last executing test programs:

2m0.081015519s ago: executing program 1 (id=599):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@rand_addr=0x64010100, 0x1234, 0x32}, @in=@rand_addr=0x64010100, {}, {}, {}, 0x2, 0x0, 0x2}, [@algo_auth={0x68, 0x1, {{'sha256\x00'}, 0x100, '\x00'/32}}]}, 0x158}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@migrate={0x50, 0x17, [{@in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, @in=@rand_addr=0x64010100, 0x32, 0x0, 0x0, 0x0, 0x2, 0x2}]}]}, 0xa0}}, 0x0) (fail_nth: 7)

1m59.779564336s ago: executing program 1 (id=602):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="1c3df7fe0081ed33bd26a837c4339500"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1000, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x40, 0x13, 0x4, "eba01ef3"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="9201000200000040830082054a0001f723d529012230b1e60340000000000000"], 0x0)

1m56.279971945s ago: executing program 1 (id=619):
r0 = inotify_init1(0x80000)
r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x400)
r2 = dup(r0)
read$FUSE(r2, &(0x7f00000042c0)={0x2020}, 0x2020)
inotify_rm_watch(r2, r1)

1m55.912733822s ago: executing program 1 (id=624):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x20000023896)
syz_open_dev$cec(0x0, 0x0, 0x82002)
r3 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x400, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r5)
close(r5)
ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x401, 0x2221, 0x6a646c8a, 0xe, 0xe7f2, 0x4, 0x5, 0xef43, 0x0, 0x1, 0x2, 0x3}})
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="05000000010000", 0x7)
r8 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x400000000004, 0x34f202)
ioctl$USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000100)=0x10000)
close_range(r6, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
socket$inet6_sctp(0xa, 0x5, 0x84)

1m52.646800593s ago: executing program 1 (id=632):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d21", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe", 0x31}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1m50.611541782s ago: executing program 1 (id=649):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000000580)=[{&(0x7f0000000380)="5e75e8be850f0545fea8d00c950df9bc5217c0f9daa6a9bad8bc76fa0bbdb8510d44ae57305fa47c7d7b34b48993f3b6ce34dbca4260356cc8db8de295be5fa037e36bad35ef4a6bab3c04282db7d817a8970470fb75ceace82d6d4cec4fa92342d53e25e51aea090feb34027f2e104cfe1a9383ddc5ede59e67b4a582477a3b677d4a1221b0754ab3c47907022f81254b4dde248390d14914112f10ec57271706deb377070431ec51a7a12eab8a307807ac8756d80e675f68819b5c3af2a95e7746624e5349e0b3507a8d38596d9e3d61b5361030b121d97a36374ee82fa58c4f34d5deeeedd5c0e321c45052a60010c2f2f123", 0xf4}, {&(0x7f0000000480)="c85b0ea46fe20f6ab5413f47408ac07eaa2b5a67ce63573283739424538e9821afbb978e01342863c24b776f83943d4c360c609da8abde38a146ccb005d7faa90e90c9bf61489562b117163c7d1ce6492ee18c8f9aec917d829e5f9457e4c59019f3dd087adcc0cc160798fe4fdfa5a6cd56263e58b44cd0224e2918deb54936e00be40e7fe919d7130f9a743e574976bff78f43e6b07de07d4d2ef64afc1b8c7cb48b2b008a5b88262dad33bb4ddaaf371cac4d41d7c6deb7339c02859d7dc86d28d2", 0xc3}, {&(0x7f0000001840)="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", 0x1001}, {&(0x7f0000001580)="356f5130e0e5c25103df3245fe0cbf136cd77b2d0904371b7b19be1bedfdee38e957d8d7fb515e198ebc03a271c7710a4b36286df6c18b8fff52f5343b8e56", 0x3f}, {&(0x7f00000015c0)="a34c118146421e6cbf7a62d33e05a134f38d0f45184527e9000cbe575459a29f17c5d248aa6dff1cce8e8734ba57fc0d06b961b75cb85ebab94bba85b05b0f5bb80b9597452a429255442998c0d1d20f108230722d5bebdf494ee01949aeea543b8b2e4647e52b48774dd4e43515ac9b04e5135f89a0a24126e78f035d164a2b82abcc207d8e8c210134d05c684cd7ccc7276d33e2644aa1ce1aa8898baba45fea0d3dcb9aa96faafb4be678c0f30ea337d0a9ca8968005ab0a15eec4671977a7d60754d46a7090362d04c45a9be199fdb96fefa4f1da40b2963bf3ece795f1ba916977d16e4acdd56fb51c7bde367d8d72f18", 0xf3}, {&(0x7f00000016c0)="b0ea74546f86221da1afd1a817126c6affca3d7a435c9b78eb03ef0f00e30647cf286868f43c208bc7331bf0aaaaf045ec2c98189021a1e1c4cb89030fe97f6feae9e5541a66e92b66689e7fc8d0b58bf0f1a36a2b20329b9bd0e8afd0b2ce4e01f796f616ece281ebdde133028cfad4a075c450cd3e0a20cd5c7958a052c4cdac23a3a9734ea32308eaff27153a35ad20db79251c3219f82ba98842db111ec1f968d211816d0422cc5ffdaf79d5c5eb5d2a89c70e1354f5402acb6cd8595706278d1584afdc3472e0669d9d184f47ed3da2a46cc9e5704205accd0d4dedb4176015a2d8", 0xe4}], 0x6, 0x8)
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x500})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f00000002c0)=""/4, 0x4}], 0x3, 0x0, 0x0)

1m49.021246981s ago: executing program 32 (id=649):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = getpid()
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = eventfd(0x80000001)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
vmsplice(r5, &(0x7f0000000580)=[{&(0x7f0000000380)="5e75e8be850f0545fea8d00c950df9bc5217c0f9daa6a9bad8bc76fa0bbdb8510d44ae57305fa47c7d7b34b48993f3b6ce34dbca4260356cc8db8de295be5fa037e36bad35ef4a6bab3c04282db7d817a8970470fb75ceace82d6d4cec4fa92342d53e25e51aea090feb34027f2e104cfe1a9383ddc5ede59e67b4a582477a3b677d4a1221b0754ab3c47907022f81254b4dde248390d14914112f10ec57271706deb377070431ec51a7a12eab8a307807ac8756d80e675f68819b5c3af2a95e7746624e5349e0b3507a8d38596d9e3d61b5361030b121d97a36374ee82fa58c4f34d5deeeedd5c0e321c45052a60010c2f2f123", 0xf4}, {&(0x7f0000000480)="c85b0ea46fe20f6ab5413f47408ac07eaa2b5a67ce63573283739424538e9821afbb978e01342863c24b776f83943d4c360c609da8abde38a146ccb005d7faa90e90c9bf61489562b117163c7d1ce6492ee18c8f9aec917d829e5f9457e4c59019f3dd087adcc0cc160798fe4fdfa5a6cd56263e58b44cd0224e2918deb54936e00be40e7fe919d7130f9a743e574976bff78f43e6b07de07d4d2ef64afc1b8c7cb48b2b008a5b88262dad33bb4ddaaf371cac4d41d7c6deb7339c02859d7dc86d28d2", 0xc3}, {&(0x7f0000001840)="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", 0x1001}, {&(0x7f0000001580)="356f5130e0e5c25103df3245fe0cbf136cd77b2d0904371b7b19be1bedfdee38e957d8d7fb515e198ebc03a271c7710a4b36286df6c18b8fff52f5343b8e56", 0x3f}, {&(0x7f00000015c0)="a34c118146421e6cbf7a62d33e05a134f38d0f45184527e9000cbe575459a29f17c5d248aa6dff1cce8e8734ba57fc0d06b961b75cb85ebab94bba85b05b0f5bb80b9597452a429255442998c0d1d20f108230722d5bebdf494ee01949aeea543b8b2e4647e52b48774dd4e43515ac9b04e5135f89a0a24126e78f035d164a2b82abcc207d8e8c210134d05c684cd7ccc7276d33e2644aa1ce1aa8898baba45fea0d3dcb9aa96faafb4be678c0f30ea337d0a9ca8968005ab0a15eec4671977a7d60754d46a7090362d04c45a9be199fdb96fefa4f1da40b2963bf3ece795f1ba916977d16e4acdd56fb51c7bde367d8d72f18", 0xf3}, {&(0x7f00000016c0)="b0ea74546f86221da1afd1a817126c6affca3d7a435c9b78eb03ef0f00e30647cf286868f43c208bc7331bf0aaaaf045ec2c98189021a1e1c4cb89030fe97f6feae9e5541a66e92b66689e7fc8d0b58bf0f1a36a2b20329b9bd0e8afd0b2ce4e01f796f616ece281ebdde133028cfad4a075c450cd3e0a20cd5c7958a052c4cdac23a3a9734ea32308eaff27153a35ad20db79251c3219f82ba98842db111ec1f968d211816d0422cc5ffdaf79d5c5eb5d2a89c70e1354f5402acb6cd8595706278d1584afdc3472e0669d9d184f47ed3da2a46cc9e5704205accd0d4dedb4176015a2d8", 0xe4}], 0x6, 0x8)
kcmp$KCMP_EPOLL_TFD(r2, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x500})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000140)=""/179, 0xb3}, {&(0x7f00000002c0)=""/4, 0x4}], 0x3, 0x0, 0x0)

5.735308936s ago: executing program 5 (id=1306):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d21", 0x4}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6", 0x34}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.572469556s ago: executing program 5 (id=1314):
mmap(&(0x7f00001ea000/0x4000)=nil, 0x4000, 0x2000006, 0x110, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)='6', 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>0xffffffffffffffff}, './file0\x00'})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
eventfd(0x0)
io_setup(0xc, &(0x7f0000000140))
syz_clone3(&(0x7f0000000680)={0x1000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000e40)={'ip_vti0\x00', 0x0, 0x8, 0x8, 0x800, 0x0, {{0x6, 0x4, 0x0, 0x3f, 0x18, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @local, {[@lsrr={0x83, 0x3, 0x6a}]}}}}})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={<r5=>0xffffffffffffffff, &(0x7f0000000040)='-+@-\x00', 0xa4d365ef45b7ffd9, &(0x7f0000000080)={@_ha_fsid={[0x4, 0x7]}, {0x14a, 0xfffa, 0xb38, 0x4}}, 0xa, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x7f})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000180))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000500)={0x80})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

4.307148456s ago: executing program 4 (id=1315):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}, {&(0x7f00000004c0)="62c99e05", 0x4}], 0x2}}], 0x1, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x26b, 0x0, 0x2, "5ec6a264a5fe02c884d6ed5ebd9faa246d6c9308fc1f7e74498dad274d001715", 0x20363159})
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0x2, @pix_mp={0x5, 0xfffff58b, 0x49433553, 0x8, 0xa, [{0xfffffffb, 0x100}, {0x0, 0xfffff001}, {0xfffffffd, 0xbfffffff}, {0x544dd437, 0x423}, {0x1a, 0x5}, {0x1000, 0xfffffff9}, {0xfff, 0x3}, {0x80000000, 0xe}], 0x5, 0x1, 0x0, 0x2, 0x3}})
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33)
bind$tipc(r3, 0x0, 0x3f)

4.235925848s ago: executing program 4 (id=1317):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}})
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9})
r1 = socket$netlink(0x10, 0x3, 0xb)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0xf, 0x4)

4.119254216s ago: executing program 4 (id=1319):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
r0 = socket$inet(0x2, 0x3, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000280)=[{0x8, 0x0, 0xfd, 0x3}]})
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

3.925067923s ago: executing program 4 (id=1323):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x4, 0x3}, 0x10) (fail_nth: 6)

3.623525402s ago: executing program 4 (id=1325):
semtimedop(0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0xfffffa14, 0x6, '\x00', &(0x7f00000000c0)})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)
mq_open(0x0, 0x42, 0x0, 0x0)

2.400536544s ago: executing program 5 (id=1327):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f4", 0x5}, {&(0x7f00000004c0)="62c99e05", 0x4}], 0x2}}], 0x1, 0x0)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x26b, 0x0, 0x2, "5ec6a264a5fe02c884d6ed5ebd9faa246d6c9308fc1f7e74498dad274d001715", 0x20363159})
ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0x2, @pix_mp={0x5, 0xfffff58b, 0x49433553, 0x8, 0xa, [{0xfffffffb, 0x100}, {0x0, 0xfffff001}, {0xfffffffd, 0xbfffffff}, {0x544dd437, 0x423}, {0x1a, 0x5}, {0x1000, 0xfffffff9}, {0xfff, 0x3}, {0x80000000, 0xe}], 0x5, 0x1, 0x0, 0x2, 0x3}})
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="563d00001500599c6d0e0000ded650492d"], 0xfe33)
bind$tipc(r3, 0x0, 0x3f)

2.169054584s ago: executing program 4 (id=1330):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
timer_create(0x3, &(0x7f0000000080)={0x0, 0x1c, 0x4, @tid=r0}, &(0x7f0000000300))
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}}, 0x14}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcc2, 0x0, 0x0, 0x0, 0x0, 0xc2fc}, &(0x7f0000000180)=0x83)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xa, 0x4, 0x1, 0x23, 0x28, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x13, 0x0, [{0x6, 0x8, "80c014fe524b"}, {0x2, 0x5, "8e8d28"}]}]}}}}})
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d63630", 0x36}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000010900010073797a30000000002c000000030a01010000000000000000050000080900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b00010074756e6e656c00001c00028008000340000000020800014000000000080002400000000f0900010073797a30"], 0xcc}}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000140)={{0x77359400}, {0x0, 0x9}}, 0x0)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
unshare(0x64000600)

2.163165192s ago: executing program 5 (id=1331):
futex(&(0x7f0000000000), 0xd, 0xfc, 0x0, 0x0, 0xfffffffc)

1.807332459s ago: executing program 5 (id=1336):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8)
fallocate(r0, 0x0, 0x1000000, 0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x50, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x842}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c091}, 0x90)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@broadcast, @device_b}}}]}, 0x44}}, 0x800)
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0x18, r4, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}}, 0x80)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r5, &(0x7f0000000100)='$', 0x1, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10)
readv(r5, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
syz_emit_ethernet(0x6c, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff0180c200000000002f907800000000ffffffff248022eb0000000000000004090008000000000086dd080088be00000000100000000fcd8d0ffb0100000000000000080022eb000000000cac78db7727863b20000000020000000000000000000000080065000000000000869fe18cf3c60a5d1269d6066d0ad3f3d89f7091da7da67c1ee443d22539cad949dd5682ac9781a361debc420634e1af86bdb6bee16c9b4688ee6098a082bbee7ce3bf34e679ba3c"], 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/netdevsim/netdevsim0/ports/0/queue_reset\x00', 0x1, 0x0)
write(r8, &(0x7f0000000240)="3020c7", 0x3)
connect$l2tp6(r8, &(0x7f0000000080)={0xa, 0x0, 0x3, @local, 0x5}, 0x20)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000204000000005001900000000000000000000000052c394892d5c47bf82ee5180896d3ef1265a554fc852d52813e7c86feb5628cedb39d07743350dcc8937a33e453be1bdd472b950b26adf030e215b99da47ab6656542f864f176cc0ce759db37ea02d23e6f85e826ac2cb3ab977ba8a8bd546d29fce85a3cd22e26d898bde6f18b78f06f0226322079f7d5af30ceea29cb50e04ed9425bb34a87f000000000000007091746a6b754341716108d61b1c2782bf75989109"], 0x24}}, 0x48850)
sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000010401010000000000000000070000000a0002"], 0x64}, 0x1, 0x0, 0x0, 0x20000484}, 0x20008004)

1.800793396s ago: executing program 3 (id=1337):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000280)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)

1.611376978s ago: executing program 0 (id=1339):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x810}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x4c)
setresuid(0x0, r1, r1)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a82b07b73fb908f93d1e29f7caf9a08926bc90903102db3196fb4130540ca1d6fbf1506e4dfc040e8e11def19358f85f0f2cb072d78f480cf2e9ee9fff5029db607559b43cdf9a0cce7636fec68f32a52fd487507696414209d0d597f3203202b3c71d8ea2f83cf2ab96605ad5f69a63673f9aa8", @ANYRES64=0x0], 0x20)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000000714010025bd7000fcdbdf250800020073797a310000000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="0500540000000000050054000100000008004400", @ANYRES32, @ANYBLOB="1967bbbdb8a0d0a0d95f6430d36304c697258f5ee8418ec7e901ff99926f579373c8f7c94bdbc9c61e117409baef5f31156f0433a95addbd4546b65d9d538f1508281abe"], 0x44}}, 0x50)
signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x8]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="18120000f9a771efe175af88f8eb61aa643531b3750fa4b90fd86b6af159c95044181ab88c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000a5d1080001000000"], &(0x7f00000003c0)='GPL\x00', 0xffff8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x67f72d2a, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x1, 0x5}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x5, 0x3, 0xb}], 0x10, 0x8}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)

1.434723607s ago: executing program 0 (id=1342):
socket$inet(0x2, 0x2, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x101, 0x2)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="1c15000000000000"], 0x2, 0x1)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x3, 0x7, &(0x7f0000000000)={0x1b, "90f5000000f3c9f1bd0d00000000000000000000000000000000000000000100"}})

1.413006224s ago: executing program 3 (id=1344):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
r0 = socket$inet(0x2, 0x3, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28)

1.328943987s ago: executing program 0 (id=1345):
r0 = socket$kcm(0x2, 0xa, 0x2)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f00000008c0), 0x7, r1}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20)
ioctl$SIOCSIFHWADDR(r0, 0x891b, &(0x7f0000000040)={'pim6reg\x00', @local})

1.322630825s ago: executing program 3 (id=1346):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x6}, 0x10, &(0x7f0000000d00)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0, 0x0, 0x20000041}, 0x4040054)

1.243525635s ago: executing program 2 (id=1347):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x3c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20)
sendfile(r2, r0, &(0x7f0000000280)=0x200, 0x200000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.19167103s ago: executing program 3 (id=1348):
setrlimit(0x4, &(0x7f0000000000)={0x4}) (async)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x24, 0x19, 0x1, 0xfffffffc, 0x25dfdc01, {0xa, 0x14, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_EXPIRES={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) (async)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async, rerun: 32)
r2 = accept4(r0, 0x0, 0x0, 0x80800) (rerun: 32)
recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x0, 0x0)

1.179240193s ago: executing program 2 (id=1349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10)
bind$tipc(r2, 0x0, 0x0)
close(r2)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xc4}], 0x1, 0x40800)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a3200"], 0xb8}, 0x1, 0x0, 0x0, 0x8991}, 0x40880)

987.416074ms ago: executing program 2 (id=1350):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0xeffd, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

961.304653ms ago: executing program 3 (id=1351):
semtimedop(0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x32, &(0x7f0000000780)=ANY=[@ANYRESDEC], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000100)={0x0, 0xfffffa14, 0x6, '\x00', &(0x7f00000000c0)})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0)
r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5)
mq_open(0x0, 0x42, 0x0, 0x0)

877.062962ms ago: executing program 2 (id=1352):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3})
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1)
syz_ublk_setup_queues(r1, 0x0, &(0x7f00000000c0)={0x0, 0xd196, 0x8000, 0x1, 0x137}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2fa0, 0x80, 0x2, 0xbb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa796, 0x0, 0x0, 0x289}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xde83, 0x40, 0x1, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x636a, 0x1000, 0x1, 0x298}}], 0x4, &(0x7f00000015c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0xd6f, 0x0, &(0x7f00000005c0)=@buf_4k="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"}}, &(0x7f0000001640))
request_key(&(0x7f00000005c0)='trusted\x00', &(0x7f0000000600)={'syz', 0x3}, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000)
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5"], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @pic={0x4, 0x3, 0x5, 0x5, 0x1, 0x1, 0xc, 0x6, 0xbf, 0x0, 0xbb, 0x2, 0x71, 0xfe, 0x1, 0x9}})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
splice(r2, 0x0, r7, 0x0, 0x7c1f, 0x8)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)

671.417555ms ago: executing program 0 (id=1353):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x810}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x4c)
setresuid(0x0, r1, r1)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="a82b07b73fb908f93d1e29f7caf9a08926bc90903102db3196fb4130540ca1d6fbf1506e4dfc040e8e11def19358f85f0f2cb072d78f480cf2e9ee9fff5029db607559b43cdf9a0cce7636fec68f32a52fd487507696414209d0d597f3203202b3c71d8ea2f83cf2ab96605ad5f69a63673f9aa8", @ANYRES64=0x0], 0x20)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000000714010025bd7000fcdbdf250800020073797a310000000008004400", @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB="0500540000000000050054000100000008004400", @ANYRES32, @ANYBLOB="1967bbbdb8a0d0a0d95f6430d36304c697258f5ee8418ec7e901ff99926f579373c8f7c94bdbc9c61e117409baef5f31156f0433a95addbd4546b65d9d538f1508281abe"], 0x44}}, 0x50)
signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x8]}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="18120000f9a771efe175af88f8eb61aa643531b3750fa4b90fd86b6af159c95044181ab88c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000a5d1080001000000"], &(0x7f00000003c0)='GPL\x00', 0xffff8001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x7, 0x67f72d2a, 0xc}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x1, 0x5}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x5, 0x3, 0xb}], 0x10, 0x8}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0)

397.952798ms ago: executing program 5 (id=1354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, '\b\x00', {0x1, 0x8, 0x5, 0x40}})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="0c00004e15"])
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000019)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002740)=ANY=[@ANYBLOB="1400000010000116e8cb8a994d2c98000000000a1c000000120a030000000062e0284f000340000000011cf3ffff1000010000000000000000000a00000a000000000000"], 0x44}}, 0x4000054)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2)
fallocate(r3, 0x0, 0x0, 0x1000f4)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000280)={0x0, r3})
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$netlink(0x10, 0x3, 0x4)
write(r4, &(0x7f0000000000)="2700000014000707030e0000120f0a001100011f750800390005000000000000005e64342b7806712b029f08790c000000", 0x31)

374.072673ms ago: executing program 2 (id=1355):
socket$inet(0x2, 0x2, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x101, 0x2)
fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="1c1500000000000000"], 0x2, 0x1)
r1 = syz_open_dev$I2C(0x0, 0x0, 0x80)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x3, 0x7, &(0x7f0000000000)={0x1b, "90f5000000f3c9f1bd0d00000000000000000000000000000000000000000100"}})

179.494281ms ago: executing program 0 (id=1356):
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffffc)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
r0 = socket$inet(0x2, 0x3, 0xd)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040))

27.403744ms ago: executing program 2 (id=1357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8a", 0xd6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe", 0x31}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

22.360486ms ago: executing program 3 (id=1358):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r2 = userfaultfd(0x801) (async)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x60, 0x13, r3, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x8, 0x4, 0x1, 0x23, 0x20, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xc, 0x0, [{0x2, 0x6, "8e8d288d"}]}]}}}}})
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66e", 0x59}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a7", 0x48}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async)
r7 = accept4(r6, 0x0, 0x0, 0x800)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00')
fchdir(r8) (async)
exit(0xfffffffffffffffd) (async)
openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x145042, 0x2c) (async)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r9, 0xae80, 0x0) (async)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES8=r0, @ANYRES8=r0], 0x6f4}}, 0x4841)

0s ago: executing program 0 (id=1359):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0xfff0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x142, 0x0)

kernel console output (not intermixed with test programs):

R08: 0000000000000000 R09: 0000000000000000
[  271.432051][ T7733] R10: ffffc9000fdc7d60 R11: fffff52001fb8fb1 R12: 00002000000015c0
[  271.432064][ T7733] R13: 0000000000000000 R14: ffffc9000fdc7ca0 R15: 00007ffffffff000
[  271.432083][ T7733]  ? __import_iovec+0x8a/0x7e0
[  271.432120][ T7733]  import_iovec+0x73/0xa0
[  271.432145][ T7733]  vfs_readv+0x1cd/0x850
[  271.432171][ T7733]  ? __pfx_vfs_readv+0x10/0x10
[  271.432200][ T7733]  ? __fget_files+0x2a/0x420
[  271.432223][ T7733]  ? __fget_files+0x3a8/0x420
[  271.432241][ T7733]  ? __fget_files+0x2a/0x420
[  271.432267][ T7733]  __x64_sys_preadv+0x19f/0x2c0
[  271.432293][ T7733]  ? __pfx___x64_sys_preadv+0x10/0x10
[  271.432329][ T7733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.432347][ T7733]  do_syscall_64+0x174/0x580
[  271.432369][ T7733]  ? trace_irq_disable+0x3b/0x140
[  271.432387][ T7733]  ? clear_bhb_loop+0x40/0x90
[  271.432407][ T7733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.432424][ T7733] RIP: 0033:0x7f230c13e019
[  271.432440][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  271.432453][ T7733] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  271.432470][ T7733] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  271.432482][ T7733] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000003
[  271.432493][ T7733] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  271.432503][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.432514][ T7733] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  271.432548][ T7733]  </TASK>
[  272.085515][ T5714] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  272.234358][   T10] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  272.309338][   T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  272.309370][   T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve?
[  272.309388][   T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1
[  272.410224][ T5714] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  272.410252][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.410267][ T5714] usb 1-1: Product: syz
[  272.410279][ T5714] usb 1-1: Manufacturer: syz
[  272.410290][ T5714] usb 1-1: SerialNumber: syz
[  272.906555][   T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  272.974622][   T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  274.093805][   T10] usb 5-1: USB disconnect, device number 13
[  275.088030][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'.
[  276.080229][ T7748] tmpfs: Unsupported parameter 'huge'
[  276.889132][   T36] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[  277.316657][   T36] usb 1-1: ath9k_htc: USB layer deinitialized
[  277.863466][ T7762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.585'.
[  278.275494][ T5692] usb 1-1: USB disconnect, device number 11
[  278.405460][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  278.436850][ T7778] FAULT_INJECTION: forcing a failure.
[  278.436850][ T7778] name failslab, interval 1, probability 0, space 0, times 0
[  278.436878][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.0.591 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  278.436894][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  278.436906][ T7778] Call Trace:
[  278.436911][ T7778]  <TASK>
[  278.436917][ T7778]  dump_stack_lvl+0xe8/0x150
[  278.436945][ T7778]  should_fail_ex+0x467/0x600
[  278.436972][ T7778]  should_failslab+0xa8/0x100
[  278.436991][ T7778]  kmem_cache_alloc_noprof+0xa4/0x650
[  278.437006][ T7778]  ? xfrm_state_alloc+0x24/0x2f0
[  278.437022][ T7778]  ? xfrm_state_alloc+0x24/0x2f0
[  278.437044][ T7778]  xfrm_state_alloc+0x24/0x2f0
[  278.437061][ T7778]  xfrm_add_sa+0x15a9/0x40d0
[  278.437089][ T7778]  ? __pfx_xfrm_add_sa+0x10/0x10
[  278.437111][ T7778]  ? __nla_parse+0x40/0x60
[  278.437129][ T7778]  xfrm_user_rcv_msg+0x7a8/0xf30
[  278.437154][ T7778]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.437196][ T7778]  ? __lock_acquire+0x683/0x2ce0
[  278.437219][ T7778]  ? __pfx_ref_tracker_free+0x10/0x10
[  278.437239][ T7778]  netlink_rcv_skb+0x226/0x4a0
[  278.437258][ T7778]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  278.437279][ T7778]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  278.437307][ T7778]  ? lockdep_hardirqs_on+0x7a/0x110
[  278.437327][ T7778]  ? mutex_lock_nested+0x152/0x1d0
[  278.437340][ T7778]  ? xfrm_netlink_rcv+0x6a/0x90
[  278.437359][ T7778]  xfrm_netlink_rcv+0x79/0x90
[  278.437378][ T7778]  netlink_unicast+0x7f5/0x990
[  278.437401][ T7778]  netlink_sendmsg+0x813/0xb40
[  278.437437][ T7778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.437457][ T7778]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  278.437478][ T7778]  ? __kernel_text_address+0xd/0x30
[  278.437493][ T7778]  ? unwind_get_return_address+0x4d/0x90
[  278.437513][ T7778]  ? __pfx_netlink_sendmsg+0x10/0x10
[  278.437531][ T7778]  sock_sendmsg_nosec+0x13a/0x180
[  278.437552][ T7778]  ____sys_sendmsg+0x565/0x870
[  278.437572][ T7778]  ? __might_fault+0xaf/0x130
[  278.437595][ T7778]  ? __pfx_____sys_sendmsg+0x10/0x10
[  278.437623][ T7778]  ? import_iovec+0x73/0xa0
[  278.437647][ T7778]  ___sys_sendmsg+0x2a5/0x360
[  278.437667][ T7778]  ? __lock_acquire+0x683/0x2ce0
[  278.437689][ T7778]  ? __pfx____sys_sendmsg+0x10/0x10
[  278.437742][ T7778]  ? __fget_files+0x2a/0x420
[  278.437761][ T7778]  ? __fget_files+0x3a8/0x420
[  278.437788][ T7778]  __x64_sys_sendmsg+0x1b7/0x290
[  278.437815][ T7778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  278.437856][ T7778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.437875][ T7778]  do_syscall_64+0x174/0x580
[  278.437898][ T7778]  ? trace_irq_disable+0x3b/0x140
[  278.437917][ T7778]  ? clear_bhb_loop+0x40/0x90
[  278.437938][ T7778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  278.437956][ T7778] RIP: 0033:0x7f230c13e019
[  278.437973][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  278.437986][ T7778] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  278.438003][ T7778] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  278.438016][ T7778] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  278.438027][ T7778] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  278.438037][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  278.438047][ T7778] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  278.438077][ T7778]  </TASK>
[  278.528671][ T7779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'.
[  279.228555][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'.
[  279.284791][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.594'.
[  279.712505][ T7798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.597'.
[  279.863049][ T7806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.599'.
[  279.863190][ T7806] FAULT_INJECTION: forcing a failure.
[  279.863190][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  279.863216][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.1.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  279.863237][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  279.863251][ T7806] Call Trace:
[  279.863258][ T7806]  <TASK>
[  279.863265][ T7806]  dump_stack_lvl+0xe8/0x150
[  279.863298][ T7806]  should_fail_ex+0x467/0x600
[  279.863330][ T7806]  _copy_to_user+0x31/0xb0
[  279.863355][ T7806]  simple_read_from_buffer+0xe1/0x170
[  279.863391][ T7806]  proc_fail_nth_read+0x1be/0x230
[  279.863415][ T7806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  279.863439][ T7806]  ? rw_verify_area+0x250/0x4d0
[  279.863462][ T7806]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  279.863482][ T7806]  vfs_read+0x219/0xa90
[  279.863512][ T7806]  ? __pfx_vfs_read+0x10/0x10
[  279.863533][ T7806]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  279.863555][ T7806]  ? lockdep_hardirqs_on+0x7a/0x110
[  279.863575][ T7806]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  279.863597][ T7806]  ? mutex_lock_nested+0x152/0x1d0
[  279.863615][ T7806]  ? fdget_pos+0x252/0x320
[  279.863642][ T7806]  ksys_read+0x156/0x270
[  279.863667][ T7806]  ? __pfx_ksys_read+0x10/0x10
[  279.863698][ T7806]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.863718][ T7806]  do_syscall_64+0x174/0x580
[  279.863742][ T7806]  ? trace_irq_disable+0x3b/0x140
[  279.863760][ T7806]  ? clear_bhb_loop+0x40/0x90
[  279.863782][ T7806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  279.863800][ T7806] RIP: 0033:0x7fd66b42e84e
[  279.863818][ T7806] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  279.863832][ T7806] RSP: 002b:00007fd6696c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  279.863852][ T7806] RAX: ffffffffffffffda RBX: 00007fd6696c66c0 RCX: 00007fd66b42e84e
[  279.863865][ T7806] RDX: 000000000000000f RSI: 00007fd6696c60a0 RDI: 0000000000000004
[  279.863876][ T7806] RBP: 00007fd6696c6090 R08: 0000000000000000 R09: 0000000000000000
[  279.863887][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  279.863898][ T7806] R13: 00007fd66b6f6038 R14: 00007fd66b6f5fa0 R15: 00007fff9bf46108
[  279.863926][ T7806]  </TASK>
[  280.046920][ T7800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.597'.
[  280.242634][ T7800] netlink: 596 bytes leftover after parsing attributes in process `syz.4.597'.
[  280.272606][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'.
[  280.272662][ T7815] block nbd0: Unsupported socket: should be TCP or UNIX.
[  280.555414][   T36] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  280.577071][ T7829] FAULT_INJECTION: forcing a failure.
[  280.577071][ T7829] name failslab, interval 1, probability 0, space 0, times 0
[  280.577104][ T7829] CPU: 1 UID: 0 PID: 7829 Comm: syz.2.606 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  280.577125][ T7829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  280.577135][ T7829] Call Trace:
[  280.577142][ T7829]  <TASK>
[  280.577150][ T7829]  dump_stack_lvl+0xe8/0x150
[  280.577182][ T7829]  should_fail_ex+0x467/0x600
[  280.577216][ T7829]  should_failslab+0xa8/0x100
[  280.577258][ T7829]  __kmalloc_noprof+0xfe/0x780
[  280.577278][ T7829]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  280.577301][ T7829]  ? tomoyo_encode+0x2ad/0x570
[  280.577322][ T7829]  ? tomoyo_encode+0x2ad/0x570
[  280.577351][ T7829]  tomoyo_encode+0x2ad/0x570
[  280.577380][ T7829]  tomoyo_mount_permission+0x3a4/0x9e0
[  280.577403][ T7829]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  280.577430][ T7829]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  280.577451][ T7829]  ? kasan_save_track+0x4f/0x80
[  280.577513][ T7829]  ? kasan_quarantine_put+0xbb/0x1f0
[  280.577534][ T7829]  security_sb_mount+0xe4/0x320
[  280.577563][ T7829]  path_mount+0xbc/0x1040
[  280.577586][ T7829]  ? user_path_at+0xd4/0x160
[  280.577612][ T7829]  __se_sys_mount+0x31d/0x420
[  280.577637][ T7829]  ? __pfx___se_sys_mount+0x10/0x10
[  280.577663][ T7829]  ? __x64_sys_mount+0x20/0xc0
[  280.577680][ T7829]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.577698][ T7829]  do_syscall_64+0x174/0x580
[  280.577722][ T7829]  ? trace_irq_disable+0x3b/0x140
[  280.577740][ T7829]  ? clear_bhb_loop+0x40/0x90
[  280.577760][ T7829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.577778][ T7829] RIP: 0033:0x7fa893a0e019
[  280.577796][ T7829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  280.577810][ T7829] RSP: 002b:00007fa891c66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  280.577828][ T7829] RAX: ffffffffffffffda RBX: 00007fa893c95fa0 RCX: 00007fa893a0e019
[  280.577842][ T7829] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  280.577854][ T7829] RBP: 00007fa891c66090 R08: 0000200000000140 R09: 0000000000000000
[  280.577865][ T7829] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001
[  280.577874][ T7829] R13: 00007fa893c96038 R14: 00007fa893c95fa0 R15: 00007ffc4d3dfc78
[  280.577904][ T7829]  </TASK>
[  280.725497][ T5714] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  280.820755][   T36] usb 2-1: Using ep0 maxpacket: 32
[  280.847162][   T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.847195][   T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.847233][   T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  280.847257][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.913806][   T36] usb 2-1: config 0 descriptor??
[  280.949890][   T36] hub 2-1:0.0: USB hub found
[  280.952674][ T5714] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  280.952704][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.007644][ T5714] usb 5-1: config 0 descriptor??
[  281.058700][ T5714] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  281.148230][   T36] hub 2-1:0.0: 1 port detected
[  281.787453][ T7842] 9pnet_virtio: no channels available for device /dev/loop0
[  281.790048][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'.
[  281.820995][ T5714] gspca_stv06xx: I2C: Read error writing address: -71
[  281.843966][   T36] hub 2-1:0.0: activate --> -90
[  281.845628][ T7843] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  281.867203][ T5714] usb 5-1: USB disconnect, device number 15
[  282.159023][ T7850] FAULT_INJECTION: forcing a failure.
[  282.159023][ T7850] name failslab, interval 1, probability 0, space 0, times 0
[  282.159057][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.3.613 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  282.159077][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  282.159088][ T7850] Call Trace:
[  282.159095][ T7850]  <TASK>
[  282.159102][ T7850]  dump_stack_lvl+0xe8/0x150
[  282.159134][ T7850]  should_fail_ex+0x467/0x600
[  282.159175][ T7850]  should_failslab+0xa8/0x100
[  282.159200][ T7850]  __kmalloc_noprof+0xfe/0x780
[  282.159219][ T7850]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  282.159239][ T7850]  ? tomoyo_encode+0x2ad/0x570
[  282.159258][ T7850]  ? tomoyo_encode+0x2ad/0x570
[  282.159287][ T7850]  tomoyo_encode+0x2ad/0x570
[  282.159314][ T7850]  tomoyo_mount_permission+0x3a4/0x9e0
[  282.159335][ T7850]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  282.159361][ T7850]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  282.159382][ T7850]  ? kasan_save_track+0x4f/0x80
[  282.159446][ T7850]  ? kasan_quarantine_put+0xbb/0x1f0
[  282.159466][ T7850]  security_sb_mount+0xe4/0x320
[  282.159492][ T7850]  path_mount+0xbc/0x1040
[  282.159515][ T7850]  ? user_path_at+0xd4/0x160
[  282.159538][ T7850]  __se_sys_mount+0x31d/0x420
[  282.159563][ T7850]  ? __pfx___se_sys_mount+0x10/0x10
[  282.159589][ T7850]  ? __x64_sys_mount+0x20/0xc0
[  282.159608][ T7850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.159628][ T7850]  do_syscall_64+0x174/0x580
[  282.159650][ T7850]  ? trace_irq_disable+0x3b/0x140
[  282.159667][ T7850]  ? clear_bhb_loop+0x40/0x90
[  282.159690][ T7850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.159708][ T7850] RIP: 0033:0x7f39e926e019
[  282.159724][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  282.159737][ T7850] RSP: 002b:00007f39e74c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  282.159755][ T7850] RAX: ffffffffffffffda RBX: 00007f39e94f5fa0 RCX: 00007f39e926e019
[  282.159768][ T7850] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000000
[  282.159780][ T7850] RBP: 00007f39e74c6090 R08: 0000200000000180 R09: 0000000000000000
[  282.159791][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.159801][ T7850] R13: 00007f39e94f6038 R14: 00007f39e94f5fa0 R15: 00007fffc8f446d8
[  282.159832][ T7850]  </TASK>
[  282.322142][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  282.337102][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  282.455694][ T5861] usb 2-1: USB disconnect, device number 7
[  282.765462][ T5707] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  283.024889][ T7866] FAULT_INJECTION: forcing a failure.
[  283.024889][ T7866] name failslab, interval 1, probability 0, space 0, times 0
[  283.024924][ T7866] CPU: 1 UID: 0 PID: 7866 Comm: syz.2.618 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  283.024946][ T7866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  283.024957][ T7866] Call Trace:
[  283.024964][ T7866]  <TASK>
[  283.024971][ T7866]  dump_stack_lvl+0xe8/0x150
[  283.025012][ T7866]  should_fail_ex+0x467/0x600
[  283.025046][ T7866]  should_failslab+0xa8/0x100
[  283.025071][ T7866]  __kmalloc_noprof+0xfe/0x780
[  283.025089][ T7866]  ? rcu_is_watching+0x15/0xb0
[  283.025112][ T7866]  ? tomoyo_realpath_from_path+0xef/0x640
[  283.025135][ T7866]  ? tomoyo_realpath_from_path+0xef/0x640
[  283.025167][ T7866]  tomoyo_realpath_from_path+0xef/0x640
[  283.025201][ T7866]  ? tomoyo_path_number_perm+0x219/0x5f0
[  283.025222][ T7866]  tomoyo_path_number_perm+0x246/0x5f0
[  283.025245][ T7866]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  283.025265][ T7866]  ? __lock_acquire+0x683/0x2ce0
[  283.025297][ T7866]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  283.025317][ T7866]  ? hook_file_ioctl+0x1f3/0x600
[  283.025331][ T7866]  ? lockdep_hardirqs_on+0x7a/0x110
[  283.025373][ T7866]  ? __fget_files+0x2a/0x420
[  283.025396][ T7866]  ? __fget_files+0x2a/0x420
[  283.025414][ T7866]  ? __fget_files+0x3a8/0x420
[  283.025432][ T7866]  ? __fget_files+0x2a/0x420
[  283.025462][ T7866]  security_file_ioctl+0xc3/0x2a0
[  283.025486][ T7866]  __se_sys_ioctl+0x47/0x170
[  283.025510][ T7866]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.025531][ T7866]  do_syscall_64+0x174/0x580
[  283.025553][ T7866]  ? trace_irq_disable+0x3b/0x140
[  283.025572][ T7866]  ? clear_bhb_loop+0x40/0x90
[  283.025594][ T7866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.025612][ T7866] RIP: 0033:0x7fa893a0e019
[  283.025630][ T7866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  283.025643][ T7866] RSP: 002b:00007fa891c24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  283.025664][ T7866] RAX: ffffffffffffffda RBX: 00007fa893c96180 RCX: 00007fa893a0e019
[  283.025677][ T7866] RDX: 0000000000000000 RSI: 0000000043403d05 RDI: 0000000000000005
[  283.025689][ T7866] RBP: 00007fa891c24090 R08: 0000000000000000 R09: 0000000000000000
[  283.025700][ T7866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.025711][ T7866] R13: 00007fa893c96218 R14: 00007fa893c96180 R15: 00007ffc4d3dfc78
[  283.025742][ T7866]  </TASK>
[  283.025789][ T7866] ERROR: Out of memory at tomoyo_realpath_from_path.
[  283.171324][ T5707] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  283.171355][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.171375][ T5707] usb 4-1: Product: syz
[  283.171389][ T5707] usb 4-1: Manufacturer: syz
[  283.171404][ T5707] usb 4-1: SerialNumber: syz
[  283.189527][ T5707] ums-karma 4-1:1.0: USB Mass Storage device detected
[  283.263205][ T5707] ums-karma 4-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[  283.263205][ T5707]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  283.943251][ T5707] ums-karma 4-1:1.0: probe with driver ums-karma failed with error -5
[  284.155152][ T5861] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  284.380512][ T5861] usb 1-1: device descriptor read/64, error -71
[  284.451981][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  284.735933][ T5861] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  285.025450][ T5861] usb 1-1: device descriptor read/64, error -71
[  285.240820][ T5861] usb usb1-port1: attempt power cycle
[  285.578667][ T5707] usb 4-1: USB disconnect, device number 8
[  285.800270][ T5861] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  285.816310][ T5861] usb 1-1: device descriptor read/8, error -71
[  286.085499][ T5861] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  286.106801][ T5861] usb 1-1: device descriptor read/8, error -71
[  286.216548][ T5861] usb usb1-port1: unable to enumerate USB device
[  286.351680][ T7887] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  286.353009][ T7887] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  286.421877][ T7896] process 'syz.3.626' launched './file1' with NULL argv: empty string added
[  286.792953][ T7887] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  286.793076][ T7887] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  286.883225][ T7887] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  286.883328][ T7887] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  286.976299][ T7887] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  286.976387][ T7887] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  287.065940][ T7887] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  287.066054][ T7887] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  287.657596][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.636'.
[  287.658597][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.2.636'.
[  288.225416][ T5860] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  288.382573][ T7942] FAULT_INJECTION: forcing a failure.
[  288.382573][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.382612][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.2.643 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  288.382633][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  288.382644][ T7942] Call Trace:
[  288.382650][ T7942]  <TASK>
[  288.382658][ T7942]  dump_stack_lvl+0xe8/0x150
[  288.382689][ T7942]  should_fail_ex+0x467/0x600
[  288.382721][ T7942]  _copy_from_user+0x2d/0xb0
[  288.382744][ T7942]  generic_map_update_batch+0x651/0x9a0
[  288.382783][ T7942]  ? __pfx_generic_map_update_batch+0x10/0x10
[  288.382808][ T7942]  ? __fget_files+0x2a/0x420
[  288.382834][ T7942]  ? __pfx_generic_map_update_batch+0x10/0x10
[  288.382858][ T7942]  bpf_map_do_batch+0x39d/0x640
[  288.382884][ T7942]  __sys_bpf+0xbe5/0xd90
[  288.382911][ T7942]  ? __pfx___sys_bpf+0x10/0x10
[  288.382933][ T7942]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  288.382961][ T7942]  ? rt_mutex_slowunlock+0x219/0x460
[  288.382998][ T7942]  ? ksys_write+0x248/0x270
[  288.383023][ T7942]  ? __pfx_ksys_write+0x10/0x10
[  288.383050][ T7942]  __x64_sys_bpf+0xba/0xd0
[  288.383083][ T7942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.383103][ T7942]  do_syscall_64+0x174/0x580
[  288.383125][ T7942]  ? trace_irq_disable+0x3b/0x140
[  288.383143][ T7942]  ? clear_bhb_loop+0x40/0x90
[  288.383165][ T7942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.383183][ T7942] RIP: 0033:0x7fa893a0e019
[  288.383200][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  288.383214][ T7942] RSP: 002b:00007fa891c66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  288.383233][ T7942] RAX: ffffffffffffffda RBX: 00007fa893c95fa0 RCX: 00007fa893a0e019
[  288.383247][ T7942] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 000000000000001a
[  288.383258][ T7942] RBP: 00007fa891c66090 R08: 0000000000000000 R09: 0000000000000000
[  288.383270][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  288.383280][ T7942] R13: 00007fa893c96038 R14: 00007fa893c95fa0 R15: 00007ffc4d3dfc78
[  288.383310][ T7942]  </TASK>
[  288.385553][ T5860] usb 5-1: Using ep0 maxpacket: 8
[  288.426545][ T5860] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  288.426583][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.426602][ T5860] usb 5-1: Product: syz
[  288.426615][ T5860] usb 5-1: Manufacturer: syz
[  288.426628][ T5860] usb 5-1: SerialNumber: syz
[  288.500411][ T5860] usb 5-1: config 0 descriptor??
[  288.548254][ T5860] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244)
[  288.855398][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  288.937652][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  289.015772][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  289.120698][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  289.143816][ T5860] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  289.144304][ T5860] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  289.969652][ T5860] usb 5-1: USB disconnect, device number 16
[  290.522373][    C1] sd 0:0:1:0: [sda] tag#8413 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  290.522463][    C1] sd 0:0:1:0: [sda] tag#8413 CDB: Write(6) 0a 06 00 02 40 00
[  290.936919][ T5612] Bluetooth: hci1: command 0x0406 tx timeout
[  290.951659][ T7966] FAULT_INJECTION: forcing a failure.
[  290.951659][ T7966] name failslab, interval 1, probability 0, space 0, times 0
[  290.951690][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  290.951711][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  290.951720][ T7966] Call Trace:
[  290.951727][ T7966]  <TASK>
[  290.951734][ T7966]  dump_stack_lvl+0xe8/0x150
[  290.951767][ T7966]  should_fail_ex+0x467/0x600
[  290.951800][ T7966]  should_failslab+0xa8/0x100
[  290.951823][ T7966]  __kmalloc_noprof+0xfe/0x780
[  290.951840][ T7966]  ? rcu_is_watching+0x15/0xb0
[  290.951875][ T7966]  ? tomoyo_realpath_from_path+0xef/0x640
[  290.951899][ T7966]  ? tomoyo_realpath_from_path+0xef/0x640
[  290.951928][ T7966]  tomoyo_realpath_from_path+0xef/0x640
[  290.951964][ T7966]  tomoyo_mount_permission+0x3e9/0x9e0
[  290.951985][ T7966]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  290.952012][ T7966]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  290.952032][ T7966]  ? kasan_save_track+0x4f/0x80
[  290.952096][ T7966]  ? kasan_quarantine_put+0xbb/0x1f0
[  290.952116][ T7966]  security_sb_mount+0xe4/0x320
[  290.952144][ T7966]  path_mount+0xbc/0x1040
[  290.952166][ T7966]  ? user_path_at+0xd4/0x160
[  290.952189][ T7966]  __se_sys_mount+0x31d/0x420
[  290.952214][ T7966]  ? __pfx___se_sys_mount+0x10/0x10
[  290.952238][ T7966]  ? __x64_sys_mount+0x20/0xc0
[  290.952256][ T7966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.952275][ T7966]  do_syscall_64+0x174/0x580
[  290.952297][ T7966]  ? trace_irq_disable+0x3b/0x140
[  290.952320][ T7966]  ? clear_bhb_loop+0x40/0x90
[  290.952341][ T7966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.952358][ T7966] RIP: 0033:0x7f1fe9a2e019
[  290.952375][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  290.952389][ T7966] RSP: 002b:00007f1fe7c86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  290.952408][ T7966] RAX: ffffffffffffffda RBX: 00007f1fe9cb5fa0 RCX: 00007f1fe9a2e019
[  290.952421][ T7966] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000000
[  290.952432][ T7966] RBP: 00007f1fe7c86090 R08: 0000200000000180 R09: 0000000000000000
[  290.952444][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  290.952455][ T7966] R13: 00007f1fe9cb6038 R14: 00007f1fe9cb5fa0 R15: 00007ffd56b31998
[  290.952485][ T7966]  </TASK>
[  290.970522][ T7966] ERROR: Out of memory at tomoyo_realpath_from_path.
[  291.015436][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  291.095423][ T5612] Bluetooth: hci2: command 0x0406 tx timeout
[  291.175624][ T5612] Bluetooth: hci4: command 0x0406 tx timeout
[  291.622429][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  291.681264][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  291.694053][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  291.699685][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  291.714518][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  291.743701][  T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.043295][  T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.188760][ T8004] FAULT_INJECTION: forcing a failure.
[  293.188760][ T8004] name failslab, interval 1, probability 0, space 0, times 0
[  293.188796][ T8004] CPU: 0 UID: 0 PID: 8004 Comm: syz.0.666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  293.188817][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  293.188828][ T8004] Call Trace:
[  293.188835][ T8004]  <TASK>
[  293.188842][ T8004]  dump_stack_lvl+0xe8/0x150
[  293.188873][ T8004]  should_fail_ex+0x467/0x600
[  293.188904][ T8004]  should_failslab+0xa8/0x100
[  293.188927][ T8004]  kmem_cache_alloc_node_noprof+0xae/0x670
[  293.188947][ T8004]  ? __alloc_skb+0x1d7/0x7a0
[  293.188967][ T8004]  ? __alloc_skb+0x1d7/0x7a0
[  293.188997][ T8004]  __alloc_skb+0x1d7/0x7a0
[  293.189022][ T8004]  netlink_ack+0x136/0xb30
[  293.189053][ T8004]  ? __pfx_ref_tracker_free+0x10/0x10
[  293.189079][ T8004]  netlink_rcv_skb+0x2a4/0x4a0
[  293.189103][ T8004]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  293.189131][ T8004]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  293.189163][ T8004]  ? lockdep_hardirqs_on+0x7a/0x110
[  293.189194][ T8004]  ? mutex_lock_nested+0x152/0x1d0
[  293.189212][ T8004]  ? xfrm_netlink_rcv+0x6a/0x90
[  293.189241][ T8004]  xfrm_netlink_rcv+0x79/0x90
[  293.189266][ T8004]  netlink_unicast+0x7f5/0x990
[  293.189299][ T8004]  netlink_sendmsg+0x813/0xb40
[  293.189332][ T8004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.189358][ T8004]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  293.189385][ T8004]  ? __kernel_text_address+0xd/0x30
[  293.189405][ T8004]  ? unwind_get_return_address+0x4d/0x90
[  293.189428][ T8004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.189451][ T8004]  sock_sendmsg_nosec+0x13a/0x180
[  293.189473][ T8004]  ____sys_sendmsg+0x565/0x870
[  293.189496][ T8004]  ? __might_fault+0xaf/0x130
[  293.189523][ T8004]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.189556][ T8004]  ? import_iovec+0x73/0xa0
[  293.189582][ T8004]  ___sys_sendmsg+0x2a5/0x360
[  293.189604][ T8004]  ? __lock_acquire+0x683/0x2ce0
[  293.189628][ T8004]  ? __pfx____sys_sendmsg+0x10/0x10
[  293.189687][ T8004]  ? __fget_files+0x2a/0x420
[  293.189706][ T8004]  ? __fget_files+0x3a8/0x420
[  293.189736][ T8004]  __x64_sys_sendmsg+0x1b7/0x290
[  293.189763][ T8004]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  293.189805][ T8004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.189825][ T8004]  do_syscall_64+0x174/0x580
[  293.189849][ T8004]  ? trace_irq_disable+0x3b/0x140
[  293.189868][ T8004]  ? clear_bhb_loop+0x40/0x90
[  293.189890][ T8004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.189908][ T8004] RIP: 0033:0x7f230c13e019
[  293.189927][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  293.189941][ T8004] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.189959][ T8004] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  293.189973][ T8004] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  293.189984][ T8004] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  293.189996][ T8004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.190007][ T8004] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  293.190038][ T8004]  </TASK>
[  293.194435][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.666'.
[  293.769656][ T8018] 9p: Could not find request transport: 0xffffffffffffffff
[  293.815416][ T5602] Bluetooth: hci0: command tx timeout
[  294.951329][  T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.300532][ T8043] FAULT_INJECTION: forcing a failure.
[  295.300532][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.300567][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.4.678 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  295.300589][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.300609][ T8043] Call Trace:
[  295.300616][ T8043]  <TASK>
[  295.300624][ T8043]  dump_stack_lvl+0xe8/0x150
[  295.300656][ T8043]  should_fail_ex+0x467/0x600
[  295.300690][ T8043]  _copy_from_user+0x2d/0xb0
[  295.300713][ T8043]  generic_map_update_batch+0x6a3/0x9a0
[  295.300747][ T8043]  ? __pfx_generic_map_update_batch+0x10/0x10
[  295.300773][ T8043]  ? __fget_files+0x2a/0x420
[  295.300799][ T8043]  ? __pfx_generic_map_update_batch+0x10/0x10
[  295.300824][ T8043]  bpf_map_do_batch+0x39d/0x640
[  295.300849][ T8043]  __sys_bpf+0xbe5/0xd90
[  295.300874][ T8043]  ? __pfx___sys_bpf+0x10/0x10
[  295.300896][ T8043]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  295.300923][ T8043]  ? rt_mutex_slowunlock+0x219/0x460
[  295.300960][ T8043]  ? ksys_write+0x248/0x270
[  295.300995][ T8043]  ? __pfx_ksys_write+0x10/0x10
[  295.301022][ T8043]  __x64_sys_bpf+0xba/0xd0
[  295.301048][ T8043]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.301068][ T8043]  do_syscall_64+0x174/0x580
[  295.301091][ T8043]  ? trace_irq_disable+0x3b/0x140
[  295.301109][ T8043]  ? clear_bhb_loop+0x40/0x90
[  295.301130][ T8043]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.301149][ T8043] RIP: 0033:0x7f1fe9a2e019
[  295.301166][ T8043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.301181][ T8043] RSP: 002b:00007f1fe7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  295.301201][ T8043] RAX: ffffffffffffffda RBX: 00007f1fe9cb5fa0 RCX: 00007f1fe9a2e019
[  295.301215][ T8043] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 000000000000001a
[  295.301226][ T8043] RBP: 00007f1fe7c86090 R08: 0000000000000000 R09: 0000000000000000
[  295.301238][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.301248][ T8043] R13: 00007f1fe9cb6038 R14: 00007f1fe9cb5fa0 R15: 00007ffd56b31998
[  295.301278][ T8043]  </TASK>
[  295.876912][  T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.895843][ T5612] Bluetooth: hci0: command tx timeout
[  295.993071][ T8057] FAULT_INJECTION: forcing a failure.
[  295.993071][ T8057] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.993106][ T8057] CPU: 0 UID: 0 PID: 8057 Comm: syz.2.684 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  295.993128][ T8057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  295.993139][ T8057] Call Trace:
[  295.993146][ T8057]  <TASK>
[  295.993155][ T8057]  dump_stack_lvl+0xe8/0x150
[  295.993187][ T8057]  should_fail_ex+0x467/0x600
[  295.993221][ T8057]  _copy_to_user+0x31/0xb0
[  295.993245][ T8057]  simple_read_from_buffer+0xe1/0x170
[  295.993272][ T8057]  proc_fail_nth_read+0x1be/0x230
[  295.993296][ T8057]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.993320][ T8057]  ? rw_verify_area+0x250/0x4d0
[  295.993345][ T8057]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.993365][ T8057]  vfs_read+0x219/0xa90
[  295.993395][ T8057]  ? __pfx_vfs_read+0x10/0x10
[  295.993421][ T8057]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  295.993445][ T8057]  ? lockdep_hardirqs_on+0x7a/0x110
[  295.993471][ T8057]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  295.993495][ T8057]  ? mutex_lock_nested+0x152/0x1d0
[  295.993513][ T8057]  ? fdget_pos+0x252/0x320
[  295.993541][ T8057]  ksys_read+0x156/0x270
[  295.993566][ T8057]  ? __pfx_ksys_read+0x10/0x10
[  295.993596][ T8057]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.993617][ T8057]  do_syscall_64+0x174/0x580
[  295.993640][ T8057]  ? trace_irq_disable+0x3b/0x140
[  295.993659][ T8057]  ? clear_bhb_loop+0x40/0x90
[  295.993682][ T8057]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.993700][ T8057] RIP: 0033:0x7fa8939ce84e
[  295.993718][ T8057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.993733][ T8057] RSP: 002b:00007fa891c65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  295.993753][ T8057] RAX: ffffffffffffffda RBX: 00007fa891c666c0 RCX: 00007fa8939ce84e
[  295.993767][ T8057] RDX: 000000000000000f RSI: 00007fa891c660a0 RDI: 0000000000000004
[  295.993779][ T8057] RBP: 00007fa891c66090 R08: 0000000000000000 R09: 0000000000000000
[  295.993791][ T8057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.993801][ T8057] R13: 00007fa893c96038 R14: 00007fa893c95fa0 R15: 00007ffc4d3dfc78
[  295.993832][ T8057]  </TASK>
[  297.517180][ T5612] Bluetooth: hci3: command 0x0406 tx timeout
[  298.003666][ T5602] Bluetooth: hci0: command tx timeout
[  299.615343][ T8097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.696'.
[  300.180490][ T5602] Bluetooth: hci0: command tx timeout
[  300.594781][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.704'.
[  300.612785][  T165] bridge_slave_1: left allmulticast mode
[  300.612988][  T165] bridge_slave_1: left promiscuous mode
[  300.616399][  T165] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.730853][  T165] bridge_slave_0: left allmulticast mode
[  300.730888][  T165] bridge_slave_0: left promiscuous mode
[  300.731120][  T165] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.144062][ T8149] netlink: 188 bytes leftover after parsing attributes in process `syz.3.708'.
[  301.545486][ T5714] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  301.596228][  T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  301.656397][  T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.700820][  T165] bond0 (unregistering): Released all slaves
[  301.756856][ T5714] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  301.756888][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.756908][ T5714] usb 4-1: Product: syz
[  301.756921][ T5714] usb 4-1: Manufacturer: syz
[  301.756935][ T5714] usb 4-1: SerialNumber: syz
[  301.810107][ T5714] usb 4-1: config 0 descriptor??
[  301.918600][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[  302.018609][ T7978] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.020470][ T7978] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.020670][ T7978] bridge_slave_0: entered allmulticast mode
[  302.026039][ T7978] bridge_slave_0: entered promiscuous mode
[  302.033951][ T7978] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.034160][ T7978] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.034368][ T7978] bridge_slave_1: entered allmulticast mode
[  302.037523][ T7978] bridge_slave_1: entered promiscuous mode
[  302.112471][ T8161] netlink: 'syz.0.710': attribute type 10 has an invalid length.
[  302.651438][ T8155] netlink: 48 bytes leftover after parsing attributes in process `syz.0.710'.
[  302.865058][ T8161] team0: Port device dummy0 added
[  302.889024][ T7978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.943357][ T5714] usb 4-1: unexpected transceiver, part 0xd4 version 0x03
[  303.210160][ T7978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  303.440768][ T5714] usb 4-1: Firmware version (0.0) predates our first public release.
[  303.440796][ T5714] usb 4-1: Please update to version 0.2 or newer
[  303.441351][ T5714] usb 4-1: atusb_probe: initialization failed, error = -19
[  303.520646][ T5714] usb 4-1: USB disconnect, device number 9
[  303.992080][ T8189] netlink: 'syz.0.716': attribute type 211 has an invalid length.
[  304.047473][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[  304.387969][ T7978] team0: Port device team_slave_0 added
[  304.408869][ T7978] team0: Port device team_slave_1 added
[  304.672368][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_0
[  304.672385][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.672409][ T7978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  304.684062][ T7978] batman_adv: batadv0: Adding interface: batadv_slave_1
[  304.684082][ T7978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  304.684108][ T7978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.097539][ T8237] netlink: 'syz.4.731': attribute type 1 has an invalid length.
[  307.719662][ T7978] hsr_slave_0: entered promiscuous mode
[  307.721075][ T7978] hsr_slave_1: entered promiscuous mode
[  307.724745][ T7978] debugfs: 'hsr0' already exists in 'hsr'
[  307.724771][ T7978] Cannot create hsr debugfs directory
[  308.058548][ T8262] binder: 8261:8262 ioctl c0189372 200000000240 returned -22
[  308.058902][ T8262] binder: 8261:8262 ioctl 891b 200000000040 returned -22
[  308.331218][  T165] hsr_slave_0: left promiscuous mode
[  309.319712][  T165] hsr_slave_1: left promiscuous mode
[  309.332538][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  309.332632][  T165] batman_adv: batadv0: Removing interface: batadv_slave_0
[  309.409238][ T8279] FAULT_INJECTION: forcing a failure.
[  309.409238][ T8279] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  309.409271][ T8279] CPU: 0 UID: 0 PID: 8279 Comm: syz.4.741 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  309.409308][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.409324][ T8279] Call Trace:
[  309.409339][ T8279]  <TASK>
[  309.409348][ T8279]  dump_stack_lvl+0xe8/0x150
[  309.409380][ T8279]  should_fail_ex+0x467/0x600
[  309.409409][ T8279]  _copy_to_user+0x31/0xb0
[  309.409432][ T8279]  simple_read_from_buffer+0xe1/0x170
[  309.409457][ T8279]  proc_fail_nth_read+0x1be/0x230
[  309.409480][ T8279]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  309.409502][ T8279]  ? rw_verify_area+0x250/0x4d0
[  309.409526][ T8279]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  309.409545][ T8279]  vfs_read+0x219/0xa90
[  309.409576][ T8279]  ? __pfx_vfs_read+0x10/0x10
[  309.409601][ T8279]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  309.409625][ T8279]  ? lockdep_hardirqs_on+0x7a/0x110
[  309.409649][ T8279]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  309.409672][ T8279]  ? mutex_lock_nested+0x152/0x1d0
[  309.409690][ T8279]  ? fdget_pos+0x252/0x320
[  309.409718][ T8279]  ksys_read+0x156/0x270
[  309.409744][ T8279]  ? __pfx_ksys_read+0x10/0x10
[  309.409775][ T8279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.409796][ T8279]  do_syscall_64+0x174/0x580
[  309.409818][ T8279]  ? trace_irq_disable+0x3b/0x140
[  309.409836][ T8279]  ? clear_bhb_loop+0x40/0x90
[  309.409859][ T8279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.409877][ T8279] RIP: 0033:0x7f1fe99ee84e
[  309.409894][ T8279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  309.409909][ T8279] RSP: 002b:00007f1fe7c85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  309.409929][ T8279] RAX: ffffffffffffffda RBX: 00007f1fe7c866c0 RCX: 00007f1fe99ee84e
[  309.409943][ T8279] RDX: 000000000000000f RSI: 00007f1fe7c860a0 RDI: 0000000000000004
[  309.409955][ T8279] RBP: 00007f1fe7c86090 R08: 0000000000000000 R09: 0000000000000000
[  309.409986][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  309.409997][ T8279] R13: 00007f1fe9cb6038 R14: 00007f1fe9cb5fa0 R15: 00007ffd56b31998
[  309.410029][ T8279]  </TASK>
[  309.467819][  T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.467845][  T165] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.776755][ T8285] FAULT_INJECTION: forcing a failure.
[  309.776755][ T8285] name failslab, interval 1, probability 0, space 0, times 0
[  309.776788][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.3.743 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  309.776809][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  309.776820][ T8285] Call Trace:
[  309.776826][ T8285]  <TASK>
[  309.776834][ T8285]  dump_stack_lvl+0xe8/0x150
[  309.776864][ T8285]  should_fail_ex+0x467/0x600
[  309.776894][ T8285]  should_failslab+0xa8/0x100
[  309.776916][ T8285]  __kmalloc_cache_noprof+0xa0/0x6b0
[  309.776936][ T8285]  ? alloc_fs_context+0x66/0xd00
[  309.776955][ T8285]  ? alloc_fs_context+0x66/0xd00
[  309.776976][ T8285]  ? __get_fs_type+0x21/0x280
[  309.776999][ T8285]  alloc_fs_context+0x66/0xd00
[  309.777020][ T8285]  ? __get_fs_type+0x267/0x280
[  309.777038][ T8285]  ? __get_fs_type+0x21/0x280
[  309.777066][ T8285]  do_new_mount+0x17f/0xdc0
[  309.777085][ T8285]  ? cap_capable+0x123/0x460
[  309.777109][ T8285]  ? __pfx_do_new_mount+0x10/0x10
[  309.777130][ T8285]  ? ns_capable+0x89/0xe0
[  309.777154][ T8285]  ? path_mount+0x647/0x1040
[  309.777176][ T8285]  ? user_path_at+0xd4/0x160
[  309.777200][ T8285]  __se_sys_mount+0x31d/0x420
[  309.777236][ T8285]  ? __pfx___se_sys_mount+0x10/0x10
[  309.777261][ T8285]  ? __x64_sys_mount+0x20/0xc0
[  309.777279][ T8285]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.777299][ T8285]  do_syscall_64+0x174/0x580
[  309.777322][ T8285]  ? trace_irq_disable+0x3b/0x140
[  309.777341][ T8285]  ? clear_bhb_loop+0x40/0x90
[  309.777366][ T8285]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.777384][ T8285] RIP: 0033:0x7f39e926e019
[  309.777401][ T8285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  309.777416][ T8285] RSP: 002b:00007f39e74c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  309.777436][ T8285] RAX: ffffffffffffffda RBX: 00007f39e94f5fa0 RCX: 00007f39e926e019
[  309.777450][ T8285] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000
[  309.777462][ T8285] RBP: 00007f39e74c6090 R08: 0000200000000140 R09: 0000000000000000
[  309.777475][ T8285] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002
[  309.777486][ T8285] R13: 00007f39e94f6038 R14: 00007f39e94f5fa0 R15: 00007fffc8f446d8
[  309.777516][ T8285]  </TASK>
[  310.110245][ T8291] netlink: 'syz.3.748': attribute type 20 has an invalid length.
[  310.110269][ T8291] IPv6: NLM_F_CREATE should be specified when creating new route
[  310.148285][ T8291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  310.148302][ T8291] IPv6: NLM_F_CREATE should be set when creating new route
[  310.259778][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'.
[  310.263355][  T165] veth1_macvtap: left promiscuous mode
[  310.263558][  T165] veth0_macvtap: left promiscuous mode
[  310.263730][  T165] veth1_vlan: left promiscuous mode
[  310.284038][  T165] veth0_vlan: left promiscuous mode
[  311.258631][  T165] team0 (unregistering): Port device team_slave_1 removed
[  311.316250][  T165] team0 (unregistering): Port device team_slave_0 removed
[  311.365426][ T5811] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  311.515539][ T5811] usb 5-1: Using ep0 maxpacket: 16
[  311.518770][ T5811] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  311.518794][ T5811] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  311.518804][ T5811] usb 5-1: config 0 has no interface number 0
[  311.521010][ T5811] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  311.521027][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.521037][ T5811] usb 5-1: Product: syz
[  311.521045][ T5811] usb 5-1: Manufacturer: syz
[  311.521054][ T5811] usb 5-1: SerialNumber: syz
[  311.529915][ T5811] usb 5-1: config 0 descriptor??
[  311.566681][ T5811] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  311.566768][ T5811] uvcvideo 5-1:0.105: No valid video chain found.
[  311.629323][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[  311.863925][ T8302] warning: `syz.2.751' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  311.934056][ T8307] netlink: 44 bytes leftover after parsing attributes in process `syz.4.752'.
[  312.039317][ T5811] usb 5-1: USB disconnect, device number 17
[  313.042720][ T8328] netlink: 'syz.2.756': attribute type 83 has an invalid length.
[  313.629741][ T8347] IPv6: NLM_F_CREATE should be specified when creating new route
[  314.229073][ T8357] FAULT_INJECTION: forcing a failure.
[  314.229073][ T8357] name failslab, interval 1, probability 0, space 0, times 0
[  314.229124][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.2.763 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  314.229145][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  314.229155][ T8357] Call Trace:
[  314.229162][ T8357]  <TASK>
[  314.229170][ T8357]  dump_stack_lvl+0xe8/0x150
[  314.229201][ T8357]  should_fail_ex+0x467/0x600
[  314.229234][ T8357]  should_failslab+0xa8/0x100
[  314.229258][ T8357]  __kmalloc_noprof+0xfe/0x780
[  314.229278][ T8357]  ? tomoyo_encode+0x2ad/0x570
[  314.229309][ T8357]  ? tomoyo_encode+0x2ad/0x570
[  314.229337][ T8357]  ? __get_fs_type+0x21/0x280
[  314.229362][ T8357]  tomoyo_encode+0x2ad/0x570
[  314.229392][ T8357]  tomoyo_mount_permission+0x50d/0x9e0
[  314.229414][ T8357]  ? tomoyo_mount_permission+0x2b5/0x9e0
[  314.229441][ T8357]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[  314.229469][ T8357]  ? kasan_save_track+0x4f/0x80
[  314.229536][ T8357]  ? kasan_quarantine_put+0xbb/0x1f0
[  314.229582][ T8357]  security_sb_mount+0xe4/0x320
[  314.229611][ T8357]  path_mount+0xbc/0x1040
[  314.229634][ T8357]  ? user_path_at+0xd4/0x160
[  314.229658][ T8357]  __se_sys_mount+0x31d/0x420
[  314.229684][ T8357]  ? __pfx___se_sys_mount+0x10/0x10
[  314.229713][ T8357]  ? __x64_sys_mount+0x20/0xc0
[  314.229732][ T8357]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.229750][ T8357]  do_syscall_64+0x174/0x580
[  314.229772][ T8357]  ? trace_irq_disable+0x3b/0x140
[  314.229790][ T8357]  ? clear_bhb_loop+0x40/0x90
[  314.229812][ T8357]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.229838][ T8357] RIP: 0033:0x7fa893a0e019
[  314.229857][ T8357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  314.229872][ T8357] RSP: 002b:00007fa891c66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  314.229917][ T8357] RAX: ffffffffffffffda RBX: 00007fa893c95fa0 RCX: 00007fa893a0e019
[  314.229931][ T8357] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000000
[  314.229955][ T8357] RBP: 00007fa891c66090 R08: 0000200000000180 R09: 0000000000000000
[  314.229966][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  314.229977][ T8357] R13: 00007fa893c96038 R14: 00007fa893c95fa0 R15: 00007ffc4d3dfc78
[  314.230007][ T8357]  </TASK>
[  314.840556][ T8368] net_ratelimit: 11 callbacks suppressed
[  314.840577][ T8368] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.079141][ T7978] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  315.170410][ T7978] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  315.173576][ T7978] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  315.255179][ T7978] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  315.275598][ T7978] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  316.340971][ T7978] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  316.432154][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
[  316.446563][ T7978] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  316.472361][ T7978] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  316.555938][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'.
[  317.178781][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  317.178848][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  317.237773][ T7978] 8021q: adding VLAN 0 to HW filter on device bond0
[  317.411848][ T8401] bond1: entered promiscuous mode
[  317.411884][ T8401] bond1: entered allmulticast mode
[  317.412564][ T8401] 8021q: adding VLAN 0 to HW filter on device bond1
[  317.813618][ T7978] 8021q: adding VLAN 0 to HW filter on device team0
[  317.895066][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.902884][ T5855] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.929799][   T96] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.929915][   T96] bridge0: port 2(bridge_slave_1) entered forwarding state
[  319.651521][ T8448] binder: 8447:8448 ioctl c0189372 200000000240 returned -22
[  319.672785][ T8453] futex_wake_op: syz.0.788 tries to shift op by 32; fix this program
[  319.831909][ T8453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  319.849093][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  321.438782][ T7978] 8021q: adding VLAN 0 to HW filter on device batadv0
[  322.840357][ T5602] Bluetooth: hci2: unexpected event for opcode 0x1005
[  323.060723][ T7978] veth0_vlan: entered promiscuous mode
[  323.077580][ T7978] veth1_vlan: entered promiscuous mode
[  323.312293][ T7978] veth0_macvtap: entered promiscuous mode
[  323.330444][ T7978] veth1_macvtap: entered promiscuous mode
[  323.380249][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_0
[  323.413907][ T7978] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.535817][ T1444] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.536231][ T1444] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.536268][ T1444] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.818040][   T56] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.458931][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.458967][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.948821][ T5855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.948841][ T5855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.472206][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  326.640129][   T10] usb 3-1: Using ep0 maxpacket: 8
[  326.644794][   T10] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  326.644824][   T10] usb 3-1: config 0 has no interface number 0
[  326.672121][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  326.672150][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.672169][   T10] usb 3-1: Product: syz
[  326.672184][   T10] usb 3-1: Manufacturer: syz
[  326.672198][   T10] usb 3-1: SerialNumber: syz
[  326.713363][   T10] usb 3-1: config 0 descriptor??
[  326.929837][   T10] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  326.930027][   T10] uvcvideo 3-1:0.31: Failed to initialize entity for entity 32774
[  326.930038][   T10] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  327.145537][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  327.197391][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'.
[  327.205058][   T36] usb 3-1: USB disconnect, device number 2
[  327.219177][ T5811] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  327.305644][    T9] usb 1-1: Using ep0 maxpacket: 8
[  327.308310][    T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  327.308336][    T9] usb 1-1: config 179 has no interface number 0
[  327.308372][    T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  327.308393][    T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  327.308429][    T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  327.308448][    T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  327.308481][    T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  327.308501][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.408228][ T5811] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  327.408255][ T5811] usb 5-1: config 0 has no interface number 0
[  327.408299][ T5811] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  327.408326][ T5811] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  327.408352][ T5811] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  327.410190][ T5811] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  327.410219][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  327.410239][ T5811] usb 5-1: Product: syz
[  327.410253][ T5811] usb 5-1: SerialNumber: syz
[  327.777943][ T8598] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  327.785245][ T5811] usb 5-1: config 0 descriptor??
[  327.909721][ T5811] cm109 5-1:0.8: invalid payload size 0, expected 4
[  327.994401][   T10] usb 1-1: USB disconnect, device number 17
[  328.216408][ T5811] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input6
[  328.387056][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  328.688056][ T8619] binder: 8618:8619 ioctl c0189372 200000000240 returned -22
[  328.937989][ T5811] usb 5-1: USB disconnect, device number 18
[  330.709252][ T5811] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  330.951480][ T8660] binder: 8658:8660 ioctl c0189372 200000000240 returned -22
[  331.555455][   T10] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  331.710263][   T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  331.710304][   T10] usb 6-1: config 0 has no interface number 0
[  331.710348][   T10] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  331.710370][   T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  331.710394][   T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  331.765971][   T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  331.766004][   T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  331.766026][   T10] usb 6-1: Product: syz
[  331.766040][   T10] usb 6-1: SerialNumber: syz
[  331.826693][   T10] usb 6-1: config 0 descriptor??
[  331.834903][   T10] cm109 6-1:0.8: invalid payload size 0, expected 4
[  331.867755][   T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input7
[  332.055174][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  332.274315][ T5721] usb 6-1: USB disconnect, device number 2
[  332.510772][ T5721] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  332.807054][ T8703] binder: 8702:8703 ioctl c0189372 200000000240 returned -22
[  333.397492][ T8715] netlink: 'syz.4.869': attribute type 1 has an invalid length.
[  334.315480][ T5811] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  334.343108][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'.
[  334.343133][ T8746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.875'.
[  334.495457][ T5860] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  334.519975][ T5811] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  334.520005][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.520026][ T5811] usb 5-1: Product: syz
[  334.520040][ T5811] usb 5-1: Manufacturer: syz
[  334.520054][ T5811] usb 5-1: SerialNumber: syz
[  334.540373][ T5811] usb 5-1: config 0 descriptor??
[  334.589733][ T5811] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  334.647830][ T5860] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  334.647857][ T5860] usb 1-1: config 0 has no interface number 0
[  334.647899][ T5860] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  334.647924][ T5860] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  334.647949][ T5860] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  334.650393][ T5860] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  334.650421][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  334.650441][ T5860] usb 1-1: Product: syz
[  334.650455][ T5860] usb 1-1: SerialNumber: syz
[  334.736540][ T5860] usb 1-1: config 0 descriptor??
[  334.757431][ T5860] cm109 1-1:0.8: invalid payload size 0, expected 4
[  334.786003][ T5860] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input8
[  334.966358][ T5811] gspca_stk1135: reg_w 0x0 err -71
[  334.967544][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967558][ T5811] gspca_stk1135: Sensor write failed
[  334.967604][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967614][ T5811] gspca_stk1135: Sensor write failed
[  334.967637][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967645][ T5811] gspca_stk1135: Sensor read failed
[  334.967666][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967675][ T5811] gspca_stk1135: Sensor read failed
[  334.967681][ T5811] gspca_stk1135: Detected sensor type unknown (0x0)
[  334.967710][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967718][ T5811] gspca_stk1135: Sensor read failed
[  334.967740][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967749][ T5811] gspca_stk1135: Sensor read failed
[  334.967794][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967802][ T5811] gspca_stk1135: Sensor write failed
[  334.967823][ T5811] gspca_stk1135: serial bus timeout: status=0x00
[  334.967832][ T5811] gspca_stk1135: Sensor write failed
[  334.970948][ T5811] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  334.987944][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  334.991074][ T5811] usb 5-1: USB disconnect, device number 19
[  335.256236][   T31] usb 1-1: USB disconnect, device number 18
[  335.336429][   T31] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  335.631572][ T8776] capability: warning: `syz.5.883' uses 32-bit capabilities (legacy support in use)
[  335.642191][ T8776] program syz.5.883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  337.477975][ T8819] FAULT_INJECTION: forcing a failure.
[  337.477975][ T8819] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  337.478007][ T8819] CPU: 1 UID: 0 PID: 8819 Comm: syz.2.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  337.478028][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  337.478039][ T8819] Call Trace:
[  337.478046][ T8819]  <TASK>
[  337.478053][ T8819]  dump_stack_lvl+0xe8/0x150
[  337.478084][ T8819]  should_fail_ex+0x467/0x600
[  337.478117][ T8819]  _copy_to_user+0x31/0xb0
[  337.478141][ T8819]  simple_read_from_buffer+0xe1/0x170
[  337.478165][ T8819]  proc_fail_nth_read+0x1be/0x230
[  337.478190][ T8819]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.478212][ T8819]  ? rw_verify_area+0x250/0x4d0
[  337.478231][ T8819]  ? __fget_files+0x2a/0x420
[  337.478249][ T8819]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  337.478268][ T8819]  vfs_read+0x219/0xa90
[  337.478296][ T8819]  ? __pfx_vfs_read+0x10/0x10
[  337.478318][ T8819]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  337.478342][ T8819]  ? lockdep_hardirqs_on+0x7a/0x110
[  337.478363][ T8819]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  337.478386][ T8819]  ? mutex_lock_nested+0x152/0x1d0
[  337.478403][ T8819]  ? fdget_pos+0x252/0x320
[  337.478433][ T8819]  ksys_read+0x156/0x270
[  337.478456][ T8819]  ? __pfx_ksys_read+0x10/0x10
[  337.478485][ T8819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.478505][ T8819]  do_syscall_64+0x174/0x580
[  337.478526][ T8819]  ? trace_irq_disable+0x3b/0x140
[  337.478545][ T8819]  ? clear_bhb_loop+0x40/0x90
[  337.478568][ T8819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  337.478586][ T8819] RIP: 0033:0x7fa8939ce84e
[  337.478603][ T8819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  337.478618][ T8819] RSP: 002b:00007fa891c65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  337.478638][ T8819] RAX: ffffffffffffffda RBX: 00007fa891c666c0 RCX: 00007fa8939ce84e
[  337.478652][ T8819] RDX: 000000000000000f RSI: 00007fa891c660a0 RDI: 0000000000000005
[  337.478662][ T8819] RBP: 00007fa891c66090 R08: 0000000000000000 R09: 0000000000000000
[  337.478672][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  337.478682][ T8819] R13: 00007fa893c96038 R14: 00007fa893c95fa0 R15: 00007ffc4d3dfc78
[  337.478711][ T8819]  </TASK>
[  337.480931][ T8820] futex_wake_op: syz.4.895 tries to shift op by 32; fix this program
[  337.758924][ T8828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.794344][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.4.895'.
[  339.158671][ T8856] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  340.621516][ T8891] futex_wake_op: syz.4.918 tries to shift op by 32; fix this program
[  341.022629][ T8891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.026539][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.918'.
[  342.036779][   T37] audit: type=1326 audit(1785848178.017:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.038044][   T37] audit: type=1326 audit(1785848178.017:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.039832][   T37] audit: type=1326 audit(1785848178.017:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.040815][   T37] audit: type=1326 audit(1785848178.017:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.040850][   T37] audit: type=1326 audit(1785848178.017:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.041310][   T37] audit: type=1326 audit(1785848178.017:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.042180][   T37] audit: type=1326 audit(1785848178.017:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.042214][   T37] audit: type=1326 audit(1785848178.017:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8939ce84e code=0x7ffc0000
[  342.043165][   T37] audit: type=1326 audit(1785848178.017:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.043204][   T37] audit: type=1326 audit(1785848178.017:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8916 comm="syz.2.926" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa893a0e019 code=0x7ffc0000
[  342.546809][ T5707] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  342.565436][   T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  342.695659][ T5707] usb 1-1: Using ep0 maxpacket: 8
[  342.700189][   T31] usb 6-1: device descriptor read/64, error -71
[  342.704972][ T5707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  342.710718][ T5707] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  342.710752][ T5707] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  342.710772][ T5707] usb 1-1: Product: syz
[  342.710786][ T5707] usb 1-1: Manufacturer: syz
[  342.710801][ T5707] usb 1-1: SerialNumber: syz
[  342.965463][   T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  343.085468][ T8942] netlink: 104 bytes leftover after parsing attributes in process `syz.4.934'.
[  343.089127][ T5707] usb 1-1: palm_os_3_probe - error -110 getting connection information
[  343.089219][ T5707] visor 1-1:1.0: probe with driver visor failed with error -110
[  343.165719][   T31] usb 6-1: device descriptor read/64, error -71
[  343.166113][ T5707] usb 1-1: USB disconnect, device number 19
[  343.381502][   T31] usb usb6-port1: attempt power cycle
[  343.735057][   T31] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  343.756220][   T31] usb 6-1: device descriptor read/8, error -71
[  344.005482][   T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  344.136344][   T31] usb 6-1: device descriptor read/8, error -71
[  344.245888][   T31] usb usb6-port1: unable to enumerate USB device
[  344.347667][ T8968] futex_wake_op: syz.0.943 tries to shift op by 32; fix this program
[  344.497366][ T8975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  344.523203][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.943'.
[  346.061352][ T5602] Bluetooth: hci2: unexpected event 0x01 length: 4 > 1
[  346.134936][ T9015] futex_wake_op: syz.3.959 tries to shift op by 32; fix this program
[  346.636019][ T9025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  348.327999][ T9039] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  348.330896][ T9039] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  348.845609][   T31] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  349.009937][   T31] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  349.009968][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.009986][   T31] usb 4-1: Product: syz
[  349.009999][   T31] usb 4-1: Manufacturer: syz
[  349.010011][   T31] usb 4-1: SerialNumber: syz
[  349.044795][ T9070] futex_wake_op: syz.5.977 tries to shift op by 32; fix this program
[  349.164141][ T9075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.353544][ T9053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  349.365607][ T9053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  349.415261][   T31] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  349.491486][   T31] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  349.515854][   T31] usb 4-1: USB disconnect, device number 10
[  349.558631][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  349.725891][ T9083] binder: 9082:9083 ioctl c0189372 200000000240 returned -22
[  350.386989][ T9103] netlink: 20 bytes leftover after parsing attributes in process `syz.5.990'.
[  350.670605][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'.
[  350.670628][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.3.993'.
[  350.775924][   T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  350.935768][ T5707] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  350.955422][   T31] usb 5-1: Using ep0 maxpacket: 8
[  350.957560][   T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  350.963925][   T31] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  350.963954][   T31] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  350.963971][   T31] usb 5-1: Product: syz
[  350.963979][   T31] usb 5-1: Manufacturer: syz
[  350.963986][   T31] usb 5-1: SerialNumber: syz
[  351.085688][ T5707] usb 4-1: Using ep0 maxpacket: 32
[  351.091943][ T5707] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.113693][ T5707] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  351.113723][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.113742][ T5707] usb 4-1: Product: syz
[  351.113757][ T5707] usb 4-1: Manufacturer: syz
[  351.113770][ T5707] usb 4-1: SerialNumber: syz
[  351.162550][ T5707] usb 4-1: config 0 descriptor??
[  351.175062][ T5707] cdc_ether 4-1:0.0: Descriptor too short
[  351.198046][ T5707] usb 4-1: unsupported MDLM descriptors
[  351.297858][   T31] usb 5-1: palm_os_3_probe - error -71 getting connection information
[  351.297919][   T31] visor 5-1:1.0: probe with driver visor failed with error -71
[  351.309337][   T31] usb 5-1: USB disconnect, device number 20
[  351.487810][ T9120] futex_wake_op: syz.5.996 tries to shift op by 32; fix this program
[  351.600722][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.981182][ T5721] usb 4-1: USB disconnect, device number 11
[  352.419053][ T9152] FAULT_INJECTION: forcing a failure.
[  352.419053][ T9152] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  352.419086][ T9152] CPU: 1 UID: 0 PID: 9152 Comm: syz.3.1007 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  352.419108][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  352.419118][ T9152] Call Trace:
[  352.419125][ T9152]  <TASK>
[  352.419133][ T9152]  dump_stack_lvl+0xe8/0x150
[  352.419162][ T9152]  should_fail_ex+0x467/0x600
[  352.419192][ T9152]  prepare_alloc_pages+0x223/0x690
[  352.419220][ T9152]  __alloc_frozen_pages_noprof+0x12f/0x380
[  352.419245][ T9152]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  352.419270][ T9152]  ? __pfx_policy_nodemask+0x10/0x10
[  352.419290][ T9152]  ? reacquire_held_locks+0x104/0x190
[  352.419320][ T9152]  alloc_pages_mpol+0xce/0x280
[  352.419345][ T9152]  alloc_pages_noprof+0xd2/0x2f0
[  352.419367][ T9152]  __pmd_alloc+0x3a/0x5e0
[  352.419391][ T9152]  handle_mm_fault+0xeb1/0x13f0
[  352.419414][ T9152]  ? handle_mm_fault+0xe8/0x13f0
[  352.419433][ T9152]  ? __pfx_handle_mm_fault+0x10/0x10
[  352.419468][ T9152]  ? __lock_acquire+0x683/0x2ce0
[  352.419492][ T9152]  ? lock_mm_and_find_vma+0xa7/0x340
[  352.419517][ T9152]  do_user_addr_fault+0x744/0x1340
[  352.419550][ T9152]  exc_page_fault+0x6a/0xc0
[  352.419577][ T9152]  asm_exc_page_fault+0x26/0x30
[  352.419595][ T9152] RIP: 0010:rep_movs_alternative+0xf/0xa0
[  352.419623][ T9152] Code: c4 10 e9 c4 2a 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 2a 05 00 66 2e
[  352.419638][ T9152] RSP: 0018:ffffc900067a7cb8 EFLAGS: 00050202
[  352.419655][ T9152] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004
[  352.419668][ T9152] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc900067a7d70
[  352.419681][ T9152] RBP: ffffc900067a7e68 R08: 0000000000000003 R09: 0000000000000004
[  352.419692][ T9152] R10: dffffc0000000000 R11: fffff52000cf4fae R12: 1ffff92000cf4fa4
[  352.419705][ T9152] R13: 0000200000000200 R14: ffffc900067a7d70 R15: 0000200000000200
[  352.419736][ T9152]  _copy_from_user+0x7a/0xb0
[  352.419760][ T9152]  do_sock_getsockopt+0x200/0x7e0
[  352.419791][ T9152]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  352.419830][ T9152]  ? __fget_files+0x3a8/0x420
[  352.419847][ T9152]  ? __fget_files+0x2a/0x420
[  352.419872][ T9152]  __x64_sys_getsockopt+0x1aa/0x250
[  352.419901][ T9152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.419922][ T9152]  do_syscall_64+0x174/0x580
[  352.419944][ T9152]  ? trace_irq_disable+0x3b/0x140
[  352.419962][ T9152]  ? clear_bhb_loop+0x40/0x90
[  352.419982][ T9152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.419998][ T9152] RIP: 0033:0x7f39e926e019
[  352.420015][ T9152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.420029][ T9152] RSP: 002b:00007f39e74c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  352.420046][ T9152] RAX: ffffffffffffffda RBX: 00007f39e94f5fa0 RCX: 00007f39e926e019
[  352.420059][ T9152] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[  352.420070][ T9152] RBP: 00007f39e74c6090 R08: 0000200000000200 R09: 0000000000000000
[  352.420082][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.420093][ T9152] R13: 00007f39e94f6038 R14: 00007f39e94f5fa0 R15: 00007fffc8f446d8
[  352.420123][ T9152]  </TASK>
[  353.259163][ T9179] futex_wake_op: syz.5.1018 tries to shift op by 32; fix this program
[  353.453204][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  353.464699][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1018'.
[  355.143433][ T5707] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  355.430614][ T9231] 9p: Bad value for 'rfdno'
[  355.508489][ T5707] usb 4-1: Using ep0 maxpacket: 8
[  355.510974][ T5707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  355.550018][ T5707] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  355.550048][ T5707] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  355.550069][ T5707] usb 4-1: Product: syz
[  355.550083][ T5707] usb 4-1: Manufacturer: syz
[  355.550096][ T5707] usb 4-1: SerialNumber: syz
[  355.940891][ T5707] usb 4-1: palm_os_3_probe - error -71 getting connection information
[  355.940969][ T5707] visor 4-1:1.0: probe with driver visor failed with error -71
[  355.974193][ T5707] usb 4-1: USB disconnect, device number 12
[  356.552632][ T9254] futex_wake_op: syz.0.1043 tries to shift op by 32; fix this program
[  356.678167][ T9260] 9p: Bad value for 'rfdno'
[  356.738456][ T9263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  356.740639][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[  357.155866][ T5707] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  357.285759][ T5707] usb 3-1: device descriptor read/64, error -71
[  357.545526][ T5707] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  357.782888][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.783392][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.805428][ T5707] usb 3-1: device descriptor read/64, error -71
[  357.916118][ T5707] usb usb3-port1: attempt power cycle
[  358.255449][ T5707] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  358.277229][ T5707] usb 3-1: device descriptor read/8, error -71
[  358.285531][   T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  358.455396][   T31] usb 1-1: Using ep0 maxpacket: 16
[  358.459450][   T31] usb 1-1: config 6 has an invalid interface number: 39 but max is 0
[  358.459476][   T31] usb 1-1: config 6 has no interface number 0
[  358.459516][   T31] usb 1-1: config 6 interface 39 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[  358.459539][   T31] usb 1-1: config 6 interface 39 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0
[  358.459561][   T31] usb 1-1: config 6 interface 39 has no altsetting 0
[  358.471300][   T31] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a79, bcdDevice=7a.aa
[  358.471329][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.471348][   T31] usb 1-1: Product: syz
[  358.471361][   T31] usb 1-1: Manufacturer: syz
[  358.471375][   T31] usb 1-1: SerialNumber: syz
[  358.545745][ T5707] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  358.566084][ T5707] usb 3-1: device descriptor read/8, error -71
[  358.676038][ T5707] usb usb3-port1: unable to enumerate USB device
[  358.749930][   T31] ipaq 1-1:6.39: PocketPC PDA converter detected
[  358.750351][   T31] usb 1-1: active config #6 != 1 ??
[  358.830773][   T31] usb 1-1: USB disconnect, device number 20
[  359.116871][ T9310] bridge0: port 2(bridge_slave_1) entered listening state
[  359.275510][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.342358][ T9321] futex_wake_op: syz.4.1067 tries to shift op by 32; fix this program
[  359.566784][ T9328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.580668][ T9321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'.
[  360.008242][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.152564][ T9339] trusted_key: encrypted_key: insufficient parameters specified
[  360.453378][ T9347] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96
[  360.475542][ T5811] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  360.640897][ T5811] usb 1-1: config 1 has an invalid interface number: 36 but max is 0
[  360.640926][ T5811] usb 1-1: config 1 has no interface number 0
[  360.640971][ T5811] usb 1-1: config 1 interface 36 altsetting 129 bulk endpoint 0x8 has invalid maxpacket 8
[  360.640993][ T5811] usb 1-1: config 1 interface 36 has no altsetting 0
[  360.643137][ T5811] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=cc.2f
[  360.643167][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.643187][ T5811] usb 1-1: Product: syz
[  360.643200][ T5811] usb 1-1: Manufacturer: syz
[  360.643210][ T5811] usb 1-1: SerialNumber: syz
[  360.675457][ T5721] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  360.719931][ T9332] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  360.872199][ T5721] usb 5-1: config index 0 descriptor too short (expected 80, got 72)
[  360.884644][ T5721] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  360.884676][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.884752][ T5721] usb 5-1: Product: syz
[  360.884770][ T5721] usb 5-1: Manufacturer: syz
[  360.884784][ T5721] usb 5-1: SerialNumber: syz
[  360.981282][ T5811] redrat3 1-1:1.36: Couldn't find all endpoints
[  361.071591][ T5811] usb 1-1: USB disconnect, device number 21
[  361.140475][   T31] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  361.369887][ T9362] netlink: 'syz.3.1081': attribute type 11 has an invalid length.
[  361.746349][ T9376] futex_wake_op: syz.5.1084 tries to shift op by 32; fix this program
[  361.749950][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1077'.
[  361.765408][ T5707] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  361.918128][ T5707] usb 3-1: Using ep0 maxpacket: 8
[  361.924097][ T5707] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  361.924124][ T5707] usb 3-1: config 0 has no interface number 0
[  361.959254][ T5707] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  361.959283][ T5707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.959302][ T5707] usb 3-1: Product: syz
[  361.959315][ T5707] usb 3-1: Manufacturer: syz
[  361.959329][ T5707] usb 3-1: SerialNumber: syz
[  361.967778][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  361.992700][ T5707] usb 3-1: config 0 descriptor??
[  362.000021][ T9376] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1084'.
[  362.230254][   T10] usb 5-1: USB disconnect, device number 21
[  362.326055][ T5707] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  362.326208][ T5707] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized!
[  362.343322][ T5707] uvcvideo 3-1:0.31: Failed to create links for entity 5
[  362.343344][ T5707] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  362.365259][ T5707] usb 3-1: USB disconnect, device number 7
[  362.375550][   T31] usb 5-1: Service connection timeout for: 256
[  362.375574][   T31] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  362.475460][ T5811] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  362.479973][   T31] ath9k_htc: Failed to initialize the device
[  362.484894][   T10] usb 5-1: ath9k_htc: USB layer deinitialized
[  362.615768][ T5811] usb 1-1: device descriptor read/64, error -71
[  362.865576][ T5811] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  362.920459][ T9395] cgroup2: Unknown parameter 'memory_hugetãø®¥‹Àþ¡@úà'
[  362.995485][ T5811] usb 1-1: device descriptor read/64, error -71
[  363.116091][ T5811] usb usb1-port1: attempt power cycle
[  363.424342][ T9408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'.
[  363.455487][ T5811] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  363.476461][ T5811] usb 1-1: device descriptor read/8, error -71
[  363.625933][ T9420] futex_wake_op: syz.3.1100 tries to shift op by 32; fix this program
[  363.695463][   T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  363.725592][ T5811] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  363.748509][ T5811] usb 1-1: device descriptor read/8, error -71
[  363.756234][ T9420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  363.769456][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1100'.
[  363.825477][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  363.855434][   T31] usb 6-1: Using ep0 maxpacket: 8
[  363.856660][ T5811] usb usb1-port1: unable to enumerate USB device
[  363.858912][   T31] usb 6-1: config 0 interface 0 has no altsetting 0
[  363.858952][   T31] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  363.858975][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.885951][   T31] usb 6-1: config 0 descriptor??
[  363.985636][   T10] usb 3-1: Using ep0 maxpacket: 32
[  363.988367][   T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  363.988391][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  363.988408][   T10] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  363.991247][   T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  363.991276][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.991295][   T10] usb 3-1: Product: syz
[  363.991309][   T10] usb 3-1: Manufacturer: syz
[  363.991322][   T10] usb 3-1: SerialNumber: syz
[  364.278904][ T9418] 9p: Bad value for 'rfdno'
[  364.281172][ T9428] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1102'.
[  364.376817][   T31] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring
[  364.521105][   T10] usb 3-1: USB disconnect, device number 8
[  364.546667][ T9409] dlm: non-version read from control device 4096
[  364.620952][ T5811] usb 6-1: USB disconnect, device number 7
[  365.776198][ T9461] futex_wake_op: syz.3.1114 tries to shift op by 32; fix this program
[  365.929606][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.951740][ T9467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'.
[  366.124934][ T9472] mmap: syz.4.1116 (9472) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  367.506143][ T9502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1127'.
[  368.184688][ T9522] FAULT_INJECTION: forcing a failure.
[  368.184688][ T9522] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.184724][ T9522] CPU: 0 UID: 0 PID: 9522 Comm: syz.0.1133 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  368.184750][ T9522] Tainted: [L]=SOFTLOCKUP
[  368.184756][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  368.184765][ T9522] Call Trace:
[  368.184772][ T9522]  <TASK>
[  368.184780][ T9522]  dump_stack_lvl+0xe8/0x150
[  368.184810][ T9522]  should_fail_ex+0x467/0x600
[  368.184841][ T9522]  _copy_from_user+0x2d/0xb0
[  368.184865][ T9522]  generic_map_update_batch+0x651/0x9a0
[  368.184920][ T9522]  ? __pfx_generic_map_update_batch+0x10/0x10
[  368.184947][ T9522]  ? __fget_files+0x2a/0x420
[  368.184972][ T9522]  ? __pfx_generic_map_update_batch+0x10/0x10
[  368.184997][ T9522]  bpf_map_do_batch+0x39d/0x640
[  368.185024][ T9522]  __sys_bpf+0xbe5/0xd90
[  368.185051][ T9522]  ? __pfx___sys_bpf+0x10/0x10
[  368.185072][ T9522]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  368.185102][ T9522]  ? rt_mutex_slowunlock+0x219/0x460
[  368.185141][ T9522]  ? ksys_write+0x248/0x270
[  368.185166][ T9522]  ? __pfx_ksys_write+0x10/0x10
[  368.185193][ T9522]  __x64_sys_bpf+0xba/0xd0
[  368.185220][ T9522]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.185241][ T9522]  do_syscall_64+0x174/0x580
[  368.185264][ T9522]  ? trace_irq_disable+0x3b/0x140
[  368.185283][ T9522]  ? clear_bhb_loop+0x40/0x90
[  368.185303][ T9522]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.185321][ T9522] RIP: 0033:0x7f230c13e019
[  368.185339][ T9522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  368.185355][ T9522] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  368.185375][ T9522] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  368.185389][ T9522] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 000000000000001a
[  368.185401][ T9522] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  368.185413][ T9522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  368.185424][ T9522] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  368.185453][ T9522]  </TASK>
[  368.544982][ T9524] futex_wake_op: syz.0.1134 tries to shift op by 32; fix this program
[  368.685742][ T9524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.713626][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'.
[  368.713655][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'.
[  369.586866][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1141'.
[  369.909141][ T9555] comedi comedi1: rti802: I/O base address not correctly aligned
[  370.141543][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1148'.
[  371.210154][ T9591] FAULT_INJECTION: forcing a failure.
[  371.210154][ T9591] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  371.210194][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.0.1156 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  371.210215][ T9591] Tainted: [L]=SOFTLOCKUP
[  371.210219][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.210229][ T9591] Call Trace:
[  371.210234][ T9591]  <TASK>
[  371.210240][ T9591]  dump_stack_lvl+0xe8/0x150
[  371.210267][ T9591]  should_fail_ex+0x467/0x600
[  371.210296][ T9591]  _copy_from_user+0x2d/0xb0
[  371.210319][ T9591]  btf_new_fd+0x301/0xc10
[  371.210348][ T9591]  __sys_bpf+0xd2e/0xd90
[  371.210375][ T9591]  ? __pfx___sys_bpf+0x10/0x10
[  371.210397][ T9591]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  371.210439][ T9591]  ? rt_mutex_slowunlock+0x219/0x460
[  371.210476][ T9591]  ? ksys_write+0x248/0x270
[  371.210502][ T9591]  ? __pfx_ksys_write+0x10/0x10
[  371.210529][ T9591]  __x64_sys_bpf+0xba/0xd0
[  371.210557][ T9591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.210578][ T9591]  do_syscall_64+0x174/0x580
[  371.210600][ T9591]  ? trace_irq_disable+0x3b/0x140
[  371.210619][ T9591]  ? clear_bhb_loop+0x40/0x90
[  371.210640][ T9591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.210659][ T9591] RIP: 0033:0x7f230c13e019
[  371.210676][ T9591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.210691][ T9591] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  371.210711][ T9591] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  371.210725][ T9591] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012
[  371.210737][ T9591] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  371.210749][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.210760][ T9591] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  371.210790][ T9591]  </TASK>
[  371.293494][   T31] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  371.478574][   T31] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E
[  371.478605][   T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64
[  371.481402][   T31] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40
[  371.481434][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.481454][   T31] usb 4-1: Product: syz
[  371.481468][   T31] usb 4-1: Manufacturer: syz
[  371.481482][   T31] usb 4-1: SerialNumber: syz
[  372.120727][   T31] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  372.120785][   T31] usb 4-1: MIDIStreaming interface descriptor not found
[  372.746367][   T31] usb 4-1: USB disconnect, device number 13
[  374.767155][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'.
[  375.525591][ T5721] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  375.848759][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short
[  375.952563][ T5721] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.952590][ T5721] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.979673][ T5721] usb 4-1: string descriptor 0 read error: -22
[  375.979777][ T5721] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  375.979790][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.086707][ T5721] usb 4-1: selecting invalid altsetting 1
[  376.115421][ T5721] usb 4-1: unit 3 not found!
[  376.329652][ T9673] program syz.3.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  376.333652][ T5721] usb 4-1: cannot request logical cluster ID: 0 (err: -5)
[  376.333680][ T5721] usb 4-1: invalid MIXER UNIT descriptor 6
[  376.485492][ T5721] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -5
[  376.545536][ T9673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.546124][ T9673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.731809][ T5707] usb 4-1: USB disconnect, device number 14
[  377.277909][ T9712] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'.
[  377.445441][ T5707] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  377.655881][ T5707] usb 6-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config
[  377.656014][ T5707] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  377.659361][ T5707] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00
[  377.659391][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  377.659410][ T5707] usb 6-1: Product: syz
[  377.659580][ T5707] usb 6-1: Manufacturer: syz
[  379.155437][ T1338] ieee802154 phy0 wpan0: encryption failed: -22
[  379.159833][ T9707] ./file0: Can't lookup blockdev
[  379.162523][ T1338] ieee802154 phy1 wpan1: encryption failed: -22
[  379.955701][   T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  380.121648][   T31] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  380.121680][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.121699][   T31] usb 1-1: Product: syz
[  380.121713][   T31] usb 1-1: Manufacturer: syz
[  380.121727][   T31] usb 1-1: SerialNumber: syz
[  380.175179][   T31] pl2303 1-1:1.0: pl2303 converter detected
[  380.252238][   T31] usb 1-1: pl2303 converter now attached to ttyUSB0
[  380.650643][ T5707] speedtch 6-1:1.0: speedtch_bind: setting interface to  1 failed (-71)!
[  380.650820][ T5707] speedtch 6-1:1.0: usbatm_usb_probe: bind failed: -71!
[  380.650881][ T5707] speedtch 6-1:1.0: probe with driver speedtch failed with error -71
[  380.680437][ T5721] usb 1-1: USB disconnect, device number 26
[  380.761365][ T5707] speedtch 6-1:1.1: speedtch_bind: setting interface to  1 failed (-71)!
[  380.811205][ T5721] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  380.826059][ T5721] pl2303 1-1:1.0: device disconnected
[  380.835550][ T5707] speedtch 6-1:1.1: usbatm_usb_probe: bind failed: -71!
[  380.835617][ T5707] speedtch 6-1:1.1: probe with driver speedtch failed with error -71
[  380.902415][ T5707] usb 6-1: USB disconnect, device number 8
[  381.509076][   T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  381.705447][   T31] usb 6-1: Using ep0 maxpacket: 8
[  381.707620][   T31] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  381.707647][   T31] usb 6-1: config 0 has no interface number 0
[  381.735212][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  381.735240][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.735259][   T31] usb 6-1: Product: syz
[  381.752672][   T31] usb 6-1: Manufacturer: syz
[  381.752690][   T31] usb 6-1: SerialNumber: syz
[  381.794300][   T31] usb 6-1: config 0 descriptor??
[  382.173771][    T9] IPVS: starting estimator thread 0...
[  382.200509][   T31] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  382.200580][   T31] uvcvideo 6-1:0.31: Entity type for entity Output 32774 was not initialized!
[  382.200714][   T31] uvcvideo 6-1:0.31: Failed to create links for entity 5
[  382.200729][   T31] uvcvideo 6-1:0.31: Failed to register entities (-22).
[  382.257696][   T31] usb 6-1: USB disconnect, device number 9
[  382.263772][ T9781] IPVS: using max 11 ests per chain, 26400 per kthread
[  383.021198][ T9807] FAULT_INJECTION: forcing a failure.
[  383.021198][ T9807] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  383.021233][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.0.1225 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  383.021257][ T9807] Tainted: [L]=SOFTLOCKUP
[  383.021263][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  383.021274][ T9807] Call Trace:
[  383.021281][ T9807]  <TASK>
[  383.021288][ T9807]  dump_stack_lvl+0xe8/0x150
[  383.021320][ T9807]  should_fail_ex+0x467/0x600
[  383.021352][ T9807]  prepare_alloc_pages+0x223/0x690
[  383.021380][ T9807]  __alloc_frozen_pages_noprof+0x12f/0x380
[  383.021405][ T9807]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  383.021436][ T9807]  ? __pfx_policy_nodemask+0x10/0x10
[  383.021457][ T9807]  ? filemap_get_entry+0x374/0x3f0
[  383.021485][ T9807]  ? __pfx_filemap_get_entry+0x10/0x10
[  383.021512][ T9807]  alloc_pages_mpol+0xce/0x280
[  383.021539][ T9807]  folio_alloc_mpol_noprof+0x3b/0x1e0
[  383.021573][ T9807]  shmem_get_folio_gfp+0x6ee/0x1c40
[  383.021624][ T9807]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[  383.021651][ T9807]  ? filemap_map_pages+0x1db/0x1d10
[  383.021686][ T9807]  shmem_fault+0x170/0x380
[  383.021713][ T9807]  __do_fault+0x138/0x2a0
[  383.021739][ T9807]  do_pte_missing+0x1828/0x28f0
[  383.021769][ T9807]  ? handle_mm_fault+0xe8/0x13f0
[  383.021793][ T9807]  handle_mm_fault+0xd28/0x13f0
[  383.021819][ T9807]  ? handle_mm_fault+0xe8/0x13f0
[  383.021840][ T9807]  ? __pfx_handle_mm_fault+0x10/0x10
[  383.021861][ T9807]  ? follow_page_pte+0xaf1/0xe80
[  383.021889][ T9807]  ? __pfx_follow_page_pte+0x10/0x10
[  383.021918][ T9807]  __get_user_pages+0x166b/0x2590
[  383.021977][ T9807]  populate_vma_page_range+0x2be/0x3c0
[  383.022008][ T9807]  ? __pfx_populate_vma_page_range+0x10/0x10
[  383.022035][ T9807]  ? lockdep_hardirqs_on+0x7a/0x110
[  383.022057][ T9807]  ? userfaultfd_unmap_complete+0x292/0x310
[  383.022081][ T9807]  ? rt_mutex_slowunlock+0x4ee/0xa20
[  383.022108][ T9807]  __mm_populate+0x25f/0x390
[  383.022136][ T9807]  ? __pfx___mm_populate+0x10/0x10
[  383.022158][ T9807]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  383.022180][ T9807]  ? lockdep_hardirqs_on+0x7a/0x110
[  383.022201][ T9807]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  383.022224][ T9807]  ? up_write+0x5a/0x190
[  383.022250][ T9807]  vm_mmap_pgoff+0x356/0x4e0
[  383.022280][ T9807]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  383.022303][ T9807]  ? ksys_write+0x248/0x270
[  383.022328][ T9807]  ? __pfx_ksys_write+0x10/0x10
[  383.022355][ T9807]  ? __x64_sys_mmap+0x7f/0x140
[  383.022375][ T9807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.022395][ T9807]  do_syscall_64+0x174/0x580
[  383.022418][ T9807]  ? trace_irq_disable+0x3b/0x140
[  383.022437][ T9807]  ? clear_bhb_loop+0x40/0x90
[  383.022460][ T9807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.022478][ T9807] RIP: 0033:0x7f230c13e019
[  383.022496][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  383.022511][ T9807] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  383.022532][ T9807] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  383.022546][ T9807] RDX: b635773f06ebbeeb RSI: 0000000000b36000 RDI: 0000200000000000
[  383.022566][ T9807] RBP: 00007f230a396090 R08: ffffffffffffffff R09: 0000000000000000
[  383.022579][ T9807] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002
[  383.022590][ T9807] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  383.022622][ T9807]  </TASK>
[  383.626364][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1227'.
[  384.815431][    T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  384.886220][  T198] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  384.967269][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.967325][    T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  384.967350][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.019330][    T9] usb 1-1: config 0 descriptor??
[  385.039291][  T198] usb 3-1: Using ep0 maxpacket: 8
[  385.066484][  T198] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  385.066512][  T198] usb 3-1: config 0 has no interface number 0
[  385.068969][  T198] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  385.068998][  T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.069016][  T198] usb 3-1: Product: syz
[  385.069029][  T198] usb 3-1: Manufacturer: syz
[  385.069043][  T198] usb 3-1: SerialNumber: syz
[  385.129885][  T198] usb 3-1: config 0 descriptor??
[  385.371101][ T5692] IPVS: starting estimator thread 0...
[  385.430852][  T198] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  385.430918][  T198] uvcvideo 3-1:0.31: Entity type for entity Output 32774 was not initialized!
[  385.431160][  T198] uvcvideo 3-1:0.31: Failed to create links for entity 5
[  385.431175][  T198] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  385.496497][ T9855] IPVS: using max 11 ests per chain, 26400 per kthread
[  385.531466][  T198] usb 3-1: USB disconnect, device number 9
[  385.773333][ T5692] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  385.773510][   T31] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  385.915447][ T5692] usb 6-1: Using ep0 maxpacket: 32
[  385.918538][ T5692] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  385.918564][ T5692] usb 6-1: config 0 has no interface number 0
[  385.920351][   T31] usb 5-1: config index 0 descriptor too short (expected 80, got 72)
[  385.923116][ T5692] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  385.923144][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.923221][ T5692] usb 6-1: Product: syz
[  385.923235][ T5692] usb 6-1: Manufacturer: syz
[  385.923250][ T5692] usb 6-1: SerialNumber: syz
[  385.949151][   T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  385.949183][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.949203][   T31] usb 5-1: Product: syz
[  385.949216][   T31] usb 5-1: Manufacturer: syz
[  385.949230][   T31] usb 5-1: SerialNumber: syz
[  385.968780][ T5692] usb 6-1: config 0 descriptor??
[  386.014443][ T5692] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  386.118445][ T5811] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  386.452471][ T5692] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  386.620628][ T5692] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  386.753002][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  386.764756][  T198] usb 6-1: USB disconnect, device number 10
[  386.797211][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'.
[  387.076022][  T198] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  387.185914][  T198] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  387.188589][  T198] quatech2 6-1:0.51: device disconnected
[  387.373287][    T9] ath6kl: Failed to read usb control message: -71
[  387.373340][    T9] ath6kl: Unable to read the bmi data from the device: -71
[  387.373354][    T9] ath6kl: Unable to recv target info: -71
[  387.489567][    T9] ath6kl: Failed to init ath6kl core: -71
[  387.535444][    T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  387.722855][    T9] usb 1-1: USB disconnect, device number 27
[  387.982435][ T5692] usb 5-1: USB disconnect, device number 22
[  387.982706][ T5811] usb 5-1: Service connection timeout for: 256
[  387.982724][ T5811] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  388.945408][ T5811] ath9k_htc: Failed to initialize the device
[  388.953710][ T5692] usb 5-1: ath9k_htc: USB layer deinitialized
[  389.024418][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'.
[  389.024433][ T9892] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'.
[  390.021965][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'.
[  390.204048][ T9927] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1266'.
[  390.204069][ T9927] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1266'.
[  390.324911][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1269'.
[  390.485405][  T198] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  390.621339][ T9949] overlayfs: failed to resolve './file0': -2
[  390.639671][  T198] usb 3-1: config 0 has an invalid interface number: 252 but max is 8
[  390.639689][  T198] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  390.639700][  T198] usb 3-1: config 0 has no interface number 0
[  390.639716][  T198] usb 3-1: too many endpoints for config 0 interface 252 altsetting 12: 236, using maximum allowed: 30
[  390.639737][  T198] usb 3-1: config 0 interface 252 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 236
[  390.640304][  T198] usb 3-1: config 0 interface 252 has no altsetting 0
[  390.643761][  T198] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  390.643897][  T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  390.643909][  T198] usb 3-1: Product: syz
[  390.643917][  T198] usb 3-1: Manufacturer: syz
[  390.643924][  T198] usb 3-1: SerialNumber: syz
[  390.720066][  T198] usb 3-1: config 0 descriptor??
[  390.978854][  T198] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  390.978917][  T198] pctv452e: pctv452e_power_ctrl: 1
[  390.978917][  T198] 
[  390.978960][  T198] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  390.978960][  T198] 
[  390.978983][  T198] dvb-usb: bulk message failed: -22 (5/0)
[  391.196085][  T198] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  391.299709][  T198] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  391.308254][  T198] usb 3-1: USB disconnect, device number 10
[  391.334850][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'.
[  391.334873][ T9964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1279'.
[  391.777874][ T9976] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1285'.
[  392.176446][ T9990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'.
[  392.809126][T10003] FAULT_INJECTION: forcing a failure.
[  392.809126][T10003] name failslab, interval 1, probability 0, space 0, times 0
[  392.809238][T10003] CPU: 0 UID: 0 PID: 10003 Comm: syz.0.1293 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  392.809265][T10003] Tainted: [L]=SOFTLOCKUP
[  392.809272][T10003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  392.809283][T10003] Call Trace:
[  392.809290][T10003]  <TASK>
[  392.809298][T10003]  dump_stack_lvl+0xe8/0x150
[  392.809331][T10003]  should_fail_ex+0x467/0x600
[  392.809364][T10003]  should_failslab+0xa8/0x100
[  392.809389][T10003]  kmem_cache_alloc_noprof+0xa4/0x650
[  392.809409][T10003]  ? vm_area_dup+0x28/0x670
[  392.809430][T10003]  ? vm_area_dup+0x28/0x670
[  392.809457][T10003]  vm_area_dup+0x28/0x670
[  392.809480][T10003]  ? __split_vma+0x1ce/0xa40
[  392.809508][T10003]  __split_vma+0x1e4/0xa40
[  392.809538][T10003]  ? mas_next_slot+0xc94/0xd70
[  392.809567][T10003]  ? __pfx___split_vma+0x10/0x10
[  392.809602][T10003]  ? mas_find+0xab1/0xcf0
[  392.809632][T10003]  vms_gather_munmap_vmas+0x4e3/0x1370
[  392.809671][T10003]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  392.809704][T10003]  ? mmap_region+0x788/0x2310
[  392.809735][T10003]  mmap_region+0x914/0x2310
[  392.809784][T10003]  ? __pfx_mmap_region+0x10/0x10
[  392.809811][T10003]  ? rcu_is_watching+0x15/0xb0
[  392.809835][T10003]  ? trace_sched_exit_tp+0x3a/0x130
[  392.809856][T10003]  ? __schedule+0x16f2/0x5500
[  392.809894][T10003]  ? rcu_is_watching+0x15/0xb0
[  392.809962][T10003]  ? arch_get_unmapped_area_topdown+0x10a/0xb60
[  392.809985][T10003]  ? kasan_check_range+0x97/0x2c0
[  392.810025][T10003]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  392.810056][T10003]  ? cap_mmap_addr+0xaf/0x100
[  392.810077][T10003]  ? bpf_lsm_mmap_addr+0x9/0x50
[  392.810095][T10003]  ? security_mmap_addr+0x71/0x240
[  392.810118][T10003]  ? shmem_mapping+0xd/0x50
[  392.810143][T10003]  ? memfd_check_seals_mmap+0x16e/0x210
[  392.810166][T10003]  do_mmap+0xc1e/0x10b0
[  392.810202][T10003]  ? __pfx_do_mmap+0x10/0x10
[  392.810228][T10003]  ? rwbase_write_lock+0x550/0x720
[  392.810264][T10003]  vm_mmap_pgoff+0x275/0x4e0
[  392.810297][T10003]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  392.810330][T10003]  ? __fget_files+0x2a/0x420
[  392.810349][T10003]  ? __fget_files+0x3a8/0x420
[  392.810367][T10003]  ? __fget_files+0x2a/0x420
[  392.810390][T10003]  ksys_mmap_pgoff+0x4a6/0x720
[  392.810409][T10003]  ? __x64_sys_mmap+0x7f/0x140
[  392.810428][T10003]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.810449][T10003]  do_syscall_64+0x174/0x580
[  392.810484][T10003]  ? clear_bhb_loop+0x40/0x90
[  392.810507][T10003]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  392.810526][T10003] RIP: 0033:0x7f230c13e019
[  392.810544][T10003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  392.810558][T10003] RSP: 002b:00007f230a375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  392.810579][T10003] RAX: ffffffffffffffda RBX: 00007f230c3c6090 RCX: 00007f230c13e019
[  392.810593][T10003] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[  392.810606][T10003] RBP: 00007f230a375090 R08: 0000000000000007 R09: 0000000000000000
[  392.810617][T10003] R10: 0000000000028012 R11: 0000000000000246 R12: 0000000000000001
[  392.810629][T10003] R13: 00007f230c3c6128 R14: 00007f230c3c6090 R15: 00007ffee12b1ca8
[  392.810659][T10003]  </TASK>
[  393.575840][ T5707] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  393.725695][ T5707] usb 4-1: Using ep0 maxpacket: 8
[  393.730151][ T5707] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  393.733408][ T5707] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  393.733437][ T5707] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  393.733457][ T5707] usb 4-1: Product: syz
[  393.733470][ T5707] usb 4-1: Manufacturer: syz
[  393.733484][ T5707] usb 4-1: SerialNumber: syz
[  393.765465][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  393.919388][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  393.922447][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  393.922474][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  393.948190][    T9] usb 3-1: string descriptor 0 read error: -22
[  393.948389][    T9] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  393.948463][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.057990][ T5707] usb 4-1: palm_os_3_probe - error -71 getting connection information
[  394.058086][ T5707] visor 4-1:1.0: probe with driver visor failed with error -71
[  394.094668][ T5707] usb 4-1: USB disconnect, device number 15
[  394.152229][    T9] usb 3-1: selecting invalid altsetting 1
[  394.152999][    T9] usb 3-1: unit 3 not found!
[  394.324550][T10015] program syz.2.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  394.335231][    T9] usb 3-1: cannot request logical cluster ID: 0 (err: -5)
[  394.335257][    T9] usb 3-1: invalid MIXER UNIT descriptor 6
[  394.430565][    T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -5
[  394.434769][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  394.536798][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.537373][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.567285][ T5811] usb 3-1: USB disconnect, device number 11
[  394.792027][T10040] rdma_op ffff88806f6f6a70 conn xmit_rdma 0000000000000000
[  394.879834][T10044] __nla_validate_parse: 3 callbacks suppressed
[  394.879855][T10044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1310'.
[  394.915260][T10046] futex_wake_op: syz.0.1311 tries to shift op by 32; fix this program
[  394.979133][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.982294][T10049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1311'.
[  395.314438][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'.
[  395.563876][T10061] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.1315'.
[  395.835447][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  395.839235][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'.
[  395.986608][   T10] usb 6-1: Using ep0 maxpacket: 8
[  395.989236][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  395.990157][T10077] FAULT_INJECTION: forcing a failure.
[  395.990157][T10077] name failslab, interval 1, probability 0, space 0, times 0
[  395.990189][T10077] CPU: 0 UID: 0 PID: 10077 Comm: syz.4.1323 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  395.990218][T10077] Tainted: [L]=SOFTLOCKUP
[  395.990224][T10077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.990235][T10077] Call Trace:
[  395.990242][T10077]  <TASK>
[  395.990251][T10077]  dump_stack_lvl+0xe8/0x150
[  395.990282][T10077]  should_fail_ex+0x467/0x600
[  395.990317][T10077]  should_failslab+0xa8/0x100
[  395.990342][T10077]  __kmalloc_cache_noprof+0xa0/0x6b0
[  395.990364][T10077]  ? tipc_nametbl_insert_publ+0x68/0x1380
[  395.990390][T10077]  ? tipc_nametbl_insert_publ+0x68/0x1380
[  395.990423][T10077]  tipc_nametbl_insert_publ+0x68/0x1380
[  395.990451][T10077]  ? rcu_is_watching+0x15/0xb0
[  395.990474][T10077]  ? rt_spin_lock+0x20e/0x400
[  395.990497][T10077]  ? __pfx_rt_spin_lock+0x10/0x10
[  395.990517][T10077]  ? rcu_is_watching+0x15/0xb0
[  395.990535][T10077]  ? __local_bh_disable_ip+0x3c/0x420
[  395.990559][T10077]  ? tipc_nametbl_publish+0x76/0x210
[  395.990589][T10077]  tipc_nametbl_publish+0xdd/0x210
[  395.990615][T10077]  ? tipc_nametbl_publish+0x76/0x210
[  395.990643][T10077]  tipc_sk_publish+0x176/0x380
[  395.990666][T10077]  ? __pfx_tipc_sk_publish+0x10/0x10
[  395.990683][T10077]  ? tipc_nametbl_build_group+0x2e/0x530
[  395.990708][T10077]  ? tipc_nametbl_build_group+0x4f9/0x530
[  395.990732][T10077]  ? tipc_nametbl_build_group+0x2e/0x530
[  395.990767][T10077]  tipc_sk_join+0x3b3/0x6a0
[  395.990802][T10077]  ? __pfx_tipc_sk_join+0x10/0x10
[  395.990822][T10077]  ? __local_bh_enable_ip+0x1ae/0x2b0
[  395.990842][T10077]  ? lockdep_hardirqs_on+0x7a/0x110
[  395.990870][T10077]  tipc_setsockopt+0x73e/0x9a0
[  395.990897][T10077]  ? __pfx_tipc_setsockopt+0x10/0x10
[  395.990919][T10077]  ? __fget_files+0x2a/0x420
[  395.990943][T10077]  ? __fget_files+0x2a/0x420
[  395.990961][T10077]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  395.990986][T10077]  ? __pfx_tipc_setsockopt+0x10/0x10
[  395.991009][T10077]  do_sock_setsockopt+0x17c/0x1b0
[  395.991038][T10077]  __x64_sys_setsockopt+0x143/0x1b0
[  395.991063][T10077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.991084][T10077]  do_syscall_64+0x174/0x580
[  395.991107][T10077]  ? trace_irq_disable+0x3b/0x140
[  395.991126][T10077]  ? clear_bhb_loop+0x40/0x90
[  395.991148][T10077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  395.991167][T10077] RIP: 0033:0x7f1fe9a2e019
[  395.991184][T10077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  395.991200][T10077] RSP: 002b:00007f1fe7c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  395.991220][T10077] RAX: ffffffffffffffda RBX: 00007f1fe9cb5fa0 RCX: 00007f1fe9a2e019
[  395.991234][T10077] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004
[  395.991246][T10077] RBP: 00007f1fe7c86090 R08: 0000000000000010 R09: 0000000000000000
[  395.991258][T10077] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001
[  395.991270][T10077] R13: 00007f1fe9cb6038 R14: 00007f1fe9cb5fa0 R15: 00007ffd56b31998
[  395.991302][T10077]  </TASK>
[  395.992645][   T10] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  395.992675][   T10] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  395.992695][   T10] usb 6-1: Product: syz
[  395.992710][   T10] usb 6-1: Manufacturer: syz
[  395.992724][   T10] usb 6-1: SerialNumber: syz
[  396.165494][ T5707] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  396.319996][ T5707] usb 1-1: unable to get BOS descriptor or descriptor too short
[  396.335630][ T5707] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.335658][ T5707] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  396.346301][ T5707] usb 1-1: string descriptor 0 read error: -22
[  396.346499][ T5707] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  396.346571][ T5707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.365937][   T10] usb 6-1: palm_os_3_probe - error -110 getting connection information
[  396.366034][   T10] visor 6-1:1.0: probe with driver visor failed with error -110
[  396.566931][   T10] usb 6-1: USB disconnect, device number 11
[  396.587598][ T5707] usb 1-1: selecting invalid altsetting 1
[  396.588369][ T5707] usb 1-1: unit 3 not found!
[  396.616934][T10075] program syz.0.1322 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  396.625685][ T5707] usb 1-1: cannot request logical cluster ID: 0 (err: -5)
[  396.625710][ T5707] usb 1-1: invalid MIXER UNIT descriptor 6
[  396.863832][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.864366][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.518169][ T5707] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -5
[  397.523533][ T5707] usb 1-1: USB disconnect, device number 28
[  397.576454][T10091] netlink: 15678 bytes leftover after parsing attributes in process `syz.5.1327'.
[  397.688037][T10094] FAULT_INJECTION: forcing a failure.
[  397.688037][T10094] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.688072][T10094] CPU: 0 UID: 0 PID: 10094 Comm: syz.0.1329 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  397.688098][T10094] Tainted: [L]=SOFTLOCKUP
[  397.688104][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.688115][T10094] Call Trace:
[  397.688122][T10094]  <TASK>
[  397.688130][T10094]  dump_stack_lvl+0xe8/0x150
[  397.688162][T10094]  should_fail_ex+0x467/0x600
[  397.688196][T10094]  _copy_from_user+0x2d/0xb0
[  397.688219][T10094]  memdup_user_nul+0x66/0x110
[  397.688241][T10094]  smk_write_net6addr+0x14a/0x1400
[  397.688263][T10094]  ? look_up_lock_class+0x57/0x110
[  397.688288][T10094]  ? register_lock_class+0x31/0x2e0
[  397.688313][T10094]  ? vfs_write+0x231/0xbb0
[  397.688337][T10094]  ? __pfx_smk_write_net6addr+0x10/0x10
[  397.688375][T10094]  ? __pfx_smk_write_net6addr+0x10/0x10
[  397.688397][T10094]  vfs_write+0x29f/0xbb0
[  397.688428][T10094]  ? __pfx_vfs_write+0x10/0x10
[  397.688454][T10094]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  397.688478][T10094]  ? lockdep_hardirqs_on+0x7a/0x110
[  397.688501][T10094]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  397.688524][T10094]  ? mutex_lock_nested+0x152/0x1d0
[  397.688541][T10094]  ? fdget_pos+0x252/0x320
[  397.688569][T10094]  ksys_write+0x156/0x270
[  397.688594][T10094]  ? __pfx_ksys_write+0x10/0x10
[  397.688624][T10094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.688645][T10094]  do_syscall_64+0x174/0x580
[  397.688667][T10094]  ? trace_irq_disable+0x3b/0x140
[  397.688686][T10094]  ? clear_bhb_loop+0x40/0x90
[  397.688708][T10094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.688735][T10094] RIP: 0033:0x7f230c13e019
[  397.688752][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.688767][T10094] RSP: 002b:00007f230a396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  397.688786][T10094] RAX: ffffffffffffffda RBX: 00007f230c3c5fa0 RCX: 00007f230c13e019
[  397.688800][T10094] RDX: 000000000000009b RSI: 0000200000000240 RDI: 0000000000000003
[  397.688811][T10094] RBP: 00007f230a396090 R08: 0000000000000000 R09: 0000000000000000
[  397.688821][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.688831][T10094] R13: 00007f230c3c6038 R14: 00007f230c3c5fa0 R15: 00007ffee12b1ca8
[  397.688861][T10094]  </TASK>
[  398.264551][T10118] netdevsim netdevsim5 
€Â: renamed from netdevsim0 (while UP)
[  398.335056][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1336'.
[  399.915404][    T9] BUG: kernel NULL pointer dereference, address: 0000000000000010
[  399.915423][    T9] #PF: supervisor read access in kernel mode
[  399.915433][    T9] #PF: error_code(0x0000) - not-present page
[  399.915442][    T9] PGD 800000002968a067 P4D 800000002968a067 PUD 0 
[  399.915470][    T9] Oops: Oops: 0000 [#1] SMP KASAN PTI
[  399.915492][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  399.915514][    T9] Tainted: [L]=SOFTLOCKUP
[  399.915520][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  399.915530][    T9] Workqueue: usb_hub_wq hub_event
[  399.915552][    T9] RIP: 0010:kcov_remote_start+0x287/0x6f0
[  399.915579][    T9] Code: b3 8d 4c 8b b8 b8 b2 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 5b ce 07 03 84 c0 74 0e 49 8b 07 49
[  399.915594][    T9] RSP: 0018:ffffc900000e77e8 EFLAGS: 00010207
[  399.915608][    T9] RAX: 0000000000000000 RBX: ffff88801cabdd00 RCX: 0000000000000000
[  399.915619][    T9] RDX: 00000000bb24950b RSI: 0000000000000001 RDI: ffffffff8bca7820
[  399.915629][    T9] RBP: 0000000000100000 R08: ffffffff8b464b20 R09: 0000000000000000
[  399.915641][    T9] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002
[  399.915652][    T9] R13: 0000000000000001 R14: ffff888034a85c00 R15: 0000000000000000
[  399.915664][    T9] FS:  0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000
[  399.915679][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  399.915692][    T9] CR2: 0000000000000010 CR3: 0000000032df2000 CR4: 00000000003526f0
[  399.915708][    T9] Call Trace:
[  399.915714][    T9]  <TASK>
[  399.915724][    T9]  hub_event+0x15d/0x4cf0
[  399.915746][    T9]  ? __lock_acquire+0x683/0x2ce0
[  399.915766][    T9]  ? register_lock_class+0x31/0x2e0
[  399.915785][    T9]  ? __lock_acquire+0x683/0x2ce0
[  399.915802][    T9]  ? rcu_is_watching+0x15/0xb0
[  399.915823][    T9]  ? trace_hrtimer_start+0x82/0x200
[  399.915851][    T9]  ? do_raw_spin_lock+0x12b/0x2f0
[  399.915876][    T9]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  399.915902][    T9]  ? __pfx_hub_event+0x10/0x10
[  399.915920][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  399.915952][    T9]  ? rcu_is_watching+0x15/0xb0
[  399.915974][    T9]  ? process_scheduled_works+0xa20/0x14e0
[  399.915993][    T9]  process_scheduled_works+0xa8e/0x14e0
[  399.916024][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[  399.916047][    T9]  ? assign_work+0x3cf/0x5d0
[  399.916068][    T9]  worker_thread+0xa47/0xfb0
[  399.916099][    T9]  kthread+0x388/0x470
[  399.916123][    T9]  ? __pfx_worker_thread+0x10/0x10
[  399.916143][    T9]  ? __pfx_kthread+0x10/0x10
[  399.916166][    T9]  ret_from_fork+0x514/0xb70
[  399.916190][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[  399.916214][    T9]  ? __switch_to+0xc89/0x1420
[  399.916237][    T9]  ? __pfx_kthread+0x10/0x10
[  399.916260][    T9]  ret_from_fork_asm+0x1a/0x30
[  399.916284][    T9]  </TASK>
[  399.916290][    T9] Modules linked in:
[  399.916314][    T9] CR2: 0000000000000010
[  399.916328][    T9] ---[ end trace 0000000000000000 ]---
[  399.916341][    T9] RIP: 0010:kcov_remote_start+0x287/0x6f0
[  399.916368][    T9] Code: b3 8d 4c 8b b8 b8 b2 9e 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 00 0f 22 8e 4d 8b 3f 49 81 ff 00 0f 22 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 5b ce 07 03 84 c0 74 0e 49 8b 07 49
[  399.916381][    T9] RSP: 0018:ffffc900000e77e8 EFLAGS: 00010207
[  399.916393][    T9] RAX: 0000000000000000 RBX: ffff88801cabdd00 RCX: 0000000000000000
[  399.916403][    T9] RDX: 00000000bb24950b RSI: 0000000000000001 RDI: ffffffff8bca7820
[  399.916415][    T9] RBP: 0000000000100000 R08: ffffffff8b464b20 R09: 0000000000000000
[  399.916426][    T9] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000002
[  399.916437][    T9] R13: 0000000000000001 R14: ffff888034a85c00 R15: 0000000000000000
[  399.916448][    T9] FS:  0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000
[  399.916461][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  399.916473][    T9] CR2: 0000000000000010 CR3: 0000000032df2000 CR4: 00000000003526f0
[  399.916488][    T9] Kernel panic - not syncing: Fatal exception
[  399.916789][    T9] Kernel Offset: disabled