0 R09: 0000000000000010
[  648.575295][T13538] R10: 000000002004082c R11: 0000000000000246 R12: 0000000000000001
[  648.575302][T13538] R13: 00007f04903e6038 R14: 00007f04903e5fa0 R15: 00007ffc0ac7d348
[  648.575319][T13538]  </TASK>
[  649.510908][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.514086][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.931876][T13563] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2455'.
[  649.986580][T13563] atomic_op ffff888060a4b218 conn xmit_atomic 0000000000000000
[  650.198702][ T4921] Bluetooth: hci1: status 0xff
[  650.198722][ T4921] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  650.516576][T13576] netlink: 'syz.0.2458': attribute type 21 has an invalid length.
[  650.537443][T13576] tmpfs: Unknown parameter 'grpquotaN�÷‚ÛD¹'
[  650.849256][  T959] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  650.961656][T13588] FAULT_INJECTION: forcing a failure.
[  650.961656][T13588] name failslab, interval 1, probability 0, space 0, times 0
[  650.961682][T13588] CPU: 0 UID: 0 PID: 13588 Comm: syz.4.2462 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  650.961698][T13588] Tainted: [L]=SOFTLOCKUP
[  650.961702][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  650.961709][T13588] Call Trace:
[  650.961714][T13588]  <TASK>
[  650.961720][T13588]  dump_stack_lvl+0xe8/0x150
[  650.961739][T13588]  should_fail_ex+0x467/0x600
[  650.961758][T13588]  ? __d_alloc+0x37/0x6f0
[  650.961771][T13588]  should_failslab+0xa8/0x100
[  650.961783][T13588]  kmem_cache_alloc_lru_noprof+0xa2/0x670
[  650.961798][T13588]  ? look_up_lock_class+0x57/0x110
[  650.961809][T13588]  ? __d_alloc+0x37/0x6f0
[  650.961823][T13588]  __d_alloc+0x37/0x6f0
[  650.961834][T13588]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  650.961850][T13588]  d_alloc_parallel+0xde/0x16c0
[  650.961872][T13588]  ? lock_acquire+0x115/0x350
[  650.961890][T13588]  ? __pfx_d_alloc_parallel+0x10/0x10
[  650.961908][T13588]  ? down_read+0x156/0x200
[  650.961918][T13588]  ? __pfx_down_read+0x10/0x10
[  650.961930][T13588]  __lookup_slow+0x82/0x2f0
[  650.961944][T13588]  lookup_slow+0x53/0x70
[  650.961955][T13588]  path_lookupat+0x3f5/0x8c0
[  650.961973][T13588]  filename_lookup+0x265/0x5d0
[  650.961986][T13588]  ? __pfx_filename_lookup+0x10/0x10
[  650.962009][T13588]  ? strncpy_from_user+0x150/0x2c0
[  650.962023][T13588]  ? do_getname+0x151/0x250
[  650.962040][T13588]  do_fchownat+0xfa/0x250
[  650.962056][T13588]  ? __pfx_do_fchownat+0x10/0x10
[  650.962071][T13588]  ? __pfx_ksys_write+0x10/0x10
[  650.962086][T13588]  __x64_sys_lchown+0x85/0xa0
[  650.962101][T13588]  do_syscall_64+0x17b/0x530
[  650.962111][T13588]  ? irqentry_exit+0x10f/0x8f0
[  650.962121][T13588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.962132][T13588]  ? clear_bhb_loop+0x40/0x90
[  650.962144][T13588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.962154][T13588] RIP: 0033:0x7f6f5724de99
[  650.962165][T13588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.962175][T13588] RSP: 002b:00007f6f55485028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[  650.962186][T13588] RAX: ffffffffffffffda RBX: 00007f6f574d6090 RCX: 00007f6f5724de99
[  650.962193][T13588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  650.962200][T13588] RBP: 00007f6f55485090 R08: 0000000000000000 R09: 0000000000000000
[  650.962206][T13588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.962212][T13588] R13: 00007f6f574d6128 R14: 00007f6f574d6090 R15: 00007ffe0c6a9668
[  650.962228][T13588]  </TASK>
[  650.979144][  T959] usb 6-1: device descriptor read/64, error -71
[  651.219181][  T959] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  651.439256][  T959] usb 6-1: device descriptor read/64, error -71
[  651.549325][  T959] usb usb6-port1: attempt power cycle
[  651.893068][  T959] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  651.909770][  T959] usb 6-1: device descriptor read/8, error -71
[  652.149156][  T959] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  652.172359][  T959] usb 6-1: device descriptor read/8, error -71
[  652.283909][  T959] usb usb6-port1: unable to enumerate USB device
[  652.328134][T13594] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  653.021003][   T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  653.169047][   T10] usb 5-1: Using ep0 maxpacket: 16
[  653.172173][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  653.172192][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  653.172203][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  653.172265][   T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  653.172279][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.241216][   T10] usb 5-1: config 0 descriptor??
[  653.578809][T13616] FAULT_INJECTION: forcing a failure.
[  653.578809][T13616] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  653.578873][T13616] CPU: 0 UID: 0 PID: 13616 Comm: syz.5.2470 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  653.578889][T13616] Tainted: [L]=SOFTLOCKUP
[  653.578893][T13616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  653.578900][T13616] Call Trace:
[  653.578904][T13616]  <TASK>
[  653.578909][T13616]  dump_stack_lvl+0xe8/0x150
[  653.578928][T13616]  should_fail_ex+0x467/0x600
[  653.578945][T13616]  _copy_from_user+0x2d/0xb0
[  653.578955][T13616]  do_sys_poll+0x258/0xf50
[  653.578967][T13616]  ? lock_acquire+0x115/0x350
[  653.578989][T13616]  ? __lock_acquire+0x6df/0x2e40
[  653.578998][T13616]  ? __pfx_do_sys_poll+0x10/0x10
[  653.579009][T13616]  ? is_bpf_text_address+0x26/0x2b0
[  653.579023][T13616]  ? kernel_text_address+0xa5/0xe0
[  653.579082][T13616]  ? set_user_sigmask+0xcd/0x1c0
[  653.579094][T13616]  ? __pfx_set_user_sigmask+0x10/0x10
[  653.579105][T13616]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  653.579123][T13616]  __se_sys_ppoll+0x209/0x2b0
[  653.579140][T13616]  ? fput+0xa0/0xd0
[  653.579156][T13616]  ? __pfx___se_sys_ppoll+0x10/0x10
[  653.579170][T13616]  ? __pfx_ksys_write+0x10/0x10
[  653.579185][T13616]  ? __x64_sys_ppoll+0x20/0xc0
[  653.579200][T13616]  do_syscall_64+0x17b/0x530
[  653.579211][T13616]  ? irqentry_exit+0x10f/0x8f0
[  653.579220][T13616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.579231][T13616]  ? clear_bhb_loop+0x40/0x90
[  653.579244][T13616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  653.579254][T13616] RIP: 0033:0x7f822b2cde99
[  653.579265][T13616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  653.579274][T13616] RSP: 002b:00007f8229526028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  653.579285][T13616] RAX: ffffffffffffffda RBX: 00007f822b555fa0 RCX: 00007f822b2cde99
[  653.579293][T13616] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040
[  653.579300][T13616] RBP: 00007f8229526090 R08: 0000000000000000 R09: 0000000000000000
[  653.579306][T13616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  653.579312][T13616] R13: 00007f822b556038 R14: 00007f822b555fa0 R15: 00007ffd6fa6a758
[  653.579335][T13616]  </TASK>
[  653.874130][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.874939][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.874957][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.874972][   T10] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max
[  653.918578][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918600][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918616][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918631][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918646][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918696][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  653.918712][   T10] microsoft 0003:045E:07DA.002F: unknown main item tag 0x0
[  654.482345][ T5714] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  654.612702][ T5714] usb 6-1: device descriptor read/64, error -71
[  654.826580][T13629] ubi2: attaching mtd0
[  654.850042][ T5714] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  654.979348][ T5714] usb 6-1: device descriptor read/64, error -71
[  655.092711][ T5714] usb usb6-port1: attempt power cycle
[  655.452324][ T5714] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  655.470459][ T5714] usb 6-1: device descriptor read/8, error -71
[  655.602350][T13629] ubi2: scanning is finished
[  655.602364][T13629] ubi2: empty MTD device detected
[  655.646921][T13629] ubi2 error: ubi_read_volume_table: LEB size too small for a volume record
[  655.719034][ T5714] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  655.743850][ T5714] usb 6-1: device descriptor read/8, error -71
[  655.857445][ T5714] usb usb6-port1: unable to enumerate USB device
[  656.126399][   T10] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  656.126420][   T10] microsoft 0003:045E:07DA.002F: no inputs found
[  656.126436][   T10] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway
[  656.193253][   T10] usb 5-1: USB disconnect, device number 40
[  656.732815][T13645] fido_id[13645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  656.897716][T13650] fuse: Bad value for 'fd'
[  657.646220][T13629] ubi2 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22
[  663.564484][  T959] usb 1-1: USB disconnect, device number 39
[  663.567273][  T959] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device
[  664.340881][T13686] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2486'.
[  664.789146][   T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  664.966056][   T10] usb 6-1: Using ep0 maxpacket: 16
[  664.967559][   T10] usb 6-1: config 15 has an invalid interface number: 112 but max is 0
[  664.967574][   T10] usb 6-1: config 15 has no interface number 0
[  664.967591][   T10] usb 6-1: config 15 interface 112 has no altsetting 0
[  664.999865][   T10] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=4c.11
[  664.999882][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.999893][   T10] usb 6-1: Product: syz
[  664.999900][   T10] usb 6-1: Manufacturer: syz
[  664.999908][   T10] usb 6-1: SerialNumber: syz
[  666.608006][   T10] usb 6-1: USB disconnect, device number 53
[  667.072017][   T10] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  667.230193][   T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  667.230212][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.230223][   T10] usb 1-1: Product: syz
[  667.230230][   T10] usb 1-1: Manufacturer: syz
[  667.230237][   T10] usb 1-1: SerialNumber: syz
[  667.280653][   T10] usb 1-1: config 0 descriptor??
[  667.409074][ T5612] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  667.450086][  T959] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  667.494879][   T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  667.559310][ T5612] usb 5-1: Using ep0 maxpacket: 16
[  667.598468][ T5612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  667.598487][ T5612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  667.598499][ T5612] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  667.598522][ T5612] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  667.598534][ T5612] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  667.609303][  T959] usb 6-1: Using ep0 maxpacket: 8
[  667.684637][  T959] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  667.684655][  T959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.684665][  T959] usb 6-1: Product: syz
[  667.684673][  T959] usb 6-1: Manufacturer: syz
[  667.684681][  T959] usb 6-1: SerialNumber: syz
[  667.727853][ T5612] usb 5-1: config 0 descriptor??
[  667.748230][T13722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  667.767137][T13722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  667.808020][  T959] usb 6-1: config 0 descriptor??
[  668.038816][  T959] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  668.256536][ T5612] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max
[  668.324677][ T5612] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0030/input/input75
[  668.455952][   T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  668.511184][T13738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  668.511686][T13738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  668.544577][   T10] usb 1-1: USB disconnect, device number 40
[  668.761539][ T5612] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  669.290236][ T5612] usb 5-1: USB disconnect, device number 41
[  669.707162][  T959] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  669.730889][  T959] usb 6-1: USB disconnect, device number 54
[  670.450796][  T959] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  670.600069][  T959] usb 5-1: Using ep0 maxpacket: 16
[  670.602677][  T959] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  670.602694][  T959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.649415][  T959] usb 5-1: config 0 descriptor??
[  670.674416][  T959] gspca_main: sonixj-2.14.0 probing 0471:0327
[  671.349056][ T5721] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  671.519436][ T5721] usb 6-1: Using ep0 maxpacket: 8
[  671.520935][ T5721] usb 6-1: config index 0 descriptor too short (expected 26133, got 27)
[  671.520950][ T5721] usb 6-1: config 84 has too many interfaces: 218, using maximum allowed: 32
[  671.520960][ T5721] usb 6-1: config 84 has an invalid descriptor of length 131, skipping remainder of the config
[  671.520971][ T5721] usb 6-1: config 84 has 0 interfaces, different from the descriptor's value: 218
[  671.520990][ T5721] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  671.521001][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.725609][  T959] gspca_sonixj: reg_w1 err -71
[  671.740186][  T959] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  671.761196][  T959] usb 5-1: USB disconnect, device number 42
[  671.816652][ T5721] usb 6-1: string descriptor 0 read error: -71
[  671.838449][ T5721] usb 6-1: USB disconnect, device number 55
[  672.160359][   T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  672.309151][   T10] usb 1-1: Using ep0 maxpacket: 16
[  672.312341][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  672.312359][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  672.312370][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  672.312393][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  672.312405][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.382895][   T10] usb 1-1: config 0 descriptor??
[  672.810465][  T959] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  672.844944][   T10] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max
[  672.922629][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0031/input/input76
[  672.959352][  T959] usb 6-1: Using ep0 maxpacket: 8
[  672.982421][  T959] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  672.982437][  T959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.982448][  T959] usb 6-1: Product: syz
[  672.982456][  T959] usb 6-1: Manufacturer: syz
[  672.982463][  T959] usb 6-1: SerialNumber: syz
[  673.032500][  T959] usb 6-1: config 0 descriptor??
[  673.070697][   T10] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  673.097795][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  673.098124][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  673.278121][  T959] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  673.691119][ T5612] usb 1-1: USB disconnect, device number 41
[  674.143234][T13864] Bluetooth: MGMT ver 1.23
[  674.933549][  T959] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  674.951098][  T959] usb 6-1: USB disconnect, device number 56
[  675.279342][ T5612] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  675.469813][ T5612] usb 1-1: Using ep0 maxpacket: 32
[  675.489454][ T5612] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.489474][ T5612] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  675.489488][ T5612] usb 1-1: config 0 interface 0 has no altsetting 0
[  675.489508][ T5612] usb 1-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00
[  675.489520][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.493526][ T5612] usb 1-1: config 0 descriptor??
[  675.928499][ T5612] hid (null): unknown global tag 0xa3
[  675.928520][ T5612] hid (null): unknown global tag 0xc
[  675.928529][ T5612] hid (null): unknown global tag 0xd
[  676.107042][T13908] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  676.153958][T13874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.154389][T13874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  676.388231][ T5612] usb 1-1: string descriptor 0 read error: -71
[  676.388645][ T5612] uclogic 0003:5543:006E.0032: failed retrieving string descriptor #200: -71
[  676.388679][ T5612] uclogic 0003:5543:006E.0032: failed retrieving pen parameters: -71
[  676.388688][ T5612] uclogic 0003:5543:006E.0032: failed probing pen v2 parameters: -71
[  676.388716][ T5612] uclogic 0003:5543:006E.0032: failed probing parameters: -71
[  676.388783][ T5612] uclogic 0003:5543:006E.0032: probe with driver uclogic failed with error -71
[  676.424265][ T5714] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  676.454708][ T5612] usb 1-1: USB disconnect, device number 42
[  676.556652][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2530'.
[  676.589252][ T5714] usb 6-1: Using ep0 maxpacket: 16
[  676.590899][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  676.590916][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  676.590928][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  676.590950][ T5714] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  676.590962][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.625294][ T5714] usb 6-1: config 0 descriptor??
[  677.093406][ T5714] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max
[  677.122469][ T5714] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0033/input/input77
[  677.202025][ T5714] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  677.251784][ T5612] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  677.385996][T13905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  677.386384][T13905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.421387][ T5612] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  677.421404][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.421415][ T5612] usb 5-1: Product: syz
[  677.421422][ T5612] usb 5-1: Manufacturer: syz
[  677.421430][ T5612] usb 5-1: SerialNumber: syz
[  677.535282][ T5714] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  677.643893][ T5612] usb 6-1: USB disconnect, device number 57
[  679.147829][ T5714] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  680.185046][ T5612] usb 5-1: USB disconnect, device number 43
[  680.229224][ T5714] ath9k_htc: Failed to initialize the device
[  680.229727][ T5612] usb 5-1: ath9k_htc: USB layer deinitialized
[  680.862546][ T5612] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  681.011203][ T5612] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  681.011224][ T5612] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 128, setting to 64
[  681.011238][ T5612] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  681.012143][ T5612] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  681.012158][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  681.012168][ T5612] usb 1-1: SerialNumber: syz
[  681.017518][T13939] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  681.025826][ T5612] hub 1-1:1.0: bad descriptor, ignoring hub
[  681.025846][ T5612] hub 1-1:1.0: probe with driver hub failed with error -5
[  681.102940][ T5612] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  681.122427][ T5714] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  681.272118][ T5714] usb 5-1: Using ep0 maxpacket: 32
[  681.287615][ T5714] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  681.287632][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.287643][ T5714] usb 5-1: Product: syz
[  681.287684][ T5714] usb 5-1: Manufacturer: syz
[  681.287691][ T5714] usb 5-1: SerialNumber: syz
[  681.396279][ T5714] usb 5-1: config 0 descriptor??
[  681.840926][ T5714] airspy 5-1:0.0: Board ID: 00
[  681.840940][ T5714] airspy 5-1:0.0: Firmware version: 
[  683.015063][ T5714] airspy 5-1:0.0: usb_control_msg() failed -71 request 0f
[  683.017903][ T5714] airspy 5-1:0.0: Registered as swradio24
[  683.017915][ T5714] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  683.079801][ T5714] usb 5-1: USB disconnect, device number 44
[  683.083738][T13974] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  683.083750][T13974] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  683.504696][ T5612] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  683.587983][ T5612] usb 1-1: USB disconnect, device number 43
[  683.726613][T13980] mmap: syz.1.2550 (13980): VmData 37728256 exceed data ulimit 262144. Update limits or use boot option ignore_rlimit_data.
[  683.889082][ T5787] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  684.039371][ T5787] usb 6-1: Using ep0 maxpacket: 8
[  684.055111][ T5787] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  684.056684][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.056698][ T5787] usb 6-1: Product: syz
[  684.056706][ T5787] usb 6-1: Manufacturer: syz
[  684.056713][ T5787] usb 6-1: SerialNumber: syz
[  684.099933][ T5787] usb 6-1: config 0 descriptor??
[  684.333509][ T5787] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  684.948944][ T5787] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  685.025918][T14025] FAULT_INJECTION: forcing a failure.
[  685.025918][T14025] name failslab, interval 1, probability 0, space 0, times 0
[  685.025942][T14025] CPU: 0 UID: 0 PID: 14025 Comm: syz.1.2557 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.025957][T14025] Tainted: [L]=SOFTLOCKUP
[  685.025961][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  685.025968][T14025] Call Trace:
[  685.025972][T14025]  <TASK>
[  685.025977][T14025]  dump_stack_lvl+0xe8/0x150
[  685.025995][T14025]  should_fail_ex+0x467/0x600
[  685.026012][T14025]  should_failslab+0xa8/0x100
[  685.026024][T14025]  __kmalloc_noprof+0xfb/0x790
[  685.026039][T14025]  ? tomoyo_realpath_from_path+0xef/0x640
[  685.026054][T14025]  ? tomoyo_realpath_from_path+0xef/0x640
[  685.026073][T14025]  tomoyo_realpath_from_path+0xef/0x640
[  685.026092][T14025]  ? tomoyo_path_number_perm+0x219/0x5f0
[  685.026105][T14025]  tomoyo_path_number_perm+0x246/0x5f0
[  685.026119][T14025]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  685.026132][T14025]  ? do_raw_spin_lock+0x12b/0x2f0
[  685.026153][T14025]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  685.026164][T14025]  ? lockdep_hardirqs_on+0x7a/0x110
[  685.026183][T14025]  ? __fget_files+0x2a/0x420
[  685.026196][T14025]  ? __fget_files+0x3a8/0x420
[  685.026205][T14025]  ? __fget_files+0x2a/0x420
[  685.026218][T14025]  security_file_ioctl+0xb9/0x260
[  685.026231][T14025]  __se_sys_ioctl+0x47/0x170
[  685.026246][T14025]  do_syscall_64+0x17b/0x530
[  685.026256][T14025]  ? irqentry_exit+0x10f/0x8f0
[  685.026266][T14025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.026277][T14025]  ? clear_bhb_loop+0x40/0x90
[  685.026290][T14025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.026300][T14025] RIP: 0033:0x7f049015de99
[  685.026311][T14025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.026320][T14025] RSP: 002b:00007f048e3b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  685.026332][T14025] RAX: ffffffffffffffda RBX: 00007f04903e5fa0 RCX: 00007f049015de99
[  685.026340][T14025] RDX: 0000200000000040 RSI: 00000000c0d05605 RDI: 0000000000000003
[  685.026346][T14025] RBP: 00007f048e3b6090 R08: 0000000000000000 R09: 0000000000000000
[  685.026353][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.026359][T14025] R13: 00007f04903e6038 R14: 00007f04903e5fa0 R15: 00007ffc0ac7d348
[  685.026375][T14025]  </TASK>
[  685.026379][T14025] ERROR: Out of memory at tomoyo_realpath_from_path.
[  685.557998][T14037] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 4, id = 0
[  685.643010][T14043] netlink: 'syz.4.2563': attribute type 5 has an invalid length.
[  685.669090][ T5787] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  685.734311][T14051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2565'.
[  685.784585][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[  685.784643][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[  685.821921][T14053] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2566'.
[  685.843034][ T5787] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  685.843057][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.843068][ T5787] usb 1-1: Product: syz
[  685.843076][ T5787] usb 1-1: Manufacturer: syz
[  685.843084][ T5787] usb 1-1: SerialNumber: syz
[  685.896465][ T5787] usb 1-1: config 0 descriptor??
[  686.345712][ T5787] usb 1-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  686.440583][ T5721] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  686.552435][T14063] fuse: Bad value for 'user_id'
[  686.552448][T14063] fuse: Bad value for 'user_id'
[  686.605592][ T5721] usb 5-1: Using ep0 maxpacket: 16
[  686.615756][ T5721] usb 5-1: config 1 has an invalid interface association descriptor of length 5, skipping
[  686.615772][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.615799][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 14609, setting to 1024
[  686.615813][ T5721] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024
[  686.615874][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  686.650829][ T5787] usb 1-1: failed to fetch extended address, random address set
[  686.650849][ T5787] usb 1-1: atusb_probe: initialization failed, error = -524
[  686.664296][ T5787] atusb 1-1:0.0: probe with driver atusb failed with error -524
[  686.709134][ T5721] usb 5-1: New USB device found, idVendor=1235, idProduct=8213, bcdDevice= 0.40
[  686.709150][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.709161][ T5721] usb 5-1: Product: syz
[  686.709169][ T5721] usb 5-1: Manufacturer: syz
[  686.709176][ T5721] usb 5-1: SerialNumber: syz
[  686.754226][ T5787] usb 1-1: USB disconnect, device number 44
[  686.766129][T14058] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  686.813588][ T5780] usb 6-1: USB disconnect, device number 58
[  687.165113][ T5721] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  687.165228][ T5721] usb 5-1: MIDIStreaming interface descriptor not found
[  687.229916][T14073] netlink: 'syz.1.2573': attribute type 5 has an invalid length.
[  687.446398][ T5721] usb 5-1: USB disconnect, device number 45
[  687.656387][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  688.009436][ T5780] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  688.139419][ T5780] usb 1-1: device descriptor read/64, error -71
[  688.176125][   T37] audit: type=1800 audit(2000000294.611:29): pid=14089 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.2579" name="file0" dev="overlay" ino=1058 res=0 errno=0
[  688.313865][T14091] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2581'.
[  688.324459][T14091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  688.381710][ T5780] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  688.381806][ T5612] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  688.509688][ T5780] usb 1-1: device descriptor read/64, error -71
[  688.530402][ T5612] usb 6-1: Using ep0 maxpacket: 8
[  688.541870][ T5612] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  688.541886][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.541896][ T5612] usb 6-1: Product: syz
[  688.541903][ T5612] usb 6-1: Manufacturer: syz
[  688.541911][ T5612] usb 6-1: SerialNumber: syz
[  688.548370][ T5612] usb 6-1: config 0 descriptor??
[  688.620287][ T5780] usb usb1-port1: attempt power cycle
[  688.639117][ T5721] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  688.790046][ T5612] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  688.808229][ T5721] usb 5-1: too many configurations: 16, using maximum allowed: 8
[  688.813957][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.813981][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.814002][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.826877][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.826899][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.827147][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.849246][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.849269][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.849289][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.877296][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.877321][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.877342][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.961325][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.961349][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.961407][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.962289][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.962309][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.962330][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.963290][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.963311][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.963365][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.964393][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.964413][ T5721] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  688.964433][ T5721] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  688.965572][ T5721] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  688.965586][ T5721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  688.965597][ T5721] usb 5-1: SerialNumber: syz
[  689.006364][ T5780] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  689.103122][ T5780] usb 1-1: device descriptor read/8, error -71
[  689.344153][ T5780] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  689.362041][ T5780] usb 1-1: device descriptor read/8, error -71
[  689.469396][ T5780] usb usb1-port1: unable to enumerate USB device
[  689.501011][ T5721] usb 5-1: USB disconnect, device number 46
[  689.567446][ T5612] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  690.239107][ T5721] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  690.423125][ T5721] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  690.423145][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.423155][ T5721] usb 5-1: Product: syz
[  690.423162][ T5721] usb 5-1: Manufacturer: syz
[  690.423170][ T5721] usb 5-1: SerialNumber: syz
[  690.426066][ T5721] usb 5-1: config 0 descriptor??
[  690.932172][ T5721] usb 5-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  691.240587][ T5612] usb 6-1: USB disconnect, device number 59
[  691.771996][ T5721] usb 5-1: failed to fetch extended address, random address set
[  691.772015][ T5721] usb 5-1: atusb_probe: initialization failed, error = -524
[  691.772148][ T5721] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  691.837195][ T5721] usb 5-1: USB disconnect, device number 47
[  692.015266][T14117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'.
[  692.076081][   T37] audit: type=1800 audit(2000000298.511:30): pid=14117 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.2587" name="file0" dev="overlay" ino=3108 res=0 errno=0
[  692.103702][T14117] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2587'.
[  692.471762][T14122] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2588'.
[  692.471779][T14122] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2588'.
[  692.471788][T14122] netlink: 'syz.0.2588': attribute type 6 has an invalid length.
[  692.471795][T14122] netlink: 'syz.0.2588': attribute type 5 has an invalid length.
[  692.471802][T14122] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2588'.
[  693.045749][T14139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2592'.
[  693.109068][ T5721] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  693.153005][T14139] binder: 14138:14139 ioctl c0306201 2000000003c0 returned -14
[  693.263045][ T5721] usb 5-1: no configurations
[  693.263058][ T5721] usb 5-1: can't read configurations, error -22
[  693.389084][ T5721] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  693.584371][ T5721] usb 5-1: no configurations
[  693.584384][ T5721] usb 5-1: can't read configurations, error -22
[  693.585123][ T5721] usb usb5-port1: attempt power cycle
[  693.760702][ T5612] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  693.939399][ T5612] usb 6-1: Using ep0 maxpacket: 8
[  693.946284][ T5612] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  693.946300][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.946311][ T5612] usb 6-1: Product: syz
[  693.946318][ T5612] usb 6-1: Manufacturer: syz
[  693.946326][ T5612] usb 6-1: SerialNumber: syz
[  693.977348][ T5721] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  693.990905][ T5612] usb 6-1: config 0 descriptor??
[  694.003148][ T5721] usb 5-1: no configurations
[  694.003159][ T5721] usb 5-1: can't read configurations, error -22
[  694.139250][ T5721] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  694.160537][ T5721] usb 5-1: no configurations
[  694.160588][ T5721] usb 5-1: can't read configurations, error -22
[  694.171885][ T5721] usb usb5-port1: unable to enumerate USB device
[  694.202933][ T5612] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  694.522403][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2597'.
[  694.833439][ T5612] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  695.059947][ T5721] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  695.224696][ T5721] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  695.224714][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.224725][ T5721] usb 1-1: Product: syz
[  695.224732][ T5721] usb 1-1: Manufacturer: syz
[  695.224740][ T5721] usb 1-1: SerialNumber: syz
[  695.227673][ T5721] usb 1-1: config 0 descriptor??
[  695.647533][ T5721] usb 1-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  695.860034][ T5721] usb 1-1: failed to fetch extended address, random address set
[  695.860054][ T5721] usb 1-1: atusb_probe: initialization failed, error = -524
[  695.860190][ T5721] atusb 1-1:0.0: probe with driver atusb failed with error -524
[  695.906862][ T5721] usb 1-1: USB disconnect, device number 49
[  695.949214][ T5612] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  696.079042][ T5612] usb 5-1: device descriptor read/64, error -71
[  696.320528][ T5612] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  696.452857][ T5612] usb 5-1: device descriptor read/64, error -71
[  696.454068][ T5780] usb 6-1: USB disconnect, device number 60
[  696.559611][ T5612] usb usb5-port1: attempt power cycle
[  696.831732][ T5721] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  696.904017][ T5612] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  696.934166][ T5612] usb 5-1: device descriptor read/8, error -71
[  697.031196][ T5721] usb 1-1: config index 0 descriptor too short (expected 30, got 18)
[  697.037091][ T5721] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  697.037107][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.037118][ T5721] usb 1-1: Product: syz
[  697.037125][ T5721] usb 1-1: Manufacturer: syz
[  697.037133][ T5721] usb 1-1: SerialNumber: syz
[  697.123837][ T5721] usb 1-1: config 0 descriptor??
[  697.141984][ T5721] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  697.142016][ T5721] usb 1-1: setting power ON
[  697.142028][ T5721] dvb-usb: bulk message failed: -22 (2/0)
[  697.169236][ T5612] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  697.197773][ T5612] usb 5-1: device descriptor read/8, error -71
[  697.221000][ T5721] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  697.261011][ T5721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  697.261341][ T5721] dvb_usb_cxusb 1-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  697.301512][ T5612] usb usb5-port1: unable to enumerate USB device
[  697.347323][ T5612] usb 1-1: USB disconnect, device number 50
[  697.891210][ T5721] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  698.041079][ T5721] usb 6-1: Using ep0 maxpacket: 32
[  698.067774][ T5721] usb 6-1: unable to get BOS descriptor or descriptor too short
[  698.068777][ T5721] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  698.068791][ T5721] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  698.068802][ T5721] usb 6-1: config 14 has no interface number 0
[  698.068811][ T5721] usb 6-1: config 14 has no interface number 1
[  698.068849][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  698.068861][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[  698.068875][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  698.068887][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  698.068900][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  698.068913][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  698.068926][ T5721] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  698.068936][ T5721] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  698.069071][ T5721] usb 6-1: config 14 interface 57 has no altsetting 0
[  698.069081][ T5721] usb 6-1: config 14 interface 228 has no altsetting 0
[  698.208869][ T5721] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  698.208888][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.208899][ T5721] usb 6-1: Product: syz
[  698.208906][ T5721] usb 6-1: Manufacturer: syz
[  698.208914][ T5721] usb 6-1: SerialNumber: syz
[  698.489777][T14178] comedi comedi0: das16m1: I/O port conflict (0x140,16)
[  698.504078][ T5721] legousbtower 6-1:14.57: interrupt endpoints not found
[  698.533183][ T5721] legousbtower 6-1:14.228: get version request failed: -71
[  698.533518][ T5721] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[  698.570833][ T5721] usb 6-1: USB disconnect, device number 61
[  699.029091][ T5612] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  699.139304][ T5721] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  699.167464][T14195] netlink: 'syz.5.2610': attribute type 3 has an invalid length.
[  699.183160][ T5612] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  699.183179][ T5612] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.183190][ T5612] usb 5-1: Product: syz
[  699.183197][ T5612] usb 5-1: Manufacturer: syz
[  699.183205][ T5612] usb 5-1: SerialNumber: syz
[  699.235636][ T5612] usb 5-1: config 0 descriptor??
[  699.390437][ T5721] usb 1-1: Using ep0 maxpacket: 8
[  699.398570][ T5721] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  699.398589][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.398600][ T5721] usb 1-1: Product: syz
[  699.398607][ T5721] usb 1-1: Manufacturer: syz
[  699.398615][ T5721] usb 1-1: SerialNumber: syz
[  699.472919][ T5721] usb 1-1: config 0 descriptor??
[  699.682370][ T5721] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  699.718297][ T5612] usb 5-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  699.789082][ T5780] usb 6-1: new low-speed USB device number 62 using dummy_hcd
[  699.919189][ T5780] usb 6-1: device descriptor read/64, error -71
[  699.960017][ T5612] usb 5-1: failed to fetch extended address, random address set
[  699.960044][ T5612] usb 5-1: atusb_probe: initialization failed, error = -524
[  699.960753][ T5612] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  700.014405][ T5612] usb 5-1: USB disconnect, device number 56
[  700.170127][ T5780] usb 6-1: new low-speed USB device number 63 using dummy_hcd
[  700.289324][ T5721] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  700.309520][ T5780] usb 6-1: device descriptor read/64, error -71
[  700.422902][ T5780] usb usb6-port1: attempt power cycle
[  700.733482][T14207] netlink: 'syz.4.2612': attribute type 1 has an invalid length.
[  700.859907][ T5780] usb 6-1: new low-speed USB device number 64 using dummy_hcd
[  700.880276][ T5780] usb 6-1: device descriptor read/8, error -71
[  701.121826][ T5780] usb 6-1: new low-speed USB device number 65 using dummy_hcd
[  701.147770][ T5780] usb 6-1: device descriptor read/8, error -71
[  701.248418][T14215] 9pnet_fd: Insufficient options for proto=fd
[  701.256413][ T5780] usb usb6-port1: unable to enumerate USB device
[  701.917615][ T5780] usb 1-1: USB disconnect, device number 51
[  702.309077][ T5714] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  702.459057][ T5714] usb 5-1: Using ep0 maxpacket: 16
[  702.460493][ T5714] usb 5-1: config 1 has an invalid interface number: 135 but max is 0
[  702.460508][ T5714] usb 5-1: config 1 has no interface number 0
[  702.460526][ T5714] usb 5-1: config 1 interface 135 has no altsetting 0
[  702.462809][ T5714] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=25.a5
[  702.462825][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.462836][ T5714] usb 5-1: Product: syz
[  702.462843][ T5714] usb 5-1: Manufacturer: syz
[  702.462851][ T5714] usb 5-1: SerialNumber: syz
[  702.690384][ T5714] kalmia 5-1:1.135: probe with driver kalmia failed with error -22
[  702.702147][ T5714] option 5-1:1.135: GSM modem (1-port) converter detected
[  702.715010][ T5714] usb 5-1: USB disconnect, device number 57
[  702.718482][ T5714] option 5-1:1.135: device disconnected
[  702.944944][T14239] FAULT_INJECTION: forcing a failure.
[  702.944944][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  702.944967][T14239] CPU: 0 UID: 0 PID: 14239 Comm: syz.0.2619 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  702.944982][T14239] Tainted: [L]=SOFTLOCKUP
[  702.944986][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  702.944993][T14239] Call Trace:
[  702.944998][T14239]  <TASK>
[  702.945003][T14239]  dump_stack_lvl+0xe8/0x150
[  702.945021][T14239]  should_fail_ex+0x467/0x600
[  702.945039][T14239]  _copy_to_user+0x31/0xb0
[  702.945053][T14239]  simple_read_from_buffer+0xe1/0x170
[  702.945067][T14239]  proc_fail_nth_read+0x1be/0x230
[  702.945081][T14239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  702.945094][T14239]  ? rw_verify_area+0x250/0x4d0
[  702.945107][T14239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  702.945118][T14239]  vfs_read+0x219/0xa90
[  702.945134][T14239]  ? __pfx_vfs_read+0x10/0x10
[  702.945147][T14239]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  702.945158][T14239]  ? lockdep_hardirqs_on+0x7a/0x110
[  702.945168][T14239]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  702.945178][T14239]  ? mutex_lock_nested+0x152/0x1d0
[  702.945191][T14239]  ? fdget_pos+0x252/0x320
[  702.945206][T14239]  ksys_read+0x156/0x270
[  702.945219][T14239]  ? __pfx_ksys_read+0x10/0x10
[  702.945236][T14239]  do_syscall_64+0x17b/0x530
[  702.945246][T14239]  ? irqentry_exit+0x10f/0x8f0
[  702.945255][T14239]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.945266][T14239]  ? clear_bhb_loop+0x40/0x90
[  702.945280][T14239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  702.945290][T14239] RIP: 0033:0x7fcabfe7e6ce
[  702.945300][T14239] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  702.945310][T14239] RSP: 002b:00007fcabe115fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  702.945322][T14239] RAX: ffffffffffffffda RBX: 00007fcabe1166c0 RCX: 00007fcabfe7e6ce
[  702.945330][T14239] RDX: 000000000000000f RSI: 00007fcabe1160a0 RDI: 0000000000000004
[  702.945336][T14239] RBP: 00007fcabe116090 R08: 0000000000000000 R09: 0000000000000000
[  702.945343][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  702.945349][T14239] R13: 00007fcac0146038 R14: 00007fcac0145fa0 R15: 00007ffd4fb08af8
[  702.945365][T14239]  </TASK>
[  702.961237][ T5780] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  703.229817][ T5780] usb 6-1: Using ep0 maxpacket: 8
[  703.237731][ T5780] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.237764][ T5780] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  703.237776][ T5780] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.270796][ T5780] usb 6-1: config 0 descriptor??
[  703.292544][ T5780] gspca_main: vc032x-2.14.0 probing 046d:0892
[  703.622388][ T5612] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  703.800448][ T5612] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  703.800466][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.800477][ T5612] usb 1-1: Product: syz
[  703.800484][ T5612] usb 1-1: Manufacturer: syz
[  703.800492][ T5612] usb 1-1: SerialNumber: syz
[  703.849903][ T5612] usb 1-1: config 0 descriptor??
[  703.879037][ T5714] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  704.088403][T14237] 9p: Bad value for 'rfdno'
[  704.097488][ T5780] gspca_vc032x: reg_w err -71
[  704.097544][ T5780] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  704.158211][ T5780] usb 6-1: USB disconnect, device number 66
[  704.354446][ T5612] usb 1-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  704.618533][ T5612] usb 1-1: failed to fetch extended address, random address set
[  704.618553][ T5612] usb 1-1: atusb_probe: initialization failed, error = -524
[  704.618726][ T5612] atusb 1-1:0.0: probe with driver atusb failed with error -524
[  704.673029][ T5612] usb 1-1: USB disconnect, device number 52
[  705.820109][ T5780] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  705.972100][ T5780] usb 1-1: Using ep0 maxpacket: 8
[  705.981359][ T5780] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  705.981376][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.981386][ T5780] usb 1-1: Product: syz
[  705.981394][ T5780] usb 1-1: Manufacturer: syz
[  705.981436][ T5780] usb 1-1: SerialNumber: syz
[  706.045638][ T5780] usb 1-1: config 0 descriptor??
[  706.269395][ T5780] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  706.912117][ T5780] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  707.099054][ T5714] usb 5-1: device descriptor read/64, error -71
[  707.341463][ T5714] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  707.469076][ T5714] usb 5-1: device descriptor read/64, error -71
[  707.579466][ T5714] usb usb5-port1: attempt power cycle
[  707.900371][T14280] netlink: 'syz.5.2632': attribute type 1 has an invalid length.
[  707.920360][ T5714] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  707.952446][ T5714] usb 5-1: device descriptor read/8, error -71
[  708.189157][ T5714] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  708.209905][ T5714] usb 5-1: device descriptor read/8, error -71
[  708.319513][ T5714] usb usb5-port1: unable to enumerate USB device
[  708.358211][ T5714] usb 1-1: USB disconnect, device number 53
[  708.822218][ T5714] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  708.969088][ T5714] usb 1-1: Using ep0 maxpacket: 8
[  708.970966][ T5714] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  708.970982][ T5714] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.970992][ T5714] usb 1-1: config 0 has no interface number 0
[  708.973226][ T5714] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  708.973243][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.973253][ T5714] usb 1-1: Product: syz
[  708.973261][ T5714] usb 1-1: Manufacturer: syz
[  708.973268][ T5714] usb 1-1: SerialNumber: syz
[  708.977461][ T5714] usb 1-1: config 0 descriptor??
[  709.055400][ T5714] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  709.055466][ T5714] uvcvideo 1-1:0.31: No valid video chain found.
[  709.184243][ T5780] usb 1-1: USB disconnect, device number 54
[  710.219131][ T5780] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  710.369540][ T5780] usb 1-1: Using ep0 maxpacket: 8
[  710.373448][ T5780] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  710.373466][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.373477][ T5780] usb 1-1: Product: syz
[  710.373484][ T5780] usb 1-1: Manufacturer: syz
[  710.373492][ T5780] usb 1-1: SerialNumber: syz
[  710.424482][ T5780] usb 1-1: config 0 descriptor??
[  710.642017][ T5780] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  710.889455][ T5714] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  711.044405][ T5714] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  711.044424][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.044435][ T5714] usb 5-1: Product: syz
[  711.044442][ T5714] usb 5-1: Manufacturer: syz
[  711.044450][ T5714] usb 5-1: SerialNumber: syz
[  711.097742][ T5714] usb 5-1: config 0 descriptor??
[  711.250219][ T5780] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  711.573574][ T5714] usb 5-1: Firmware: major: 164, minor: 1, hardware type: UNKNOWN (170)
[  711.936252][ T5714] usb 5-1: failed to fetch extended address, random address set
[  711.936272][ T5714] usb 5-1: atusb_probe: initialization failed, error = -524
[  711.936408][ T5714] atusb 5-1:0.0: probe with driver atusb failed with error -524
[  711.973438][ T5714] usb 5-1: USB disconnect, device number 62
[  712.645513][   T37] audit: type=1800 audit(2000000319.071:31): pid=14348 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.4.2656" name="product" dev="configfs" ino=57946 res=0 errno=0
[  713.033602][  T959] usb 1-1: USB disconnect, device number 55
[  713.573193][T14356] netlink: 'syz.5.2658': attribute type 21 has an invalid length.
[  713.573208][T14356] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2658'.
[  713.573280][T14356] netlink: 'syz.5.2658': attribute type 4 has an invalid length.
[  713.573288][T14356] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2658'.
[  713.573964][T14356] netlink: 'syz.5.2658': attribute type 21 has an invalid length.
[  713.573974][T14356] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2658'.
[  713.574003][T14356] netlink: 'syz.5.2658': attribute type 4 has an invalid length.
[  713.574010][T14356] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2658'.
[  714.019728][ T5780] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  714.129483][ T5721] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  714.173516][ T5780] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  714.173535][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.173546][ T5780] usb 1-1: Product: syz
[  714.173554][ T5780] usb 1-1: Manufacturer: syz
[  714.173561][ T5780] usb 1-1: SerialNumber: syz
[  714.210850][ T5714] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  714.291061][ T5721] usb 6-1: Using ep0 maxpacket: 32
[  714.302539][ T5721] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  714.302557][ T5721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.306064][ T5721] usb 6-1: config 0 descriptor??
[  714.347542][ T5721] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  714.392467][ T5714] usb 5-1: unable to get BOS descriptor or descriptor too short
[  714.393454][ T5714] usb 5-1: config 160 has an invalid interface number: 168 but max is 0
[  714.393469][ T5714] usb 5-1: config 160 has an invalid interface number: 10 but max is 0
[  714.393480][ T5714] usb 5-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  714.393490][ T5714] usb 5-1: config 160 has 2 interfaces, different from the descriptor's value: 1
[  714.393501][ T5714] usb 5-1: config 160 has no interface number 0
[  714.393510][ T5714] usb 5-1: config 160 has no interface number 1
[  714.393542][ T5714] usb 5-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84
[  714.393586][ T5714] usb 5-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024
[  714.393600][ T5714] usb 5-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024
[  714.393613][ T5714] usb 5-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  714.393624][ T5714] usb 5-1: config 160 interface 168 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  714.393637][ T5714] usb 5-1: too many endpoints for config 160 interface 10 altsetting 16: 255, using maximum allowed: 30
[  714.393657][ T5714] usb 5-1: config 160 interface 10 altsetting 16 has an endpoint descriptor with address 0xE9, changing to 0x89
[  714.393670][ T5714] usb 5-1: config 160 interface 10 altsetting 16 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  714.393683][ T5714] usb 5-1: config 160 interface 10 altsetting 16 endpoint 0x89 has invalid wMaxPacketSize 0
[  714.393693][ T5714] usb 5-1: config 160 interface 10 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  714.393737][ T5714] usb 5-1: config 160 interface 168 has no altsetting 0
[  714.393747][ T5714] usb 5-1: config 160 interface 10 has no altsetting 0
[  714.501172][ T5714] usb 5-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1
[  714.501192][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.501203][ T5714] usb 5-1: Product: syz
[  714.501210][ T5714] usb 5-1: Manufacturer: syz
[  714.501219][ T5714] usb 5-1: SerialNumber: syz
[  714.699387][T14371] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  714.917436][T14371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.929783][T14371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.992065][T14200] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  714.992944][    C0] ==================================================================
[  714.992954][    C0] BUG: KASAN: slab-use-after-free in dummy_timer+0xd0f/0x4b30
[  714.992977][    C0] Read of size 1 at addr ffff88805dbe2512 by task ktimers/0/16
[  714.992988][    C0] 
[  714.992998][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  714.993021][    C0] Tainted: [L]=SOFTLOCKUP
[  714.993026][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  714.993033][    C0] Call Trace:
[  714.993038][    C0]  <TASK>
[  714.993044][    C0]  dump_stack_lvl+0xe8/0x150
[  714.993060][    C0]  print_address_description+0x55/0x1e0
[  714.993078][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.993093][    C0]  print_report+0x58/0x70
[  714.993107][    C0]  kasan_report+0x117/0x150
[  714.993119][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.993136][    C0]  dummy_timer+0xd0f/0x4b30
[  714.993153][    C0]  ? __lock_acquire+0x6df/0x2e40
[  714.993164][    C0]  ? ktime_get+0x1f5/0x220
[  714.993184][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  714.993201][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  714.993217][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  714.993229][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  714.993244][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  714.993262][    C0]  hrtimer_run_softirq+0x18f/0x260
[  714.993278][    C0]  handle_softirqs+0x1d9/0x6c0
[  714.993292][    C0]  run_ktimerd+0x69/0x100
[  714.993304][    C0]  smpboot_thread_fn+0x57c/0xa80
[  714.993318][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  714.993332][    C0]  kthread+0x388/0x470
[  714.993346][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  714.993358][    C0]  ? __pfx_kthread+0x10/0x10
[  714.993372][    C0]  ret_from_fork+0x514/0xb70
[  714.993387][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  714.993401][    C0]  ? __switch_to+0xc89/0x1420
[  714.993415][    C0]  ? __pfx_kthread+0x10/0x10
[  714.993429][    C0]  ret_from_fork_asm+0x1a/0x30
[  714.993447][    C0]  </TASK>
[  714.993451][    C0] 
[  714.993458][    C0] Allocated by task 14250:
[  714.993547][    C0]  kasan_save_track+0x3e/0x80
[  714.993562][    C0]  __kasan_kmalloc+0x93/0xb0
[  714.993577][    C0]  __kmalloc_cache_noprof+0x3cd/0x670
[  714.993592][    C0]  __genradix_ptr_alloc+0x352/0x4a0
[  714.993602][    C0]  __genradix_prealloc+0x44/0x90
[  714.993611][    C0]  sctp_stream_alloc_out+0x7a/0x100
[  714.993624][    C0]  sctp_send_add_streams+0x1d6/0x400
[  714.993635][    C0]  sctp_setsockopt+0x7b9/0x12c0
[  714.993650][    C0]  do_sock_setsockopt+0x17c/0x1b0
[  714.993664][    C0]  __x64_sys_setsockopt+0x143/0x1b0
[  714.993677][    C0]  do_syscall_64+0x17b/0x530
[  714.993687][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.993698][    C0] 
[  714.993700][    C0] Freed by task 14249:
[  714.993706][    C0]  kasan_save_track+0x3e/0x80
[  714.993719][    C0]  kasan_save_free_info+0x40/0x50
[  714.993730][    C0]  __kasan_slab_free+0x5c/0x80
[  714.993744][    C0]  kfree+0x1c5/0x6c0
[  714.993755][    C0]  genradix_free_recurse+0x5d/0xa0
[  714.993765][    C0]  genradix_free_recurse+0x5d/0xa0
[  714.993774][    C0]  sctp_stream_free+0x262/0x2a0
[  714.993784][    C0]  sctp_association_free+0x26d/0x7f0
[  714.993793][    C0]  sctp_do_sm+0x3fce/0x5d50
[  714.993805][    C0]  sctp_primitive_ABORT+0x98/0xc0
[  714.993820][    C0]  sctp_close+0x2cf/0x950
[  714.993833][    C0]  inet_release+0x143/0x190
[  714.993845][    C0]  __sock_release+0xa0/0x1f0
[  714.993855][    C0]  sock_close+0x1c/0x30
[  714.993866][    C0]  __fput+0x42a/0xa80
[  714.993875][    C0]  task_work_run+0x1d9/0x270
[  714.993889][    C0]  exit_to_user_mode_loop+0x1fa/0x730
[  714.993905][    C0]  do_syscall_64+0x33d/0x530
[  714.993914][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.993924][    C0] 
[  714.993927][    C0] The buggy address belongs to the object at ffff88805dbe2400
[  714.993927][    C0]  which belongs to the cache kmalloc-512 of size 512
[  714.993976][    C0] The buggy address is located 274 bytes inside of
[  714.993976][    C0]  freed 512-byte region [ffff88805dbe2400, ffff88805dbe2600)
[  714.993988][    C0] 
[  714.993991][    C0] The buggy address belongs to the physical page:
[  714.994036][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5dbe0
[  714.994048][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  714.994057][    C0] flags: 0x80000000000040(head|node=0|zone=1)
[  714.994067][    C0] page_type: f5(slab)
[  714.994077][    C0] raw: 0080000000000040 ffff88813fe37c80 dead000000000100 dead000000000122
[  714.994087][    C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  714.994097][    C0] head: 0080000000000040 ffff88813fe37c80 dead000000000100 dead000000000122
[  714.994106][    C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  714.994115][    C0] head: 0080000000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  714.994124][    C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
[  714.994130][    C0] page dumped because: kasan: bad access detected
[  714.994141][    C0] page_owner tracks the page as allocated
[  714.994146][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3332, tgid 3332 (kworker/u8:24), ts 91294214911
[  714.994164][    C0]  post_alloc_hook+0x1f9/0x250
[  714.994178][    C0]  get_page_from_freelist+0x264c/0x26c0
[  714.994194][    C0]  __alloc_frozen_pages_noprof+0x222/0x5b0
[  714.994209][    C0]  allocate_slab+0x7c/0x5e0
[  714.994220][    C0]  refill_objects+0x2d8/0x350
[  714.994231][    C0]  __pcs_replace_empty_main+0x330/0x690
[  714.994241][    C0]  __kmalloc_noprof+0x543/0x790
[  714.994264][    C0]  fib6_info_alloc+0x30/0xf0
[  714.994277][    C0]  ip6_route_info_create+0x149/0x890
[  714.994292][    C0]  ip6_route_add+0x49/0x1d0
[  714.994305][    C0]  addrconf_prefix_route+0x3a2/0x480
[  714.994317][    C0]  addrconf_add_linklocal+0x262/0x490
[  714.994330][    C0]  addrconf_addr_gen+0x2f8/0x360
[  714.994339][    C0]  addrconf_notify+0xb1e/0x1050
[  714.994347][    C0]  notifier_call_chain+0x1a5/0x3d0
[  714.994360][    C0]  netif_state_change+0x27d/0x3a0
[  714.994371][    C0] page_owner free stack trace missing
[  714.994375][    C0] 
[  714.994378][    C0] Memory state around the buggy address:
[  714.994384][    C0]  ffff88805dbe2400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  714.994391][    C0]  ffff88805dbe2480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  714.994399][    C0] >ffff88805dbe2500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  714.994404][    C0]                          ^
[  714.994434][    C0]  ffff88805dbe2580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  714.994441][    C0]  ffff88805dbe2600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  714.994447][    C0] ==================================================================
[  714.994471][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  714.994482][    C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  714.994497][    C0] Tainted: [L]=SOFTLOCKUP
[  714.994501][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  714.994508][    C0] Call Trace:
[  714.994512][    C0]  <TASK>
[  714.994517][    C0]  vpanic+0x56c/0xa60
[  714.994529][    C0]  ? rcu_is_watching+0x15/0xb0
[  714.994542][    C0]  ? __pfx_vpanic+0x10/0x10
[  714.994554][    C0]  panic+0xc5/0xd0
[  714.994564][    C0]  ? __pfx_panic+0x10/0x10
[  714.994574][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.994592][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.994606][    C0]  check_panic_on_warn+0x89/0xb0
[  714.994622][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.994636][    C0]  end_report+0x73/0x170
[  714.994646][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.994661][    C0]  kasan_report+0x128/0x150
[  714.994671][    C0]  ? dummy_timer+0xd0f/0x4b30
[  714.994687][    C0]  dummy_timer+0xd0f/0x4b30
[  714.994704][    C0]  ? __lock_acquire+0x6df/0x2e40
[  714.994715][    C0]  ? ktime_get+0x1f5/0x220
[  714.994735][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  714.994752][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  714.994768][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  714.994778][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  714.994794][    C0]  __hrtimer_run_queues+0x3eb/0xaf0
[  714.994811][    C0]  hrtimer_run_softirq+0x18f/0x260
[  714.994827][    C0]  handle_softirqs+0x1d9/0x6c0
[  714.994840][    C0]  run_ktimerd+0x69/0x100
[  714.994852][    C0]  smpboot_thread_fn+0x57c/0xa80
[  714.994865][    C0]  ? smpboot_thread_fn+0x4e/0xa80
[  714.994879][    C0]  kthread+0x388/0x470
[  714.994892][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  714.994904][    C0]  ? __pfx_kthread+0x10/0x10
[  714.994918][    C0]  ret_from_fork+0x514/0xb70
[  714.994933][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  714.994947][    C0]  ? __switch_to+0xc89/0x1420
[  714.994959][    C0]  ? __pfx_kthread+0x10/0x10
[  714.994973][    C0]  ret_from_fork_asm+0x1a/0x30
[  714.994990][    C0]  </TASK>
[  714.995052][    C0] Kernel Offset: disabled