last executing test programs:

1m11.538062845s ago: executing program 2 (id=1372):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x560f, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x61}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4008040)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/ip6_tables_matches\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0)
tee(r4, r5, 0x6, 0x8)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x507880, 0x0)
socket$inet(0x2, 0x80000, 0xe6)
ioctl$COMEDI_DEVINFO(r3, 0x80b06401, &(0x7f0000000180))

1m11.273335957s ago: executing program 2 (id=1373):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x8, 0xfffffffffffffffe, 0x3, 0xff, 0x6, 0x6, 0x455, 0x800000000007, 0xfffffffffffffff8, 0xffffffff, 0x0, 0x2000009, 0x1, 0x13, 0x80000003, 0x9], 0x0, 0x100001})
r0 = syz_clone(0x801080, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
setns(0xc9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r3, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m10.386646057s ago: executing program 2 (id=1375):
r0 = syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) (async)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x30, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x39c, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc3, 0x69, 0xe, {0x7, 0x25, 0x1, 0x0, 0x94}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x3, 0x3, 0x4, {0x7, 0x25, 0x1, 0x4, 0xfe, 0x6}}}}}}}}]}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendto(r2, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803ffe400000000", 0x68, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) (async)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14}}, 0xa8}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0xffffffff}, {0x6, 0x4}]})
sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
prctl$PR_SET_MM(0x46, 0x1cee7696426a4fe8, &(0x7f0000ffe000/0x2000)=nil)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x1, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x70, 0x4, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xf9, 0x7, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x6, 0x67}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x5f, 0x97, 0x67, 0x20, 0x4}, 0x6f, &(0x7f0000000100)={0x5, 0xf, 0x6f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x6, 0xae}, @ss_container_id={0x14, 0x10, 0x4, 0xf, "18d27274394ea35292612edd30023cab"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "9ac87c8905ff796bb005055b789899cd"}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x3, 0xf, 0xa4, [0x3fcf, 0xff00a0, 0xc060, 0xff3f00, 0xff00, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x87, "75ab8d0861eb143d6448ece1152d11f4"}]}, 0x3, [{0xb5, &(0x7f0000000180)=@string={0xb5, 0x3, "1dcfac86a29373cd6ae384262b054c2a10fb6dfff2e5a5369a88bfffacc7dace09111a00d1bd9bb1b8d87fdf0d577cd7355cb2622774ab48675146ffce4f57bceefefe5cffd26c3dbc22ef4fbe08dcf7d7fbb945ab3d56733b32cae2926175807255da4f7ddc85a37e682269044e7ccdcdcceed4a2ad21683942801ee55dd27affcdfc4375c55076dcb0529889ca8a7fc97e9081789900eac7c86086ff36cbdd94688af24665852705710474d041f8bcfda8fd"}}, {0x70, &(0x7f0000000240)=@string={0x70, 0x3, "43a11298902b3fb1c858b07e0ee167beac0469677102e11710e0233c948eec707751b9b859319c3bfa05a770771f5323025c97ea2582116546de9348550364ed8746831ba1564b95e5f30db2bf0ddda8a970b315ff20cd4efdfa84fd76fb58c4139fe392c36877f44fb4df8e1bee"}}, {0x97, &(0x7f00000002c0)=@string={0x97, 0x3, "8e93556de2f0646a518d8f58256ed487ff50de5418fec9b306d0ac37c45ab59e09c9a0fddd8de3c2529ea5035fcd2b18e3b245ae7c6e136a5ee7d39b06701f390e71f06500bc2604613973ec15e8f0b4e0369ac5f0f0f55ce8ea907d56f55f06e194902f94fe13cb5ca6a6d6b76468ce67c4e828594ebcfa2c0bcb5a848db958ddecc9cd9832e0c71e1bf14e253fd7e479ae1fe54a"}}]})

1m7.268934755s ago: executing program 2 (id=1387):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0)
unshare(0x6020400)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$setperm(0x5, r0, 0x1022104)
keyctl$get_security(0x11, r0, 0x0, 0x0)

1m6.891696148s ago: executing program 2 (id=1390):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0x8, 0x0, 0x0, 0xfffffffe, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x2b, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010102}}]}, 0x40}}, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x0, 0x3, "", [{{0x9, 0x4, 0x0, 0x85, 0x2, 0x7, 0x1, 0x1, 0xb, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x2, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x1, 0x6}}]}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x1, 0x1, 0x8, 0xf7}, 0x82, &(0x7f00000002c0)={0x5, 0xf, 0x82, 0x6, [@wireless={0xb, 0x10, 0x1, 0x0, 0xc4, 0x7, 0x8, 0x1, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0xff, 0x1, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "096a0fa56740a3960ec8161b2077e384"}, @ssp_cap={0x1c, 0x10, 0xa, 0x10, 0x4, 0x614, 0xf00, 0x8, [0xff3fcf, 0xc0, 0xf, 0x3f0f]}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7ffbb67, 0x0, 0x6, [0xff0000, 0xf, 0x7, 0x1fe0000, 0x3e8f, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4805cb8aafceffbf07ec8a8809b37db8"}]}, 0xa, [{0x9, &(0x7f0000000380)=@string={0x9, 0x3, "712500f83e60ec"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x40b}}, {0x83, &(0x7f0000000480)=@string={0x83, 0x3, "dcf7ae15ddb4739091864c62a6a6d1618fecea04cb123159fef1369c3a6d5fda374709cd886a5b6c693bfa1d705dfeb0dfffdc68bdb59d65dcb3303044108d036decd2a17819f98ce8ff383c84517e4c538fd438db686dcdfc1e3a787df8f3aa7d1d917f733d2d857dcdb49dd00df42227aee46f902ceaf09f59476457d64ba6be"}}, {0xa2, &(0x7f0000000540)=@string={0xa2, 0x3, "7e58a5fd2d24788083bac75c406e766419105aa54411cdb6e1fb9f1905c684e2f6e0c412995aae167947df97b9b87eef85a04ca831eeb44a643048fa5fc178c1d06c98bb6083ee87400eccdee06aa45c2fc2d481657ec2e66ca1ce69c3ca2475ea4dde09f32211143c57adcd9742f9543d4d1e559cb5cc69dbb1a1d4ea70a5fdef2e66d76d328bde36b4ef9e97acb854f25b6cf9384ae5e00639fa102e38fc5f"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xa00dc85796574613}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x816}}]})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x406708}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x78, 0x1, 0x8, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x543}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4d3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x201}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8000)
r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r4, 0x4054561e, &(0x7f0000000140)={0x0, "28c4d57dad981acc24ebd8366bc964b45ab2b542e88599526778a8e54c238b56", 0x2, 0x800, 0x5, 0x1000, 0x4, 0x5, 0xfffffe00, 0x1000})
syz_usb_control_io$printer(r3, &(0x7f0000000a00)={0x14, &(0x7f0000000980)={0x40, 0x21, 0x17, {0x17, 0x6, "537d2b4f6c56df0924d5a2a7ed7ec0f0238c6e33c1"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000d00)={0x34, &(0x7f0000000a40)={0x0, 0x1c, 0xf7, "f65ebe3e3647181dee0aedf6cfd10880e3e762100cd28cb8241ac98f725b8eee479d03a189e3ad92d3b98c7b697e59258e323cbce055e32f0868935d5c7907d1e8eb08664bcf0bc58b6bee2e0b50a04df70eb1f43591cedc1a2a2816a4876ab53d8e5735e48b3befd9b79b6d24627f0125ba1c39a426d64bc68991fc41d6caeaa2ad0f3fa1c8a1ee011f19abcc7fae8db16f4d3ade1b9df06be2ac00a6e17c52b723176bb95fab290a266a2794ee82529b36ffbd0b916d15b6591a14f45f7802e7422676d26e9ce9f5e77bc37c715103648e63802797040de2dd34b5dffa5179c70dbcd6b8b886aff5373294d7828c0254e66c25f818a6"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000bc0)={0x20, 0x0, 0x80, {0x7e, "5e7e7b5148b6b919a7505c3a716f668c29aaf177d9c9704a227a6fd062484956de36706d5863ab36f75c159a21db0260a6857d37aa0de8f2965313af0a717d25f0232a904142cb0a33bcd98a62aeaf26e110312980363e0c1fa59d0bde19ad125296e28668841beb83c698349b47b1411cea79d1a034a94576e1eaccb594"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x5}})
sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x28, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r6 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x66)
r7 = creat(&(0x7f0000000e40)='./file0\x00', 0x180)
quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001000)={{0x1, 0x1, 0x18, <r8=>0xffffffffffffffff, {0xee00, 0xffffffffffffffff}}, './config/nvmet/ports/1/addr_adrfam\x00'})
getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000e80)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000001040)=0xe8)
quotactl_fd$Q_GETFMT(r7, 0xffffffff80000401, r9, &(0x7f0000000fc0))
write(r5, &(0x7f0000000400)='ip', 0x2)
r10 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r11=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r10, 0xab00, r11)
ioctl$NBD_DO_IT(r10, 0xab03)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102")
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000240)=@get={0x1, &(0x7f0000000200)=""/43, 0xff})

1m5.62632104s ago: executing program 2 (id=1395):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x200000000000000)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

1m4.992442254s ago: executing program 32 (id=1395):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x200000000000000)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)

9.31188808s ago: executing program 4 (id=1655):
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00')
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000)
setsockopt$inet_tcp_int(r2, 0x6, 0x25, &(0x7f0000000080)=0x2000001, 0x4)
sendmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602ffa100000e000a000f000000028000001294", 0x2e}], 0x1}, 0x40)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0)
sendmsg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d0fc035fe86ae34e08168202d7b45820747f07520cef15b676b92764ca61b8f7522b107acda102e3fcf30b4168709cddf91337d5", 0x34}, {&(0x7f0000000080)="2e5d984643b4e62e7c427d917dbe50c6f9bcfc5f7dd16048584d20c792a58ae4824f84778a3b64053ca694bdd768498fb69035647a53560f8024df80288da1f260df5919c567a4f20dcdab2e9ce4587c1e07397d35913e86059c22335a0a9e7c9745f3e3abeb2234840919293c49e31966", 0x71}, {&(0x7f0000000180)="ece1a99f364f9062672148745b28c733dc20b0a90081a886fa8b95dade8442cd88f8e0d818", 0x25}, {&(0x7f00000001c0)="937b41428939c713a874b98c9c3f40a0a34c7ea3fe7391cf1cce43c939839a4a48ce21e460d95c188b3eed0f4431a9d1555a427158d0a8ce0ec83c3b2a19c50933db16f19dd12c2be05d52edf7a444030f43a8d1dcf2f9", 0x57}, {&(0x7f0000000480)="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", 0xfd}], 0x5, &(0x7f0000000600)=[{0xf8, 0x10c, 0xb, "e6ec24d11f9638ebf71c0651689fbf75c6470b108b8e2e086397a9e6a95ee7fe231be374b685eeb7e492c01a6fc02e66fe5617eca7205c84afa771f9d34847459aa1fdee01e680508ff8ef28030e7871dd1264843fb4912ec41a4c458aa9797783a1f7de137c1d04eabffe426443d26ba4503e5c3e6f3c49f87c3874bb2be99d9069a12afaf233d6edd889182ef9ca5460833b377321cc788f09829d6da28bc5aeec4ff8794ccb499e7b5893ad51f6bd55cb9c77d5ab29c54fd2783ad8600b8c995285e3a19896bcf0cb7668e4b0ef77a4b2444b50d7688f0cc3df9aad7529ada0e648e5"}, {0x1010, 0x10a, 0x6, "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"}, {0xa8, 0x0, 0x100, "3550cc542621db731fd43f69dfd469da045e2aa2b79a77f6224f7a59b7b66dde230bba7895b5ee14617b4aa43e1fcc754d7de76d9607cc93e30fa338750df7f381e442fc0a6fd23b4b775accf2b31aec91e8eece28adb14b8c21fdc89afb09bd636c717b42263f29832b3b53e822ce3b4c023125a60cb7d03b9333db5275abf34bebd3416da92254cc3105930176362c51be76"}], 0x11b0}, 0x40044)

9.017436217s ago: executing program 4 (id=1657):
r0 = memfd_create(0x0, 0x6)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r2, @ANYBLOB="0000000000008000000000000000f8b1f3bc5ebab98410890b699ac7258b6d3bb9b22222fdab67d9d6"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000a40)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000400)=ANY=[@ANYBLOB="12010002000000405a0609000001000000010902190001010080320904000001ff0000000705810240"], 0x0)
r7 = openat(r0, &(0x7f0000000340)='./dev\x00', 0x642a80, 0x19)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x20, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x6}}, 0x20)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000b80))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0009000c"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="58239300", @ANYRES16=0x0, @ANYBLOB="100028bd7000fcdbdf25620000000c0099000f000000160000000600b300010000000600b300020000000600b300030000000600b4004d1000000600b4001a0100000600b300020000000600b30001000000"], 0x58}, 0x1, 0x0, 0x0, 0x80000}, 0x20008840)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)=0x2)
ptrace(0x18, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0000809bffffffffffffaaaaaaaaaabb8100100008004556005c006500008211907800000000e00000014e224e230048907803000000000000000e68d940ef41bd31c9d0f60cb9146752a18ae3ecffa5c69a416bdcb2f4c06fe12fa97b3a2f47b08f71242d80164c1b557c8b609fba4d1850"], 0x72)

8.475772035s ago: executing program 0 (id=1664):
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000100)={0x2, 0x1, @stop_pts=0xfffffffffffffffb})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000701feffffff00000000017c0000040042802c00018010000400cab1893a20b8d2a93521800a18001c8014000200fe800000000000000000000000000032040002"], 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x24008084)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x2, 0xd9, 0xfe, 0x2, 0x0, 0xfc, 0xc, 0x0, 0x3, 0x4, 0x0, 0x0, 0x5}, 0xe)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x3}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x7}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xc1}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x1e}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4044815}, 0x24044850)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x56}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x40080)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0xff, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={r6, 0x3321, 0x97c}, 0x10)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r7, 0xc0389423, &(0x7f0000000200)={0x0, 0x50, [0x9, 0x7ff, 0x2, 0xfffffffffffffffe], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r8, 0x83, 0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="0502001e21"])

5.733258404s ago: executing program 4 (id=1677):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x181)
write(r1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1b7)
mount(0x0, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/virtio/drivers/virtio_blk/bind\x00', 0x1, 0x0)
lseek(r2, 0x7fff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

5.585957684s ago: executing program 4 (id=1678):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async)
sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50)
r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x6, 0x8, 0x4, 0xc07})
mkdir(&(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdir(0x0, 0x1ff) (async)
mkdir(0x0, 0x1ff)
close(0xffffffffffffffff)
symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0) (async)
symlink(&(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x0)
openat(0xffffffffffffffff, 0x0, 0x100, 0x0) (async)
r4 = openat(0xffffffffffffffff, 0x0, 0x100, 0x0)
write(r4, 0x0, 0x0)
r5 = openat(0xffffffffffffffff, 0x0, 0x1, 0x0)
write(r5, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0)
symlink(&(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r6, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f00000005c0)=""/4105, 0x1009, 0x2, &(0x7f0000000100)={0x77359400})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x14}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x5c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0x15, 0x0, @random="1d23e245e7601bd9c201664df149ca2cd3"}, {0xa, 0x0, @random="aa670b50f93c"}, {0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xb6a}, @NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x40004)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}}, 0x4000080)

5.471907652s ago: executing program 4 (id=1679):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
r1 = socket(0x11, 0x3, 0x300)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c0400904000001030000000921090000012289"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r2, 0x81, 0xb, &(0x7f0000000180)="006e5841ccb5ffae1b1e5b")
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x804, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)

5.416584132s ago: executing program 0 (id=1680):
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000204e0000", 0x58}], 0x1) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async)
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$GIO_FONTX(r2, 0x5434, 0x0) (async)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async)
r4 = inotify_init1(0x0)
inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x10000a3) (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x91000a7a) (async)
fcntl$notify(r5, 0x402, 0x8000000f) (async)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000500)={0x8000000, 0x3, 0x2}) (async)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='cifs\x00', 0x10, &(0x7f0000000400)) (async)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg(r7, &(0x7f00000027c0)=[{{&(0x7f0000000040)=@isdn={0x22, 0x2, 0x7, 0x3, 0x5}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000100)="ba35f7e42e757185278a3b2d2f7db435494d4b3937234b847fb7dcdf342f99ff06c2a44e92d3f4f1ce0f138d2036a249f784385c0ab719b5dced5f387e811987047423b5340ac3326b4581cac25d38ac0be84587916f669c56edf1019daa98956ed7c9e7d573ba54466af08b638d43dc145bfc53c315ca532c1f5e8787ac9746383d7a43f58421a1ef273f32eff474ea22a2288deb689354a219a948e0a1cec54ce841b03e3c43716e1115b8a605019fad96110b2e4c9eef45b299324121e742791d395dfad7b11edb75e787d4ed4feafcdf9abdf5cf6649714e645db84b2faa3944203c433a54a667f42452540058d894967930a184", 0xf6}, {&(0x7f0000000200)="bf8e9d2bf8adca173e8db5ac643d98fec9869b573a6aea88b3e8cd7706be2fc1db5dd1376f8db0c8ab42daf1d8a0e65349a7520b64fd921060135b7ab4c44129e1929e7c41d90dcf94f5feb107c59d06fe824e42be636c9b928f95c478cc914ef77d84d5c75712d1e02eb6c7ce7a0d32f21c771ec2fa464e6dd983c3ccd9fe904cc3f18510862683e0063cdad3e159a38314b06ef1de1bebcf8776bc15f769bcdc73123009568a240bbc142b76951936046fa9914a37d7bbd2f0585a218bb205d8eafebc4cc3a4e74818f8431aa0c14e7be0832e7148e7b9", 0xd8}, {&(0x7f00000003c0)="25272aabb4dd095ec4422fb573831df5290f86b3dc9c2e726d6fe705ff9abfabeffd90f4783eb172e57b3470cd38ab7b7ea33b3f6cda669e8d06632a13efca812d0526368da740093385eaf12bae2800c0b1511159a051ff484d604aa64600f365387acb6d28ea8a5883555c15f6e044f5ed2eab0bb9464c856b5868c6c73e3b335da20fd521906ea856b41da19376be0b36fef41b8925ad018afca15f1c1965d91253fac40ed150a7b7c10008f2bc6b57b8bda80da3", 0xb6}, {&(0x7f0000000480)="28597eaabb3c11f3f388bd4702bc93318779e28f0f84bc807f4763ae3da7366f68b661736a924e", 0x27}, {&(0x7f00000004c0)}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="e0c391fa6237a8ed2726b8c992809bf26ef83a24357c7e8cfd49085391bab87bf49efe29f20839695d43b43b01b8d225d325f1de4def92d87404ef990221d0668a142650a372c13ef9b2a314462859b5353d03d3f2dbbfc7d342ed590941e71bc79b6d3bf93d3365bfad451bf51fe9315338f719b93ff678d80388b31768378382f989f2e69e1a08323cb151cfe2ff77fc31898b30eb8b45ba409ff34c7b079b5d0c9cfe", 0xa4}, {&(0x7f0000002500)="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", 0xff}], 0x8, &(0x7f0000002680)=[{0xf8, 0x0, 0x200, "91f6e703939ab919facb6fe9acc7a9ccff4f5473c6393996a04334b985db8e5c8c6dc3ee80c59d3b67302399c215fc090c7e9f780730c6f69cc34883dc5262c23847eafc84da51511aa5f100b944bce55adae75e7f7f23fbd99cf99cfd1d7b3583b9875d5e8d50d58fe4c2c98f4e6fdb8bbb96234e597dc181aa559a47b2650302754caffdb77a5eddb5ef14f271b25de7591d16c5b7bb51c7848eaffca23489cb5c69b02ff94683aa0c3942acd15f660f76b009b6c18f20bf33c7806f4c62e9c9db85bb1afef7868a45e7b1c5bc111975bb5f18fe0fee97c997ae174ca5c0b7327b8dfb1e6bff"}, {0x10, 0x1, 0x1}], 0x108}}], 0x1, 0x40810)

5.202682882s ago: executing program 0 (id=1681):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20cc0b000600ec0500c0a240e1ff048d40b920c500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

4.144054607s ago: executing program 1 (id=1682):
ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78})
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0)

4.061829651s ago: executing program 1 (id=1683):
msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/162}, 0xaa, 0x1, 0xa7323941eae8d865)
ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f0000000080)={&(0x7f0000000000)='\x00', &(0x7f0000000040)='syz0\x00', 0x9})
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000200)=""/29)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20030b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r5=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x3, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x2, 0xa3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f00000002c0)={0x9a0000, 0x6, 0x9, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x980923, 0x5, '\x00', @p_u32=&(0x7f0000000240)=0x8}})

3.41692744s ago: executing program 1 (id=1684):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xead242eda45b4080, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
clock_getres(0x0, &(0x7f0000000080))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)
io_getevents(r1, 0xfffffffffffffffe, 0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)={0x77359400})
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000a48000/0x4000)=nil)

2.739518792s ago: executing program 3 (id=1685):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000400)
pipe(&(0x7f00000001c0))
pipe(&(0x7f0000000000))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
socket$tipc(0x1e, 0x2, 0x0)
userfaultfd(0x80001)
userfaultfd(0x1)
syz_ublk_add_dev(0xffffffffffffffff, r3, r4, r5, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r7=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
syz_ublk_setup_queues(r2, r7, &(0x7f0000000200)={0x0, 0x1463, 0x100, 0x2, 0xc3}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10, 0x2, 0x318, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x2, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4aaa, 0x10, 0x0, 0x902c4, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5fb, 0x2000, 0x2, 0x40021a, 0x0, r2}}], 0x17, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x7, 0x48b, 0x0, 0x0}}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = creat(&(0x7f0000000200)='./file0\x00', 0x29)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x29)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
ioctl$KVM_RUN(r10, 0xae80, 0x0)
r11 = syz_open_dev$admmidi(&(0x7f0000000300), 0x20, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r11, 0xc0385720, &(0x7f0000000080))
r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r12, 0x3b81, &(0x7f00000000c0)={0xc})

2.46057084s ago: executing program 3 (id=1686):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xead242eda45b4080, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000a48000/0x4000)=nil)
mremap(&(0x7f00008ba000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00005b7000/0x2000)=nil) (fail_nth: 10)

1.96275318s ago: executing program 3 (id=1687):
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200088d1, &(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10)
mkdir(0x0, 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
tkill(0x0, 0x21)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x40000)
ioctl$IOC_PR_CLEAR(r3, 0x401070cd, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xd9e}}, './file0\x00'})
accept(r1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000)
ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000180)={'\x00', 0x7f, 0xfffffc01, 0xffff, 0xfc3, 0x7, <r4=>0xffffffffffffffff})
move_pages(r4, 0x3, &(0x7f0000000240)=[&(0x7f0000004000/0x7000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f000000c000/0x1000)=nil], &(0x7f0000000280)=[0x3, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6)
munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
syz_open_dev$loop(&(0x7f0000000640), 0x5, 0x0)

1.907718271s ago: executing program 4 (id=1688):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}})
r1 = socket$inet6(0xa, 0x3, 0x5)
getpid()
sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x29, 0x4}], 0x10}}], 0x1, 0x4000000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="44040000c8bdaf2e7426125c5d1a46d56f7d94f4034b0c6025ddaff522edfe0f3c5cbb74ed3aee754300382516dbcaa8030ba867c1887ad1a053d603b5efefcb0c9a66f1cda87168bd08d46d5e6e9968e545b7df34e29f9210de18dbc863d4139b506d1ffa95c495617860334951c2b8db", @ANYRES16=r3, @ANYBLOB="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"], 0x444}, 0x1, 0x0, 0x0, 0x8084}, 0x50)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_BROADCAST(r4, 0x10f, 0x85)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
syz_usb_disconnect(r0)
sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x4802, 0x12)

1.904475797s ago: executing program 0 (id=1689):
writev(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x7, 0x193181)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000400)='p:mygroup/_yevent ./dummy:0x2', 0x1d)
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x4187d2194af24d18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0xfd}}, 0x14)
close_range(r1, 0xffffffffffffffff, 0x1000000)
lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0)

1.787050966s ago: executing program 1 (id=1690):
r0 = syz_open_dev$video(&(0x7f00000004c0), 0xa7, 0x0)
syz_usb_connect$uac2(0x6, 0xa5, 0x0, &(0x7f00000007c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0xd, 0x8, 0x7c, 0x8, 0x64}, 0x5, 0x0})
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$describe(0x1d, r1, &(0x7f0000000300)=""/182, 0xb6)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x1, @pix={0x0, 0x0, 0xb5315241, 0x0, 0x0, 0x0, 0x0, 0xfeedc8fe, 0x3}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x4000080)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0)

1.773895289s ago: executing program 0 (id=1691):
ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000000000)=""/120, 0x78})
setns(0xc9, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x0)

1.635969059s ago: executing program 0 (id=1692):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9080070900be0083"], 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e14", 0x1a}], 0x1}, 0x800)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1.168175217s ago: executing program 1 (id=1693):
r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0xf5}, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240))
mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60)
getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000600)=""/239, 0xef)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x116)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000340)='efs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,<4\xcd\xb1I\x81|2ountport=2049,mountproto=udp\x00')

1.048526445s ago: executing program 1 (id=1694):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x1b)
syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b90661400001010203010902320002010080320904000000ff0000000904"], 0x0)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)

919.859819ms ago: executing program 3 (id=1695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14f500001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

901.582898ms ago: executing program 3 (id=1696):
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0])
r0 = openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189882, 0x61)
write$cgroup_devices(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='c '], 0x11)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000000)={0x3, {0xa3, 0x5, 0x5, 0x81}, {0xa, 0x3, 0xffff, 0x3}, {0x105, 0x5}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400001, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$inet(0x2, 0x2000000000003, 0x2)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x1000, @broadcast}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x40400c0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000280)={0x9})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x41)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)
r8 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x0, 0x40)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000002280)=0x6)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x80080)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000001, 0x8, 0x801, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x3, 0x206, 0xf, 0x5, 0x8000000000000003, 0x20000003, 0x6, 0x2, 0xf73c], 0x41000, 0x40})
ioctl$KVM_RUN(r6, 0xae80, 0x0)

0s ago: executing program 3 (id=1697):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b) (fail_nth: 8)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xcb, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

bute type 10 has an invalid length.
[  362.583795][ T5620] Bluetooth: hci2: command tx timeout
[  362.652197][    T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  362.747019][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.770086][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.794276][   T12] bond0 (unregistering): Released all slaves
[  363.124928][   T12] : left promiscuous mode
[  363.456085][T10151] lo speed is unknown, defaulting to 1000
[  363.729762][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1
[  364.663088][ T5620] Bluetooth: hci2: command tx timeout
[  364.757494][T10238] FAULT_INJECTION: forcing a failure.
[  364.757494][T10238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  364.772489][T10238] CPU: 0 UID: 0 PID: 10238 Comm: syz.3.1417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  364.772518][T10238] Tainted: [L]=SOFTLOCKUP
[  364.772528][T10238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  364.772538][T10238] Call Trace:
[  364.772545][T10238]  <TASK>
[  364.772554][T10238]  dump_stack_lvl+0xe8/0x150
[  364.772582][T10238]  should_fail_ex+0x410/0x560
[  364.772610][T10238]  _copy_to_user+0x31/0xb0
[  364.772628][T10238]  simple_read_from_buffer+0xe1/0x170
[  364.772652][T10238]  proc_fail_nth_read+0x1bb/0x230
[  364.772673][T10238]  ? common_file_perm+0x20e/0x2b0
[  364.772700][T10238]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.772725][T10238]  ? rw_verify_area+0x24a/0x4c0
[  364.772747][T10238]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  364.772769][T10238]  vfs_read+0x213/0xa80
[  364.772793][T10238]  ? __pfx___mutex_lock+0x10/0x10
[  364.772812][T10238]  ? __pfx_vfs_read+0x10/0x10
[  364.772833][T10238]  ? __fget_files+0x2a/0x420
[  364.772855][T10238]  ? __fget_files+0x3a2/0x420
[  364.772873][T10238]  ? __fget_files+0x2a/0x420
[  364.772898][T10238]  ksys_read+0x150/0x270
[  364.772920][T10238]  ? __pfx_ksys_read+0x10/0x10
[  364.772949][T10238]  do_syscall_64+0x166/0x520
[  364.772966][T10238]  ? trace_irq_disable+0x3b/0x140
[  364.772989][T10238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.773006][T10238]  ? clear_bhb_loop+0x70/0xc0
[  364.773026][T10238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.773043][T10238] RIP: 0033:0x7f187a75e90e
[  364.773059][T10238] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  364.773074][T10238] RSP: 002b:00007f187b5b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  364.773092][T10238] RAX: ffffffffffffffda RBX: 00007f187b5b46c0 RCX: 00007f187a75e90e
[  364.773104][T10238] RDX: 000000000000000f RSI: 00007f187b5b40a0 RDI: 0000000000000004
[  364.773115][T10238] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  364.773125][T10238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  364.773135][T10238] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  364.773166][T10238]  </TASK>
[  365.063540][T10240] FAULT_INJECTION: forcing a failure.
[  365.063540][T10240] name failslab, interval 1, probability 0, space 0, times 0
[  365.063584][T10240] CPU: 0 UID: 0 PID: 10240 Comm: syz.0.1418 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  365.063607][T10240] Tainted: [L]=SOFTLOCKUP
[  365.063614][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  365.063624][T10240] Call Trace:
[  365.063631][T10240]  <TASK>
[  365.063639][T10240]  dump_stack_lvl+0xe8/0x150
[  365.063666][T10240]  should_fail_ex+0x410/0x560
[  365.063695][T10240]  should_failslab+0xa8/0x100
[  365.063714][T10240]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  365.063739][T10240]  ? vfs_parse_fs_qstr+0x11e/0x1e0
[  365.063797][T10240]  ? vfs_parse_fs_qstr+0x11e/0x1e0
[  365.063823][T10240]  kmemdup_nul+0x36/0xf0
[  365.063850][T10240]  vfs_parse_fs_qstr+0x11e/0x1e0
[  365.063871][T10240]  ? jffs2_init_fs_context+0x4f/0xc0
[  365.063957][T10240]  ? __pfx_vfs_parse_fs_qstr+0x10/0x10
[  365.063982][T10240]  ? alloc_fs_context+0x9b7/0xd00
[  365.064011][T10240]  do_new_mount+0x2a6/0xdc0
[  365.064033][T10240]  ? __pfx_do_new_mount+0x10/0x10
[  365.064052][T10240]  ? ns_capable+0x89/0xe0
[  365.064084][T10240]  ? path_mount+0x647/0x1050
[  365.064104][T10240]  ? user_path_at+0xd4/0x160
[  365.064127][T10240]  __se_sys_mount+0x31d/0x420
[  365.064150][T10240]  ? __pfx___se_sys_mount+0x10/0x10
[  365.064172][T10240]  ? __x64_sys_mount+0x20/0xc0
[  365.064192][T10240]  do_syscall_64+0x166/0x520
[  365.064209][T10240]  ? trace_irq_disable+0x3b/0x140
[  365.064232][T10240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.064248][T10240]  ? clear_bhb_loop+0x70/0xc0
[  365.064268][T10240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.064284][T10240] RIP: 0033:0x7f48af39e0d9
[  365.064300][T10240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.064318][T10240] RSP: 002b:00007f48b025b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  365.064335][T10240] RAX: ffffffffffffffda RBX: 00007f48af625fa0 RCX: 00007f48af39e0d9
[  365.064348][T10240] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200
[  365.064359][T10240] RBP: 00007f48b025b090 R08: 0000000000000000 R09: 0000000000000000
[  365.064370][T10240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.064380][T10240] R13: 00007f48af626038 R14: 00007f48af625fa0 R15: 00007fff786627f8
[  365.064404][T10240]  </TASK>
[  365.941536][   T12] hsr_slave_0: left promiscuous mode
[  365.954534][   T12] hsr_slave_1: left promiscuous mode
[  365.955223][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.955254][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.979888][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.979919][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.083923][   T12] veth1_macvtap: left promiscuous mode
[  366.090046][   T12] veth0_macvtap: left promiscuous mode
[  366.097072][   T12] veth1_vlan: left promiscuous mode
[  366.330797][T10268] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1425'.
[  366.680286][T10279] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  366.694946][T10279] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  366.741684][ T5620] Bluetooth: hci2: command tx timeout
[  366.875400][T10281] /dev/nullb0: Can't open blockdev
[  366.887795][   T12] team0 (unregistering): Port device team_slave_1 removed
[  366.921146][   T12] team0 (unregistering): Port device team_slave_0 removed
[  367.110402][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2
[  367.620732][T10151] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.620838][T10151] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.620975][T10151] bridge_slave_0: entered allmulticast mode
[  367.661844][T10151] bridge_slave_0: entered promiscuous mode
[  367.673518][T10151] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.673606][T10151] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.673746][T10151] bridge_slave_1: entered allmulticast mode
[  367.704308][T10151] bridge_slave_1: entered promiscuous mode
[  367.853794][T10151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.877265][T10151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.014916][T10151] team0: Port device team_slave_0 added
[  368.033601][T10151] team0: Port device team_slave_1 added
[  368.115122][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1432'.
[  368.115333][T10308] openvswitch: netlink: Key 22 has unexpected len 2 expected 4
[  368.152483][T10151] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.152512][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.152544][T10151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.227950][T10151] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.235133][T10151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.235161][T10151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.388746][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1433'.
[  368.407837][T10291] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0
[  368.423920][T10291] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -5
[  368.465714][T10151] hsr_slave_0: entered promiscuous mode
[  368.480109][T10291] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03
[  368.505212][T10151] hsr_slave_1: entered promiscuous mode
[  368.527620][T10151] debugfs: 'hsr0' already exists in 'hsr'
[  368.534355][T10151] Cannot create hsr debugfs directory
[  368.821533][ T5620] Bluetooth: hci2: command tx timeout
[  368.956941][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4
[  369.001056][T10321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'.
[  369.196536][T10325] input: syz0 as /devices/virtual/input/input29
[  369.550695][T10151] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  369.563414][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  369.572536][T10151] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  369.585096][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  369.594356][T10151] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  369.607972][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  369.620489][T10151] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  369.643537][T10151] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.844696][T10151] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.887903][T10151] 8021q: adding VLAN 0 to HW filter on device team0
[  369.908289][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.908378][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.941674][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.941762][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.175183][T10348] sctp: [Deprecated]: syz.0.1438 (pid 10348) Use of struct sctp_assoc_value in delayed_ack socket option.
[  370.175183][T10348] Use struct sctp_sack_info instead
[  370.397693][T10353] FAULT_INJECTION: forcing a failure.
[  370.397693][T10353] name failslab, interval 1, probability 0, space 0, times 0
[  370.450715][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3
[  370.510057][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.0.1439 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  370.510086][T10353] Tainted: [L]=SOFTLOCKUP
[  370.510093][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  370.510103][T10353] Call Trace:
[  370.510110][T10353]  <TASK>
[  370.510215][T10353]  dump_stack_lvl+0xe8/0x150
[  370.510261][T10353]  should_fail_ex+0x410/0x560
[  370.510290][T10353]  should_failslab+0xa8/0x100
[  370.510309][T10353]  __kmalloc_cache_noprof+0xa3/0x600
[  370.510334][T10353]  ? rfkill_fop_open+0x190/0x580
[  370.510467][T10353]  ? rfkill_fop_open+0x190/0x580
[  370.510486][T10353]  ? rfkill_fill_event+0x29c/0x3f0
[  370.510506][T10353]  rfkill_fop_open+0x190/0x580
[  370.510537][T10353]  ? __pfx_rfkill_fop_open+0x10/0x10
[  370.510555][T10353]  misc_open+0x2d5/0x350
[  370.510642][T10353]  chrdev_open+0x4d9/0x600
[  370.510674][T10353]  ? __pfx_chrdev_open+0x10/0x10
[  370.510700][T10353]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  370.510760][T10353]  ? __pfx_chrdev_open+0x10/0x10
[  370.510785][T10353]  do_dentry_open+0x816/0x1380
[  370.510811][T10353]  vfs_open+0x3b/0x340
[  370.510826][T10353]  ? path_openat+0x1428/0x1d60
[  370.510851][T10353]  path_openat+0x1443/0x1d60
[  370.510889][T10353]  do_file_open+0x23e/0x4a0
[  370.510917][T10353]  ? __pfx_do_file_open+0x10/0x10
[  370.510973][T10353]  ? _raw_spin_unlock+0x28/0x50
[  370.511117][T10353]  ? alloc_fd+0x651/0x6c0
[  370.511152][T10353]  do_sys_openat2+0x115/0x200
[  370.511173][T10353]  ? __pfx_do_sys_openat2+0x10/0x10
[  370.511193][T10353]  ? ksys_write+0x242/0x270
[  370.511217][T10353]  ? __pfx_ksys_write+0x10/0x10
[  370.511241][T10353]  __x64_sys_openat+0x138/0x170
[  370.511264][T10353]  do_syscall_64+0x166/0x520
[  370.511282][T10353]  ? trace_irq_disable+0x3b/0x140
[  370.511307][T10353]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.511324][T10353]  ? clear_bhb_loop+0x70/0xc0
[  370.511345][T10353]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.511363][T10353] RIP: 0033:0x7f48af39e0d9
[  370.511385][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.511400][T10353] RSP: 002b:00007f48b025b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  370.511420][T10353] RAX: ffffffffffffffda RBX: 00007f48af625fa0 RCX: 00007f48af39e0d9
[  370.511433][T10353] RDX: 0000000000040000 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  370.511445][T10353] RBP: 00007f48b025b090 R08: 0000000000000000 R09: 0000000000000000
[  370.511456][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  370.511466][T10353] R13: 00007f48af626038 R14: 00007f48af625fa0 R15: 00007fff786627f8
[  370.511491][T10353]  </TASK>
[  371.037471][ T5620] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  371.096058][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'.
[  371.151573][ T5766] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  371.311667][ T5766] usb 2-1: Using ep0 maxpacket: 8
[  371.318862][ T5766] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  371.331128][ T5766] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  371.331160][ T5766] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  371.355387][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.355422][ T5766] usb 2-1: Product: syz
[  371.355444][ T5766] usb 2-1: Manufacturer: syz
[  371.355459][ T5766] usb 2-1: SerialNumber: syz
[  371.553296][T10377] FAULT_INJECTION: forcing a failure.
[  371.553296][T10377] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  371.579514][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.3.1446 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.579551][T10377] Tainted: [L]=SOFTLOCKUP
[  371.579558][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.579569][T10377] Call Trace:
[  371.579576][T10377]  <TASK>
[  371.579584][T10377]  dump_stack_lvl+0xe8/0x150
[  371.579615][T10377]  should_fail_ex+0x410/0x560
[  371.579643][T10377]  prepare_alloc_pages+0x223/0x600
[  371.579673][T10377]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  371.579701][T10377]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  371.579725][T10377]  ? __alloc_frozen_pages_noprof+0x29e/0x5a0
[  371.579752][T10377]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  371.579780][T10377]  ? __pfx_policy_nodemask+0x10/0x10
[  371.579795][T10377]  ? __get_vm_area_node+0x155/0x2f0
[  371.579814][T10377]  ? __vmalloc_node_range_noprof+0x343/0x1540
[  371.579834][T10377]  ? vzalloc_noprof+0xb2/0xe0
[  371.579856][T10377]  __alloc_pages_noprof+0x10/0x100
[  371.579881][T10377]  alloc_pages_bulk_noprof+0x5fa/0x7c0
[  371.579911][T10377]  ? alloc_pages_noprof+0x140/0x2b0
[  371.579932][T10377]  __kasan_populate_vmalloc+0xb7/0x1c0
[  371.579960][T10377]  alloc_vmap_area+0xd1a/0x1420
[  371.579991][T10377]  ? __pfx_alloc_vmap_area+0x10/0x10
[  371.580008][T10377]  ? __kmalloc_cache_node_noprof+0x3d1/0x620
[  371.580032][T10377]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  371.580055][T10377]  ? __get_vm_area_node+0x155/0x2f0
[  371.580078][T10377]  __get_vm_area_node+0x200/0x2f0
[  371.580102][T10377]  __vmalloc_node_range_noprof+0x343/0x1540
[  371.580124][T10377]  ? n_tty_open+0x1d/0x150
[  371.580251][T10377]  ? lock_acquire+0x115/0x350
[  371.580280][T10377]  ? rcu_is_watching+0x16/0xb0
[  371.580305][T10377]  ? trace_contention_end+0x3d/0x140
[  371.580329][T10377]  ? do_raw_spin_lock+0x12b/0x2f0
[  371.580351][T10377]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  371.580378][T10377]  ? n_tty_open+0x1d/0x150
[  371.580403][T10377]  vzalloc_noprof+0xb2/0xe0
[  371.580439][T10377]  ? n_tty_open+0x1d/0x150
[  371.580465][T10377]  n_tty_open+0x1d/0x150
[  371.580491][T10377]  tty_ldisc_setup+0xcc/0x270
[  371.580514][T10377]  tty_init_dev+0x279/0x4d0
[  371.580537][T10377]  tty_open+0x7d9/0xcc0
[  371.580577][T10377]  ? __pfx_tty_open+0x10/0x10
[  371.580604][T10377]  ? do_raw_spin_unlock+0xf5/0x200
[  371.580627][T10377]  chrdev_open+0x4d9/0x600
[  371.580655][T10377]  ? __pfx_chrdev_open+0x10/0x10
[  371.580681][T10377]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  371.580710][T10377]  ? __pfx_chrdev_open+0x10/0x10
[  371.580734][T10377]  do_dentry_open+0x816/0x1380
[  371.580759][T10377]  vfs_open+0x3b/0x340
[  371.580774][T10377]  ? path_openat+0x1428/0x1d60
[  371.580799][T10377]  path_openat+0x1443/0x1d60
[  371.580836][T10377]  do_file_open+0x23e/0x4a0
[  371.580863][T10377]  ? __pfx_do_file_open+0x10/0x10
[  371.580903][T10377]  ? _raw_spin_unlock+0x28/0x50
[  371.580927][T10377]  ? alloc_fd+0x651/0x6c0
[  371.580953][T10377]  do_sys_openat2+0x115/0x200
[  371.580972][T10377]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.580990][T10377]  ? ksys_write+0x242/0x270
[  371.581013][T10377]  ? __pfx_ksys_write+0x10/0x10
[  371.581037][T10377]  __x64_sys_openat+0x138/0x170
[  371.581058][T10377]  do_syscall_64+0x166/0x520
[  371.581075][T10377]  ? trace_irq_disable+0x3b/0x140
[  371.581098][T10377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.581115][T10377]  ? clear_bhb_loop+0x70/0xc0
[  371.581135][T10377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.581151][T10377] RIP: 0033:0x7f187a79e0d9
[  371.581168][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.581182][T10377] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  371.581201][T10377] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  371.581213][T10377] RDX: 0000000000040002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  371.581225][T10377] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  371.581236][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.581246][T10377] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  371.581271][T10377]  </TASK>
[  371.713681][T10377] syz.3.1446: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  371.713756][T10377] CPU: 0 UID: 0 PID: 10377 Comm: syz.3.1446 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  371.713778][T10377] Tainted: [L]=SOFTLOCKUP
[  371.713787][T10377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  371.713797][T10377] Call Trace:
[  371.713804][T10377]  <TASK>
[  371.713811][T10377]  dump_stack_lvl+0xe8/0x150
[  371.713838][T10377]  warn_alloc+0x24d/0x270
[  371.713862][T10377]  ? lockdep_hardirqs_on+0x7b/0x110
[  371.713881][T10377]  ? __pfx_warn_alloc+0x10/0x10
[  371.713903][T10377]  ? kfree+0x1c5/0x650
[  371.713927][T10377]  ? __get_vm_area_node+0x219/0x2f0
[  371.713952][T10377]  __vmalloc_node_range_noprof+0x36b/0x1540
[  371.713974][T10377]  ? lock_acquire+0x115/0x350
[  371.714002][T10377]  ? rcu_is_watching+0x16/0xb0
[  371.714019][T10377]  ? trace_contention_end+0x3d/0x140
[  371.714043][T10377]  ? do_raw_spin_lock+0x12b/0x2f0
[  371.714065][T10377]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  371.714091][T10377]  ? n_tty_open+0x1d/0x150
[  371.714120][T10377]  vzalloc_noprof+0xb2/0xe0
[  371.714141][T10377]  ? n_tty_open+0x1d/0x150
[  371.714166][T10377]  n_tty_open+0x1d/0x150
[  371.714191][T10377]  tty_ldisc_setup+0xcc/0x270
[  371.714214][T10377]  tty_init_dev+0x279/0x4d0
[  371.714236][T10377]  tty_open+0x7d9/0xcc0
[  371.714269][T10377]  ? __pfx_tty_open+0x10/0x10
[  371.714296][T10377]  ? do_raw_spin_unlock+0xf5/0x200
[  371.714325][T10377]  chrdev_open+0x4d9/0x600
[  371.714352][T10377]  ? __pfx_chrdev_open+0x10/0x10
[  371.714377][T10377]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  371.714406][T10377]  ? __pfx_chrdev_open+0x10/0x10
[  371.714433][T10377]  do_dentry_open+0x816/0x1380
[  371.714458][T10377]  vfs_open+0x3b/0x340
[  371.714472][T10377]  ? path_openat+0x1428/0x1d60
[  371.714496][T10377]  path_openat+0x1443/0x1d60
[  371.714532][T10377]  do_file_open+0x23e/0x4a0
[  371.714559][T10377]  ? __pfx_do_file_open+0x10/0x10
[  371.714597][T10377]  ? _raw_spin_unlock+0x28/0x50
[  371.714625][T10377]  ? alloc_fd+0x651/0x6c0
[  371.714650][T10377]  do_sys_openat2+0x115/0x200
[  371.714669][T10377]  ? __pfx_do_sys_openat2+0x10/0x10
[  371.714686][T10377]  ? ksys_write+0x242/0x270
[  371.714709][T10377]  ? __pfx_ksys_write+0x10/0x10
[  371.714732][T10377]  __x64_sys_openat+0x138/0x170
[  371.714753][T10377]  do_syscall_64+0x166/0x520
[  371.714769][T10377]  ? trace_irq_disable+0x3b/0x140
[  371.714792][T10377]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.714809][T10377]  ? clear_bhb_loop+0x70/0xc0
[  371.714829][T10377]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  371.714845][T10377] RIP: 0033:0x7f187a79e0d9
[  371.714861][T10377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  371.714874][T10377] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  371.714890][T10377] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  371.714903][T10377] RDX: 0000000000040002 RSI: 0000200000000080 RDI: ffffffffffffff9c
[  371.714914][T10377] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  371.714924][T10377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  371.714934][T10377] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  371.714958][T10377]  </TASK>
[  372.151554][T10377] Mem-Info:
[  372.151566][T10377] active_anon:41600 inactive_anon:2918 isolated_anon:0
[  372.151566][T10377]  active_file:17 inactive_file:60159 isolated_file:0
[  372.151566][T10377]  unevictable:0 dirty:12 writeback:0
[  372.151566][T10377]  slab_reclaimable:11487 slab_unreclaimable:95592
[  372.151566][T10377]  mapped:27750 shmem:39176 pagetables:1324
[  372.151566][T10377]  sec_pagetables:0 bounce:0
[  372.151566][T10377]  kernel_misc_reclaimable:0
[  372.151566][T10377]  free:1277086 free_pcp:9846 free_cma:0
[  372.151619][T10377] Node 0 active_anon:166400kB inactive_anon:11672kB active_file:68kB inactive_file:240432kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111000kB dirty:48kB writeback:0kB shmem:156704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11808kB pagetables:5136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  372.151683][T10377] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  372.151724][T10377] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  372.151770][T10377] lowmem_reserve[]: 0 2482 2484 2484 2484
[  372.151801][T10377] Node 0 DMA32 free:1157888kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:166400kB inactive_anon:11672kB active_file:68kB inactive_file:240432kB unevictable:0kB writepending:48kB zspages:12kB present:3129332kB managed:2542416kB mlocked:0kB bounce:0kB free_pcp:39380kB local_pcp:39380kB free_cma:0kB
[  372.151865][T10377] lowmem_reserve[]: 0 0 1 1 1
[  372.151892][T10377] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  372.151936][T10377] lowmem_reserve[]: 0 0 0 0 0
[  372.151979][T10377] Node 1 Normal free:3935096kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  372.152023][T10377] lowmem_reserve[]: 0 0 0 0 0
[  372.152050][T10377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  372.152161][T10377] Node 0 DMA32: 1224*4kB (ME) 538*8kB (UM) 257*16kB (UM) 250*32kB (UME) 63*64kB (UM) 40*128kB (UME) 18*256kB (UM) 13*512kB (UME) 8*1024kB (UME) 7*2048kB (UM) 267*4096kB (UM) = 1157888kB
[  372.152301][T10377] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  372.152395][T10377] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 6*16kB (UM) 2*32kB (UM) 3*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3935096kB
[  372.152529][T10377] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  372.152542][T10377] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  372.152554][T10377] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  372.152567][T10377] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  372.152584][T10377] 99348 total pagecache pages
[  372.152594][T10377] 0 pages in swap cache
[  372.152600][T10377] Free swap  = 124992kB
[  372.152606][T10377] Total swap = 124996kB
[  372.152613][T10377] 2097051 pages RAM
[  372.152619][T10377] 0 pages HighMem/MovableOnly
[  372.152625][T10377] 429403 pages reserved
[  372.152648][T10377] 0 pages cma reserved
[  372.152658][T10377] ttyS ttyS3: ldisc open failed (-12), clearing slot 3
[  372.918955][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead
[  372.919075][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x024a instead
[  372.919273][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead
[  372.919290][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead
[  372.919323][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead
[  372.919380][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000a80: 0x0040 instead
[  372.919396][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000a84: 0x2000 instead
[  372.919411][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000a88: 0x0028 instead
[  372.955826][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead
[  372.955849][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead
[  372.955864][T10359] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead
[  373.165225][T10359] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes
[  373.178814][T10359] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32
[  373.234707][ T5766] usb 2-1: disable ehci-hcd to run US-144
[  373.248839][ T5766] usb 2-1: USB disconnect, device number 67
[  373.313874][T10386] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1447'.
[  373.421163][T10390] netlink: 'syz.3.1448': attribute type 10 has an invalid length.
[  373.528022][T10393] binder: BINDER_SET_CONTEXT_MGR already set
[  373.528056][T10393] binder: 10392:10393 ioctl 4018620d 200000004a80 returned -16
[  373.549905][T10393] netlink: 'syz.0.1449': attribute type 2 has an invalid length.
[  373.856826][T10151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.054307][T10403] ±ÿ: renamed from lo (while UP)
[  374.079412][T10403] netlink: 13879 bytes leftover after parsing attributes in process `syz.3.1453'.
[  374.453836][T10151] veth0_vlan: entered promiscuous mode
[  374.468507][T10151] veth1_vlan: entered promiscuous mode
[  374.524279][T10151] veth0_macvtap: entered promiscuous mode
[  374.544764][T10151] veth1_macvtap: entered promiscuous mode
[  374.588703][T10151] batman_adv: batadv0: Interface activated: batadv_slave_0
[  374.612026][    T9] usb 4-1: new full-speed USB device number 98 using dummy_hcd
[  374.626255][T10151] batman_adv: batadv0: Interface activated: batadv_slave_1
[  374.683285][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  374.684108][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  374.684154][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  374.684183][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  374.766159][    T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  374.779781][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  374.779842][    T9] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  374.812802][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.812841][    T9] usb 4-1: Product: syz
[  374.812865][    T9] usb 4-1: Manufacturer: syz
[  374.812879][    T9] usb 4-1: SerialNumber: syz
[  374.993705][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.002583][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.108027][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.108077][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.263649][    C0] usb 4-1: received EP1 urb->status = -2
[  375.269410][    T9] usb 4-1: unable to init card! (ret=-110)
[  375.269780][    T9] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  375.466423][ T5696] usb 4-1: USB disconnect, device number 98
[  375.651391][    T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  375.781525][    T9] usb 2-1: device descriptor read/64, error -71
[  376.022290][    T9] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  376.161414][    T9] usb 2-1: device descriptor read/64, error -71
[  376.272672][    T9] usb usb2-port1: attempt power cycle
[  376.612959][    T9] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  376.642072][    T9] usb 2-1: device descriptor read/8, error -71
[  376.731427][ T5696] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  376.849929][T10449] FAULT_INJECTION: forcing a failure.
[  376.849929][T10449] name failslab, interval 1, probability 0, space 0, times 0
[  376.874398][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.0.1468 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  376.874428][T10449] Tainted: [L]=SOFTLOCKUP
[  376.874434][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  376.874444][T10449] Call Trace:
[  376.874451][T10449]  <TASK>
[  376.874459][T10449]  dump_stack_lvl+0xe8/0x150
[  376.874485][T10449]  should_fail_ex+0x410/0x560
[  376.874514][T10449]  should_failslab+0xa8/0x100
[  376.874531][T10449]  ? security_inode_alloc+0x39/0x310
[  376.874557][T10449]  kmem_cache_alloc_noprof+0xa1/0x600
[  376.874581][T10449]  ? security_inode_alloc+0x39/0x310
[  376.874611][T10449]  security_inode_alloc+0x39/0x310
[  376.874644][T10449]  inode_init_always_gfp+0x97e/0xd30
[  376.874667][T10449]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[  376.874791][T10449]  alloc_inode+0x82/0x1b0
[  376.874810][T10449]  new_inode+0x1f/0x170
[  376.874831][T10449]  debugfs_create_dir+0x68/0x350
[  376.874853][T10449]  drm_debugfs_clients_add+0x69/0x1a0
[  376.874928][T10449]  drm_file_alloc+0x564/0x9c0
[  376.874969][T10449]  drm_open_helper+0x1bf/0x470
[  376.874991][T10449]  drm_open+0x1c8/0x340
[  376.875008][T10449]  ? __pfx_drm_open+0x10/0x10
[  376.875035][T10449]  drm_stub_open+0x207/0x250
[  376.875076][T10449]  chrdev_open+0x4d9/0x600
[  376.875104][T10449]  ? __pfx_chrdev_open+0x10/0x10
[  376.875130][T10449]  ? fsnotify_open_perm_and_set_mode+0x135/0x6b0
[  376.875159][T10449]  ? __pfx_chrdev_open+0x10/0x10
[  376.875184][T10449]  do_dentry_open+0x816/0x1380
[  376.875208][T10449]  vfs_open+0x3b/0x340
[  376.875222][T10449]  ? path_openat+0x1428/0x1d60
[  376.875246][T10449]  path_openat+0x1443/0x1d60
[  376.875290][T10449]  do_file_open+0x23e/0x4a0
[  376.875316][T10449]  ? __pfx_do_file_open+0x10/0x10
[  376.875355][T10449]  ? _raw_spin_unlock+0x28/0x50
[  376.875384][T10449]  ? alloc_fd+0x651/0x6c0
[  376.875409][T10449]  do_sys_openat2+0x115/0x200
[  376.875428][T10449]  ? __pfx_do_sys_openat2+0x10/0x10
[  376.875446][T10449]  ? exc_page_fault+0x6a/0xc0
[  376.875465][T10449]  ? do_user_addr_fault+0xc4c/0x1340
[  376.875491][T10449]  __x64_sys_openat+0x138/0x170
[  376.875513][T10449]  do_syscall_64+0x166/0x520
[  376.875529][T10449]  ? trace_irq_disable+0x3b/0x140
[  376.875553][T10449]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.875570][T10449]  ? clear_bhb_loop+0x70/0xc0
[  376.875590][T10449]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.875606][T10449] RIP: 0033:0x7f48af35e90e
[  376.875623][T10449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  376.875642][T10449] RSP: 002b:00007f48b025ab28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  376.875660][T10449] RAX: ffffffffffffffda RBX: 00007f48b025b6c0 RCX: 00007f48af35e90e
[  376.875673][T10449] RDX: 0000000000000500 RSI: 00007f48b025ac00 RDI: ffffffffffffff9c
[  376.875685][T10449] RBP: 00007f48b025ac00 R08: 0000000000000000 R09: 0000000000000000
[  376.875695][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  376.875706][T10449] R13: 00007f48af626038 R14: 00007f48af625fa0 R15: 00007fff786627f8
[  376.875730][T10449]  </TASK>
[  376.875781][T10449] debugfs: out of free dentries, can not create directory 'client-22'
[  376.887783][ T5696] usb 5-1: Using ep0 maxpacket: 32
[  376.889446][    T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  376.934271][ T5696] usb 5-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=c6.e0
[  376.959985][    T9] usb 2-1: device descriptor read/8, error -71
[  377.101803][    T9] usb usb2-port1: unable to enumerate USB device
[  377.192528][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.192549][ T5696] usb 5-1: Product: syz
[  377.192561][ T5696] usb 5-1: Manufacturer: syz
[  377.192572][ T5696] usb 5-1: SerialNumber: syz
[  377.413116][T10454] FAULT_INJECTION: forcing a failure.
[  377.413116][T10454] name failslab, interval 1, probability 0, space 0, times 0
[  377.443080][T10454] CPU: 0 UID: 0 PID: 10454 Comm: syz.0.1470 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  377.443119][T10454] Tainted: [L]=SOFTLOCKUP
[  377.443126][T10454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  377.443136][T10454] Call Trace:
[  377.443143][T10454]  <TASK>
[  377.443151][T10454]  dump_stack_lvl+0xe8/0x150
[  377.443179][T10454]  should_fail_ex+0x410/0x560
[  377.443208][T10454]  should_failslab+0xa8/0x100
[  377.443227][T10454]  __kmalloc_cache_noprof+0xa3/0x600
[  377.443251][T10454]  ? hugetlb_reserve_pages+0x230/0x1140
[  377.443270][T10454]  ? hugetlb_reserve_pages+0x230/0x1140
[  377.443293][T10454]  hugetlb_reserve_pages+0x230/0x1140
[  377.443319][T10454]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[  377.443337][T10454]  ? down_write+0x16b/0x200
[  377.443359][T10454]  ? touch_atime+0xf1/0x670
[  377.443383][T10454]  ? mas_preallocate+0x557/0x840
[  377.443404][T10454]  hugetlbfs_file_mmap+0x475/0x630
[  377.443509][T10454]  ? __pfx_hugetlbfs_file_mmap+0x10/0x10
[  377.443528][T10454]  ? vma_set_pgoff+0x163/0x2d0
[  377.443547][T10454]  ? vma_set_range+0x136/0x2a0
[  377.443565][T10454]  mmap_region+0x193b/0x2240
[  377.443593][T10454]  ? __pfx_mmap_region+0x10/0x10
[  377.443611][T10454]  ? __lock_acquire+0x6df/0x2e50
[  377.443647][T10454]  ? lock_acquire+0x115/0x350
[  377.443675][T10454]  ? lock_acquire+0x115/0x350
[  377.443729][T10454]  ? security_file_alloc+0x34/0x310
[  377.443776][T10454]  ? stack_trace_save+0xa9/0x100
[  377.443823][T10454]  ? mm_get_unmapped_area_vmaflags+0xd9/0x110
[  377.443842][T10454]  ? cap_mmap_addr+0xaf/0x100
[  377.443864][T10454]  ? bpf_lsm_mmap_addr+0x9/0x50
[  377.443884][T10454]  ? security_mmap_addr+0x71/0x240
[  377.443905][T10454]  ? shmem_mapping+0xd/0x50
[  377.443929][T10454]  ? memfd_check_seals_mmap+0x16f/0x220
[  377.443949][T10454]  do_mmap+0xe0a/0x1300
[  377.443973][T10454]  ? __pfx_do_mmap+0x10/0x10
[  377.443999][T10454]  ? vm_mmap_pgoff+0x1dd/0x4e0
[  377.444023][T10454]  ? down_write_killable+0x17e/0x240
[  377.444045][T10454]  ? __pfx_down_write_killable+0x10/0x10
[  377.444071][T10454]  vm_mmap_pgoff+0x272/0x4e0
[  377.444108][T10454]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  377.444142][T10454]  ? hugetlb_file_setup+0x42c/0x630
[  377.444162][T10454]  ksys_mmap_pgoff+0x57d/0x760
[  377.444186][T10454]  do_syscall_64+0x166/0x520
[  377.444203][T10454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.444221][T10454]  ? clear_bhb_loop+0x70/0xc0
[  377.444241][T10454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.444257][T10454] RIP: 0033:0x7f48af39e0d9
[  377.444274][T10454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  377.444288][T10454] RSP: 002b:00007f48b025b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  377.444306][T10454] RAX: ffffffffffffffda RBX: 00007f48af625fa0 RCX: 00007f48af39e0d9
[  377.444318][T10454] RDX: 000000000000000b RSI: 0000000000ff5000 RDI: 0000200000000000
[  377.444331][T10454] RBP: 00007f48b025b090 R08: ffffffffffffffff R09: 0000000000000000
[  377.444342][T10454] R10: 0002000000058831 R11: 0000000000000246 R12: 0000000000000001
[  377.444352][T10454] R13: 00007f48af626038 R14: 00007f48af625fa0 R15: 00007fff786627f8
[  377.444377][T10454]  </TASK>
[  377.573350][T10454] HugeTLB: unable to allocate vma specific lock
[  377.679992][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.680412][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.875625][ T5696] ems_usb 5-1:91.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  377.889709][ T5696] ems_usb 5-1:91.0: probe with driver ems_usb failed with error -22
[  377.941103][ T5696] usb 5-1: USB disconnect, device number 2
[  378.033613][T10463] ceph: Path missing in source
[  378.099565][T10467] FAULT_INJECTION: forcing a failure.
[  378.099565][T10467] name failslab, interval 1, probability 0, space 0, times 0
[  378.119643][T10467] CPU: 0 UID: 0 PID: 10467 Comm: syz.0.1473 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  378.119671][T10467] Tainted: [L]=SOFTLOCKUP
[  378.119678][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  378.119688][T10467] Call Trace:
[  378.119695][T10467]  <TASK>
[  378.119703][T10467]  dump_stack_lvl+0xe8/0x150
[  378.119731][T10467]  should_fail_ex+0x410/0x560
[  378.119761][T10467]  should_failslab+0xa8/0x100
[  378.119780][T10467]  __kmalloc_cache_noprof+0xa3/0x600
[  378.119805][T10467]  ? nbd_alloc_and_init_config+0x87/0x250
[  378.119957][T10467]  ? nbd_alloc_and_init_config+0x87/0x250
[  378.119985][T10467]  nbd_alloc_and_init_config+0x87/0x250
[  378.120010][T10467]  nbd_genl_connect+0xa17/0x1cd0
[  378.120040][T10467]  ? __pfx_nbd_genl_connect+0x10/0x10
[  378.120064][T10467]  ? rcu_is_watching+0x16/0xb0
[  378.120082][T10467]  ? trace_kmalloc+0x2a/0xf0
[  378.120106][T10467]  ? __kmalloc_noprof+0x38c/0x720
[  378.120131][T10467]  ? __nla_parse+0x40/0x60
[  378.120151][T10467]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  378.120177][T10467]  genl_family_rcv_msg_doit+0x233/0x340
[  378.120202][T10467]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  378.120228][T10467]  ? __dev_queue_xmit+0x29b/0x3820
[  378.120298][T10467]  genl_rcv_msg+0x614/0x7a0
[  378.120321][T10467]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.120339][T10467]  ? __pfx_nbd_genl_connect+0x10/0x10
[  378.120361][T10467]  ? __pfx_ref_tracker_free+0x10/0x10
[  378.120387][T10467]  ? __asan_memcpy+0x40/0x70
[  378.120409][T10467]  ? __skb_clone+0x5c/0x6c0
[  378.120438][T10467]  netlink_rcv_skb+0x226/0x4a0
[  378.120463][T10467]  ? __pfx_genl_rcv_msg+0x10/0x10
[  378.120482][T10467]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  378.120516][T10467]  ? down_read+0x2be/0x330
[  378.120539][T10467]  genl_rcv+0x28/0x40
[  378.120555][T10467]  netlink_unicast+0x7bd/0x940
[  378.120585][T10467]  netlink_sendmsg+0x813/0xb40
[  378.120615][T10467]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.120646][T10467]  ? apparmor_socket_sendmsg+0x98/0x360
[  378.120671][T10467]  ? __pfx_netlink_sendmsg+0x10/0x10
[  378.120694][T10467]  sock_sendmsg_nosec+0x13a/0x180
[  378.120722][T10467]  ____sys_sendmsg+0x54e/0x850
[  378.120747][T10467]  ? __pfx_____sys_sendmsg+0x10/0x10
[  378.120775][T10467]  ? import_iovec+0x73/0xa0
[  378.120794][T10467]  ___sys_sendmsg+0x2a5/0x360
[  378.120814][T10467]  ? __lock_acquire+0x6df/0x2e50
[  378.120841][T10467]  ? __pfx____sys_sendmsg+0x10/0x10
[  378.120889][T10467]  ? __fget_files+0x2a/0x420
[  378.120907][T10467]  ? __fget_files+0x3a2/0x420
[  378.120939][T10467]  __x64_sys_sendmsg+0x1b1/0x290
[  378.120963][T10467]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  378.121000][T10467]  do_syscall_64+0x166/0x520
[  378.121016][T10467]  ? trace_irq_disable+0x3b/0x140
[  378.121039][T10467]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.121056][T10467]  ? clear_bhb_loop+0x70/0xc0
[  378.121077][T10467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.121093][T10467] RIP: 0033:0x7f48af39e0d9
[  378.121110][T10467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  378.121124][T10467] RSP: 002b:00007f48b025b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  378.121143][T10467] RAX: ffffffffffffffda RBX: 00007f48af625fa0 RCX: 00007f48af39e0d9
[  378.121155][T10467] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000003
[  378.121166][T10467] RBP: 00007f48b025b090 R08: 0000000000000000 R09: 0000000000000000
[  378.121176][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  378.121186][T10467] R13: 00007f48af626038 R14: 00007f48af625fa0 R15: 00007fff786627f8
[  378.121211][T10467]  </TASK>
[  378.150349][T10467] nbd: couldn't allocate config
[  378.910180][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.916676][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.991959][ T5696] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  379.153536][ T5696] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  379.163780][ T5696] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[  379.163822][ T5696] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  379.163846][ T5696] usb 5-1: config 4 has no interface number 0
[  379.163877][ T5696] usb 5-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  379.210008][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.218317][ T5696] usb 5-1: Product: syz
[  379.218350][ T5696] usb 5-1: Manufacturer: syz
[  379.218365][ T5696] usb 5-1: SerialNumber: syz
[  379.485176][T10498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.500420][T10498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.650943][ T5696] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  379.712700][    T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  379.814946][ T5696] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  379.826127][ T5696] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  379.844358][ T5696] usb 5-1: media controller created
[  379.875800][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  379.884420][    T9] usb 2-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice=54.99
[  379.901378][    T9] usb 2-1: config 4 has an invalid interface number: 85 but max is 1
[  379.901412][    T9] usb 2-1: config 4 has an invalid interface number: 170 but max is 1
[  379.901439][    T9] usb 2-1: config 4 has no interface number 0
[  379.901454][    T9] usb 2-1: config 4 has no interface number 1
[  379.901485][    T9] usb 2-1: config 4 interface 85 has no altsetting 0
[  379.901502][    T9] usb 2-1: config 4 interface 170 has no altsetting 0
[  379.962889][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  379.963051][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.963082][    T9] usb 2-1: Product: syz
[  379.963106][    T9] usb 2-1: Manufacturer: syz
[  379.963120][    T9] usb 2-1: SerialNumber: syz
[  380.047703][T10501] ±ÿ speed is unknown, defaulting to 1000
[  380.072833][ T5767] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  380.150505][ T5696] DVB: Unable to find symbol dib7000p_attach()
[  380.158682][ T5696] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  380.232442][ T5767] usb 4-1: Using ep0 maxpacket: 8
[  380.238106][ T5767] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  380.249654][ T5767] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.249685][ T5767] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  380.249747][ T5767] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  380.249770][ T5767] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  380.249805][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.334075][ T5767] hub 4-1:1.0: bad descriptor, ignoring hub
[  380.334112][ T5767] hub 4-1:1.0: probe with driver hub failed with error -5
[  380.334748][ T5767] cdc_wdm 4-1:1.0: skipping garbage
[  380.334764][ T5767] cdc_wdm 4-1:1.0: skipping garbage
[  380.372268][ T5767] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  380.372384][ T5767] cdc_wdm 4-1:1.0: Unknown control protocol
[  380.431920][ T5696] rc_core: IR keymap rc-dib0700-rc5 not found
[  380.438384][ T5696] Registered IR keymap rc-empty
[  380.445136][ T5696] dvb-usb: could not initialize remote control.
[  380.454339][ T5696] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  380.483040][ T5696] usb 5-1: USB disconnect, device number 3
[  380.618792][ T5696] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  380.866946][T10518] No source specified
[  380.883821][T10513] netlink: 'syz.3.1487': attribute type 37 has an invalid length.
[  381.179781][T10522] netlink: 'syz.0.1491': attribute type 15 has an invalid length.
[  381.179838][T10522] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1491'.
[  381.272499][T10524] syzkaller1: entered promiscuous mode
[  381.280862][T10524] syzkaller1: entered allmulticast mode
[  381.297587][T10524] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1492'.
[  381.555007][ T4984] Dev loop6: unable to read RDB block 1
[  381.582608][ T4984]  loop6: unable to read partition table
[  381.582822][ T4984] loop6: partition table beyond EOD, truncated
[  382.046190][T10498] ±ÿ speed is unknown, defaulting to 1000
[  382.448861][    T9] safe_serial 2-1:4.85: safe_serial converter detected
[  382.457467][    T9] safe_serial 2-1:4.85: probe with driver safe_serial failed with error -22
[  382.517223][    T9] usb 2-1: USB disconnect, device number 72
[  383.091536][  T193] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  383.262468][  T193] usb 5-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  383.272972][  T193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.273004][  T193] usb 5-1: config 0 has no interfaces?
[  383.292426][  T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.292459][  T193] usb 5-1: Product: syz
[  383.292480][  T193] usb 5-1: Manufacturer: syz
[  383.292495][  T193] usb 5-1: SerialNumber: syz
[  383.318087][  T193] usb 5-1: config 0 descriptor??
[  383.546052][  T193] usb 5-1: USB disconnect, device number 4
[  383.826224][ T5767] usb 4-1: USB disconnect, device number 99
[  383.836646][T10510] cdc_wdm 4-1:1.0: Error autopm - -16
[  384.815237][T10584] FAULT_INJECTION: forcing a failure.
[  384.815237][T10584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  384.815282][T10584] CPU: 0 UID: 0 PID: 10584 Comm: syz.3.1502 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  384.815305][T10584] Tainted: [L]=SOFTLOCKUP
[  384.815311][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  384.815321][T10584] Call Trace:
[  384.815328][T10584]  <TASK>
[  384.815336][T10584]  dump_stack_lvl+0xe8/0x150
[  384.815363][T10584]  should_fail_ex+0x410/0x560
[  384.815391][T10584]  _copy_to_user+0x31/0xb0
[  384.815409][T10584]  simple_read_from_buffer+0xe1/0x170
[  384.815433][T10584]  proc_fail_nth_read+0x1bb/0x230
[  384.815464][T10584]  ? common_file_perm+0x20e/0x2b0
[  384.815491][T10584]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  384.815516][T10584]  ? rw_verify_area+0x24a/0x4c0
[  384.815538][T10584]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  384.815560][T10584]  vfs_read+0x213/0xa80
[  384.815584][T10584]  ? __pfx___mutex_lock+0x10/0x10
[  384.815603][T10584]  ? __pfx_vfs_read+0x10/0x10
[  384.815624][T10584]  ? __fget_files+0x2a/0x420
[  384.815646][T10584]  ? __fget_files+0x3a2/0x420
[  384.815664][T10584]  ? __fget_files+0x2a/0x420
[  384.815689][T10584]  ksys_read+0x150/0x270
[  384.815711][T10584]  ? __pfx_ksys_read+0x10/0x10
[  384.815740][T10584]  do_syscall_64+0x166/0x520
[  384.815759][T10584]  ? trace_irq_disable+0x3b/0x140
[  384.815783][T10584]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.815800][T10584]  ? clear_bhb_loop+0x70/0xc0
[  384.815820][T10584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.815836][T10584] RIP: 0033:0x7f187a75e90e
[  384.815851][T10584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  384.815865][T10584] RSP: 002b:00007f187b5b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  384.815883][T10584] RAX: ffffffffffffffda RBX: 00007f187b5b46c0 RCX: 00007f187a75e90e
[  384.815894][T10584] RDX: 000000000000000f RSI: 00007f187b5b40a0 RDI: 0000000000000006
[  384.815905][T10584] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  384.815915][T10584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  384.815925][T10584] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  384.815949][T10584]  </TASK>
[  384.961326][ T5696] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  385.308092][ T5696] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  385.325439][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  385.325476][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  385.325507][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  385.325530][ T5696] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  385.325550][ T5696] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  385.389401][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.389434][ T5696] usb 5-1: Product: syz
[  385.389458][ T5696] usb 5-1: Manufacturer: syz
[  385.389472][ T5696] usb 5-1: SerialNumber: syz
[  385.416576][ T5696] usb 5-1: config 0 descriptor??
[  385.444267][T10592] tmpfs: Bad value for 'mpol'
[  385.451867][ T5696] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31
[  385.542781][  T193] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  385.704836][  T193] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  385.715445][  T193] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  385.715493][  T193] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  385.715517][  T193] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  385.715536][  T193] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  385.715569][  T193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  385.810869][  T193] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  385.820794][  T193] usb 2-1: invalid MIDI out EP 0
[  386.168194][  T193] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  386.189348][  T193] usb 2-1: USB disconnect, device number 73
[  387.051367][ T5767] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  387.202612][ T5767] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  387.213168][ T5767] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  387.223778][ T5767] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  387.249518][ T5767] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.249553][ T5767] usb 4-1: Product: syz
[  387.249576][ T5767] usb 4-1: Manufacturer: syz
[  387.249590][ T5767] usb 4-1: SerialNumber: syz
[  387.276080][ T5767] usb 4-1: config 0 descriptor??
[  387.287127][ T5767] usb 4-1: ucan: probing device on interface #0
[  387.287187][ T5767] usb 4-1: ucan: invalid EP count (0)
[  387.287203][ T5767] usb 4-1: ucan: probe failed; try to update the device firmware
[  387.339608][ T5767] usb 5-1: USB disconnect, device number 5
[  387.502189][T10624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.511007][T10624] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.681050][T10635] FAULT_INJECTION: forcing a failure.
[  387.681050][T10635] name failslab, interval 1, probability 0, space 0, times 0
[  387.681098][T10635] CPU: 0 UID: 0 PID: 10635 Comm: syz.1.1513 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  387.681121][T10635] Tainted: [L]=SOFTLOCKUP
[  387.681128][T10635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  387.681148][T10635] Call Trace:
[  387.681155][T10635]  <TASK>
[  387.681163][T10635]  dump_stack_lvl+0xe8/0x150
[  387.681194][T10635]  should_fail_ex+0x410/0x560
[  387.681227][T10635]  should_failslab+0xa8/0x100
[  387.681244][T10635]  ? dst_alloc+0x105/0x170
[  387.681347][T10635]  kmem_cache_alloc_noprof+0xa1/0x600
[  387.681371][T10635]  ? dst_alloc+0x105/0x170
[  387.681394][T10635]  ? fib_lookup+0x76/0x440
[  387.681473][T10635]  dst_alloc+0x105/0x170
[  387.681500][T10635]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  387.681532][T10635]  ? ip_route_output_key_hash+0xd8/0x2a0
[  387.681559][T10635]  ip_route_output_key_hash+0x18d/0x2a0
[  387.681586][T10635]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  387.681614][T10635]  ? lock_acquire+0x115/0x350
[  387.681645][T10635]  ip_route_output_flow+0x2a/0x150
[  387.681667][T10635]  ? security_sk_classify_flow+0x6d/0x150
[  387.681690][T10635]  raw_sendmsg+0x110d/0x1a20
[  387.681763][T10635]  ? __pfx_raw_sendmsg+0x10/0x10
[  387.681784][T10635]  ? __lock_acquire+0x6df/0x2e50
[  387.681813][T10635]  ? __lock_acquire+0x6df/0x2e50
[  387.681853][T10635]  ? aa_sock_msg_perm+0xfc/0x210
[  387.681877][T10635]  ? sock_rps_record_flow+0x19/0x350
[  387.681921][T10635]  ? inet_sendmsg+0x298/0x320
[  387.681944][T10635]  ? apparmor_socket_sendmsg+0x98/0x360
[  387.681968][T10635]  ? __pfx_inet_sendmsg+0x10/0x10
[  387.681991][T10635]  sock_sendmsg_nosec+0x10e/0x180
[  387.682020][T10635]  ____sys_sendmsg+0x54e/0x850
[  387.682045][T10635]  ? __pfx_____sys_sendmsg+0x10/0x10
[  387.682073][T10635]  ? import_iovec+0x73/0xa0
[  387.682092][T10635]  ___sys_sendmsg+0x2a5/0x360
[  387.682112][T10635]  ? __lock_acquire+0x6df/0x2e50
[  387.682144][T10635]  ? __pfx____sys_sendmsg+0x10/0x10
[  387.682170][T10635]  ? kstrtouint+0x6e/0xe0
[  387.682209][T10635]  ? __fget_files+0x2a/0x420
[  387.682228][T10635]  ? __fget_files+0x3a2/0x420
[  387.682257][T10635]  __sys_sendmmsg+0x273/0x4d0
[  387.682282][T10635]  ? __pfx___sys_sendmmsg+0x10/0x10
[  387.682310][T10635]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  387.682341][T10635]  ? ksys_write+0x242/0x270
[  387.682366][T10635]  ? __pfx_ksys_write+0x10/0x10
[  387.682392][T10635]  __x64_sys_sendmmsg+0xa0/0xc0
[  387.682417][T10635]  do_syscall_64+0x166/0x520
[  387.682435][T10635]  ? trace_irq_disable+0x3b/0x140
[  387.682458][T10635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.682475][T10635]  ? clear_bhb_loop+0x70/0xc0
[  387.682495][T10635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  387.682511][T10635] RIP: 0033:0x7f06a1d9e0d9
[  387.682526][T10635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  387.682541][T10635] RSP: 002b:00007f06a2cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  387.682558][T10635] RAX: ffffffffffffffda RBX: 00007f06a2025fa0 RCX: 00007f06a1d9e0d9
[  387.682570][T10635] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000004
[  387.682581][T10635] RBP: 00007f06a2cb8090 R08: 0000000000000000 R09: 0000000000000000
[  387.682591][T10635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  387.682601][T10635] R13: 00007f06a2026038 R14: 00007f06a2025fa0 R15: 00007ffdf7f94148
[  387.682625][T10635]  </TASK>
[  388.089548][T10636] autofs4:pid:10636:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[  388.089664][T10636] autofs4:pid:10636:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  388.971684][ T5767] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  389.131443][ T5767] usb 2-1: Using ep0 maxpacket: 32
[  389.138681][ T5767] usb 2-1: unable to get BOS descriptor or descriptor too short
[  389.138740][ T5767] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  389.161863][ T5767] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 32
[  389.161901][ T5767] usb 2-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  389.161932][ T5767] usb 2-1: config 1 interface 0 has no altsetting 0
[  389.197259][ T5767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.197310][ T5767] usb 2-1: Product: syz
[  389.197334][ T5767] usb 2-1: Manufacturer: syz
[  389.197348][ T5767] usb 2-1: SerialNumber: syz
[  389.235395][T10651] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  389.348904][T10656] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode
[  389.371935][T10656] mac80211_hwsim hwsim17 wlan0: left promiscuous mode
[  389.395621][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  389.722950][T10658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.736451][T10658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.755444][T10651] netlink: Failed to add  helper -22
[  389.761807][T10651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  389.774187][ T5767] usblp0: Disabling reads from problematic bidirectional printer
[  389.798233][ T5767] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 3 proto 1 vid 0x03F0 pid 0x0004
[  389.816437][ T5767] usb 2-1: USB disconnect, device number 74
[  389.847924][ T5767] usblp0: removed
[  389.886849][   T10] usb 4-1: USB disconnect, device number 100
[  390.523102][T10672] netlink: 'syz.1.1526': attribute type 2 has an invalid length.
[  390.523141][T10672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1526'.
[  391.097921][   T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  391.208406][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'.
[  391.227823][T10685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1532'.
[  391.254498][T10685] FAULT_INJECTION: forcing a failure.
[  391.254498][T10685] name failslab, interval 1, probability 0, space 0, times 0
[  391.267491][   T10] usb 2-1: Using ep0 maxpacket: 16
[  391.275002][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  391.275051][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  391.292985][   T10] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.293012][   T10] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16
[  391.293031][   T10] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 1024
[  391.293049][   T10] usb 2-1: config 1 interface 0 has no altsetting 0
[  391.334917][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.3.1532 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.334948][T10685] Tainted: [L]=SOFTLOCKUP
[  391.334955][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.334965][T10685] Call Trace:
[  391.334972][T10685]  <TASK>
[  391.334980][T10685]  dump_stack_lvl+0xe8/0x150
[  391.335007][T10685]  should_fail_ex+0x410/0x560
[  391.335035][T10685]  should_failslab+0xa8/0x100
[  391.335053][T10685]  __kmalloc_noprof+0xfe/0x720
[  391.335076][T10685]  ? __asan_memcpy+0x40/0x70
[  391.335097][T10685]  ? nft_trans_alloc+0x22/0x2a0
[  391.335216][T10685]  ? nft_trans_alloc+0x22/0x2a0
[  391.335242][T10685]  nft_trans_alloc+0x22/0x2a0
[  391.335265][T10685]  nf_tables_newsetelem+0x278a/0x4260
[  391.335312][T10685]  ? __pfx_nf_tables_newsetelem+0x10/0x10
[  391.335342][T10685]  ? nla_validate_array+0xfc/0x260
[  391.335379][T10685]  ? reacquire_held_locks+0x117/0x1a0
[  391.335397][T10685]  ? __pfx___nla_validate_parse+0x10/0x10
[  391.335419][T10685]  ? nfnetlink_rcv+0x8d1/0x28c0
[  391.335466][T10685]  ? lock_acquire+0x115/0x350
[  391.335490][T10685]  ? nfnl_pernet+0x23/0x240
[  391.335517][T10685]  ? __nla_parse+0x40/0x60
[  391.335536][T10685]  nfnetlink_rcv+0x1288/0x28c0
[  391.335582][T10685]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  391.335615][T10685]  ? ref_tracker_free+0x689/0x830
[  391.335657][T10685]  ? skb_clone+0x246/0x3a0
[  391.335682][T10685]  ? __netlink_deliver_tap+0x811/0x860
[  391.335712][T10685]  ? netlink_deliver_tap+0x2e/0x1b0
[  391.335734][T10685]  ? netlink_deliver_tap+0x2e/0x1b0
[  391.335761][T10685]  netlink_unicast+0x7bd/0x940
[  391.335790][T10685]  netlink_sendmsg+0x813/0xb40
[  391.335830][T10685]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.335860][T10685]  ? apparmor_socket_sendmsg+0x98/0x360
[  391.335884][T10685]  ? __pfx_netlink_sendmsg+0x10/0x10
[  391.335907][T10685]  sock_sendmsg_nosec+0x13a/0x180
[  391.335935][T10685]  ____sys_sendmsg+0x54e/0x850
[  391.335960][T10685]  ? __pfx_____sys_sendmsg+0x10/0x10
[  391.335988][T10685]  ? import_iovec+0x73/0xa0
[  391.336007][T10685]  ___sys_sendmsg+0x2a5/0x360
[  391.336028][T10685]  ? __lock_acquire+0x6df/0x2e50
[  391.336055][T10685]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.336101][T10685]  ? __fget_files+0x2a/0x420
[  391.336120][T10685]  ? __fget_files+0x3a2/0x420
[  391.336146][T10685]  __x64_sys_sendmsg+0x1b1/0x290
[  391.336169][T10685]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  391.336206][T10685]  do_syscall_64+0x166/0x520
[  391.336223][T10685]  ? trace_irq_disable+0x3b/0x140
[  391.336246][T10685]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.336263][T10685]  ? clear_bhb_loop+0x70/0xc0
[  391.336283][T10685]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.336300][T10685] RIP: 0033:0x7f187a79e0d9
[  391.336316][T10685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.336330][T10685] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  391.336348][T10685] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  391.336360][T10685] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000004
[  391.336371][T10685] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  391.336381][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.336391][T10685] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  391.336415][T10685]  </TASK>
[  391.390519][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.390539][   T10] usb 2-1: Manufacturer: 沈瞃笶ㅦ౎뺷쉆⯌�㯆឴䙭䦠���ﺘ鳆�跑擄晕櫹Ѳ擷ꑘ礅�⫡疈�談�媫ꨙ蠋몪얯Ⅼ罖⟸欭혜⪦ﱫ瞬ᠮ갦঺��쓓甊痖癩ᩎ櫌�ﭸ拒銗鑦쇵塓
[  391.390560][   T10] usb 2-1: SerialNumber: syz
[  391.447991][  T193] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  391.493554][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  391.493591][T10680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  391.770618][  T193] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  391.793382][  T193] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  391.809537][  T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.819525][  T193] usb 5-1: Product: syz
[  391.819562][  T193] usb 5-1: Manufacturer: syz
[  391.819577][  T193] usb 5-1: SerialNumber: syz
[  391.839078][   T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  391.866541][  T193] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  391.883731][   T10] usb 2-1: USB disconnect, device number 75
[  391.993064][T10687] FAULT_INJECTION: forcing a failure.
[  391.993064][T10687] name failslab, interval 1, probability 0, space 0, times 0
[  391.993109][T10687] CPU: 0 UID: 0 PID: 10687 Comm: syz.3.1533 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.993134][T10687] Tainted: [L]=SOFTLOCKUP
[  391.993140][T10687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.993150][T10687] Call Trace:
[  391.993157][T10687]  <TASK>
[  391.993165][T10687]  dump_stack_lvl+0xe8/0x150
[  391.993191][T10687]  should_fail_ex+0x410/0x560
[  391.993219][T10687]  should_failslab+0xa8/0x100
[  391.993237][T10687]  __kmalloc_cache_noprof+0xa3/0x600
[  391.993261][T10687]  ? __kmalloc_cache_noprof+0x14d/0x600
[  391.993283][T10687]  ? kvm_dev_ioctl+0xbe9/0x1770
[  391.993329][T10687]  ? kvm_dev_ioctl+0xbe9/0x1770
[  391.993356][T10687]  kvm_dev_ioctl+0xbe9/0x1770
[  391.993385][T10687]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  391.993407][T10687]  ? __fget_files+0x2a/0x420
[  391.993428][T10687]  ? bpf_lsm_file_ioctl+0x9/0x20
[  391.993449][T10687]  ? __pfx_kvm_dev_ioctl+0x10/0x10
[  391.993471][T10687]  __se_sys_ioctl+0xfc/0x170
[  391.993497][T10687]  do_syscall_64+0x166/0x520
[  391.993513][T10687]  ? trace_irq_disable+0x3b/0x140
[  391.993537][T10687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.993553][T10687]  ? clear_bhb_loop+0x70/0xc0
[  391.993573][T10687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.993589][T10687] RIP: 0033:0x7f187a79e0d9
[  391.993605][T10687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.993618][T10687] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  391.993636][T10687] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  391.993648][T10687] RDX: 0000000000000025 RSI: 000000000000ae01 RDI: 0000000000000003
[  391.993659][T10687] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  391.993669][T10687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  391.993678][T10687] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  391.993702][T10687]  </TASK>
[  392.307293][  T193] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  392.337808][  T193] usb 5-1: USB disconnect, device number 6
[  392.605537][ T5696] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  392.762162][ T5696] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  392.773706][ T5696] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  392.773749][ T5696] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  392.773778][ T5696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11
[  392.773800][ T5696] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024
[  392.773834][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.839891][T10689] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  392.839950][T10689] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  392.861627][ T5696] pl2303 4-1:1.0: pl2303 converter detected
[  392.930898][ T5696] usb 4-1: pl2303 converter now attached to ttyUSB0
[  393.193180][T10696] /dev/nullb0: Can't open blockdev
[  393.210800][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'.
[  393.223451][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1537'.
[  394.272329][ T5696] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  395.304992][    T9] usb 4-1: USB disconnect, device number 101
[  395.340924][    T9] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  395.352523][    T9] pl2303 4-1:1.0: device disconnected
[  395.372307][  T193] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  395.535560][  T193] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  395.552821][  T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.552856][  T193] usb 5-1: Product: syz
[  395.552909][  T193] usb 5-1: Manufacturer: syz
[  395.552923][  T193] usb 5-1: SerialNumber: syz
[  395.618753][T10726] netlink: zone id is out of range
[  395.625186][T10726] netlink: zone id is out of range
[  395.625338][T10726] netlink: del zone limit has 8 unknown bytes
[  395.645413][T10727] netlink: zone id is out of range
[  395.652293][T10727] netlink: zone id is out of range
[  395.659724][T10727] netlink: del zone limit has 8 unknown bytes
[  395.669304][    T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  395.900226][T10731] gadgetfs: Unknown parameter 'ua˜YBÊG³±°^‘zöÓµñÉD¡‹)ϱ¾Ö¢mTÜë¦Ç&?fïHb?Ô‘Á|ViÀIä?@ „®­Ê#âî"wüv³d †ZJœÑ›.'
[  396.100934][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.114974][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.279594][  T193] usb 5-1: USB disconnect, device number 7
[  396.742179][    T9] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  396.742365][    T9] ath9k_htc: Failed to initialize the device
[  396.762892][  T193] usb 5-1: ath9k_htc: USB layer deinitialized
[  397.061075][T10754] FAULT_INJECTION: forcing a failure.
[  397.061075][T10754] name failslab, interval 1, probability 0, space 0, times 0
[  397.061138][T10754] CPU: 0 UID: 0 PID: 10754 Comm: syz.4.1560 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  397.061162][T10754] Tainted: [L]=SOFTLOCKUP
[  397.061168][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  397.061180][T10754] Call Trace:
[  397.061186][T10754]  <TASK>
[  397.061194][T10754]  dump_stack_lvl+0xe8/0x150
[  397.061224][T10754]  should_fail_ex+0x410/0x560
[  397.061252][T10754]  should_failslab+0xa8/0x100
[  397.061271][T10754]  __kmalloc_noprof+0xfe/0x720
[  397.061294][T10754]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  397.061328][T10754]  ? __memcg_list_lru_alloc+0x1d9/0x760
[  397.061357][T10754]  __memcg_list_lru_alloc+0x1d9/0x760
[  397.061386][T10754]  ? xa_load+0x60/0x210
[  397.061405][T10754]  ? __pfx___memcg_list_lru_alloc+0x10/0x10
[  397.061440][T10754]  __memcg_slab_post_alloc_hook+0x3bf/0xf80
[  397.061467][T10754]  ? __memcg_slab_post_alloc_hook+0x208/0xf80
[  397.061504][T10754]  kmem_cache_alloc_lru_noprof+0x351/0x5f0
[  397.061526][T10754]  ? kmem_cache_alloc_lru_noprof+0x153/0x5f0
[  397.061547][T10754]  ? alloc_inode+0xb8/0x1b0
[  397.061563][T10754]  ? alloc_inode+0xb8/0x1b0
[  397.061583][T10754]  alloc_inode+0xb8/0x1b0
[  397.061601][T10754]  alloc_anon_inode+0x1e/0x340
[  397.061624][T10754]  dma_buf_export+0x21a/0xab0
[  397.061731][T10754]  udmabuf_create+0xe49/0xf50
[  397.061767][T10754]  ? tomoyo_domain+0xd7/0x130
[  397.061822][T10754]  ? __pfx_udmabuf_create+0x10/0x10
[  397.061853][T10754]  udmabuf_ioctl+0x1f3/0x300
[  397.061872][T10754]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  397.061895][T10754]  ? __fget_files+0x2a/0x420
[  397.061914][T10754]  ? __fget_files+0x2a/0x420
[  397.061935][T10754]  ? bpf_lsm_file_ioctl+0x9/0x20
[  397.061955][T10754]  ? __pfx_udmabuf_ioctl+0x10/0x10
[  397.061972][T10754]  __se_sys_ioctl+0xfc/0x170
[  397.061998][T10754]  do_syscall_64+0x166/0x520
[  397.062015][T10754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.062032][T10754]  ? clear_bhb_loop+0x70/0xc0
[  397.062051][T10754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  397.062068][T10754] RIP: 0033:0x7fc208d9e0d9
[  397.062084][T10754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  397.062098][T10754] RSP: 002b:00007fc209cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  397.062116][T10754] RAX: ffffffffffffffda RBX: 00007fc209025fa0 RCX: 00007fc208d9e0d9
[  397.062128][T10754] RDX: 0000200000000200 RSI: 0000000040187542 RDI: 0000000000000003
[  397.062139][T10754] RBP: 00007fc209cbe090 R08: 0000000000000000 R09: 0000000000000000
[  397.062149][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  397.062159][T10754] R13: 00007fc209026038 R14: 00007fc209025fa0 R15: 00007ffe9aa75d38
[  397.062183][T10754]  </TASK>
[  397.820746][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'.
[  397.831498][T10767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1563'.
[  397.831607][T10767] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1563'.
[  398.091607][  T193] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[  398.221487][  T193] usb 4-1: device descriptor read/64, error -71
[  398.371510][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  398.461415][  T193] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[  398.521432][    T9] usb 5-1: Using ep0 maxpacket: 32
[  398.528129][    T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  398.539823][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  398.550180][ T5696] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  398.560195][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.568393][    T9] usb 5-1: Product: syz
[  398.572688][    T9] usb 5-1: Manufacturer: syz
[  398.572703][    T9] usb 5-1: SerialNumber: syz
[  398.586054][    T9] usb 5-1: config 0 descriptor??
[  398.592774][  T193] usb 4-1: device descriptor read/64, error -71
[  398.599816][T10774] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  398.608431][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  398.608464][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  398.634868][    T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input32
[  398.702029][ T5696] usb 2-1: Using ep0 maxpacket: 8
[  398.707755][  T193] usb usb4-port1: attempt power cycle
[  398.714692][ T5696] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  398.727778][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.727891][ T5696] usb 2-1: Product: syz
[  398.727915][ T5696] usb 2-1: Manufacturer: syz
[  398.727929][ T5696] usb 2-1: SerialNumber: syz
[  398.770923][ T5696] usb 2-1: config 0 descriptor??
[  398.879888][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.889854][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.989633][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1567'.
[  398.999660][ T5696] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  399.061431][  T193] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  399.082909][  T193] usb 4-1: device descriptor read/8, error -71
[  399.321395][  T193] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  399.341856][  T193] usb 4-1: device descriptor read/8, error -71
[  399.423362][ T5696] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  399.443612][ T5696] usb 2-1: USB disconnect, device number 77
[  399.453977][  T193] usb usb4-port1: unable to enumerate USB device
[  399.505853][  T193] usb 5-1: USB disconnect, device number 8
[  399.511823][    C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  399.716241][T10779] CUSE: info not properly terminated
[  399.725672][T10779] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1571'.
[  400.341515][  T193] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  400.497270][  T193] usb 2-1: Using ep0 maxpacket: 16
[  400.504013][  T193] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  400.516770][  T193] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  400.516803][  T193] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.516829][  T193] usb 2-1: config 0 has no interface number 0
[  400.552014][  T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.552050][  T193] usb 2-1: Product: syz
[  400.552081][  T193] usb 2-1: Manufacturer: syz
[  400.552096][  T193] usb 2-1: SerialNumber: syz
[  400.586836][  T193] usb 2-1: config 0 descriptor??
[  400.604368][  T193] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  400.612206][  T193] uvcvideo 2-1:0.105: No valid video chain found.
[  400.796532][  T193] usb 2-1: USB disconnect, device number 78
[  401.442925][  T193] usb 4-1: new full-speed USB device number 106 using dummy_hcd
[  401.601876][  T193] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  401.613407][  T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.625641][  T193] usb 4-1: config 0 descriptor??
[  401.633084][  T193] cp210x 4-1:0.0: cp210x converter detected
[  402.041643][  T193] usb 4-1: cp210x converter now attached to ttyUSB0
[  402.238855][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  402.252257][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  402.316365][ T5766] usb 4-1: USB disconnect, device number 106
[  402.335480][ T5766] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  402.363575][ T5766] cp210x 4-1:0.0: device disconnected
[  402.404002][T10806] MTDSB: Device #1 doesn't appear to exist
[  402.404002][T10806] 
[  402.414732][T10806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1580'.
[  402.424742][T10806] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1580'.
[  402.436769][T10806] netlink: 'syz.1.1580': attribute type 10 has an invalid length.
[  402.469724][   T31] audit: type=1326 audit(1787505746.448:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.3.1581" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f187a79e0d9 code=0x0
[  402.681567][  T193] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  402.832675][  T193] usb 2-1: Using ep0 maxpacket: 16
[  402.838427][  T193] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  402.852426][  T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.852459][  T193] usb 2-1: Product: syz
[  402.852481][  T193] usb 2-1: Manufacturer: syz
[  402.852496][  T193] usb 2-1: SerialNumber: syz
[  402.882025][  T193] usb 2-1: config 0 descriptor??
[  402.892635][  T193] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  402.893808][  T193] usb 2-1: Detected FT-X
[  403.098518][T10806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  403.116823][T10806] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1580'.
[  403.126218][T10806] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  403.126307][T10806] iwpm_hello_cb: Unable to parse nlmsg
[  403.176595][  T193] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  403.185690][  T193] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  403.195300][  T193] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  403.206240][  T193] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  403.223116][  T193] usb 2-1: USB disconnect, device number 79
[  403.236271][  T193] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  403.247865][  T193] ftdi_sio 2-1:0.0: device disconnected
[  403.450657][T10822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1587'.
[  403.702599][ T5766] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  403.831406][  T193] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  403.865314][ T5766] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  403.878207][ T5766] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  403.878242][ T5766] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  403.878270][ T5766] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  403.918655][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.918697][ T5766] usb 4-1: Product: syz
[  403.918720][ T5766] usb 4-1: Manufacturer: syz
[  403.918734][ T5766] usb 4-1: SerialNumber: syz
[  403.958937][ T5766] hub 4-1:1.0: bad descriptor, ignoring hub
[  403.967000][ T5766] hub 4-1:1.0: probe with driver hub failed with error -5
[  403.991380][  T193] usb 5-1: Using ep0 maxpacket: 32
[  404.016501][  T193] usb 5-1: unable to get BOS descriptor or descriptor too short
[  404.016557][  T193] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40
[  404.037006][  T193] usb 5-1: unable to read config index 0 descriptor/start: -71
[  404.037039][  T193] usb 5-1: can't read configurations, error -71
[  404.071409][    T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  404.158634][ T5766] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  404.221708][    T9] usb 2-1: Using ep0 maxpacket: 16
[  404.229467][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  404.237293][    T9] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[  404.247849][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 222, changing to 7
[  404.258999][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 26423, setting to 1024
[  404.259050][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  404.286029][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.286063][    T9] usb 2-1: Product: syz
[  404.286085][    T9] usb 2-1: Manufacturer: syz
[  404.286100][    T9] usb 2-1: SerialNumber: syz
[  404.318772][    T9] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  404.334402][    T9] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  404.391050][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  404.445218][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.514881][    T9] usb 4-1: USB disconnect, device number 107
[  404.523997][    T9] usblp0: removed
[  404.552878][ T5766] usb 2-1: USB disconnect, device number 80
[  404.642087][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1595'.
[  405.329211][T10862] FAULT_INJECTION: forcing a failure.
[  405.329211][T10862] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  405.329253][T10862] CPU: 0 UID: 0 PID: 10862 Comm: syz.3.1601 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  405.329277][T10862] Tainted: [L]=SOFTLOCKUP
[  405.329283][T10862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  405.329293][T10862] Call Trace:
[  405.329300][T10862]  <TASK>
[  405.329308][T10862]  dump_stack_lvl+0xe8/0x150
[  405.329335][T10862]  should_fail_ex+0x410/0x560
[  405.329364][T10862]  _copy_to_user+0x31/0xb0
[  405.329383][T10862]  simple_read_from_buffer+0xe1/0x170
[  405.329406][T10862]  proc_fail_nth_read+0x1bb/0x230
[  405.329429][T10862]  ? common_file_perm+0x20e/0x2b0
[  405.329456][T10862]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  405.329481][T10862]  ? rw_verify_area+0x24a/0x4c0
[  405.329503][T10862]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  405.329525][T10862]  vfs_read+0x213/0xa80
[  405.329550][T10862]  ? __pfx___mutex_lock+0x10/0x10
[  405.329576][T10862]  ? __pfx_vfs_read+0x10/0x10
[  405.329598][T10862]  ? __fget_files+0x2a/0x420
[  405.329620][T10862]  ? __fget_files+0x3a2/0x420
[  405.329638][T10862]  ? __fget_files+0x2a/0x420
[  405.329663][T10862]  ksys_read+0x150/0x270
[  405.329685][T10862]  ? __pfx_ksys_read+0x10/0x10
[  405.329714][T10862]  do_syscall_64+0x166/0x520
[  405.329730][T10862]  ? trace_irq_disable+0x3b/0x140
[  405.329755][T10862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.329772][T10862]  ? clear_bhb_loop+0x70/0xc0
[  405.329791][T10862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.329808][T10862] RIP: 0033:0x7f187a75e90e
[  405.329823][T10862] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  405.329838][T10862] RSP: 002b:00007f187b5b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  405.329856][T10862] RAX: ffffffffffffffda RBX: 00007f187b5b46c0 RCX: 00007f187a75e90e
[  405.329868][T10862] RDX: 000000000000000f RSI: 00007f187b5b40a0 RDI: 0000000000000004
[  405.329879][T10862] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  405.329889][T10862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.329899][T10862] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  405.329923][T10862]  </TASK>
[  406.030424][T10877] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  406.231810][  T193] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  406.245825][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1608'.
[  406.305341][T10886] FAULT_INJECTION: forcing a failure.
[  406.305341][T10886] name failslab, interval 1, probability 0, space 0, times 0
[  406.320325][T10886] CPU: 0 UID: 0 PID: 10886 Comm: syz.3.1610 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  406.320352][T10886] Tainted: [L]=SOFTLOCKUP
[  406.320359][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  406.320369][T10886] Call Trace:
[  406.320376][T10886]  <TASK>
[  406.320385][T10886]  dump_stack_lvl+0xe8/0x150
[  406.320413][T10886]  should_fail_ex+0x410/0x560
[  406.320445][T10886]  should_failslab+0xa8/0x100
[  406.320464][T10886]  __kmalloc_cache_noprof+0xa3/0x600
[  406.320487][T10886]  ? search_cred_keyrings_rcu+0x643/0x670
[  406.320584][T10886]  ? assoc_array_insert+0x90/0x2f60
[  406.320655][T10886]  ? assoc_array_insert+0x90/0x2f60
[  406.320685][T10886]  assoc_array_insert+0x90/0x2f60
[  406.320714][T10886]  ? __pfx_key_default_cmp+0x10/0x10
[  406.320732][T10886]  ? __pfx_keyring_search_iterator+0x10/0x10
[  406.320759][T10886]  __key_link_begin+0xd6/0x1f0
[  406.320778][T10886]  request_key_and_link+0xc90/0x15a0
[  406.320810][T10886]  ? __pfx_request_key_and_link+0x10/0x10
[  406.320844][T10886]  ? __pfx_dns_resolver_cmp+0x10/0x10
[  406.320920][T10886]  ? __pfx_keyring_search_iterator+0x10/0x10
[  406.320941][T10886]  ? down_read+0x2be/0x330
[  406.320959][T10886]  ? _copy_from_user+0x94/0xb0
[  406.320980][T10886]  __se_sys_request_key+0x29a/0x350
[  406.321003][T10886]  ? __pfx___se_sys_request_key+0x10/0x10
[  406.321033][T10886]  do_syscall_64+0x166/0x520
[  406.321050][T10886]  ? trace_irq_disable+0x3b/0x140
[  406.321074][T10886]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.321091][T10886]  ? clear_bhb_loop+0x70/0xc0
[  406.321111][T10886]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  406.321128][T10886] RIP: 0033:0x7f187a79e0d9
[  406.321144][T10886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  406.321158][T10886] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  406.321176][T10886] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  406.321188][T10886] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000200000000080
[  406.321200][T10886] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  406.321210][T10886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  406.321221][T10886] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  406.321246][T10886]  </TASK>
[  406.384467][  T193] usb 2-1: Using ep0 maxpacket: 32
[  406.384993][  T193] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  406.391252][  T193] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.391277][  T193] usb 2-1: config 1 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  406.391294][  T193] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 16
[  406.391313][  T193] usb 2-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 64
[  406.391330][  T193] usb 2-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 23
[  406.391351][  T193] usb 2-1: config 1 interface 0 has no altsetting 0
[  406.403157][  T193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  406.403179][  T193] usb 2-1: SerialNumber: syz
[  406.445994][T10875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.446056][T10875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  406.568956][  T193] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  406.736515][  T193] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  406.759029][  T193] usb 2-1: USB disconnect, device number 81
[  406.930799][T10892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'.
[  407.412505][  T193] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  407.553902][  T193] usb 4-1: device descriptor read/64, error -71
[  407.791554][  T193] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[  407.922577][  T193] usb 4-1: device descriptor read/64, error -71
[  408.031649][  T193] usb usb4-port1: attempt power cycle
[  408.123659][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'.
[  408.163178][T10921] FAULT_INJECTION: forcing a failure.
[  408.163178][T10921] name failslab, interval 1, probability 0, space 0, times 0
[  408.163224][T10921] CPU: 0 UID: 0 PID: 10921 Comm: syz.1.1624 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.163247][T10921] Tainted: [L]=SOFTLOCKUP
[  408.163253][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  408.163263][T10921] Call Trace:
[  408.163270][T10921]  <TASK>
[  408.163277][T10921]  dump_stack_lvl+0xe8/0x150
[  408.163308][T10921]  should_fail_ex+0x410/0x560
[  408.163336][T10921]  should_failslab+0xa8/0x100
[  408.163356][T10921]  __kmalloc_node_noprof+0x100/0x720
[  408.163380][T10921]  ? crypto_create_tfm_node+0x81/0x3c0
[  408.163410][T10921]  ? crypto_create_tfm_node+0x81/0x3c0
[  408.163436][T10921]  crypto_create_tfm_node+0x81/0x3c0
[  408.163460][T10921]  crypto_alloc_tfm_node+0x169/0x3e0
[  408.163489][T10921]  ipcomp_init_state+0x14a/0x290
[  408.163619][T10921]  ipcomp6_init_state+0xc8/0x920
[  408.163665][T10921]  ? __xfrm_init_state+0x745/0x1320
[  408.163685][T10921]  __xfrm_init_state+0x9dd/0x1320
[  408.163702][T10921]  ? __xfrm_init_state+0x745/0x1320
[  408.163720][T10921]  xfrm_init_state+0x1e/0xa0
[  408.163763][T10921]  pfkey_add+0x1d71/0x2e50
[  408.163819][T10921]  ? __pfx_pfkey_add+0x10/0x10
[  408.163850][T10921]  pfkey_sendmsg+0xceb/0x11d0
[  408.163880][T10921]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  408.163917][T10921]  ? aa_sock_msg_perm+0x144/0x210
[  408.163945][T10921]  ? apparmor_socket_sendmsg+0x98/0x360
[  408.163969][T10921]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  408.163990][T10921]  sock_sendmsg_nosec+0x13a/0x180
[  408.164018][T10921]  ____sys_sendmsg+0x54e/0x850
[  408.164044][T10921]  ? __pfx_____sys_sendmsg+0x10/0x10
[  408.164071][T10921]  ? import_iovec+0x73/0xa0
[  408.164090][T10921]  ___sys_sendmsg+0x2a5/0x360
[  408.164110][T10921]  ? __lock_acquire+0x6df/0x2e50
[  408.164138][T10921]  ? __pfx____sys_sendmsg+0x10/0x10
[  408.164163][T10921]  ? kstrtouint+0x6e/0xe0
[  408.164202][T10921]  ? __fget_files+0x2a/0x420
[  408.164221][T10921]  ? __fget_files+0x3a2/0x420
[  408.164247][T10921]  __sys_sendmmsg+0x273/0x4d0
[  408.164272][T10921]  ? __pfx___sys_sendmmsg+0x10/0x10
[  408.164299][T10921]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  408.164328][T10921]  ? ksys_write+0x242/0x270
[  408.164355][T10921]  ? __pfx_ksys_write+0x10/0x10
[  408.164381][T10921]  __x64_sys_sendmmsg+0xa0/0xc0
[  408.164408][T10921]  do_syscall_64+0x166/0x520
[  408.164424][T10921]  ? trace_irq_disable+0x3b/0x140
[  408.164448][T10921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.164465][T10921]  ? clear_bhb_loop+0x70/0xc0
[  408.164485][T10921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.164502][T10921] RIP: 0033:0x7f06a1d9e0d9
[  408.164518][T10921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.164532][T10921] RSP: 002b:00007f06a2cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  408.164549][T10921] RAX: ffffffffffffffda RBX: 00007f06a2025fa0 RCX: 00007f06a1d9e0d9
[  408.164562][T10921] RDX: 000000000400008a RSI: 0000200000000180 RDI: 0000000000000005
[  408.164572][T10921] RBP: 00007f06a2cb8090 R08: 0000000000000000 R09: 0000000000000000
[  408.164583][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.164592][T10921] R13: 00007f06a2026038 R14: 00007f06a2025fa0 R15: 00007ffdf7f94148
[  408.164617][T10921]  </TASK>
[  408.372997][  T193] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[  408.405754][  T193] usb 4-1: device descriptor read/8, error -71
[  408.672173][  T193] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  408.702302][  T193] usb 4-1: device descriptor read/8, error -71
[  408.814316][  T193] usb usb4-port1: unable to enumerate USB device
[  408.849472][T10935] FAULT_INJECTION: forcing a failure.
[  408.849472][T10935] name failslab, interval 1, probability 0, space 0, times 0
[  408.868199][T10935] CPU: 0 UID: 0 PID: 10935 Comm: syz.1.1628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  408.868229][T10935] Tainted: [L]=SOFTLOCKUP
[  408.868237][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  408.868247][T10935] Call Trace:
[  408.868255][T10935]  <TASK>
[  408.868263][T10935]  dump_stack_lvl+0xe8/0x150
[  408.868291][T10935]  should_fail_ex+0x410/0x560
[  408.868320][T10935]  should_failslab+0xa8/0x100
[  408.868339][T10935]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[  408.868370][T10935]  ? __kasan_kmalloc+0x93/0xb0
[  408.868396][T10935]  ? __request_module+0x2ec/0x630
[  408.868413][T10935]  ? __request_module+0x2ec/0x630
[  408.868430][T10935]  ? __kmalloc_cache_noprof+0x14d/0x600
[  408.868456][T10935]  kstrdup+0x42/0x100
[  408.868481][T10935]  __request_module+0x2ec/0x630
[  408.868503][T10935]  ? __pfx___request_module+0x10/0x10
[  408.868532][T10935]  ? tcp_ca_find_autoload+0x110/0x240
[  408.868551][T10935]  ? tcp_ca_find_autoload+0x110/0x240
[  408.868567][T10935]  tcp_ca_find_autoload+0x138/0x240
[  408.868584][T10935]  tcp_set_congestion_control+0x142/0xcb0
[  408.868602][T10935]  ? tcp_set_congestion_control+0x71/0xcb0
[  408.868622][T10935]  do_tcp_setsockopt+0x26d/0x1f80
[  408.868720][T10935]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  408.868747][T10935]  ? aa_sock_opt_perm+0xe8/0x1e0
[  408.868774][T10935]  ? sock_common_setsockopt+0x36/0xc0
[  408.868789][T10935]  ? tcp_setsockopt+0x3d/0xe0
[  408.868811][T10935]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  408.868829][T10935]  do_sock_setsockopt+0x17c/0x1b0
[  408.868853][T10935]  __x64_sys_setsockopt+0x13d/0x1b0
[  408.868877][T10935]  do_syscall_64+0x166/0x520
[  408.868894][T10935]  ? trace_irq_disable+0x3b/0x140
[  408.868918][T10935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.868935][T10935]  ? clear_bhb_loop+0x70/0xc0
[  408.868955][T10935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  408.868971][T10935] RIP: 0033:0x7f06a1d9e0d9
[  408.868988][T10935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.869002][T10935] RSP: 002b:00007f06a2cb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  408.869020][T10935] RAX: ffffffffffffffda RBX: 00007f06a2025fa0 RCX: 00007f06a1d9e0d9
[  408.869032][T10935] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003
[  408.869042][T10935] RBP: 00007f06a2cb8090 R08: 0000000000000003 R09: 0000000000000000
[  408.869053][T10935] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  408.869063][T10935] R13: 00007f06a2026038 R14: 00007f06a2025fa0 R15: 00007ffdf7f94148
[  408.869088][T10935]  </TASK>
[  409.652231][  T193] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  409.692635][ T5766] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  409.801383][  T193] usb 5-1: Using ep0 maxpacket: 8
[  409.807108][  T193] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  409.818713][  T193] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  409.818747][  T193] usb 5-1: config 0 has no interface number 0
[  409.818778][  T193] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  409.818799][  T193] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  409.818821][  T193] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 192, changing to 11
[  409.818843][  T193] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 51064, setting to 1024
[  409.818866][  T193] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  409.818900][  T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.895254][  T193] usb 5-1: config 0 descriptor??
[  409.903777][T10942] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  409.931500][ T5766] usb 2-1: Using ep0 maxpacket: 8
[  409.939912][ T5766] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  409.951646][  T193] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  409.961977][ T5766] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  409.962025][ T5766] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  409.962053][ T5766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  409.962074][ T5766] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  409.962094][ T5766] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  409.962128][ T5766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.289725][ T5766] usb 2-1: usb_control_msg returned -32
[  410.289853][ T5766] usbtmc 2-1:16.0: can't read capabilities
[  410.917626][T10963] ªªªªªª: renamed from vlan0 (while UP)
[  411.200588][T10968] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.646691][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.661548][  T193] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  411.670848][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.689616][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.711590][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.733589][T10975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  411.746081][T10975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.833096][  T193] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01
[  411.844278][  T193] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  411.855202][  T193] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  411.871432][  T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.871532][  T193] usb 4-1: Product: syz
[  411.871556][  T193] usb 4-1: Manufacturer: syz
[  411.871570][  T193] usb 4-1: SerialNumber: syz
[  411.915822][  T193] etas_es58x 4-1:1.0: Starting syz syz (Serial Number syz)
[  412.160259][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  412.173914][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  412.195873][  T193] etas_es58x 4-1:1.0: could not retrieve the product info string
[  412.404009][  T193] usb 4-1: USB disconnect, device number 112
[  412.424838][  T193] etas_es58x 4-1:1.0: Disconnecting syz syz
[  412.520659][ T5766] usb 5-1: USB disconnect, device number 11
[  412.570822][ T5766] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  413.031393][ T5766] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  413.121309][  T193] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  413.191360][ T5766] usb 5-1: Using ep0 maxpacket: 16
[  413.197553][ T5766] usb 5-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  413.207649][ T5766] usb 5-1: config 0 interface 0 altsetting 219 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  413.207702][ T5766] usb 5-1: config 0 interface 0 has no altsetting 0
[  413.207731][ T5766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.238852][ T5766] usb 5-1: config 0 descriptor??
[  413.321805][  T193] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  413.332343][  T193] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  413.345828][  T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.354239][  T193] usb 4-1: Product: syz
[  413.354257][  T193] usb 4-1: Manufacturer: syz
[  413.354269][  T193] usb 4-1: SerialNumber: syz
[  413.395158][  T193] pl2303 4-1:1.0: pl2303 converter detected
[  413.413735][   T10] usb 2-1: USB disconnect, device number 82
[  413.511764][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -110
[  413.520661][  T193] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32
[  413.529556][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  413.538138][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32
[  413.547146][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  413.555695][  T193] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0404]: -32
[  413.564404][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8484]: -32
[  413.573075][  T193] pl2303 4-1:1.0: pl2303_vendor_read - failed to read [8383]: -32
[  413.582433][  T193] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0000]: -32
[  413.591138][  T193] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0001]: -32
[  413.603785][  T193] pl2303 4-1:1.0: pl2303_vendor_write - failed to write [0002]: -32
[  413.636257][  T193] usb 4-1: pl2303 converter now attached to ttyUSB0
[  413.656242][T10981] futex_wake_op: syz.4.1642 tries to shift op by -1; fix this program
[  413.666613][  T193] usb 4-1: USB disconnect, device number 113
[  413.734536][  T193] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  413.768428][  T193] pl2303 4-1:1.0: device disconnected
[  413.878974][ T5766] usbhid 5-1:0.0: can't add hid device: -71
[  413.879071][ T5766] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  413.902961][ T5766] usb 5-1: USB disconnect, device number 12
[  414.198162][T10995] FAULT_INJECTION: forcing a failure.
[  414.198162][T10995] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.213134][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.3.1648 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.213163][T10995] Tainted: [L]=SOFTLOCKUP
[  414.213169][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  414.213180][T10995] Call Trace:
[  414.213187][T10995]  <TASK>
[  414.213195][T10995]  dump_stack_lvl+0xe8/0x150
[  414.213224][T10995]  should_fail_ex+0x410/0x560
[  414.213252][T10995]  _copy_from_user+0x2d/0xb0
[  414.213270][T10995]  kstrtouint_from_user+0xd6/0x180
[  414.213302][T10995]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  414.213332][T10995]  ? lock_acquire+0x115/0x350
[  414.213360][T10995]  proc_fail_nth_write+0x8e/0x210
[  414.213385][T10995]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  414.213413][T10995]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  414.213435][T10995]  vfs_write+0x296/0xba0
[  414.213462][T10995]  ? __pfx_vfs_write+0x10/0x10
[  414.213484][T10995]  ? __fget_files+0x2a/0x420
[  414.213507][T10995]  ? __fget_files+0x3a2/0x420
[  414.213525][T10995]  ? __fget_files+0x2a/0x420
[  414.213549][T10995]  ksys_write+0x150/0x270
[  414.213572][T10995]  ? __pfx_ksys_write+0x10/0x10
[  414.213602][T10995]  do_syscall_64+0x166/0x520
[  414.213619][T10995]  ? trace_irq_disable+0x3b/0x140
[  414.213643][T10995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.213660][T10995]  ? clear_bhb_loop+0x70/0xc0
[  414.213680][T10995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.213697][T10995] RIP: 0033:0x7f187a75e90e
[  414.213713][T10995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.213728][T10995] RSP: 002b:00007f187b5b3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  414.213746][T10995] RAX: ffffffffffffffda RBX: 00007f187b5b46c0 RCX: 00007f187a75e90e
[  414.213758][T10995] RDX: 0000000000000001 RSI: 00007f187b5b40a0 RDI: 0000000000000004
[  414.213769][T10995] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  414.213779][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.213789][T10995] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  414.213814][T10995]  </TASK>
[  414.537290][T10999] FAULT_INJECTION: forcing a failure.
[  414.537290][T10999] name failslab, interval 1, probability 0, space 0, times 0
[  414.553397][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.4.1650 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  414.553426][T10999] Tainted: [L]=SOFTLOCKUP
[  414.553432][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  414.553443][T10999] Call Trace:
[  414.553449][T10999]  <TASK>
[  414.553457][T10999]  dump_stack_lvl+0xe8/0x150
[  414.553488][T10999]  should_fail_ex+0x410/0x560
[  414.553517][T10999]  should_failslab+0xa8/0x100
[  414.553535][T10999]  __kmalloc_cache_noprof+0xa3/0x600
[  414.553559][T10999]  ? __kmalloc_cache_noprof+0x14d/0x600
[  414.553580][T10999]  ? ovl_init_fs_context+0xa0/0x570
[  414.553684][T10999]  ? ovl_init_fs_context+0xa0/0x570
[  414.553708][T10999]  ovl_init_fs_context+0xa0/0x570
[  414.553729][T10999]  ? mutex_init_lockdep+0xdf/0x110
[  414.553748][T10999]  alloc_fs_context+0x9a3/0xd00
[  414.553778][T10999]  do_new_mount+0x17f/0xdc0
[  414.553801][T10999]  ? __pfx_do_new_mount+0x10/0x10
[  414.553821][T10999]  ? ns_capable+0x89/0xe0
[  414.553841][T10999]  ? path_mount+0x647/0x1050
[  414.553861][T10999]  ? user_path_at+0xd4/0x160
[  414.553884][T10999]  __se_sys_mount+0x31d/0x420
[  414.553913][T10999]  ? __pfx___se_sys_mount+0x10/0x10
[  414.553937][T10999]  ? __x64_sys_mount+0x20/0xc0
[  414.553956][T10999]  do_syscall_64+0x166/0x520
[  414.553974][T10999]  ? trace_irq_disable+0x3b/0x140
[  414.553997][T10999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.554014][T10999]  ? clear_bhb_loop+0x70/0xc0
[  414.554034][T10999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.554051][T10999] RIP: 0033:0x7fc208d9e0d9
[  414.554067][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  414.554081][T10999] RSP: 002b:00007fc209cbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  414.554099][T10999] RAX: ffffffffffffffda RBX: 00007fc209025fa0 RCX: 00007fc208d9e0d9
[  414.554111][T10999] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  414.554123][T10999] RBP: 00007fc209cbe090 R08: 0000200000000380 R09: 0000000000000000
[  414.554134][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.554144][T10999] R13: 00007fc209026038 R14: 00007fc209025fa0 R15: 00007ffe9aa75d38
[  414.554168][T10999]  </TASK>
[  414.831644][T10998] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  415.307822][T11014] TCP: TCP_TX_DELAY enabled
[  415.326189][T11014] netlink: 'syz.4.1655': attribute type 10 has an invalid length.
[  415.389297][T11014] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  415.413973][T11014] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  415.942321][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  416.083411][T11042] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  416.102181][    T9] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00
[  416.113309][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  416.113356][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.139174][T11024] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  416.154615][    T9] opticon 5-1:1.0: opticon converter detected
[  416.178495][    T9] usb 5-1: opticon converter now attached to ttyUSB0
[  416.364796][T11049] netlink: 'syz.3.1667': attribute type 10 has an invalid length.
[  416.385330][T11049] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  416.401934][T11049] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  416.482253][    T9] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  416.631397][    T9] usb 2-1: Using ep0 maxpacket: 8
[  416.637327][    T9] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  416.650417][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.658981][    T9] usb 2-1: Product: syz
[  416.664188][    T9] usb 2-1: Manufacturer: syz
[  416.669161][    T9] usb 2-1: SerialNumber: syz
[  416.880552][    T9] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  416.890056][    T9] mxuport 2-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  416.890105][    T9] mxuport 2-1:254.0: probe with driver mxuport failed with error -71
[  416.924777][    T9] usb 2-1: USB disconnect, device number 83
[  417.059307][T11060] netlink: Unknown conntrack attr (type=12, max=9)
[  417.066794][T11060] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  417.084864][T11059] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  417.901436][  T193] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  418.052153][  T193] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  418.062654][  T193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  418.074088][  T193] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.074116][  T193] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  418.074151][  T193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.117689][  T193] usb 2-1: config 0 descriptor??
[  418.544029][  T193] hid-multitouch 0003:0457:07DA.001A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[  418.756591][   T10] usb 5-1: USB disconnect, device number 13
[  418.787307][   T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0
[  418.787786][   T10] opticon 5-1:1.0: device disconnected
[  418.961431][  T193] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  419.112880][  T193] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  419.123273][  T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.123309][  T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  419.123347][  T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.163449][  T193] usb 4-1: config 0 descriptor??
[  419.175447][T11070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1674'.
[  419.175534][T11070] openvswitch: netlink: Missing key (keys=c0, expected=880)
[  419.268548][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.268944][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.291322][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  419.353659][T11070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.362935][T11070] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.451906][   T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  419.462427][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  419.474036][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  419.486462][   T10] usb 5-1: config 0 descriptor??
[  419.701172][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  419.701734][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  419.723029][   T10] usb 5-1: USB disconnect, device number 14
[  420.191483][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  420.343494][   T10] usb 5-1: Using ep0 maxpacket: 16
[  420.350146][   T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  420.362148][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  420.362195][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.386980][   T10] usb 5-1: config 0 descriptor??
[  420.551290][ T5767] usb 2-1: USB disconnect, device number 84
[  420.806595][   T10] kye 0003:0458:5016.001B: control desc unexpectedly large
[  420.815933][   T10] kye 0003:0458:5016.001B: control desc unexpectedly large
[  420.840989][   T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.001B/input/input33
[  421.050488][   T10] kye 0003:0458:5016.001B: input,hiddev0,hidraw1: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0
[  421.409603][   T10] usb 5-1: USB disconnect, device number 15
[  421.694126][  T193] usbhid 4-1:0.0: can't add hid device: -71
[  421.694222][  T193] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  421.726358][  T193] usb 4-1: USB disconnect, device number 114
[  422.095669][T11113] FAULT_INJECTION: forcing a failure.
[  422.095669][T11113] name failslab, interval 1, probability 0, space 0, times 0
[  422.120189][T11113] CPU: 0 UID: 0 PID: 11113 Comm: syz.3.1686 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  422.120224][T11113] Tainted: [L]=SOFTLOCKUP
[  422.120230][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  422.120241][T11113] Call Trace:
[  422.120247][T11113]  <TASK>
[  422.120256][T11113]  dump_stack_lvl+0xe8/0x150
[  422.120284][T11113]  should_fail_ex+0x410/0x560
[  422.120313][T11113]  should_failslab+0xa8/0x100
[  422.120330][T11113]  ? vm_area_dup+0x28/0x760
[  422.120352][T11113]  kmem_cache_alloc_noprof+0xa1/0x600
[  422.120374][T11113]  ? mas_next_node+0xbd1/0xe50
[  422.120397][T11113]  ? vm_area_dup+0x28/0x760
[  422.120424][T11113]  vm_area_dup+0x28/0x760
[  422.120444][T11113]  ? __split_vma+0x1b7/0xa60
[  422.120464][T11113]  __split_vma+0x1d7/0xa60
[  422.120488][T11113]  ? __pfx___split_vma+0x10/0x10
[  422.120515][T11113]  ? __lock_acquire+0x6df/0x2e50
[  422.120543][T11113]  vms_gather_munmap_vmas+0x322/0x1370
[  422.120580][T11113]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  422.120606][T11113]  ? lock_acquire+0x115/0x350
[  422.120641][T11113]  do_vmi_align_munmap+0x2b4/0x4b0
[  422.120681][T11113]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  422.120721][T11113]  ? mas_walk+0x37e/0x490
[  422.120747][T11113]  ? mas_find+0x642/0xcb0
[  422.120766][T11113]  do_vmi_munmap+0x252/0x2d0
[  422.120796][T11113]  move_vma+0x10ca/0x17a0
[  422.120825][T11113]  ? arch_get_unmapped_area_topdown+0x269/0xb50
[  422.120881][T11113]  ? __pfx_move_vma+0x10/0x10
[  422.120901][T11113]  ? mtree_load+0x12a/0x780
[  422.120925][T11113]  ? cap_mmap_addr+0xaf/0x100
[  422.120948][T11113]  ? bpf_lsm_mmap_addr+0x9/0x50
[  422.120975][T11113]  mremap_to+0x7f9/0x8d0
[  422.121004][T11113]  ? __pfx_mremap_to+0x10/0x10
[  422.121029][T11113]  ? __pfx_mtree_load+0x10/0x10
[  422.121046][T11113]  ? __pfx_check_prep_vma+0x10/0x10
[  422.121083][T11113]  __se_sys_mremap+0xf59/0x12d0
[  422.121114][T11113]  ? ksys_write+0x1e6/0x270
[  422.121136][T11113]  ? __pfx___se_sys_mremap+0x10/0x10
[  422.121166][T11113]  ? __mutex_unlock_slowpath+0x731/0x900
[  422.121186][T11113]  ? __fget_files+0x2a/0x420
[  422.121210][T11113]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  422.121228][T11113]  ? __fget_files+0x3a2/0x420
[  422.121258][T11113]  ? __pfx_ksys_write+0x10/0x10
[  422.121283][T11113]  ? __x64_sys_mremap+0x20/0xc0
[  422.121310][T11113]  do_syscall_64+0x166/0x520
[  422.121326][T11113]  ? trace_irq_disable+0x3b/0x140
[  422.121350][T11113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.121366][T11113]  ? clear_bhb_loop+0x70/0xc0
[  422.121386][T11113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  422.121403][T11113] RIP: 0033:0x7f187a79e0d9
[  422.121418][T11113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  422.121432][T11113] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  422.121450][T11113] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  422.121462][T11113] RDX: 0000000000002000 RSI: 0000000000001000 RDI: 00002000008ba000
[  422.121473][T11113] RBP: 00007f187b5b4090 R08: 00002000005b7000 R09: 0000000000000000
[  422.121485][T11113] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002
[  422.121494][T11113] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  422.121519][T11113]  </TASK>
[  422.891561][  T193] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  423.041958][  T193] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  423.054316][  T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.062873][  T193] usb 5-1: Product: syz
[  423.062892][  T193] usb 5-1: Manufacturer: syz
[  423.062903][  T193] usb 5-1: SerialNumber: syz
[  423.100192][  T193] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  423.674527][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  423.687097][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  423.700860][T11136] /dev/nullb0: Can't open blockdev
[  423.771335][   T10] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  423.921880][   T10] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00
[  423.932734][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.943857][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  423.953089][   T10] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  423.966472][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.974806][   T10] usb 2-1: Product: syz
[  423.979547][   T10] usb 2-1: Manufacturer: syz
[  423.984335][   T10] usb 2-1: SerialNumber: syz
[  424.201087][   T10] speedtch 2-1:1.0: speedtch_bind: data interface not found!
[  424.201132][   T10] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[  424.228844][   T10] usb 2-1: USB disconnect, device number 85
[  424.542475][T11139] FAULT_INJECTION: forcing a failure.
[  424.542475][T11139] name failslab, interval 1, probability 0, space 0, times 0
[  424.560704][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.3.1697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.560735][T11139] Tainted: [L]=SOFTLOCKUP
[  424.560741][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.560752][T11139] Call Trace:
[  424.560761][T11139]  <TASK>
[  424.560769][T11139]  dump_stack_lvl+0xe8/0x150
[  424.560797][T11139]  should_fail_ex+0x410/0x560
[  424.560826][T11139]  should_failslab+0xa8/0x100
[  424.560845][T11139]  __kmalloc_noprof+0xfe/0x720
[  424.560869][T11139]  ? alloc_trace_uprobe+0x32/0x2a0
[  424.560921][T11139]  ? alloc_trace_uprobe+0x32/0x2a0
[  424.560948][T11139]  alloc_trace_uprobe+0x32/0x2a0
[  424.560974][T11139]  __trace_uprobe_create+0x9b8/0xe40
[  424.561007][T11139]  ? trace_kmalloc+0x2a/0xf0
[  424.561033][T11139]  ? __pfx___trace_uprobe_create+0x10/0x10
[  424.561061][T11139]  ? __kmalloc_noprof+0x38c/0x720
[  424.561083][T11139]  ? __kmalloc_noprof+0x1ab/0x720
[  424.561104][T11139]  ? argv_split+0x18d/0x400
[  424.561195][T11139]  ? argv_split+0x18d/0x400
[  424.561216][T11139]  ? argv_split+0x378/0x400
[  424.561236][T11139]  trace_probe_create+0xce/0x130
[  424.561259][T11139]  ? __pfx___trace_uprobe_create+0x10/0x10
[  424.561282][T11139]  ? __pfx_trace_probe_create+0x10/0x10
[  424.561312][T11139]  dyn_event_create+0x59/0x80
[  424.561330][T11139]  create_or_delete_trace_uprobe+0x65/0xa0
[  424.561356][T11139]  trace_parse_run_command+0x1f3/0x380
[  424.561382][T11139]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  424.561408][T11139]  ? __pfx_probes_write+0x10/0x10
[  424.561432][T11139]  vfs_write+0x296/0xba0
[  424.561460][T11139]  ? __pfx_vfs_write+0x10/0x10
[  424.561481][T11139]  ? __fget_files+0x2a/0x420
[  424.561523][T11139]  ? __fget_files+0x3a2/0x420
[  424.561541][T11139]  ? __fget_files+0x2a/0x420
[  424.561566][T11139]  ksys_write+0x150/0x270
[  424.561589][T11139]  ? __pfx_ksys_write+0x10/0x10
[  424.561619][T11139]  do_syscall_64+0x166/0x520
[  424.561636][T11139]  ? trace_irq_disable+0x3b/0x140
[  424.561659][T11139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.561676][T11139]  ? clear_bhb_loop+0x70/0xc0
[  424.561696][T11139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  424.561713][T11139] RIP: 0033:0x7f187a79e0d9
[  424.561730][T11139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  424.561744][T11139] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  424.561762][T11139] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  424.561774][T11139] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000005
[  424.561785][T11139] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  424.561795][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  424.561805][T11139] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  424.561830][T11139]  </TASK>
[  424.625765][T11139] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI
[  424.864426][T11139] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047]
[  424.872945][T11139] CPU: 0 UID: 0 PID: 11139 Comm: syz.3.1697 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  424.883927][T11139] Tainted: [L]=SOFTLOCKUP
[  424.888262][T11139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  424.898317][T11139] RIP: 0010:path_put+0x24/0x60
[  424.903096][T11139] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 e7 7a 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48
[  424.922799][T11139] RSP: 0018:ffffc900038df9c8 EFLAGS: 00010203
[  424.928874][T11139] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88807b5a5dc0
[  424.936869][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044
[  424.944871][T11139] RBP: ffffc900038dfb50 R08: ffffffff9ac7ae77 R09: 0000000000000000
[  424.952848][T11139] R10: ffffffff9ac7ae60 R11: fffffbfff358f5cf R12: fffffffffffffff4
[  424.960943][T11139] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000
[  424.968939][T11139] FS:  00007f187b5b46c0(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000
[  424.979359][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  424.986280][T11139] CR2: 0000200000000100 CR3: 000000005a7ec000 CR4: 00000000003526f0
[  424.994646][T11139] Call Trace:
[  424.997943][T11139]  <TASK>
[  425.000970][T11139]  __trace_uprobe_create+0x53f/0xe40
[  425.006295][T11139]  ? trace_kmalloc+0x2a/0xf0
[  425.010916][T11139]  ? __pfx___trace_uprobe_create+0x10/0x10
[  425.016749][T11139]  ? __kmalloc_noprof+0x38c/0x720
[  425.021809][T11139]  ? __kmalloc_noprof+0x1ab/0x720
[  425.026846][T11139]  ? argv_split+0x18d/0x400
[  425.031355][T11139]  ? argv_split+0x18d/0x400
[  425.035867][T11139]  ? argv_split+0x378/0x400
[  425.040380][T11139]  trace_probe_create+0xce/0x130
[  425.045334][T11139]  ? __pfx___trace_uprobe_create+0x10/0x10
[  425.051154][T11139]  ? __pfx_trace_probe_create+0x10/0x10
[  425.056731][T11139]  dyn_event_create+0x59/0x80
[  425.061415][T11139]  create_or_delete_trace_uprobe+0x65/0xa0
[  425.067256][T11139]  trace_parse_run_command+0x1f3/0x380
[  425.072736][T11139]  ? __pfx_create_or_delete_trace_uprobe+0x10/0x10
[  425.079259][T11139]  ? __pfx_probes_write+0x10/0x10
[  425.084316][T11139]  vfs_write+0x296/0xba0
[  425.088591][T11139]  ? __pfx_vfs_write+0x10/0x10
[  425.093393][T11139]  ? __fget_files+0x2a/0x420
[  425.097995][T11139]  ? __fget_files+0x3a2/0x420
[  425.102681][T11139]  ? __fget_files+0x2a/0x420
[  425.107294][T11139]  ksys_write+0x150/0x270
[  425.111647][T11139]  ? __pfx_ksys_write+0x10/0x10
[  425.116506][T11139]  do_syscall_64+0x166/0x520
[  425.121103][T11139]  ? trace_irq_disable+0x3b/0x140
[  425.126137][T11139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.132203][T11139]  ? clear_bhb_loop+0x70/0xc0
[  425.136881][T11139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.142775][T11139] RIP: 0033:0x7f187a79e0d9
[  425.147196][T11139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  425.166808][T11139] RSP: 002b:00007f187b5b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  425.175227][T11139] RAX: ffffffffffffffda RBX: 00007f187aa25fa0 RCX: 00007f187a79e0d9
[  425.183202][T11139] RDX: 000000000000001b RSI: 0000200000000300 RDI: 0000000000000005
[  425.191191][T11139] RBP: 00007f187b5b4090 R08: 0000000000000000 R09: 0000000000000000
[  425.199164][T11139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.207142][T11139] R13: 00007f187aa26038 R14: 00007f187aa25fa0 R15: 00007ffe96953598
[  425.215125][T11139]  </TASK>
[  425.218152][T11139] Modules linked in:
[  425.224772][T11139] ---[ end trace 0000000000000000 ]---
[  425.235859][  T193] usb 5-1: Service connection timeout for: 256
[  425.235932][  T193] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  425.289220][T11139] RIP: 0010:path_put+0x24/0x60
[  425.295046][T11139] Code: 90 90 90 90 90 90 f3 0f 1e fa 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 e7 7a 79 ff 48 8d 7b 08 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 e0 40 e9 ff 48 8b 7b 08 e8 e7 8e 03 00 48
[  425.316522][T11139] RSP: 0018:ffffc900038df9c8 EFLAGS: 00010203
[  425.323340][T11139] RAX: 0000000000000008 RBX: 000000000000003c RCX: ffff88807b5a5dc0
[  425.332634][T11139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000044
[  425.344106][T11139] RBP: ffffc900038dfb50 R08: ffffffff9ac7ae77 R09: 0000000000000000
[  425.352661][T11139] R10: ffffffff9ac7ae60 R11: fffffbfff358f5cf R12: fffffffffffffff4
[  425.361074][T11139] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000000
[  425.369764][T11139] FS:  00007f187b5b46c0(0000) GS:ffff88812488a000(0000) knlGS:0000000000000000
[  425.379992][T11139] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  425.388176][T11139] CR2: 00007f06a1fef2f8 CR3: 000000005a7ec000 CR4: 00000000003526f0
[  425.397119][T11139] Kernel panic - not syncing: Fatal exception
[  425.403257][T11139] Kernel Offset: disabled
[  425.407588][T11139] Rebooting in 86400 seconds..