last executing test programs:

4m31.95055105s ago: executing program 4 (id=2079):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) (fail_nth: 1)

4m30.92966191s ago: executing program 4 (id=2086):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x480000)
ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000000040))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000000)='=o', 0x2, 0x800, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000d40)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0xd900}, @sack_perm, @sack_perm, @timestamp, @sack_perm, @sack_perm, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x20000000000001c5)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0xc)
setuid(r6)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x0, 0xa, 0x9, 0x0, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x5}, 0x94)
unshare(0x20000400)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r9, 0x20)
shutdown(r9, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r1, @ANYRES8], 0x44}}, 0x2404000c)
sendto(r5, &(0x7f0000000dc0)="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", 0x1000, 0x4000, &(0x7f0000001dc0)=@in6={0xa, 0x4e20, 0x3ff, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80000000}, 0x80)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)

4m30.611439368s ago: executing program 4 (id=2088):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0)

4m30.290220505s ago: executing program 4 (id=2092):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0xf}, 0x94)
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x1f29, 0xc000, 0x8, 0x329})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4m29.871438755s ago: executing program 4 (id=2096):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[], 0x13)
r3 = getpgid(0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1, r3}}, 0x40)

4m29.414361193s ago: executing program 4 (id=2101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000)
r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$rxrpc(0x21, 0x2, 0x2)
socket$kcm(0x2b, 0x1, 0x0)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r7)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1014408, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x30, 0x34, 0x64, 0x62, 0x34], 0x2d, [0x36, 0x6d, 0x35, 0x64], 0x2d, [0x34, 0x34, 0x65, 0x66], 0x2d, [0x34, 0x0, 0x61, 0x31], 0x2d, [0x66, 0x37, 0x51, 0x64, 0x66, 0x39, 0x65, 0x30]}}}]}})

4m14.119385101s ago: executing program 32 (id=2101):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000)
r4 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0xa, 0x922000000003, 0x11)
socket$rxrpc(0x21, 0x2, 0x2)
socket$kcm(0x2b, 0x1, 0x0)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0xc7)
close(r7)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x8, r10}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x1014408, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [{@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x30, 0x34, 0x64, 0x62, 0x34], 0x2d, [0x36, 0x6d, 0x35, 0x64], 0x2d, [0x34, 0x34, 0x65, 0x66], 0x2d, [0x34, 0x0, 0x61, 0x31], 0x2d, [0x66, 0x37, 0x51, 0x64, 0x66, 0x39, 0x65, 0x30]}}}]}})

7.941071904s ago: executing program 1 (id=3110):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r0, 0x2000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030424bd70000000000000000000614da77877", @ANYRES32=0x0, @ANYBLOB="00050000000000001c0012800e00010069703665727370616e0000000800028004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)
pread64(r1, &(0x7f0000000080)=""/114, 0x72, 0x9) (async)
pread64(r1, &(0x7f0000000080)=""/114, 0x72, 0x9)

6.774451132s ago: executing program 1 (id=3114):
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
read$FUSE(r0, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x3)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x9)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r5 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

6.110636016s ago: executing program 0 (id=3121):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

5.851385408s ago: executing program 5 (id=3122):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
close(0x4)
add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
socket$packet(0x11, 0x3, 0x300)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='pvfs2\x00', 0x2200892, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x2c, 0x0, 0x108)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, 0x0, 0x20044000)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x319040)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79"}, 0x47)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x50, 0xffffffffffffffff, 0x5c0c000)
semop(0x0, &(0x7f0000000000), 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = getpid()
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x4a, &(0x7f0000000040), 0x10)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan1\x00')
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000352ec29002958b8f780e00", "9001001c551200", [0x0, 0x400000000003]}})

5.63154009s ago: executing program 0 (id=3124):
syz_emit_ethernet(0xce, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1f, 0x2, [{0x0, 0x2}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @remote, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0)

5.579279328s ago: executing program 1 (id=3125):
openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, 0x0)
r5 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f00000000c0)={r5, r1, 0xd})

5.545053521s ago: executing program 0 (id=3126):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x1b, 0x53, 0x28, 0x40, 0x46d, 0x920, 0x9b02, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfe, 0x8, 0x20, 0xa, "", [{{0x9, 0x4, 0x6d, 0x2, 0x0, 0xce, 0x36, 0xbd, 0x7f}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000000)=@conn_svc_rsp={0x0, 0x0, 0xa, "d33c7966", {0x3, 0x107, 0x0, 0x2, 0xfff8, 0x6}})

3.803491008s ago: executing program 1 (id=3130):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)

3.530158729s ago: executing program 3 (id=3132):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x18, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.453095201s ago: executing program 3 (id=3133):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r1}) (fail_nth: 1)

2.902178459s ago: executing program 3 (id=3134):
add_key(&(0x7f0000000040)='trusted\x00', 0xffffffffffffffff, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x2}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00')
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x16, 0x200000000000000, &(0x7f00000004c0)="e0"})
r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x9)
r4 = accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f00000002c0)=0x60, 0x80000)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000340)={0xfffff9ce, 0x0, &(0x7f0000000300)=[r3, r2, r1, r4, r1, r2, r2, r1]}, 0x8)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r6=>0x0})
bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x84000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

2.58674426s ago: executing program 0 (id=3135):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.366620359s ago: executing program 3 (id=3136):
socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
read$FUSE(r0, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, r1, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0x0, 0x1000a080, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x3)
landlock_restrict_self(r2, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0)
r5 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)

2.305881704s ago: executing program 5 (id=3137):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007f0a0a0002000180c2000003000004000e8008000f"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)
syz_emit_ethernet(0x2ae, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\b@', 0x278, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00001c050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8675b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0"}]}}}}}}, 0x0)

2.150354298s ago: executing program 2 (id=3138):
unshare(0x22020400)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x202, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.087049947s ago: executing program 1 (id=3139):
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], <r0=>0x0, 0x46, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x8c, 0x8, 0x8, &(0x7f0000000400)}}, 0x30)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', <r2=>0x0})
syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

2.024340144s ago: executing program 5 (id=3140):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000002140)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x3}]}}}], 0x18}}], 0x2, 0x4000800)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@initdev, <r2=>0x0}, &(0x7f0000000180)=0x14)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x81, 0x80000000, 0x1, 0x10041, r1, 0x2, '\x00', r2, r0, 0x5, 0x1, 0x0, 0xb, @void, @value, @value=r3}, 0x50)

1.993720732s ago: executing program 0 (id=3141):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
setuid(0xee00)
r1 = syz_io_uring_setup(0x4b9, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20d}, &(0x7f00000001c0), &(0x7f0000000000), &(0x7f0000000000))
setrlimit(0x40000000000008, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
syz_io_uring_setup(0x4f9, &(0x7f00000000c0)={0x0, 0x8d2dd, 0x8, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040), 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, <r4=>0x0], &(0x7f0000000200), 0x3, r3})
ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000540)={0x200, 0x1, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[0x3], &(0x7f0000000580)=[r4], &(0x7f0000000040), 0x0, 0x200})
close(0x4)

1.904129797s ago: executing program 2 (id=3142):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001700090025bd70711de1bd25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c8, 0x2, 0x7f, 0xe, "3d52e3ff00"})
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r2 = syz_open_pts(r0, 0x0)
setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff)
r3 = msgget$private(0x0, 0x3ac)
msgrcv(r3, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000)
msgctl$IPC_SET(r3, 0x1, &(0x7f0000000380)={{0x2, 0x0, 0x0, 0x0, 0x0, 0xd4, 0xc9}, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x6, 0x8, 0xd71a, 0x0, 0x6, 0x9})
r4 = dup3(r2, r0, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff)

1.850859718s ago: executing program 5 (id=3143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltaction={0x18, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

1.731228116s ago: executing program 5 (id=3144):
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x5f, 0x61]}}, 0x0, 0x52}, 0x20)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e)
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000140)=0xfb78, 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4)
openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
read$FUSE(0xffffffffffffffff, &(0x7f0000001fc0)={0x2020}, 0x2020)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0)
syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d"], 0x0)

1.299961174s ago: executing program 3 (id=3145):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) (fail_nth: 1)

494.228147ms ago: executing program 2 (id=3146):
socket$inet6_sctp(0xa, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0002}]})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

462.027287ms ago: executing program 2 (id=3147):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe2a02)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

405.603178ms ago: executing program 3 (id=3148):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a00d7f25ce47ff3244b6158c2a9f2ca01000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df59c080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6", 0xb1)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703a90723f9000000008af26c", 0xd8}], 0x1}, 0x22040000)
syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a2403"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

356.53879ms ago: executing program 1 (id=3149):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000180)=0x2, 0x4)

355.802572ms ago: executing program 2 (id=3150):
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x2}}, './file0\x00'})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0xfffffffc}, 0x10}, 0x94)

146.339049ms ago: executing program 2 (id=3151):
r0 = socket(0x1d, 0x3, 0x1) (async)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

102.749205ms ago: executing program 5 (id=3152):
unshare(0x22020400)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x202, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

0s ago: executing program 0 (id=3153):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

150
[  684.937582][T14146]  should_fail_ex+0x46b/0x600
[  684.937629][T14146]  _copy_from_user+0x2d/0xb0
[  684.937653][T14146]  do_ipv6_setsockopt+0x264/0x31c0
[  684.937694][T14146]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  684.937720][T14146]  ? kstrtouint+0x6e/0xe0
[  684.937755][T14146]  ? get_pid_task+0x20/0x1f0
[  684.937785][T14146]  ? __lock_acquire+0x6b5/0x2cf0
[  684.937828][T14146]  ? __lock_acquire+0x6b5/0x2cf0
[  684.937866][T14146]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  684.937891][T14146]  ? lockdep_hardirqs_on+0x7a/0x110
[  684.937919][T14146]  ipv6_setsockopt+0x59/0x170
[  684.937952][T14146]  rawv6_setsockopt+0x276/0x5f0
[  684.937986][T14146]  ? __pfx_rawv6_setsockopt+0x10/0x10
[  684.938018][T14146]  ? sock_common_setsockopt+0x36/0xc0
[  684.938055][T14146]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  684.938087][T14146]  do_sock_setsockopt+0x17c/0x1b0
[  684.938116][T14146]  __x64_sys_setsockopt+0x143/0x1b0
[  684.938145][T14146]  do_syscall_64+0x14d/0xf80
[  684.938168][T14146]  ? trace_irq_disable+0x3b/0x150
[  684.938193][T14146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.938215][T14146]  ? clear_bhb_loop+0x40/0x90
[  684.938242][T14146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  684.938264][T14146] RIP: 0033:0x7f26b1e7c819
[  684.938286][T14146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  684.938306][T14146] RSP: 002b:00007f26b00ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  684.938331][T14146] RAX: ffffffffffffffda RBX: 00007f26b20f5fa0 RCX: 00007f26b1e7c819
[  684.938346][T14146] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000003
[  684.938360][T14146] RBP: 00007f26b00ce090 R08: 0000000000000004 R09: 0000000000000000
[  684.938375][T14146] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001
[  684.938389][T14146] R13: 00007f26b20f6038 R14: 00007f26b20f5fa0 R15: 00007ffddeaa05a8
[  684.938425][T14146]  </TASK>
[  685.218334][ T5956] cdc_ncm 2-1:1.0: bind() failure
[  685.223974][ T5956] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  685.224037][ T5956] cdc_ncm 2-1:1.1: bind() failure
[  685.255599][ T5956] usb 2-1: USB disconnect, device number 78
[  685.280055][T14147] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  685.381525][T14139] could not allocate digest TFM handle xxhash64-generic
[  685.624096][T14156] openvswitch: netlink: Duplicate or invalid key (type 0).
[  685.624125][T14156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  685.628710][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  685.792062][    T9] usb 6-1: Using ep0 maxpacket: 32
[  685.795051][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  685.795085][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  685.798714][T12330] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  685.812951][    T9] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  685.812982][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.813001][    T9] usb 6-1: Product: syz
[  685.813015][    T9] usb 6-1: Manufacturer: syz
[  685.813029][    T9] usb 6-1: SerialNumber: syz
[  685.830422][    T9] usb 6-1: config 0 descriptor??
[  685.844122][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  685.957017][T14162] FAULT_INJECTION: forcing a failure.
[  685.957017][T14162] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.957058][T14162] CPU: 1 UID: 0 PID: 14162 Comm: syz.1.2876 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  685.957089][T14162] Tainted: [L]=SOFTLOCKUP
[  685.957097][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  685.957112][T14162] Call Trace:
[  685.957119][T14162]  <TASK>
[  685.957128][T14162]  dump_stack_lvl+0xe8/0x150
[  685.957165][T14162]  should_fail_ex+0x46b/0x600
[  685.957199][T14162]  _copy_from_user+0x2d/0xb0
[  685.957221][T14162]  ___sys_sendmsg+0x1c6/0x360
[  685.957252][T14162]  ? __pfx____sys_sendmsg+0x10/0x10
[  685.957312][T14162]  ? __fget_files+0x2a/0x420
[  685.957341][T14162]  ? __fget_files+0x3a6/0x420
[  685.957380][T14162]  __x64_sys_sendmsg+0x1c3/0x2a0
[  685.957409][T14162]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  685.957445][T14162]  ? __pfx_ksys_write+0x10/0x10
[  685.957492][T14162]  do_syscall_64+0x14d/0xf80
[  685.957516][T14162]  ? trace_irq_disable+0x3b/0x150
[  685.957543][T14162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.957566][T14162]  ? clear_bhb_loop+0x40/0x90
[  685.957594][T14162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.957616][T14162] RIP: 0033:0x7f18f707c819
[  685.957638][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.957657][T14162] RSP: 002b:00007f18f52ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  685.957681][T14162] RAX: ffffffffffffffda RBX: 00007f18f72f5fa0 RCX: 00007f18f707c819
[  685.957698][T14162] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  685.957713][T14162] RBP: 00007f18f52ce090 R08: 0000000000000000 R09: 0000000000000000
[  685.957727][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.957740][T14162] R13: 00007f18f72f6038 R14: 00007f18f72f5fa0 R15: 00007ffea948b958
[  685.957776][T14162]  </TASK>
[  685.970874][T12330] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  685.970908][T12330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  685.970933][T12330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  685.979533][T12330] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[  685.979563][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.979583][T12330] usb 4-1: Product: syz
[  685.979597][T12330] usb 4-1: Manufacturer: syz
[  685.979611][T12330] usb 4-1: SerialNumber: syz
[  685.993047][T12330] usb 4-1: config 0 descriptor??
[  685.994092][T14154] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  686.044685][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  686.249753][T12330] powermate: unknown product id 0240
[  686.249772][T12330] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  686.344740][T12330] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62
[  686.504917][T14166] FAULT_INJECTION: forcing a failure.
[  686.504917][T14166] name failslab, interval 1, probability 0, space 0, times 0
[  686.504959][T14166] CPU: 1 UID: 0 PID: 14166 Comm: syz.0.2880 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  686.504990][T14166] Tainted: [L]=SOFTLOCKUP
[  686.504999][T14166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  686.505012][T14166] Call Trace:
[  686.505022][T14166]  <TASK>
[  686.505032][T14166]  dump_stack_lvl+0xe8/0x150
[  686.505069][T14166]  should_fail_ex+0x46b/0x600
[  686.505106][T14166]  should_failslab+0xa8/0x100
[  686.505132][T14166]  __kmalloc_noprof+0xdf/0x7b0
[  686.505153][T14166]  ? kfree+0x4d/0x6c0
[  686.505183][T14166]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  686.505218][T14166]  tomoyo_realpath_from_path+0xe3/0x5d0
[  686.505258][T14166]  ? tomoyo_path_number_perm+0x219/0x630
[  686.505282][T14166]  tomoyo_path_number_perm+0x246/0x630
[  686.505309][T14166]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  686.505336][T14166]  ? __lock_acquire+0x6b5/0x2cf0
[  686.505398][T14166]  ? __fget_files+0x2a/0x420
[  686.505431][T14166]  ? __fget_files+0x2a/0x420
[  686.505457][T14166]  ? __fget_files+0x3a6/0x420
[  686.505483][T14166]  ? __fget_files+0x2a/0x420
[  686.505516][T14166]  security_file_ioctl+0xc3/0x2a0
[  686.505543][T14166]  __se_sys_ioctl+0x47/0x170
[  686.505567][T14166]  do_syscall_64+0x14d/0xf80
[  686.505592][T14166]  ? trace_irq_disable+0x3b/0x150
[  686.505627][T14166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.505651][T14166]  ? clear_bhb_loop+0x40/0x90
[  686.505678][T14166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.505701][T14166] RIP: 0033:0x7f59aadcc819
[  686.505722][T14166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.505740][T14166] RSP: 002b:00007f59a901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  686.505765][T14166] RAX: ffffffffffffffda RBX: 00007f59ab045fa0 RCX: 00007f59aadcc819
[  686.505780][T14166] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003
[  686.505793][T14166] RBP: 00007f59a901e090 R08: 0000000000000000 R09: 0000000000000000
[  686.505807][T14166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.505821][T14166] R13: 00007f59ab046038 R14: 00007f59ab045fa0 R15: 00007ffdd5836648
[  686.505858][T14166]  </TASK>
[  686.505867][T14166] ERROR: Out of memory at tomoyo_realpath_from_path.
[  686.961864][    T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12
[  687.016022][    T9] usb 6-1: USB disconnect, device number 18
[  687.214276][ T6981] udevd[6981]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  687.337083][T14178] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2882'.
[  687.578248][T12330] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  687.750285][T12330] usb 2-1: Using ep0 maxpacket: 8
[  687.756629][T12330] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  687.756662][T12330] usb 2-1: config 179 has no interface number 0
[  687.757389][T12330] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  687.758183][T12330] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  687.758216][T12330] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  687.758244][T12330] usb 2-1: config 179 interface 65 has no altsetting 0
[  687.758669][T12330] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  687.758696][T12330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.995584][T14178] could not allocate digest TFM handle xxhash64-generic
[  688.280945][T12626] usb 2-1: USB disconnect, device number 79
[  689.332739][T14189] syz.2.2885 (14189) used greatest stack depth: 16360 bytes left
[  690.089008][T14192] FAULT_INJECTION: forcing a failure.
[  690.089008][T14192] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.089046][T14192] CPU: 1 UID: 0 PID: 14192 Comm: syz.2.2886 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.089073][T14192] Tainted: [L]=SOFTLOCKUP
[  690.089080][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  690.089091][T14192] Call Trace:
[  690.089099][T14192]  <TASK>
[  690.089106][T14192]  dump_stack_lvl+0xe8/0x150
[  690.089139][T14192]  should_fail_ex+0x46b/0x600
[  690.089170][T14192]  _copy_from_user+0x2d/0xb0
[  690.089189][T14192]  raw_setsockopt+0x5ba/0x12f0
[  690.089220][T14192]  ? __pfx_raw_setsockopt+0x10/0x10
[  690.089245][T14192]  ? __fget_files+0x2a/0x420
[  690.089272][T14192]  ? __fget_files+0x2a/0x420
[  690.089293][T14192]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  690.089319][T14192]  ? __pfx_raw_setsockopt+0x10/0x10
[  690.089346][T14192]  do_sock_setsockopt+0x17c/0x1b0
[  690.089371][T14192]  __x64_sys_setsockopt+0x143/0x1b0
[  690.089397][T14192]  do_syscall_64+0x14d/0xf80
[  690.089418][T14192]  ? trace_irq_disable+0x3b/0x150
[  690.089440][T14192]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.089458][T14192]  ? clear_bhb_loop+0x40/0x90
[  690.089478][T14192]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.089495][T14192] RIP: 0033:0x7fd0708dc819
[  690.089514][T14192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.089530][T14192] RSP: 002b:00007fd06eb2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  690.089550][T14192] RAX: ffffffffffffffda RBX: 00007fd070b55fa0 RCX: 00007fd0708dc819
[  690.089563][T14192] RDX: 0000000000000002 RSI: 0000000000000065 RDI: 0000000000000003
[  690.089574][T14192] RBP: 00007fd06eb2e090 R08: 0000000000000004 R09: 0000000000000000
[  690.089586][T14192] R10: 0000200000000a40 R11: 0000000000000246 R12: 0000000000000001
[  690.089597][T14192] R13: 00007fd070b56038 R14: 00007fd070b55fa0 R15: 00007fff61f5bff8
[  690.089627][T14192]  </TASK>
[  690.455051][    C0] powermate: config urb returned -71
[  690.456598][    C0] powermate: config urb returned -71
[  690.456806][    C0] powermate: config urb returned -71
[  690.457007][    C0] powermate: config urb returned -71
[  690.460850][    T9] usb 4-1: USB disconnect, device number 54
[  690.460948][    C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  690.745827][T14196] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  690.848512][T14200] FAULT_INJECTION: forcing a failure.
[  690.848512][T14200] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  690.848540][T14200] CPU: 0 UID: 0 PID: 14200 Comm: syz.3.2889 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  690.848559][T14200] Tainted: [L]=SOFTLOCKUP
[  690.848564][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  690.848572][T14200] Call Trace:
[  690.848577][T14200]  <TASK>
[  690.848583][T14200]  dump_stack_lvl+0xe8/0x150
[  690.848607][T14200]  should_fail_ex+0x46b/0x600
[  690.848627][T14200]  _copy_from_user+0x2d/0xb0
[  690.848641][T14200]  ___sys_sendmsg+0x1c6/0x360
[  690.848659][T14200]  ? __pfx____sys_sendmsg+0x10/0x10
[  690.848692][T14200]  ? __fget_files+0x2a/0x420
[  690.848709][T14200]  ? __fget_files+0x3a6/0x420
[  690.848730][T14200]  __x64_sys_sendmsg+0x1c3/0x2a0
[  690.848745][T14200]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  690.848765][T14200]  ? __pfx_ksys_write+0x10/0x10
[  690.848790][T14200]  do_syscall_64+0x14d/0xf80
[  690.848804][T14200]  ? trace_irq_disable+0x3b/0x150
[  690.848819][T14200]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.848841][T14200]  ? clear_bhb_loop+0x40/0x90
[  690.848856][T14200]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  690.848868][T14200] RIP: 0033:0x7efddd87c819
[  690.848881][T14200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  690.848893][T14200] RSP: 002b:00007efddbad6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  690.848907][T14200] RAX: ffffffffffffffda RBX: 00007efdddaf5fa0 RCX: 00007efddd87c819
[  690.848917][T14200] RDX: 0000000000048804 RSI: 0000200000006ac0 RDI: 0000000000000003
[  690.848925][T14200] RBP: 00007efddbad6090 R08: 0000000000000000 R09: 0000000000000000
[  690.848932][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  690.848940][T14200] R13: 00007efdddaf6038 R14: 00007efdddaf5fa0 R15: 00007ffd6a7d1138
[  690.848958][T14200]  </TASK>
[  692.360628][T14213] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2895'.
[  692.557820][ T5939] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  692.694614][T14213] could not allocate digest TFM handle xxhash64-generic
[  692.708172][ T5939] usb 4-1: Using ep0 maxpacket: 32
[  692.711847][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  692.711880][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  692.749895][ T5939] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  692.749931][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.749954][ T5939] usb 4-1: Product: syz
[  692.749971][ T5939] usb 4-1: Manufacturer: syz
[  692.749988][ T5939] usb 4-1: SerialNumber: syz
[  692.828112][   T37] kauditd_printk_skb: 37 callbacks suppressed
[  692.828134][   T37] audit: type=1326 audit(2000000607.933:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  692.836639][   T37] audit: type=1326 audit(2000000607.943:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  692.836681][   T37] audit: type=1326 audit(2000000607.943:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  692.837730][   T37] audit: type=1326 audit(2000000607.943:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd07089d04e code=0x7ffc0000
[  692.837785][   T37] audit: type=1326 audit(2000000607.943:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  692.847370][   T37] audit: type=1326 audit(2000000607.943:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  692.847422][   T37] audit: type=1326 audit(2000000607.953:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  692.847462][   T37] audit: type=1326 audit(2000000607.953:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  692.907858][    T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  692.958981][   T37] audit: type=1326 audit(2000000608.073:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  693.040124][   T37] audit: type=1326 audit(2000000608.153:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14223 comm="syz.2.2898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc4ab code=0x7ffc0000
[  693.057762][    T9] usb 2-1: Using ep0 maxpacket: 8
[  693.060467][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  693.060500][    T9] usb 2-1: config 179 has no interface number 0
[  693.060545][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  693.060571][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  693.060597][    T9] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  693.060624][    T9] usb 2-1: config 179 interface 65 has no altsetting 0
[  693.060656][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  693.060679][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.097814][   T10] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  693.194400][ T5939] usb 4-1: config 0 descriptor??
[  693.207068][ T5939] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  693.303359][   T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  693.303383][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.303395][   T10] usb 3-1: Product: syz
[  693.303405][   T10] usb 3-1: Manufacturer: syz
[  693.303414][   T10] usb 3-1: SerialNumber: syz
[  693.356318][   T10] usb 3-1: config 0 descriptor??
[  693.371995][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  693.574238][T12626] usb 2-1: USB disconnect, device number 80
[  693.811507][ T5939] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  693.858036][ T5939] usb 4-1: USB disconnect, device number 55
[  693.878364][   T10] gspca_sunplus: reg_r err -110
[  693.932609][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  694.384274][T14235] FAULT_INJECTION: forcing a failure.
[  694.384274][T14235] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  694.384316][T14235] CPU: 0 UID: 0 PID: 14235 Comm: syz.1.2902 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  694.384347][T14235] Tainted: [L]=SOFTLOCKUP
[  694.384356][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  694.384370][T14235] Call Trace:
[  694.384380][T14235]  <TASK>
[  694.384389][T14235]  dump_stack_lvl+0xe8/0x150
[  694.384429][T14235]  should_fail_ex+0x46b/0x600
[  694.384465][T14235]  _copy_from_user+0x2d/0xb0
[  694.384489][T14235]  ___sys_recvmsg+0x175/0x590
[  694.384524][T14235]  ? __pfx____sys_recvmsg+0x10/0x10
[  694.384578][T14235]  ? __fget_files+0x3a6/0x420
[  694.384621][T14235]  do_recvmmsg+0x33a/0x800
[  694.384658][T14235]  ? __pfx_do_recvmmsg+0x10/0x10
[  694.384708][T14235]  ? rt_mutex_slowunlock+0x1cb/0x300
[  694.384756][T14235]  __x64_sys_recvmmsg+0x198/0x250
[  694.384786][T14235]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  694.384822][T14235]  do_syscall_64+0x14d/0xf80
[  694.384844][T14235]  ? trace_irq_disable+0x3b/0x150
[  694.384869][T14235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.384891][T14235]  ? clear_bhb_loop+0x40/0x90
[  694.384919][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  694.384941][T14235] RIP: 0033:0x7f18f707c819
[  694.384962][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.384982][T14235] RSP: 002b:00007f18f52ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  694.385007][T14235] RAX: ffffffffffffffda RBX: 00007f18f72f5fa0 RCX: 00007f18f707c819
[  694.385024][T14235] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004
[  694.385040][T14235] RBP: 00007f18f52ce090 R08: 0000000000000000 R09: 0000000000000000
[  694.385054][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  694.385067][T14235] R13: 00007f18f72f6038 R14: 00007f18f72f5fa0 R15: 00007ffea948b958
[  694.385103][T14235]  </TASK>
[  694.837584][T14244] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  694.861301][   T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  694.903890][T14247] binder: Unknown parameter 'audit'
[  695.010743][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  695.010830][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  695.010877][   T10] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  695.015439][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  695.015473][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.015495][   T10] usb 6-1: Product: syz
[  695.015511][   T10] usb 6-1: Manufacturer: syz
[  695.015526][   T10] usb 6-1: SerialNumber: syz
[  695.070067][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'.
[  695.133269][T14250] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  695.160170][T14249] vlan2: entered promiscuous mode
[  695.160191][T14249] dummy0: entered promiscuous mode
[  695.251211][T14238] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85
[  695.404675][T14254] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2909'.
[  695.427768][   T10] cdc_ncm 6-1:1.0: bind() failure
[  695.492264][   T10] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  695.492298][   T10] cdc_ncm 6-1:1.1: bind() failure
[  695.512350][   T10] usb 6-1: USB disconnect, device number 19
[  695.649374][T14254] could not allocate digest TFM handle xxhash64-generic
[  695.820018][T14261] netlink: 'syz.3.2911': attribute type 1 has an invalid length.
[  695.820045][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2911'.
[  695.997736][  T930] usb 3-1: USB disconnect, device number 81
[  696.107668][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  696.217771][    T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  696.226863][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2914'.
[  696.227263][T14268] 8021q: VLANs not supported on nlmon0
[  696.257749][   T10] usb 4-1: Using ep0 maxpacket: 8
[  696.268223][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  696.269547][   T10] usb 4-1: config index 0 descriptor too short (expected 24515, got 122)
[  696.269573][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  696.269592][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  696.272430][   T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  696.272456][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.272476][   T10] usb 4-1: Product: syz
[  696.272494][   T10] usb 4-1: Manufacturer: syz
[  696.272510][   T10] usb 4-1: SerialNumber: syz
[  696.368842][    T9] usb 2-1: Using ep0 maxpacket: 8
[  696.387247][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  696.387352][    T9] usb 2-1: config 179 has no interface number 0
[  696.387678][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  696.387712][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  696.387800][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7
[  696.387827][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024
[  696.387852][    T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  696.387878][    T9] usb 2-1: config 179 interface 65 has no altsetting 0
[  696.387969][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  696.387991][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.511527][T14261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.536282][T14261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.548234][ T5939] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  696.682018][   T10] usb 4-1: unknown interface protocol 0x14, assuming v1
[  696.682048][   T10] usb 4-1: cannot find UAC_HEADER
[  696.704961][ T5939] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[  696.704993][ T5939] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  696.705016][ T5939] usb 3-1: config 201 has no interface number 0
[  696.705066][ T5939] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  696.705095][ T5939] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  696.705126][ T5939] usb 3-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  696.705157][ T5939] usb 3-1: config 201 interface 249 has no altsetting 0
[  696.717161][ T5939] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  696.717196][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.717218][ T5939] usb 3-1: Product: syz
[  696.717234][ T5939] usb 3-1: Manufacturer: syz
[  696.717250][ T5939] usb 3-1: SerialNumber: syz
[  696.997804][ T5956] usb 2-1: USB disconnect, device number 81
[  697.244873][   T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  697.325622][   T10] usb 4-1: USB disconnect, device number 56
[  697.334310][ T5939] ath6kl: Failed to submit usb control message: -71
[  697.334368][ T5939] ath6kl: unable to send the bmi data to the device: -71
[  697.334385][ T5939] ath6kl: Unable to send get target info: -71
[  697.335965][ T5939] ath6kl: Failed to init ath6kl core: -71
[  697.365846][ T5939] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71
[  697.420865][ T5939] usb 3-1: USB disconnect, device number 82
[  697.581438][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  697.709896][T14288] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  697.889159][   T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  698.041059][   T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  698.041099][   T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  698.041143][   T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  698.041170][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.059857][T14291] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2922'.
[  698.064703][T14285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  698.173818][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  698.280100][T14291] could not allocate digest TFM handle xxhash64-generic
[  698.657220][T14300] FAULT_INJECTION: forcing a failure.
[  698.657220][T14300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.657268][T14300] CPU: 1 UID: 0 PID: 14300 Comm: syz.5.2923 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  698.657299][T14300] Tainted: [L]=SOFTLOCKUP
[  698.657307][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  698.657321][T14300] Call Trace:
[  698.657329][T14300]  <TASK>
[  698.657339][T14300]  dump_stack_lvl+0xe8/0x150
[  698.657377][T14300]  should_fail_ex+0x46b/0x600
[  698.657422][T14300]  _copy_to_iter+0x1e4/0x17d0
[  698.657459][T14300]  ? __lock_acquire+0x6b5/0x2cf0
[  698.657490][T14300]  ? __pfx__copy_to_iter+0x10/0x10
[  698.657528][T14300]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  698.657564][T14300]  __skb_datagram_iter+0xf8/0x980
[  698.657594][T14300]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  698.657631][T14300]  skb_copy_datagram_iter+0xb5/0x270
[  698.657663][T14300]  virtio_transport_stream_dequeue+0x3c1/0xb30
[  698.657699][T14300]  ? virtio_transport_stream_dequeue+0xdb/0xb30
[  698.657739][T14300]  ? __pfx_virtio_transport_stream_dequeue+0x10/0x10
[  698.657767][T14300]  ? vsock_connectible_wait_data+0x4de/0x520
[  698.657817][T14300]  __vsock_connectible_recvmsg+0x85e/0xc50
[  698.657868][T14300]  ? __pfx___vsock_connectible_recvmsg+0x10/0x10
[  698.657900][T14300]  ? get_pid_task+0x20/0x1f0
[  698.657937][T14300]  ? __pfx_autoremove_wake_function+0x10/0x10
[  698.657976][T14300]  ? __fget_files+0x3a6/0x420
[  698.658004][T14300]  ? vsock_connectible_recvmsg+0xba/0xe0
[  698.658036][T14300]  ? __pfx_vsock_connectible_recvmsg+0x10/0x10
[  698.658069][T14300]  sock_recvmsg+0x172/0x1b0
[  698.658105][T14300]  __sys_recvfrom+0x23f/0x3d0
[  698.658136][T14300]  ? __pfx___sys_recvfrom+0x10/0x10
[  698.658189][T14300]  ? ksys_write+0x248/0x270
[  698.658227][T14300]  ? __pfx_ksys_write+0x10/0x10
[  698.658266][T14300]  __x64_sys_recvfrom+0xde/0x100
[  698.658294][T14300]  do_syscall_64+0x14d/0xf80
[  698.658318][T14300]  ? trace_irq_disable+0x3b/0x150
[  698.658345][T14300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.658368][T14300]  ? clear_bhb_loop+0x40/0x90
[  698.658396][T14300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.658427][T14300] RIP: 0033:0x7f26b1e7c819
[  698.658448][T14300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  698.658467][T14300] RSP: 002b:00007f26b00ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[  698.658492][T14300] RAX: ffffffffffffffda RBX: 00007f26b20f6090 RCX: 00007f26b1e7c819
[  698.658509][T14300] RDX: 000000000000feb5 RSI: 00002000000001c0 RDI: 0000000000000004
[  698.658521][T14300] RBP: 00007f26b00ad090 R08: 0000000000000000 R09: 0000000000000000
[  698.658534][T14300] R10: 0000000000010120 R11: 0000000000000246 R12: 0000000000000001
[  698.658547][T14300] R13: 00007f26b20f6128 R14: 00007f26b20f6090 R15: 00007ffddeaa05a8
[  698.658582][T14300]  </TASK>
[  699.061474][T14304] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  700.510747][T14321] FAULT_INJECTION: forcing a failure.
[  700.510747][T14321] name failslab, interval 1, probability 0, space 0, times 0
[  700.510787][T14321] CPU: 0 UID: 0 PID: 14321 Comm: syz.0.2929 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  700.510817][T14321] Tainted: [L]=SOFTLOCKUP
[  700.510825][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  700.510839][T14321] Call Trace:
[  700.510847][T14321]  <TASK>
[  700.510857][T14321]  dump_stack_lvl+0xe8/0x150
[  700.510895][T14321]  should_fail_ex+0x46b/0x600
[  700.510931][T14321]  should_failslab+0xa8/0x100
[  700.510956][T14321]  __kmalloc_noprof+0xdf/0x7b0
[  700.510975][T14321]  ? kfree+0x4d/0x6c0
[  700.511005][T14321]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  700.511042][T14321]  tomoyo_realpath_from_path+0xe3/0x5d0
[  700.511082][T14321]  ? tomoyo_path_number_perm+0x219/0x630
[  700.511105][T14321]  tomoyo_path_number_perm+0x246/0x630
[  700.511132][T14321]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  700.511160][T14321]  ? __lock_acquire+0x6b5/0x2cf0
[  700.511215][T14321]  ? __fget_files+0x2a/0x420
[  700.511246][T14321]  ? __fget_files+0x2a/0x420
[  700.511270][T14321]  ? __fget_files+0x3a6/0x420
[  700.511295][T14321]  ? __fget_files+0x2a/0x420
[  700.511326][T14321]  security_file_ioctl+0xc3/0x2a0
[  700.511362][T14321]  __se_sys_ioctl+0x47/0x170
[  700.511387][T14321]  do_syscall_64+0x14d/0xf80
[  700.511412][T14321]  ? trace_irq_disable+0x3b/0x150
[  700.511439][T14321]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.511461][T14321]  ? clear_bhb_loop+0x40/0x90
[  700.511489][T14321]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.511512][T14321] RIP: 0033:0x7f59aadcc819
[  700.511533][T14321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.511551][T14321] RSP: 002b:00007f59a901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  700.511575][T14321] RAX: ffffffffffffffda RBX: 00007f59ab045fa0 RCX: 00007f59aadcc819
[  700.511591][T14321] RDX: 0000000000000000 RSI: 000000000000894b RDI: 0000000000000003
[  700.511606][T14321] RBP: 00007f59a901e090 R08: 0000000000000000 R09: 0000000000000000
[  700.511620][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.511635][T14321] R13: 00007f59ab046038 R14: 00007f59ab045fa0 R15: 00007ffdd5836648
[  700.511670][T14321]  </TASK>
[  700.511680][T14321] ERROR: Out of memory at tomoyo_realpath_from_path.
[  700.683286][T14323] netlink: 'syz.1.2930': attribute type 1 has an invalid length.
[  700.683310][T14323] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2930'.
[  700.937405][   T10] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  700.987374][    T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  701.105138][T14333] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2934'.
[  701.107354][   T10] usb 2-1: Using ep0 maxpacket: 8
[  701.123627][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  701.125128][   T10] usb 2-1: config index 0 descriptor too short (expected 24515, got 122)
[  701.125158][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  701.125179][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  701.131013][   T10] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  701.131042][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.131062][   T10] usb 2-1: Product: syz
[  701.131076][   T10] usb 2-1: Manufacturer: syz
[  701.131090][   T10] usb 2-1: SerialNumber: syz
[  701.162508][    T9] usb 3-1: Using ep0 maxpacket: 8
[  701.188079][    T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  701.188110][    T9] usb 3-1: config 179 has no interface number 0
[  701.188216][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  701.188244][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  701.188270][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7
[  701.188350][    T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024
[  701.188376][    T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  701.188401][    T9] usb 3-1: config 179 interface 65 has no altsetting 0
[  701.188434][    T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  701.188511][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.450492][T14323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.465220][T14323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.472154][T14340] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  701.495166][T14333] could not allocate digest TFM handle xxhash64-generic
[  701.562587][   T10] usb 2-1: unknown interface protocol 0x14, assuming v1
[  701.562605][   T10] usb 2-1: cannot find UAC_HEADER
[  701.567020][    T9] usb 3-1: USB disconnect, device number 83
[  701.655109][ T5955] usb 4-1: USB disconnect, device number 57
[  701.711314][   T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  701.725580][   T10] usb 2-1: USB disconnect, device number 82
[  701.826848][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  701.988397][T14346] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  703.142100][T14354] vlan3: entered promiscuous mode
[  703.154544][T14355] netlink: zone id is out of range
[  703.154561][T14355] netlink: zone id is out of range
[  703.154569][T14355] netlink: zone id is out of range
[  703.154579][T14355] netlink: zone id is out of range
[  703.154588][T14355] netlink: zone id is out of range
[  703.154597][T14355] netlink: zone id is out of range
[  703.154606][T14355] netlink: zone id is out of range
[  703.154615][T14355] netlink: zone id is out of range
[  703.154623][T14355] netlink: zone id is out of range
[  703.154631][T14355] netlink: zone id is out of range
[  704.727928][T12330] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  704.989149][T14369] sctp: [Deprecated]: syz.1.2943 (pid 14369) Use of int in max_burst socket option.
[  704.989149][T14369] Use struct sctp_assoc_value instead
[  705.012913][T12330] usb 1-1: Using ep0 maxpacket: 16
[  705.015465][T12330] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.015524][T12330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  705.015555][T12330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  705.015579][T12330] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  705.015613][T12330] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  705.017186][T12330] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  705.017216][T12330] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  705.017239][T12330] usb 1-1: Manufacturer: syz
[  705.121800][T12330] usb 1-1: config 0 descriptor??
[  705.234213][T14369] bond_slave_0: entered promiscuous mode
[  705.261639][T14370] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  705.263852][T14369] bond_slave_1: entered promiscuous mode
[  705.345201][T14369] vlan2: entered promiscuous mode
[  705.345815][T14369] bond0: entered promiscuous mode
[  705.372437][T14374] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2946'.
[  705.497033][T12330] rc_core: IR keymap rc-hauppauge not found
[  705.497059][T12330] Registered IR keymap rc-empty
[  705.497229][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.527655][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.589043][T12330] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  705.613228][T12330] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input63
[  705.641800][T14374] could not allocate digest TFM handle xxhash64-generic
[  705.643667][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.667468][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.688407][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.707633][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.727968][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.757371][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.777164][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.797241][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.817312][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.837114][T12330] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  705.886409][T12330] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  705.886440][T12330] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  706.151323][T12330] usb 1-1: USB disconnect, device number 76
[  706.157065][T14390] netlink: 'syz.5.2949': attribute type 1 has an invalid length.
[  706.157092][T14390] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2949'.
[  706.668055][ T5956] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  707.088728][ T5956] usb 6-1: Using ep0 maxpacket: 8
[  707.092625][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short
[  707.115910][ T5956] usb 6-1: config index 0 descriptor too short (expected 24515, got 122)
[  707.115944][ T5956] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  707.115966][ T5956] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  707.153525][ T5956] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  707.153568][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.153592][ T5956] usb 6-1: Product: syz
[  707.153608][ T5956] usb 6-1: Manufacturer: syz
[  707.153624][ T5956] usb 6-1: SerialNumber: syz
[  707.246918][ T5870] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  707.272830][T14394] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  707.334684][T14397] ./file0: Can't lookup blockdev
[  707.397002][ T5870] usb 2-1: Using ep0 maxpacket: 8
[  707.399465][ T5870] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  707.399494][ T5870] usb 2-1: config 179 has no interface number 0
[  707.399545][ T5870] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  707.399575][ T5870] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  707.399603][ T5870] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 7
[  707.399629][ T5870] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 9272, setting to 1024
[  707.399653][ T5870] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  707.399670][ T5870] usb 2-1: config 179 interface 65 has no altsetting 0
[  707.399705][ T5870] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  707.399730][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.471861][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.472462][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.537694][ T5956] usb 6-1: unknown interface protocol 0x14, assuming v1
[  707.537722][ T5956] usb 6-1: cannot find UAC_HEADER
[  707.584951][ T5956] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  707.597276][ T5956] usb 6-1: USB disconnect, device number 20
[  707.627330][T12330] usb 2-1: USB disconnect, device number 83
[  707.634338][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  708.487847][ T5870] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  708.731669][ T5870] usb 4-1: Using ep0 maxpacket: 32
[  708.852558][ T5870] usb 4-1: config 0 has an invalid interface number: 103 but max is 2
[  708.852591][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.852614][ T5870] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  708.852636][ T5870] usb 4-1: config 0 has no interface number 0
[  708.852673][ T5870] usb 4-1: config 0 interface 103 has no altsetting 0
[  708.908224][ T5870] usb 4-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=d5.af
[  708.908259][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.908282][ T5870] usb 4-1: Product: syz
[  708.908298][ T5870] usb 4-1: Manufacturer: syz
[  708.908314][ T5870] usb 4-1: SerialNumber: syz
[  708.955606][ T5870] usb 4-1: config 0 descriptor??
[  709.259827][ T5870] zaurus 4-1:0.103: skipping garbage
[  709.259856][ T5870] usb 4-1: bad CDC descriptors
[  709.291698][ T5870] usb 4-1: USB disconnect, device number 58
[  709.425221][T14419] FAULT_INJECTION: forcing a failure.
[  709.425221][T14419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  709.425262][T14419] CPU: 0 UID: 0 PID: 14419 Comm: syz.1.2960 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  709.425303][T14419] Tainted: [L]=SOFTLOCKUP
[  709.425313][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  709.425327][T14419] Call Trace:
[  709.425336][T14419]  <TASK>
[  709.425346][T14419]  dump_stack_lvl+0xe8/0x150
[  709.425385][T14419]  should_fail_ex+0x46b/0x600
[  709.425422][T14419]  _copy_from_user+0x2d/0xb0
[  709.425446][T14419]  ___sys_sendmsg+0x1c6/0x360
[  709.425480][T14419]  ? __pfx____sys_sendmsg+0x10/0x10
[  709.425543][T14419]  ? __fget_files+0x2a/0x420
[  709.425572][T14419]  ? __fget_files+0x3a6/0x420
[  709.425612][T14419]  __x64_sys_sendmsg+0x1c3/0x2a0
[  709.425642][T14419]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  709.425678][T14419]  ? __pfx_ksys_write+0x10/0x10
[  709.425723][T14419]  do_syscall_64+0x14d/0xf80
[  709.425747][T14419]  ? trace_irq_disable+0x3b/0x150
[  709.425774][T14419]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.425797][T14419]  ? clear_bhb_loop+0x40/0x90
[  709.425824][T14419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.425845][T14419] RIP: 0033:0x7f18f707c819
[  709.425866][T14419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  709.425886][T14419] RSP: 002b:00007f18f52ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  709.425910][T14419] RAX: ffffffffffffffda RBX: 00007f18f72f5fa0 RCX: 00007f18f707c819
[  709.425926][T14419] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  709.425940][T14419] RBP: 00007f18f52ce090 R08: 0000000000000000 R09: 0000000000000000
[  709.425954][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.425967][T14419] R13: 00007f18f72f6038 R14: 00007f18f72f5fa0 R15: 00007ffea948b958
[  709.426002][T14419]  </TASK>
[  709.665633][T14425] FAULT_INJECTION: forcing a failure.
[  709.665633][T14425] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  709.665661][T14425] CPU: 1 UID: 0 PID: 14425 Comm: syz.5.2962 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  709.665679][T14425] Tainted: [L]=SOFTLOCKUP
[  709.665684][T14425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  709.665692][T14425] Call Trace:
[  709.665698][T14425]  <TASK>
[  709.665703][T14425]  dump_stack_lvl+0xe8/0x150
[  709.665728][T14425]  should_fail_ex+0x46b/0x600
[  709.665749][T14425]  prepare_alloc_pages+0x22a/0x6b0
[  709.665768][T14425]  __alloc_frozen_pages_noprof+0x12f/0x380
[  709.665785][T14425]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  709.665802][T14425]  ? __pfx_policy_nodemask+0x10/0x10
[  709.665814][T14425]  ? __lock_acquire+0x6b5/0x2cf0
[  709.665829][T14425]  ? __lock_acquire+0x6b5/0x2cf0
[  709.665842][T14425]  alloc_pages_mpol+0xd1/0x380
[  709.665858][T14425]  vma_alloc_folio_noprof+0xea/0x290
[  709.665874][T14425]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  709.665894][T14425]  do_pte_missing+0x7f9/0x29e0
[  709.665917][T14425]  handle_mm_fault+0xd0a/0x13c0
[  709.665940][T14425]  ? handle_mm_fault+0xe7/0x13c0
[  709.665961][T14425]  ? __pfx_handle_mm_fault+0x10/0x10
[  709.665978][T14425]  ? lock_vma_under_rcu+0x45a/0x500
[  709.666007][T14425]  do_user_addr_fault+0xa73/0x1340
[  709.666030][T14425]  ? rcu_is_watching+0x15/0xb0
[  709.666044][T14425]  ? trace_page_fault_user+0x84/0x210
[  709.666063][T14425]  exc_page_fault+0x6a/0xc0
[  709.666078][T14425]  asm_exc_page_fault+0x26/0x30
[  709.666091][T14425] RIP: 0033:0x7f26b1d3dfcb
[  709.666104][T14425] Code: 00 00 00 48 8d 3d bd a6 1a 00 48 89 c1 31 c0 e8 5b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 a6 1a 00 48 89 34 24 48 8b 14 24 48 8b
[  709.666115][T14425] RSP: 002b:00007f26b00ccfa0 EFLAGS: 00010206
[  709.666129][T14425] RAX: 0000000000000000 RBX: 00007f26b20f5fa0 RCX: 0000000000000000
[  709.666137][T14425] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000020000009f580
[  709.666147][T14425] RBP: 00007f26b00ce090 R08: 0000000000000000 R09: 0000000000000000
[  709.666155][T14425] R10: 000020000009f580 R11: 0000000000000000 R12: 0000000000000001
[  709.666163][T14425] R13: 00007f26b20f6038 R14: 00007f26b20f5fa0 R15: 00007ffddeaa05a8
[  709.666182][T14425]  </TASK>
[  709.666191][T14425] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  709.899542][T14431] ./file0: Can't lookup blockdev
[  710.045491][T14434] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  710.056878][ T5939] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  710.146900][ T5956] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  710.206912][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  710.209994][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  710.210063][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  710.210081][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  710.210100][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  710.210114][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  710.211298][ T5939] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  710.211325][ T5939] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  710.211344][ T5939] usb 1-1: Manufacturer: syz
[  710.215402][ T5939] usb 1-1: config 0 descriptor??
[  710.357013][  T930] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  710.366844][ T5956] usb 2-1: device descriptor read/64, error -71
[  710.457204][T14440] netlink: 'syz.3.2968': attribute type 1 has an invalid length.
[  710.457232][T14440] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2968'.
[  710.506830][  T930] usb 3-1: Using ep0 maxpacket: 8
[  710.512934][  T930] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  710.512966][  T930] usb 3-1: config 179 has no interface number 0
[  710.513021][  T930] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  710.513038][  T930] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  710.513055][  T930] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  710.513071][  T930] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  710.513088][  T930] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  710.513104][  T930] usb 3-1: config 179 interface 65 has no altsetting 0
[  710.513127][  T930] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  710.513141][  T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.555401][  T930] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input65
[  710.597060][ T5151] input input65: unable to receive magic message: -110
[  710.639536][ T5939] rc_core: IR keymap rc-hauppauge not found
[  710.639559][ T5939] Registered IR keymap rc-empty
[  710.641373][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.664884][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.666833][ T5956] usb 2-1: new full-speed USB device number 85 using dummy_hcd
[  710.686099][ T5939] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  710.696834][T12330] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  710.718551][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input64
[  710.724555][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.750386][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.766330][ T5151] input input65: unable to receive magic message: -32
[  710.767004][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.791307][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.806892][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.807197][ T5956] usb 2-1: device descriptor read/64, error -71
[  710.826900][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.846784][T12330] usb 4-1: Using ep0 maxpacket: 8
[  710.846849][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.862874][T12330] usb 4-1: unable to get BOS descriptor or descriptor too short
[  710.866879][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.868453][T12330] usb 4-1: config index 0 descriptor too short (expected 24515, got 122)
[  710.868483][T12330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.868502][T12330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  710.875163][T12330] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  710.875416][T12330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.875438][T12330] usb 4-1: Product: syz
[  710.875451][T12330] usb 4-1: Manufacturer: syz
[  710.875465][T12330] usb 4-1: SerialNumber: syz
[  710.886936][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.906806][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  710.919393][ T5151] input input65: unable to receive magic message: -32
[  710.969840][ T5956] usb usb2-port1: attempt power cycle
[  711.004622][ T5939] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  711.004650][ T5939] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  711.027709][  T930] usb 3-1: USB disconnect, device number 84
[  711.027831][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  711.110987][ T5939] usb 1-1: USB disconnect, device number 77
[  711.426865][T14440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.432197][T14440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.844027][T12330] usb 4-1: unknown interface protocol 0x14, assuming v1
[  711.844372][T12330] usb 4-1: cannot find UAC_HEADER
[  712.116151][T12330] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  712.152554][T12330] usb 4-1: USB disconnect, device number 59
[  712.208463][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  712.319803][ T5956] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  712.347437][ T5956] usb 2-1: device descriptor read/8, error -71
[  712.596841][ T5956] usb 2-1: new full-speed USB device number 87 using dummy_hcd
[  712.621667][ T5956] usb 2-1: device descriptor read/8, error -71
[  712.727576][ T5956] usb usb2-port1: unable to enumerate USB device
[  713.770927][T14480] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  713.902347][   T60] Bluetooth: hci3: unexpected event for opcode 0x203c
[  714.026766][ T5956] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  714.165415][T14491] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  714.186638][ T5956] usb 6-1: Using ep0 maxpacket: 8
[  714.189002][ T5956] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  714.189031][ T5956] usb 6-1: config 179 has no interface number 0
[  714.189075][ T5956] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  714.189091][ T5956] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  714.189109][ T5956] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  714.189124][ T5956] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  714.189139][ T5956] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  714.189156][ T5956] usb 6-1: config 179 interface 65 has no altsetting 0
[  714.189177][ T5956] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  714.189191][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.289674][ T5956] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input66
[  714.329769][T14494] ./file0: Can't lookup blockdev
[  714.347383][ T5151] input input66: unable to receive magic message: -110
[  714.391104][T14492] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2983'.
[  714.418572][ T5151] input input66: unable to receive magic message: -32
[  714.538752][ T5151] input input66: unable to receive magic message: -32
[  714.578895][ T5956] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  714.601410][ T5151] input input66: unable to receive magic message: -32
[  714.648779][T14496] netlink: 'syz.1.2985': attribute type 1 has an invalid length.
[  714.648804][T14496] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2985'.
[  714.692249][ T5151] input input66: unable to receive magic message: -32
[  714.704096][ T5939] usb 6-1: USB disconnect, device number 21
[  714.704173][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  714.704214][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  714.708334][ T5956] usb 4-1: device descriptor read/64, error -71
[  714.886606][ T5955] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  714.946573][ T5956] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  715.036699][ T5955] usb 2-1: Using ep0 maxpacket: 8
[  715.040576][ T5955] usb 2-1: unable to get BOS descriptor or descriptor too short
[  715.041764][ T5955] usb 2-1: config index 0 descriptor too short (expected 24515, got 122)
[  715.041794][ T5955] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  715.041821][ T5955] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  715.044730][ T5955] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  715.044755][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.044768][ T5955] usb 2-1: Product: syz
[  715.044777][ T5955] usb 2-1: Manufacturer: syz
[  715.044786][ T5955] usb 2-1: SerialNumber: syz
[  715.076789][ T5956] usb 4-1: device descriptor read/64, error -71
[  715.136693][ T5939] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  715.196203][ T5956] usb usb4-port1: attempt power cycle
[  715.286648][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  715.292531][ T5939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  715.292991][ T5939] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  715.293021][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.331932][T14496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  715.337870][ T5939] usb 1-1: config 0 descriptor??
[  715.340775][T14496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  715.393681][ T5939] gspca_main: vc032x-2.14.0 probing 046d:0892
[  715.445857][ T5955] usb 2-1: unknown interface protocol 0x14, assuming v1
[  715.445876][ T5955] usb 2-1: cannot find UAC_HEADER
[  715.446606][  T808] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  715.536567][ T5956] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  715.575764][ T5956] usb 4-1: device descriptor read/8, error -71
[  715.600819][  T808] usb 3-1: Using ep0 maxpacket: 32
[  715.612154][  T808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 149
[  715.629451][  T808] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  715.629485][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.629508][  T808] usb 3-1: Product: syz
[  715.629525][  T808] usb 3-1: Manufacturer: syz
[  715.629605][  T808] usb 3-1: SerialNumber: syz
[  715.679653][T14507] FAULT_INJECTION: forcing a failure.
[  715.679653][T14507] name failslab, interval 1, probability 0, space 0, times 0
[  715.679693][T14507] CPU: 0 UID: 0 PID: 14507 Comm: syz.5.2990 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  715.679723][T14507] Tainted: [L]=SOFTLOCKUP
[  715.679732][T14507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  715.679745][T14507] Call Trace:
[  715.679754][T14507]  <TASK>
[  715.679763][T14507]  dump_stack_lvl+0xe8/0x150
[  715.679801][T14507]  should_fail_ex+0x46b/0x600
[  715.679838][T14507]  should_failslab+0xa8/0x100
[  715.679864][T14507]  __kmalloc_noprof+0xdf/0x7b0
[  715.679886][T14507]  ? sock_kmalloc+0xd6/0x160
[  715.679912][T14507]  ? __local_bh_enable+0x1e1/0x2f0
[  715.679946][T14507]  sock_kmalloc+0xd6/0x160
[  715.679976][T14507]  alg_setkey+0x55/0x190
[  715.679997][T14507]  ? alg_setsockopt+0x3c5/0x4a0
[  715.680021][T14507]  alg_setsockopt+0x3da/0x4a0
[  715.680043][T14507]  ? __pfx_alg_setsockopt+0x10/0x10
[  715.680065][T14507]  do_sock_setsockopt+0x17c/0x1b0
[  715.680093][T14507]  __x64_sys_setsockopt+0x143/0x1b0
[  715.680122][T14507]  do_syscall_64+0x14d/0xf80
[  715.680147][T14507]  ? trace_irq_disable+0x3b/0x150
[  715.680171][T14507]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.680193][T14507]  ? clear_bhb_loop+0x40/0x90
[  715.680220][T14507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.680243][T14507] RIP: 0033:0x7f26b1e7c819
[  715.680264][T14507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.680282][T14507] RSP: 002b:00007f26b00ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  715.680306][T14507] RAX: ffffffffffffffda RBX: 00007f26b20f5fa0 RCX: 00007f26b1e7c819
[  715.680322][T14507] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003
[  715.680336][T14507] RBP: 00007f26b00ce090 R08: 0000000000000010 R09: 0000000000000000
[  715.680350][T14507] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001
[  715.680365][T14507] R13: 00007f26b20f6038 R14: 00007f26b20f5fa0 R15: 00007ffddeaa05a8
[  715.680401][T14507]  </TASK>
[  715.781802][  T808] usb 3-1: config 0 descriptor??
[  715.806498][ T5956] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  715.811052][ T5955] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  715.824496][T14502] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  715.849371][ T5956] usb 4-1: device descriptor read/8, error -71
[  715.849542][ T5955] usb 2-1: USB disconnect, device number 88
[  715.883495][  T808] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  715.957828][ T5956] usb usb4-port1: unable to enumerate USB device
[  716.076195][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  716.183072][ T5939] gspca_vc032x: reg_r err -71
[  716.183181][ T5939] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  716.277062][ T5939] usb 1-1: USB disconnect, device number 78
[  716.545320][T14516] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2993'.
[  717.037909][  T808] usb 3-1: USB disconnect, device number 85
[  717.226456][ T5956] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  717.232920][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  717.312614][T14512] could not allocate digest TFM handle xxhash64-generic
[  717.377007][ T5956] usb 2-1: Using ep0 maxpacket: 32
[  717.380226][ T5956] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  717.380256][ T5956] usb 2-1: config 0 has no interface number 0
[  717.380308][ T5956] usb 2-1: config 0 interface 12 has no altsetting 0
[  717.384571][ T5956] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  717.384603][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.384625][ T5956] usb 2-1: Product: syz
[  717.384641][ T5956] usb 2-1: Manufacturer: syz
[  717.384666][ T5956] usb 2-1: SerialNumber: syz
[  717.467571][ T5956] usb 2-1: config 0 descriptor??
[  717.474328][T14526] FAULT_INJECTION: forcing a failure.
[  717.474328][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  717.474369][T14526] CPU: 0 UID: 0 PID: 14526 Comm: syz.2.2995 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  717.474398][T14526] Tainted: [L]=SOFTLOCKUP
[  717.474406][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  717.474420][T14526] Call Trace:
[  717.474429][T14526]  <TASK>
[  717.474439][T14526]  dump_stack_lvl+0xe8/0x150
[  717.474477][T14526]  should_fail_ex+0x46b/0x600
[  717.474510][T14526]  _copy_from_user+0x2d/0xb0
[  717.474530][T14526]  ___sys_sendmsg+0x1c6/0x360
[  717.474549][T14526]  ? __pfx____sys_sendmsg+0x10/0x10
[  717.474598][T14526]  ? __fget_files+0x2a/0x420
[  717.474627][T14526]  ? __fget_files+0x3a6/0x420
[  717.474665][T14526]  __x64_sys_sendmsg+0x1c3/0x2a0
[  717.474691][T14526]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  717.474716][T14526]  ? __pfx_ksys_write+0x10/0x10
[  717.474742][T14526]  do_syscall_64+0x14d/0xf80
[  717.474760][T14526]  ? trace_irq_disable+0x3b/0x150
[  717.474785][T14526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.474807][T14526]  ? clear_bhb_loop+0x40/0x90
[  717.474833][T14526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  717.474854][T14526] RIP: 0033:0x7fd0708dc819
[  717.474873][T14526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  717.474892][T14526] RSP: 002b:00007fd06eb2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  717.474916][T14526] RAX: ffffffffffffffda RBX: 00007fd070b55fa0 RCX: 00007fd0708dc819
[  717.474932][T14526] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001a
[  717.474946][T14526] RBP: 00007fd06eb2e090 R08: 0000000000000000 R09: 0000000000000000
[  717.474960][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  717.474974][T14526] R13: 00007fd070b56038 R14: 00007fd070b55fa0 R15: 00007fff61f5bff8
[  717.475007][T14526]  </TASK>
[  717.539485][T14528] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  717.672107][T14514] netlink: 'syz.1.2992': attribute type 8 has an invalid length.
[  717.672129][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2992'.
[  717.712814][T14514] gretap0: entered promiscuous mode
[  717.714358][T14514] debugfs: 'hsr1' already exists in 'hsr'
[  717.714387][T14514] Cannot create hsr debugfs directory
[  717.714420][T14514] hsr1: entered promiscuous mode
[  717.744616][ T5956] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  717.744682][ T5956] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  717.744702][ T5956] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  717.744808][ T5956] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  717.807783][ T5956] usb 2-1: USB disconnect, device number 89
[  719.272382][T12632] Bluetooth: hci6: command 0x0406 tx timeout
[  719.666283][  T930] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  719.816343][  T808] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  719.827293][T14550] FAULT_INJECTION: forcing a failure.
[  719.827293][T14550] name failslab, interval 1, probability 0, space 0, times 0
[  719.827328][T14550] CPU: 0 UID: 0 PID: 14550 Comm: syz.5.3003 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  719.827355][T14550] Tainted: [L]=SOFTLOCKUP
[  719.827362][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  719.827374][T14550] Call Trace:
[  719.827382][T14550]  <TASK>
[  719.827390][T14550]  dump_stack_lvl+0xe8/0x150
[  719.827432][T14550]  should_fail_ex+0x46b/0x600
[  719.827465][T14550]  should_failslab+0xa8/0x100
[  719.827487][T14550]  __kmalloc_noprof+0xdf/0x7b0
[  719.827511][T14550]  ? kfree+0x4d/0x6c0
[  719.827536][T14550]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  719.827567][T14550]  tomoyo_realpath_from_path+0xe3/0x5d0
[  719.827602][T14550]  ? tomoyo_path_number_perm+0x219/0x630
[  719.827623][T14550]  tomoyo_path_number_perm+0x246/0x630
[  719.827646][T14550]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  719.827669][T14550]  ? __lock_acquire+0x6b5/0x2cf0
[  719.827724][T14550]  ? __fget_files+0x2a/0x420
[  719.827752][T14550]  ? __fget_files+0x2a/0x420
[  719.827775][T14550]  ? __fget_files+0x3a6/0x420
[  719.827798][T14550]  ? __fget_files+0x2a/0x420
[  719.827826][T14550]  security_file_ioctl+0xc3/0x2a0
[  719.827850][T14550]  __se_sys_ioctl+0x47/0x170
[  719.827872][T14550]  do_syscall_64+0x14d/0xf80
[  719.827893][T14550]  ? trace_irq_disable+0x3b/0x150
[  719.827915][T14550]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.827935][T14550]  ? clear_bhb_loop+0x40/0x90
[  719.827959][T14550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.827979][T14550] RIP: 0033:0x7f26b1e7c819
[  719.827998][T14550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  719.828016][T14550] RSP: 002b:00007f26b00ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  719.828037][T14550] RAX: ffffffffffffffda RBX: 00007f26b20f5fa0 RCX: 00007f26b1e7c819
[  719.828052][T14550] RDX: 0000000000000101 RSI: 0000000000004c09 RDI: 0000000000000003
[  719.828065][T14550] RBP: 00007f26b00ce090 R08: 0000000000000000 R09: 0000000000000000
[  719.828078][T14550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  719.828089][T14550] R13: 00007f26b20f6038 R14: 00007f26b20f5fa0 R15: 00007ffddeaa05a8
[  719.828121][T14550]  </TASK>
[  719.828207][T14550] ERROR: Out of memory at tomoyo_realpath_from_path.
[  719.888148][  T930] usb 1-1: Using ep0 maxpacket: 8
[  719.892360][  T930] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  719.892387][  T930] usb 1-1: config 179 has no interface number 0
[  719.892449][  T930] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  719.892480][  T930] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  719.892607][  T930] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  719.892633][  T930] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  719.892658][  T930] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  719.892687][  T930] usb 1-1: config 179 interface 65 has no altsetting 0
[  719.892722][  T930] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  719.892744][  T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  719.996673][  T808] usb 3-1: Using ep0 maxpacket: 32
[  719.999815][  T808] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  719.999844][  T808] usb 3-1: config 0 has no interface number 0
[  719.999896][  T808] usb 3-1: config 0 interface 12 has no altsetting 0
[  720.001275][  T930] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input67
[  720.076461][  T808] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  720.076497][  T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.076520][  T808] usb 3-1: Product: syz
[  720.076534][  T808] usb 3-1: Manufacturer: syz
[  720.076548][  T808] usb 3-1: SerialNumber: syz
[  720.088137][ T5151] input input67: unable to receive magic message: -110
[  720.314415][  T808] usb 3-1: config 0 descriptor??
[  720.353322][T14550] Invalid logical block size (257)
[  720.567075][ T5151] input input67: unable to receive magic message: -71
[  720.617232][  T808] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  720.617312][  T808] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  720.617332][  T808] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  720.617435][  T808] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  720.803554][  T930] usb 1-1: USB disconnect, device number 79
[  720.803657][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  720.870317][  T808] usb 3-1: USB disconnect, device number 86
[  720.920303][ T6982] udevd[6982]: setting owner of /dev/bus/usb/003/086 to uid=0, gid=0 failed: No such file or directory
[  721.540159][T14562] netlink: 17 bytes leftover after parsing attributes in process `syz.5.3006'.
[  722.141609][T14558] could not allocate digest TFM handle xxhash64-generic
[  722.178817][T14569] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  722.547848][T14580] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3010'.
[  722.547881][T14580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'.
[  723.532094][ T5939] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  723.876509][ T5939] usb 6-1: Using ep0 maxpacket: 32
[  723.969714][ T5939] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  723.969806][ T5939] usb 6-1: config 0 has no interface number 0
[  723.970236][ T5939] usb 6-1: config 0 interface 12 has no altsetting 0
[  724.202037][T14592] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  724.674233][ T5939] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  724.674269][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.674291][ T5939] usb 6-1: Product: syz
[  724.674307][ T5939] usb 6-1: Manufacturer: syz
[  724.674322][ T5939] usb 6-1: SerialNumber: syz
[  724.736016][ T5939] usb 6-1: config 0 descriptor??
[  724.814436][   T37] kauditd_printk_skb: 54 callbacks suppressed
[  724.814456][   T37] audit: type=1326 audit(2000000639.915:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.814508][   T37] audit: type=1326 audit(2000000639.925:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.814557][   T37] audit: type=1326 audit(2000000639.925:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.814844][   T37] audit: type=1326 audit(2000000639.925:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.818953][   T37] audit: type=1326 audit(2000000639.925:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.826900][   T37] audit: type=1326 audit(2000000639.945:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.826950][   T37] audit: type=1326 audit(2000000639.945:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.826993][   T37] audit: type=1326 audit(2000000639.945:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.827037][   T37] audit: type=1326 audit(2000000639.945:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.827084][   T37] audit: type=1326 audit(2000000639.945:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14597 comm="syz.3.3020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efddd87c819 code=0x7ffc0000
[  724.833489][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'.
[  724.943412][T14576] netlink: 'syz.5.3012': attribute type 8 has an invalid length.
[  724.943434][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3012'.
[  724.969997][T14576] bond0: entered promiscuous mode
[  724.970020][T14576] bond_slave_0: entered promiscuous mode
[  724.970264][T14576] bond_slave_1: entered promiscuous mode
[  724.978736][T14576] gretap0: entered promiscuous mode
[  725.096405][    T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  725.114130][T14576] bond0: left promiscuous mode
[  725.114154][T14576] bond_slave_0: left promiscuous mode
[  725.114443][T14576] bond_slave_1: left promiscuous mode
[  725.263830][T14576] gretap0: left promiscuous mode
[  725.306285][    T9] usb 2-1: Using ep0 maxpacket: 8
[  725.308831][    T9] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  725.308901][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  725.308932][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  725.308960][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  725.308987][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  725.309013][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  725.309058][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  725.309081][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.456447][ T5939] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  725.456510][ T5939] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  725.456528][ T5939] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  725.456625][ T5939] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  725.506367][ T5939] usb 6-1: USB disconnect, device number 22
[  725.630781][    T9] usb 2-1: GET_CAPABILITIES returned 13
[  725.630840][    T9] usbtmc 2-1:16.0: can't read capabilities
[  725.908795][T14611] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3023'.
[  725.908872][T14611] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3023'.
[  726.566171][T14621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.571409][T14621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.573649][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'.
[  726.687447][T14629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  726.688016][T14629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  726.846055][   T10] usb 2-1: USB disconnect, device number 90
[  726.995087][T14634] FAULT_INJECTION: forcing a failure.
[  726.995087][T14634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.995126][T14634] CPU: 0 UID: 0 PID: 14634 Comm: syz.5.3029 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  726.995157][T14634] Tainted: [L]=SOFTLOCKUP
[  726.995166][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  726.995179][T14634] Call Trace:
[  726.995188][T14634]  <TASK>
[  726.995198][T14634]  dump_stack_lvl+0xe8/0x150
[  726.995236][T14634]  should_fail_ex+0x46b/0x600
[  726.995272][T14634]  _copy_from_user+0x2d/0xb0
[  726.995295][T14634]  ___sys_sendmsg+0x1c6/0x360
[  726.995338][T14634]  ? __pfx____sys_sendmsg+0x10/0x10
[  726.995402][T14634]  ? __fget_files+0x2a/0x420
[  726.995430][T14634]  ? __fget_files+0x3a6/0x420
[  726.995469][T14634]  __x64_sys_sendmsg+0x1c3/0x2a0
[  726.995499][T14634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  726.995535][T14634]  ? __pfx_ksys_write+0x10/0x10
[  726.995580][T14634]  do_syscall_64+0x14d/0xf80
[  726.995604][T14634]  ? trace_irq_disable+0x3b/0x150
[  726.995630][T14634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.995653][T14634]  ? clear_bhb_loop+0x40/0x90
[  726.995685][T14634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  726.995707][T14634] RIP: 0033:0x7f26b1e7c819
[  726.995727][T14634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.995746][T14634] RSP: 002b:00007f26b00ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  726.995770][T14634] RAX: ffffffffffffffda RBX: 00007f26b20f5fa0 RCX: 00007f26b1e7c819
[  726.995786][T14634] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  726.995800][T14634] RBP: 00007f26b00ce090 R08: 0000000000000000 R09: 0000000000000000
[  726.995814][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.995826][T14634] R13: 00007f26b20f6038 R14: 00007f26b20f5fa0 R15: 00007ffddeaa05a8
[  726.995861][T14634]  </TASK>
[  726.998399][T14637] syz.0.3030 (14637): /proc/14635/oom_adj is deprecated, please use /proc/14635/oom_score_adj instead.
[  727.030890][T14637] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  727.030923][T14637] overlayfs: missing 'lowerdir'
[  727.426199][  T930] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  727.589761][  T930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.589841][  T930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.589889][  T930] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  727.598215][  T930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  727.598249][  T930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.598273][  T930] usb 2-1: Product: syz
[  727.598288][  T930] usb 2-1: Manufacturer: syz
[  727.598304][  T930] usb 2-1: SerialNumber: syz
[  728.798315][   T10] IPVS: starting estimator thread 0...
[  728.983312][T14653] IPVS: using max 7 ests per chain, 16800 per kthread
[  729.169165][T14648] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3033'.
[  729.524183][  T930] cdc_ncm 2-1:1.0: bind() failure
[  729.551067][  T930] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  729.551125][  T930] cdc_ncm 2-1:1.1: bind() failure
[  729.637253][T14658] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3036'.
[  729.637326][T14658] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3036'.
[  729.651434][  T930] usb 2-1: USB disconnect, device number 91
[  729.727345][T14648] could not allocate digest TFM handle xxhash64-generic
[  729.885787][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  730.036803][   T10] usb 6-1: Using ep0 maxpacket: 32
[  730.052398][   T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  730.052431][   T10] usb 6-1: config 0 has no interface number 0
[  730.052483][   T10] usb 6-1: config 0 interface 12 has no altsetting 0
[  730.054977][   T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  730.055008][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.055029][   T10] usb 6-1: Product: syz
[  730.055046][   T10] usb 6-1: Manufacturer: syz
[  730.055062][   T10] usb 6-1: SerialNumber: syz
[  730.061732][   T10] usb 6-1: config 0 descriptor??
[  730.175734][ T1846] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  730.288867][T14660] netlink: 'syz.5.3037': attribute type 8 has an invalid length.
[  730.288895][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3037'.
[  730.325983][ T1846] usb 1-1: Using ep0 maxpacket: 32
[  730.328401][ T1846] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  730.328429][ T1846] usb 1-1: config 0 has no interface number 0
[  730.328483][ T1846] usb 1-1: config 0 interface 12 has no altsetting 0
[  730.331560][ T1846] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  730.331589][ T1846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.331611][ T1846] usb 1-1: Product: syz
[  730.331628][ T1846] usb 1-1: Manufacturer: syz
[  730.331644][ T1846] usb 1-1: SerialNumber: syz
[  730.438220][ T1846] usb 1-1: config 0 descriptor??
[  730.601275][T14660] bond0: entered promiscuous mode
[  730.601890][T14660] bond_slave_0: entered promiscuous mode
[  730.603931][T14660] bond_slave_1: entered promiscuous mode
[  730.638258][T14660] gretap0: entered promiscuous mode
[  730.659217][ T1846] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  730.659281][ T1846] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  730.659300][ T1846] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  730.659403][ T1846] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  730.710865][ T1846] usb 1-1: USB disconnect, device number 80
[  730.717929][T14660] bond0: left promiscuous mode
[  730.717972][T14660] bond_slave_0: left promiscuous mode
[  730.719609][T14660] bond_slave_1: left promiscuous mode
[  730.817912][T14660] gretap0: left promiscuous mode
[  731.011612][   T10] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  731.011682][   T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  731.011703][   T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  731.011812][   T10] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  731.037831][   T10] usb 6-1: USB disconnect, device number 23
[  731.055727][T12330] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  731.247794][T12330] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  731.247827][T12330] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  731.247848][T12330] usb 4-1: config 0 has no interface number 0
[  731.247900][T12330] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  731.247930][T12330] usb 4-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid wMaxPacketSize 0
[  731.247955][T12330] usb 4-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  731.247985][T12330] usb 4-1: config 0 interface 11 has no altsetting 0
[  731.248021][T12330] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  731.248047][T12330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.269449][T12330] usb 4-1: config 0 descriptor??
[  731.290646][T12330] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected
[  731.290921][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87
[  731.360544][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81
[  731.360655][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82
[  731.360754][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1
[  731.360847][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2
[  731.369334][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85
[  731.369434][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5
[  731.377358][T12330] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  731.379802][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83
[  731.379889][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84
[  731.379995][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3
[  731.380077][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4
[  731.380160][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86
[  731.380243][T12330] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6
[  731.398609][T12330] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  731.554456][T14676] ip6gretap0: entered promiscuous mode
[  731.554691][T14676] vlan2: entered promiscuous mode
[  731.749161][T14684] FAULT_INJECTION: forcing a failure.
[  731.749161][T14684] name failslab, interval 1, probability 0, space 0, times 0
[  731.749202][T14684] CPU: 1 UID: 0 PID: 14684 Comm: syz.1.3042 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  731.749230][T14684] Tainted: [L]=SOFTLOCKUP
[  731.749238][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  731.749251][T14684] Call Trace:
[  731.749260][T14684]  <TASK>
[  731.749270][T14684]  dump_stack_lvl+0xe8/0x150
[  731.749316][T14684]  should_fail_ex+0x46b/0x600
[  731.749352][T14684]  should_failslab+0xa8/0x100
[  731.749377][T14684]  kmem_cache_alloc_lru_noprof+0x8b/0x680
[  731.749408][T14684]  ? alloc_inode+0xb8/0x1b0
[  731.749440][T14684]  alloc_inode+0xb8/0x1b0
[  731.749467][T14684]  create_pipe_files+0x51/0x7e0
[  731.749496][T14684]  __do_pipe_flags+0x46/0x1f0
[  731.749520][T14684]  do_pipe2+0xaa/0x190
[  731.749548][T14684]  ? __pfx_do_pipe2+0x10/0x10
[  731.749586][T14684]  __x64_sys_pipe+0x3a/0x50
[  731.749607][T14684]  do_syscall_64+0x14d/0xf80
[  731.749630][T14684]  ? trace_irq_disable+0x3b/0x150
[  731.749657][T14684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.749680][T14684]  ? clear_bhb_loop+0x40/0x90
[  731.749708][T14684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.749730][T14684] RIP: 0033:0x7f18f707c819
[  731.749751][T14684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.749770][T14684] RSP: 002b:00007f18f52ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016
[  731.749795][T14684] RAX: ffffffffffffffda RBX: 00007f18f72f6090 RCX: 00007f18f707c819
[  731.749811][T14684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[  731.749825][T14684] RBP: 00007f18f52ad090 R08: 0000000000000000 R09: 0000000000000000
[  731.749838][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  731.749851][T14684] R13: 00007f18f72f6128 R14: 00007f18f72f6090 R15: 00007ffea948b958
[  731.749883][T14684]  </TASK>
[  731.819650][    T9] usb 4-1: USB disconnect, device number 64
[  731.829613][T14687] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3048'.
[  731.829669][T14687] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3048'.
[  731.848181][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  731.872221][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  731.881645][    T9] keyspan 4-1:0.11: device disconnected
[  731.897069][T12330] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  732.060237][T12330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  732.060284][T12330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  732.060327][T12330] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  732.060353][T12330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.072389][T12330] usb 1-1: config 0 descriptor??
[  732.362460][T14691] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  733.620977][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621019][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621044][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621067][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621090][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621116][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.621139][T12330] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0
[  733.637241][T12330] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  733.666396][T14698] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3051'.
[  733.804155][T12330] cp2112 0003:10C4:EA90.002F: Part Number: 0x00 Device Version: 0x00
[  733.835564][ T5939] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  733.895483][T14703] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1)
[  733.902066][   T37] kauditd_printk_skb: 8 callbacks suppressed
[  733.902090][   T37] audit: type=1326 audit(2000000649.016:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.902224][   T37] audit: type=1326 audit(2000000649.016:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.906082][   T37] audit: type=1326 audit(2000000649.026:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.906558][   T37] audit: type=1326 audit(2000000649.026:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.906714][   T37] audit: type=1326 audit(2000000649.026:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.909808][   T37] audit: type=1326 audit(2000000649.026:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.910298][   T37] audit: type=1326 audit(2000000649.026:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.910773][   T37] audit: type=1326 audit(2000000649.026:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.911158][   T37] audit: type=1326 audit(2000000649.026:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  733.911578][   T37] audit: type=1326 audit(2000000649.026:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14701 comm="syz.2.3053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0708dc819 code=0x7ffc0000
[  734.048012][ T5939] usb 6-1: config 1 has an invalid interface number: 7 but max is 0
[  734.048045][ T5939] usb 6-1: config 1 has no interface number 0
[  734.048096][ T5939] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  734.048125][ T5939] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  734.048154][ T5939] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  734.051978][ T5939] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  734.052009][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.052031][ T5939] usb 6-1: Product: syz
[  734.052047][ T5939] usb 6-1: Manufacturer: syz
[  734.052063][ T5939] usb 6-1: SerialNumber: syz
[  735.326656][T12330] cp2112 0003:10C4:EA90.002F: error setting SMBus config
[  735.329780][T12330] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -71
[  735.332366][T14697] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  735.341959][T12330] usb 1-1: USB disconnect, device number 81
[  735.390543][T14702] fido_id[14702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  735.489955][ T5939] usb 6-1: Error in usbnet_get_endpoints (-71)
[  735.541872][ T5939] usb 6-1: USB disconnect, device number 24
[  735.729067][T14712] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3056'.
[  735.763632][T14710] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  736.830351][T14721] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3059'.
[  736.830443][T14721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3059'.
[  737.419823][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3060'.
[  737.608881][T14735] FAULT_INJECTION: forcing a failure.
[  737.608881][T14735] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  737.608924][T14735] CPU: 0 UID: 0 PID: 14735 Comm: syz.2.3064 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  737.608954][T14735] Tainted: [L]=SOFTLOCKUP
[  737.608962][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  737.608976][T14735] Call Trace:
[  737.608996][T14735]  <TASK>
[  737.609006][T14735]  dump_stack_lvl+0xe8/0x150
[  737.609046][T14735]  should_fail_ex+0x46b/0x600
[  737.609083][T14735]  _copy_from_user+0x2d/0xb0
[  737.609105][T14735]  io_submit_one+0xd3/0x14c0
[  737.609131][T14735]  ? irqentry_exit+0x59e/0x620
[  737.609156][T14735]  ? lockdep_hardirqs_on+0x7a/0x110
[  737.609179][T14735]  ? irqentry_exit+0x59e/0x620
[  737.609202][T14735]  ? trace_irq_disable+0x3b/0x150
[  737.609234][T14735]  ? __pfx_io_submit_one+0x10/0x10
[  737.609271][T14735]  ? __might_fault+0xaf/0x130
[  737.609299][T14735]  __se_sys_io_submit+0x195/0x340
[  737.609334][T14735]  ? __pfx___se_sys_io_submit+0x10/0x10
[  737.609364][T14735]  ? ksys_write+0x248/0x270
[  737.609416][T14735]  do_syscall_64+0x14d/0xf80
[  737.609440][T14735]  ? trace_irq_disable+0x3b/0x150
[  737.609467][T14735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.609490][T14735]  ? clear_bhb_loop+0x40/0x90
[  737.609517][T14735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  737.609540][T14735] RIP: 0033:0x7fd0708dc819
[  737.609561][T14735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  737.609582][T14735] RSP: 002b:00007fd06eb2e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  737.609607][T14735] RAX: ffffffffffffffda RBX: 00007fd070b55fa0 RCX: 00007fd0708dc819
[  737.609624][T14735] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 00007fd071694000
[  737.609640][T14735] RBP: 00007fd06eb2e090 R08: 0000000000000000 R09: 0000000000000000
[  737.609654][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  737.609667][T14735] R13: 00007fd070b56038 R14: 00007fd070b55fa0 R15: 00007fff61f5bff8
[  737.609703][T14735]  </TASK>
[  737.689166][T14737] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  737.934984][T14737] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3065'.
[  738.451212][T12330] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  738.555569][T14754] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  738.595186][T12330] usb 6-1: Using ep0 maxpacket: 16
[  738.600115][T12330] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  738.600177][T12330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  738.600208][T12330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  738.600230][T12330] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  738.600256][T12330] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  738.601787][T12330] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  738.601815][T12330] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  738.601836][T12330] usb 6-1: Manufacturer: syz
[  738.706549][T12330] usb 6-1: config 0 descriptor??
[  738.940536][T14760] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  740.345409][T14767] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3073'.
[  740.345475][T14767] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3073'.
[  740.495070][T12330] rc_core: IR keymap rc-hauppauge not found
[  740.495096][T12330] Registered IR keymap rc-empty
[  740.495262][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  740.716982][T14775] FAULT_INJECTION: forcing a failure.
[  740.716982][T14775] name failslab, interval 1, probability 0, space 0, times 0
[  740.717024][T14775] CPU: 1 UID: 0 PID: 14775 Comm: syz.0.3077 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  740.717055][T14775] Tainted: [L]=SOFTLOCKUP
[  740.717064][T14775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  740.717078][T14775] Call Trace:
[  740.717087][T14775]  <TASK>
[  740.717097][T14775]  dump_stack_lvl+0xe8/0x150
[  740.717137][T14775]  should_fail_ex+0x46b/0x600
[  740.717174][T14775]  should_failslab+0xa8/0x100
[  740.717201][T14775]  __kmalloc_noprof+0xdf/0x7b0
[  740.717221][T14775]  ? kfree+0x4d/0x6c0
[  740.717249][T14775]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  740.717285][T14775]  tomoyo_realpath_from_path+0xe3/0x5d0
[  740.717326][T14775]  ? tomoyo_path_number_perm+0x219/0x630
[  740.717351][T14775]  tomoyo_path_number_perm+0x246/0x630
[  740.717379][T14775]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  740.717407][T14775]  ? __lock_acquire+0x6b5/0x2cf0
[  740.717468][T14775]  ? __fget_files+0x2a/0x420
[  740.717502][T14775]  ? __fget_files+0x2a/0x420
[  740.717529][T14775]  ? __fget_files+0x3a6/0x420
[  740.717557][T14775]  ? __fget_files+0x2a/0x420
[  740.717591][T14775]  security_file_ioctl+0xc3/0x2a0
[  740.717619][T14775]  __se_sys_ioctl+0x47/0x170
[  740.717646][T14775]  do_syscall_64+0x14d/0xf80
[  740.717671][T14775]  ? trace_irq_disable+0x3b/0x150
[  740.717698][T14775]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.717722][T14775]  ? clear_bhb_loop+0x40/0x90
[  740.717750][T14775]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.717773][T14775] RIP: 0033:0x7f59aadcc819
[  740.717794][T14775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.717814][T14775] RSP: 002b:00007f59a901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  740.717838][T14775] RAX: ffffffffffffffda RBX: 00007f59ab045fa0 RCX: 00007f59aadcc819
[  740.717855][T14775] RDX: 0000200000000180 RSI: 0000000080286f4e RDI: 0000000000000003
[  740.717870][T14775] RBP: 00007f59a901e090 R08: 0000000000000000 R09: 0000000000000000
[  740.717885][T14775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.717899][T14775] R13: 00007f59ab046038 R14: 00007f59ab045fa0 R15: 00007ffdd5836648
[  740.717935][T14775]  </TASK>
[  740.717945][T14775] ERROR: Out of memory at tomoyo_realpath_from_path.
[  740.777484][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  740.796941][T12330] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  740.800742][T12330] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input68
[  741.899384][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  741.915065][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  741.945000][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  741.968685][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  741.985176][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.005475][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.025078][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.055374][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.057912][T14787] netlink: 'syz.5.3080': attribute type 17 has an invalid length.
[  742.057937][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3080'.
[  742.075015][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.093439][T14789] snd_virmidi snd_virmidi.0: control 0:0:0:syz0:0 is already present
[  742.095113][T12330] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  742.131688][T12330] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  742.131718][T12330] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  742.164034][T12330] usb 6-1: USB disconnect, device number 25
[  742.341829][T14787] bond0: option all_slaves_active: invalid value (44)
[  742.478509][T14792] dvmrp1: entered allmulticast mode
[  742.478656][T14789] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3082'.
[  742.949836][T14804] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3086'.
[  742.949876][T14804] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3086'.
[  743.164956][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'.
[  743.359403][T14811] vlan3: entered promiscuous mode
[  745.385074][T14837] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  745.767867][T14849] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3099'.
[  745.767949][T14849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3099'.
[  746.201427][T14855] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  746.217736][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3103'.
[  746.217762][T14863] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3103'.
[  746.217777][T14863] netlink: 'syz.5.3103': attribute type 3 has an invalid length.
[  746.217791][T14863] netlink: 'syz.5.3103': attribute type 2 has an invalid length.
[  746.217803][T14863] netlink: 31 bytes leftover after parsing attributes in process `syz.5.3103'.
[  746.382369][T14865] vlan3: entered promiscuous mode
[  746.382395][T14865] team0: entered promiscuous mode
[  747.290885][T14882] block nbd3: shutting down sockets
[  747.306261][T14880] FAULT_INJECTION: forcing a failure.
[  747.306261][T14880] name failslab, interval 1, probability 0, space 0, times 0
[  747.306300][T14880] CPU: 1 UID: 0 PID: 14880 Comm: syz.0.3112 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  747.306330][T14880] Tainted: [L]=SOFTLOCKUP
[  747.306339][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  747.306352][T14880] Call Trace:
[  747.306362][T14880]  <TASK>
[  747.306373][T14880]  dump_stack_lvl+0xe8/0x150
[  747.306414][T14880]  should_fail_ex+0x46b/0x600
[  747.306452][T14880]  should_failslab+0xa8/0x100
[  747.306477][T14880]  __kmalloc_noprof+0xdf/0x7b0
[  747.306498][T14880]  ? kfree+0x4d/0x6c0
[  747.306528][T14880]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  747.306565][T14880]  tomoyo_realpath_from_path+0xe3/0x5d0
[  747.306606][T14880]  ? tomoyo_path_number_perm+0x219/0x630
[  747.306630][T14880]  tomoyo_path_number_perm+0x246/0x630
[  747.306658][T14880]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  747.306685][T14880]  ? __lock_acquire+0x6b5/0x2cf0
[  747.306746][T14880]  ? __fget_files+0x2a/0x420
[  747.306780][T14880]  ? __fget_files+0x2a/0x420
[  747.306807][T14880]  ? __fget_files+0x3a6/0x420
[  747.306835][T14880]  ? __fget_files+0x2a/0x420
[  747.306883][T14880]  security_file_ioctl+0xc3/0x2a0
[  747.306911][T14880]  __se_sys_ioctl+0x47/0x170
[  747.306937][T14880]  do_syscall_64+0x14d/0xf80
[  747.306961][T14880]  ? trace_irq_disable+0x3b/0x150
[  747.306988][T14880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.307011][T14880]  ? clear_bhb_loop+0x40/0x90
[  747.307039][T14880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  747.307061][T14880] RIP: 0033:0x7f59aadcc819
[  747.307083][T14880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.307102][T14880] RSP: 002b:00007f59a901e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  747.307125][T14880] RAX: ffffffffffffffda RBX: 00007f59ab045fa0 RCX: 00007f59aadcc819
[  747.307142][T14880] RDX: 0000200000000440 RSI: 0000000040946400 RDI: 0000000000000003
[  747.307157][T14880] RBP: 00007f59a901e090 R08: 0000000000000000 R09: 0000000000000000
[  747.307171][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.307184][T14880] R13: 00007f59ab046038 R14: 00007f59ab045fa0 R15: 00007ffdd5836648
[  747.307220][T14880]  </TASK>
[  747.307356][T14880] ERROR: Out of memory at tomoyo_realpath_from_path.
[  747.578400][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  748.350101][T14889] fuse: Bad value for 'user_id'
[  748.350122][T14889] fuse: Bad value for 'user_id'
[  748.641033][T14902] net_ratelimit: 3 callbacks suppressed
[  748.641056][T14902] openvswitch: netlink: Tunnel attr 109 out of range max 16
[  748.789152][T14909] __nla_validate_parse: 1 callbacks suppressed
[  748.789179][T14909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3121'.
[  748.829257][T14909] vlan2: entered promiscuous mode
[  748.829283][T14909] team0: entered promiscuous mode
[  748.829298][T14909] team_slave_0: entered promiscuous mode
[  748.829551][T14909] team_slave_1: entered promiscuous mode
[  749.010500][T14907] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  749.102145][T14913] sctp: [Deprecated]: syz.2.3123 (pid 14913) Use of int in max_burst socket option.
[  749.102145][T14913] Use struct sctp_assoc_value instead
[  749.182109][T14913] vlan3: entered promiscuous mode
[  749.406707][ T1846] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  749.645807][T14924] FAULT_INJECTION: forcing a failure.
[  749.645807][T14924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  749.645851][T14924] CPU: 0 UID: 0 PID: 14924 Comm: syz.2.3128 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.645882][T14924] Tainted: [L]=SOFTLOCKUP
[  749.645890][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  749.645904][T14924] Call Trace:
[  749.645913][T14924]  <TASK>
[  749.645922][T14924]  dump_stack_lvl+0xe8/0x150
[  749.645962][T14924]  should_fail_ex+0x46b/0x600
[  749.645999][T14924]  _copy_from_user+0x2d/0xb0
[  749.646024][T14924]  __sys_bpf+0x229/0x950
[  749.646056][T14924]  ? __pfx___sys_bpf+0x10/0x10
[  749.646082][T14924]  ? rt_mutex_slowunlock+0x1cb/0x300
[  749.646142][T14924]  ? ksys_write+0x248/0x270
[  749.646179][T14924]  ? __pfx_ksys_write+0x10/0x10
[  749.646222][T14924]  __x64_sys_bpf+0x7c/0x90
[  749.646249][T14924]  do_syscall_64+0x14d/0xf80
[  749.646274][T14924]  ? trace_irq_disable+0x3b/0x150
[  749.646301][T14924]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.646323][T14924]  ? clear_bhb_loop+0x40/0x90
[  749.646351][T14924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  749.646374][T14924] RIP: 0033:0x7fd0708dc819
[  749.646402][T14924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  749.646421][T14924] RSP: 002b:00007fd06eb2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  749.646446][T14924] RAX: ffffffffffffffda RBX: 00007fd070b55fa0 RCX: 00007fd0708dc819
[  749.646463][T14924] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005
[  749.646479][T14924] RBP: 00007fd06eb2e090 R08: 0000000000000000 R09: 0000000000000000
[  749.646493][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  749.646508][T14924] R13: 00007fd070b56038 R14: 00007fd070b55fa0 R15: 00007fff61f5bff8
[  749.646544][T14924]  </TASK>
[  750.356354][ T1846] usb 6-1: Using ep0 maxpacket: 32
[  750.461010][ T5939] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  750.801316][ T1846] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  750.801351][ T1846] usb 6-1: config 0 has no interface number 0
[  750.801406][ T1846] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  750.807300][ T1846] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  750.807334][ T1846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.807356][ T1846] usb 6-1: Product: syz
[  750.807372][ T1846] usb 6-1: Manufacturer: syz
[  750.807388][ T1846] usb 6-1: SerialNumber: syz
[  750.841544][ T1846] usb 6-1: config 0 descriptor??
[  750.843047][T14914] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  751.076663][ T5939] usb 1-1: unable to get BOS descriptor or descriptor too short
[  751.086287][ T5939] usb 1-1: config 254 has an invalid interface number: 109 but max is 0
[  751.086320][ T5939] usb 1-1: config 254 has no interface number 0
[  751.086419][ T5939] usb 1-1: config 254 interface 109 has no altsetting 0
[  751.117627][ T5939] usb 1-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=9b.02
[  751.117712][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.117732][ T5939] usb 1-1: Product: syz
[  751.117746][ T5939] usb 1-1: Manufacturer: syz
[  751.117759][ T5939] usb 1-1: SerialNumber: syz
[  751.474470][ T5956] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  751.492633][ T5939] gspca_main: tv8532-2.14.0 probing 046d:0920
[  751.577774][T14940] FAULT_INJECTION: forcing a failure.
[  751.577774][T14940] name failslab, interval 1, probability 0, space 0, times 0
[  751.577819][T14940] CPU: 0 UID: 0 PID: 14940 Comm: syz.3.3133 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  751.577849][T14940] Tainted: [L]=SOFTLOCKUP
[  751.577857][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  751.577870][T14940] Call Trace:
[  751.577880][T14940]  <TASK>
[  751.577889][T14940]  dump_stack_lvl+0xe8/0x150
[  751.577929][T14940]  should_fail_ex+0x46b/0x600
[  751.577965][T14940]  should_failslab+0xa8/0x100
[  751.577991][T14940]  __kmalloc_noprof+0xdf/0x7b0
[  751.578010][T14940]  ? kfree+0x4d/0x6c0
[  751.578038][T14940]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  751.578083][T14940]  tomoyo_realpath_from_path+0xe3/0x5d0
[  751.578123][T14940]  ? tomoyo_path_number_perm+0x219/0x630
[  751.578146][T14940]  tomoyo_path_number_perm+0x246/0x630
[  751.578172][T14940]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  751.578200][T14940]  ? __lock_acquire+0x6b5/0x2cf0
[  751.578262][T14940]  ? __fget_files+0x2a/0x420
[  751.578293][T14940]  ? __fget_files+0x2a/0x420
[  751.578320][T14940]  ? __fget_files+0x3a6/0x420
[  751.578346][T14940]  ? __fget_files+0x2a/0x420
[  751.578378][T14940]  security_file_ioctl+0xc3/0x2a0
[  751.578405][T14940]  __se_sys_ioctl+0x47/0x170
[  751.578430][T14940]  do_syscall_64+0x14d/0xf80
[  751.578453][T14940]  ? trace_irq_disable+0x3b/0x150
[  751.578478][T14940]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.578500][T14940]  ? clear_bhb_loop+0x40/0x90
[  751.578529][T14940]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.578552][T14940] RIP: 0033:0x7efddd87c819
[  751.578574][T14940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.578592][T14940] RSP: 002b:00007efddbab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  751.578615][T14940] RAX: ffffffffffffffda RBX: 00007efdddaf6090 RCX: 00007efddd87c819
[  751.578630][T14940] RDX: 0000200000000180 RSI: 0000000000003b87 RDI: 0000000000000003
[  751.578645][T14940] RBP: 00007efddbab5090 R08: 0000000000000000 R09: 0000000000000000
[  751.578657][T14940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.578670][T14940] R13: 00007efdddaf6128 R14: 00007efdddaf6090 R15: 00007ffd6a7d1138
[  751.578706][T14940]  </TASK>
[  751.578861][T14940] ERROR: Out of memory at tomoyo_realpath_from_path.
[  751.600536][T14939] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  751.626686][ T5956] usb 3-1: Using ep0 maxpacket: 16
[  751.675501][ T5956] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  751.697914][ T5956] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25
[  751.697947][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.697968][ T5956] usb 3-1: Product: syz
[  751.697981][ T5956] usb 3-1: Manufacturer: syz
[  751.698053][ T5956] usb 3-1: SerialNumber: syz
[  751.748028][ T5939] usb 1-1: USB disconnect, device number 82
[  751.916732][ T5956] usb 3-1: config 0 descriptor??
[  751.992310][ T5956] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (046d:0721)
[  751.992335][ T5956] uvcvideo 3-1:0.0: No valid video chain found.
[  752.127443][    T9] usb 3-1: USB disconnect, device number 87
[  752.312026][T14914] orangefs_mount: mount request failed with -4
[  752.502861][T14946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3135'.
[  752.513777][T14946] vlan2: entered promiscuous mode
[  752.545198][ T1846] asix 6-1:0.188: probe with driver asix failed with error -71
[  752.634728][ T1846] usb 6-1: USB disconnect, device number 26
[  752.716532][T14950] bridge_slave_0: invalid flags given to default FDB implementation
[  752.727493][T14950] IPv6: addrconf: prefix option has invalid lifetime
[  752.907974][T14953] sctp: [Deprecated]: syz.2.3138 (pid 14953) Use of int in max_burst socket option.
[  752.907974][T14953] Use struct sctp_assoc_value instead
[  753.159456][ T1846] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  753.304400][ T1846] usb 2-1: Using ep0 maxpacket: 32
[  753.311027][ T1846] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  753.311069][ T1846] usb 2-1: config 0 has no interface number 0
[  753.311121][ T1846] usb 2-1: config 0 interface 12 has no altsetting 0
[  753.316148][ T1846] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  753.316179][ T1846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.316198][ T1846] usb 2-1: Product: syz
[  753.316212][ T1846] usb 2-1: Manufacturer: syz
[  753.316226][ T1846] usb 2-1: SerialNumber: syz
[  753.323372][ T1846] usb 2-1: config 0 descriptor??
[  753.339111][T14968] ./file0: Can't lookup blockdev
[  753.532246][T14955] netlink: 'syz.1.3139': attribute type 8 has an invalid length.
[  753.532272][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3139'.
[  753.654666][ T5955] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  753.808177][ T5955] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.808210][ T5955] usb 6-1: config 0 has no interfaces?
[  753.812817][ T5955] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  753.812909][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.813072][ T5955] usb 6-1: Product: syz
[  753.813090][ T5955] usb 6-1: Manufacturer: syz
[  753.813107][ T5955] usb 6-1: SerialNumber: syz
[  753.836396][ T5955] usb 6-1: config 0 descriptor??
[  753.928809][T14970] FAULT_INJECTION: forcing a failure.
[  753.928809][T14970] name failslab, interval 1, probability 0, space 0, times 0
[  753.928850][T14970] CPU: 0 UID: 0 PID: 14970 Comm: syz.3.3145 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  753.928880][T14970] Tainted: [L]=SOFTLOCKUP
[  753.928889][T14970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  753.928903][T14970] Call Trace:
[  753.928912][T14970]  <TASK>
[  753.928922][T14970]  dump_stack_lvl+0xe8/0x150
[  753.928959][T14970]  should_fail_ex+0x46b/0x600
[  753.929003][T14970]  should_failslab+0xa8/0x100
[  753.929028][T14970]  __kmalloc_noprof+0xdf/0x7b0
[  753.929047][T14970]  ? kfree+0x4d/0x6c0
[  753.929075][T14970]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  753.929109][T14970]  tomoyo_realpath_from_path+0xe3/0x5d0
[  753.929149][T14970]  ? tomoyo_path_number_perm+0x219/0x630
[  753.929173][T14970]  tomoyo_path_number_perm+0x246/0x630
[  753.929199][T14970]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  753.929223][T14970]  ? __lock_acquire+0x6b5/0x2cf0
[  753.929278][T14970]  ? __fget_files+0x2a/0x420
[  753.929305][T14970]  ? __fget_files+0x2a/0x420
[  753.929326][T14970]  ? __fget_files+0x3a6/0x420
[  753.929347][T14970]  ? __fget_files+0x2a/0x420
[  753.929374][T14970]  security_file_ioctl+0xc3/0x2a0
[  753.929397][T14970]  __se_sys_ioctl+0x47/0x170
[  753.929418][T14970]  do_syscall_64+0x14d/0xf80
[  753.929438][T14970]  ? trace_irq_disable+0x3b/0x150
[  753.929459][T14970]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.929478][T14970]  ? clear_bhb_loop+0x40/0x90
[  753.929500][T14970]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.929518][T14970] RIP: 0033:0x7efddd87c819
[  753.929537][T14970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.929553][T14970] RSP: 002b:00007efddbad6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  753.929574][T14970] RAX: ffffffffffffffda RBX: 00007efdddaf5fa0 RCX: 00007efddd87c819
[  753.929587][T14970] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003
[  753.929599][T14970] RBP: 00007efddbad6090 R08: 0000000000000000 R09: 0000000000000000
[  753.929610][T14970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  753.929621][T14970] R13: 00007efdddaf6038 R14: 00007efdddaf5fa0 R15: 00007ffd6a7d1138
[  753.929650][T14970]  </TASK>
[  753.929657][T14970] ERROR: Out of memory at tomoyo_realpath_from_path.
[  753.939382][ T1846] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  753.939440][ T1846] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  753.939456][ T1846] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  753.939549][ T1846] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  754.000191][ T1846] usb 2-1: USB disconnect, device number 92
[  754.110115][  T808] usb 6-1: USB disconnect, device number 27
[  754.536394][T14977] netlink: 'syz.3.3148': attribute type 11 has an invalid length.
[  754.769983][T14986] ubi31: attaching mtd0
[  754.804948][T14986] 
[  754.804964][T14986] ======================================================
[  754.804975][T14986] WARNING: possible circular locking dependency detected
[  754.804990][T14986] syzkaller #0 Tainted: G             L     
[  754.805003][T14986] ------------------------------------------------------
[  754.805012][T14986] syz.2.3151/14986 is trying to acquire lock:
[  754.805038][T14986] ffffffff8deee4a0 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x44/0x680
[  754.805105][T14986] 
[  754.805105][T14986] but task is already holding lock:
[  754.805112][T14986] ffffffff8ded27e0 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x58/0x450
[  754.805157][T14986] 
[  754.805157][T14986] which lock already depends on the new lock.
[  754.805157][T14986] 
[  754.805165][T14986] 
[  754.805165][T14986] the existing dependency chain (in reverse order) is:
[  754.805174][T14986] 
[  754.805174][T14986] -> #8 (slab_mutex){+.+.}-{4:4}:
[  754.805202][T14986]        mutex_lock_nested+0x5a/0x1d0
[  754.805231][T14986]        kmem_cache_destroy+0x64/0x170
[  754.805250][T14986]        p9_client_destroy+0x4c2/0x510
[  754.805272][T14986]        v9fs_session_close+0x4f/0x200
[  754.805295][T14986]        v9fs_kill_super+0x5c/0x90
[  754.805320][T14986]        deactivate_locked_super+0xbc/0x130
[  754.805343][T14986]        v9fs_get_tree+0x846/0xac0
[  754.805368][T14986]        vfs_get_tree+0x92/0x2a0
[  754.805384][T14986]        do_new_mount+0x341/0xd30
[  754.805406][T14986]        __se_sys_mount+0x31d/0x420
[  754.805427][T14986]        do_syscall_64+0x14d/0xf80
[  754.805447][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.805466][T14986] 
[  754.805466][T14986] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  754.805494][T14986]        cpus_read_lock+0x42/0x160
[  754.805518][T14986]        static_key_disable+0x12/0x20
[  754.805539][T14986]        __inet_hash_connect+0x2486/0x2490
[  754.805562][T14986]        tcp_v4_connect+0xd5f/0x19b0
[  754.805581][T14986]        __inet_stream_connect+0x25a/0xdd0
[  754.805597][T14986]        inet_stream_connect+0x66/0xa0
[  754.805614][T14986]        __sys_connect+0x315/0x450
[  754.805631][T14986]        __x64_sys_connect+0x7a/0x90
[  754.805649][T14986]        do_syscall_64+0x14d/0xf80
[  754.805668][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.805686][T14986] 
[  754.805686][T14986] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  754.805712][T14986]        lock_sock_nested+0x3e/0x130
[  754.805737][T14986]        inet_shutdown+0x6a/0x390
[  754.805755][T14986]        nbd_mark_nsock_dead+0x2e9/0x560
[  754.805775][T14986]        sock_shutdown+0x15e/0x260
[  754.805794][T14986]        nbd_clear_sock+0x24/0x170
[  754.805816][T14986]        nbd_ioctl+0x337/0xe40
[  754.805837][T14986]        blkdev_ioctl+0x5e6/0x750
[  754.805865][T14986]        __se_sys_ioctl+0xff/0x170
[  754.805883][T14986]        do_syscall_64+0x14d/0xf80
[  754.805904][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.805925][T14986] 
[  754.805925][T14986] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  754.805954][T14986]        mutex_lock_nested+0x5a/0x1d0
[  754.805981][T14986]        nbd_queue_rq+0x37b/0x1100
[  754.806003][T14986]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  754.806038][T14986]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  754.806064][T14986]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  754.806088][T14986]        blk_mq_run_hw_queue+0x368/0x520
[  754.806109][T14986]        blk_mq_dispatch_list+0xd1f/0xe20
[  754.806134][T14986]        blk_mq_flush_plug_list+0x48d/0x570
[  754.806160][T14986]        __blk_flush_plug+0x3ed/0x4d0
[  754.806186][T14986]        __submit_bio+0x28d/0x580
[  754.806212][T14986]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  754.806237][T14986]        block_read_full_folio+0x599/0x830
[  754.806260][T14986]        filemap_read_folio+0x137/0x3b0
[  754.806278][T14986]        do_read_cache_folio+0x2bf/0x560
[  754.806298][T14986]        read_part_sector+0xb8/0x2b0
[  754.806322][T14986]        adfspart_check_ICS+0xa5/0xa40
[  754.806347][T14986]        bdev_disk_changed+0x7ba/0x1550
[  754.806371][T14986]        blkdev_get_whole+0x2e5/0x480
[  754.806396][T14986]        bdev_open+0x31e/0xcc0
[  754.806419][T14986]        blkdev_open+0x485/0x620
[  754.806446][T14986]        do_dentry_open+0x83d/0x13e0
[  754.806469][T14986]        vfs_open+0x3b/0x350
[  754.806492][T14986]        path_openat+0x2e43/0x38a0
[  754.806521][T14986]        do_file_open+0x23e/0x4a0
[  754.806550][T14986]        do_sys_openat2+0x113/0x200
[  754.806575][T14986]        __x64_sys_openat+0x138/0x170
[  754.806599][T14986]        do_syscall_64+0x14d/0xf80
[  754.806621][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.806641][T14986] 
[  754.806641][T14986] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  754.806671][T14986]        mutex_lock_nested+0x5a/0x1d0
[  754.806698][T14986]        nbd_queue_rq+0xc6/0x1100
[  754.806720][T14986]        blk_mq_dispatch_rq_list+0xa77/0x1910
[  754.806745][T14986]        __blk_mq_sched_dispatch_requests+0xddb/0x1610
[  754.806771][T14986]        blk_mq_sched_dispatch_requests+0xda/0x1a0
[  754.806798][T14986]        blk_mq_run_hw_queue+0x368/0x520
[  754.806820][T14986]        blk_mq_dispatch_list+0xd1f/0xe20
[  754.806846][T14986]        blk_mq_flush_plug_list+0x48d/0x570
[  754.806872][T14986]        __blk_flush_plug+0x3ed/0x4d0
[  754.806897][T14986]        __submit_bio+0x28d/0x580
[  754.806924][T14986]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  754.806949][T14986]        block_read_full_folio+0x599/0x830
[  754.806971][T14986]        filemap_read_folio+0x137/0x3b0
[  754.806989][T14986]        do_read_cache_folio+0x2bf/0x560
[  754.807008][T14986]        read_part_sector+0xb8/0x2b0
[  754.807038][T14986]        adfspart_check_ICS+0xa5/0xa40
[  754.807063][T14986]        bdev_disk_changed+0x7ba/0x1550
[  754.807087][T14986]        blkdev_get_whole+0x2e5/0x480
[  754.807112][T14986]        bdev_open+0x31e/0xcc0
[  754.807136][T14986]        blkdev_open+0x485/0x620
[  754.807162][T14986]        do_dentry_open+0x83d/0x13e0
[  754.807185][T14986]        vfs_open+0x3b/0x350
[  754.807207][T14986]        path_openat+0x2e43/0x38a0
[  754.807236][T14986]        do_file_open+0x23e/0x4a0
[  754.807265][T14986]        do_sys_openat2+0x113/0x200
[  754.807289][T14986]        __x64_sys_openat+0x138/0x170
[  754.807314][T14986]        do_syscall_64+0x14d/0xf80
[  754.807335][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.807355][T14986] 
[  754.807355][T14986] -> #3 (set->srcu){.+.+}-{0:0}:
[  754.807383][T14986]        __synchronize_srcu+0xca/0x300
[  754.807414][T14986]        elevator_switch+0x1e8/0x7a0
[  754.807438][T14986]        elevator_change+0x2cc/0x450
[  754.807461][T14986]        elevator_set_default+0x36c/0x430
[  754.807487][T14986]        blk_register_queue+0x366/0x430
[  754.807513][T14986]        __add_disk+0x677/0xd50
[  754.807540][T14986]        add_disk_fwnode+0xfb/0x480
[  754.807569][T14986]        nbd_dev_add+0x72c/0xb50
[  754.807590][T14986]        nbd_init+0x168/0x1f0
[  754.807607][T14986]        do_one_initcall+0x250/0x8d0
[  754.807638][T14986]        do_initcall_level+0x104/0x190
[  754.807686][T14986]        do_initcalls+0x59/0xa0
[  754.807706][T14986]        kernel_init_freeable+0x2a6/0x3e0
[  754.807727][T14986]        kernel_init+0x1d/0x1d0
[  754.807753][T14986]        ret_from_fork+0x51e/0xb90
[  754.807781][T14986]        ret_from_fork_asm+0x1a/0x30
[  754.807799][T14986] 
[  754.807799][T14986] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  754.807830][T14986]        mutex_lock_nested+0x5a/0x1d0
[  754.807856][T14986]        elevator_change+0x1b3/0x450
[  754.807880][T14986]        elevator_set_none+0xb5/0x140
[  754.807903][T14986]        blk_mq_update_nr_hw_queues+0x607/0x1a80
[  754.807933][T14986]        nbd_start_device+0x17f/0xb20
[  754.807953][T14986]        nbd_genl_connect+0x1651/0x1c80
[  754.807974][T14986]        genl_family_rcv_msg_doit+0x22a/0x330
[  754.807997][T14986]        genl_rcv_msg+0x61c/0x7a0
[  754.808026][T14986]        netlink_rcv_skb+0x232/0x4b0
[  754.808055][T14986]        genl_rcv+0x28/0x40
[  754.808074][T14986]        netlink_unicast+0x831/0x9f0
[  754.808100][T14986]        netlink_sendmsg+0x813/0xb40
[  754.808129][T14986]        ____sys_sendmsg+0x94c/0x9c0
[  754.808151][T14986]        ___sys_sendmsg+0x2a5/0x360
[  754.808173][T14986]        __x64_sys_sendmsg+0x1c3/0x2a0
[  754.808195][T14986]        do_syscall_64+0x14d/0xf80
[  754.808216][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.808237][T14986] 
[  754.808237][T14986] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  754.808272][T14986]        blk_alloc_queue+0x54e/0x690
[  754.808294][T14986]        __blk_mq_alloc_disk+0x197/0x390
[  754.808321][T14986]        nbd_dev_add+0x499/0xb50
[  754.808342][T14986]        nbd_init+0x168/0x1f0
[  754.808359][T14986]        do_one_initcall+0x250/0x8d0
[  754.808388][T14986]        do_initcall_level+0x104/0x190
[  754.808409][T14986]        do_initcalls+0x59/0xa0
[  754.808428][T14986]        kernel_init_freeable+0x2a6/0x3e0
[  754.808448][T14986]        kernel_init+0x1d/0x1d0
[  754.808475][T14986]        ret_from_fork+0x51e/0xb90
[  754.808502][T14986]        ret_from_fork_asm+0x1a/0x30
[  754.808521][T14986] 
[  754.808521][T14986] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  754.808548][T14986]        __lock_acquire+0x15a5/0x2cf0
[  754.808567][T14986]        lock_acquire+0xf0/0x2e0
[  754.808584][T14986]        fs_reclaim_acquire+0x71/0x100
[  754.808604][T14986]        kmem_cache_alloc_noprof+0x44/0x680
[  754.808634][T14986]        __kmem_cache_create_args+0x301/0x450
[  754.808654][T14986]        ubi_attach+0x2c9/0x5030
[  754.808677][T14986]        ubi_attach_mtd_dev+0x1ab7/0x38e0
[  754.808703][T14986]        ctrl_cdev_ioctl+0x2fc/0x480
[  754.808729][T14986]        __se_sys_ioctl+0xff/0x170
[  754.808748][T14986]        do_syscall_64+0x14d/0xf80
[  754.808768][T14986]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.808788][T14986] 
[  754.808788][T14986] other info that might help us debug this:
[  754.808788][T14986] 
[  754.808796][T14986] Chain exists of:
[  754.808796][T14986]   fs_reclaim --> cpu_hotplug_lock --> slab_mutex
[  754.808796][T14986] 
[  754.808831][T14986]  Possible unsafe locking scenario:
[  754.808831][T14986] 
[  754.808838][T14986]        CPU0                    CPU1
[  754.808845][T14986]        ----                    ----
[  754.808853][T14986]   lock(slab_mutex);
[  754.808867][T14986]                                lock(cpu_hotplug_lock);
[  754.808883][T14986]                                lock(slab_mutex);
[  754.808899][T14986]   lock(fs_reclaim);
[  754.808914][T14986] 
[  754.808914][T14986]  *** DEADLOCK ***
[  754.808914][T14986] 
[  754.808920][T14986] 2 locks held by syz.2.3151/14986:
[  754.808933][T14986]  #0: ffffffff8e864598 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x298/0x480
[  754.808990][T14986]  #1: ffffffff8ded27e0 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x58/0x450
[  754.809048][T14986] 
[  754.809048][T14986] stack backtrace:
[  754.809064][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.2.3151 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  754.809094][T14986] Tainted: [L]=SOFTLOCKUP
[  754.809102][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  754.809116][T14986] Call Trace:
[  754.809125][T14986]  <TASK>
[  754.809134][T14986]  dump_stack_lvl+0xe8/0x150
[  754.809166][T14986]  print_circular_bug+0x2e1/0x300
[  754.809194][T14986]  check_noncircular+0x12e/0x150
[  754.809223][T14986]  __lock_acquire+0x15a5/0x2cf0
[  754.809255][T14986]  lock_acquire+0xf0/0x2e0
[  754.809274][T14986]  ? kmem_cache_alloc_noprof+0x44/0x680
[  754.809311][T14986]  fs_reclaim_acquire+0x71/0x100
[  754.809336][T14986]  ? kmem_cache_alloc_noprof+0x44/0x680
[  754.809362][T14986]  kmem_cache_alloc_noprof+0x44/0x680
[  754.809389][T14986]  ? __kmem_cache_create_args+0x301/0x450
[  754.809409][T14986]  ? __kmem_cache_create_args+0x58/0x450
[  754.809430][T14986]  __kmem_cache_create_args+0x301/0x450
[  754.809451][T14986]  ubi_attach+0x2c9/0x5030
[  754.809485][T14986]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  754.809518][T14986]  ? __pfx_ubi_attach+0x10/0x10
[  754.809545][T14986]  ? ubi_attach_mtd_dev+0x1a72/0x38e0
[  754.809570][T14986]  ? vmalloc_noprof+0xb2/0xe0
[  754.809603][T14986]  ubi_attach_mtd_dev+0x1ab7/0x38e0
[  754.809640][T14986]  ctrl_cdev_ioctl+0x2fc/0x480
[  754.809668][T14986]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  754.809692][T14986]  ? __fget_files+0x2a/0x420
[  754.809718][T14986]  ? __fget_files+0x2a/0x420
[  754.809743][T14986]  ? bpf_lsm_file_ioctl+0x9/0x20
[  754.809765][T14986]  ? __pfx_ctrl_cdev_ioctl+0x10/0x10
[  754.809789][T14986]  __se_sys_ioctl+0xff/0x170
[  754.809809][T14986]  do_syscall_64+0x14d/0xf80
[  754.809829][T14986]  ? trace_irq_disable+0x3b/0x150
[  754.809854][T14986]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.809876][T14986]  ? clear_bhb_loop+0x40/0x90
[  754.809898][T14986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.809919][T14986] RIP: 0033:0x7fd0708dc819
[  754.809962][T14986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.809982][T14986] RSP: 002b:00007fd06eb0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  754.810005][T14986] RAX: ffffffffffffffda RBX: 00007fd070b56090 RCX: 00007fd0708dc819
[  754.810029][T14986] RDX: 0000200000000440 RSI: 0000000040186f40 RDI: 0000000000000003
[  754.810044][T14986] RBP: 00007fd070972c91 R08: 0000000000000000 R09: 0000000000000000
[  754.810070][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  754.810083][T14986] R13: 00007fd070b56128 R14: 00007fd070b56090 R15: 00007fff61f5bff8
[  754.810107][T14986]  </TASK>
[  754.812237][T14986] ubi31: scanning is finished
[  754.812278][T14986] ubi31: empty MTD device detected
[  754.844259][ T1846] usb 4-1: new full-speed USB device number 65 using dummy_hcd
[  754.863889][T14989] sctp: [Deprecated]: syz.5.3152 (pid 14989) Use of int in max_burst socket option.
[  754.863889][T14989] Use struct sctp_assoc_value instead
[  754.874741][T14989] 8021q: VLANs not supported on vcan0
[  754.996235][ T1846] usb 4-1: unable to get BOS descriptor or descriptor too short
[  754.996827][ T1846] usb 4-1: not running at top speed; connect to a high speed hub
[  754.997851][ T1846] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  754.997874][ T1846] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  754.997892][ T1846] usb 4-1: config 4 has no interface number 0
[  755.000404][ T1846] usb 4-1: string descriptor 0 read error: -22
[  755.000490][ T1846] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  755.000513][ T1846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.025686][ T1846] uvcvideo 4-1:4.147: Found UVC 0.00 device <unnamed> (04f2:b746)
[  755.025727][ T1846] uvcvideo 4-1:4.147: No valid video chain found.
[  755.207684][ T1846] usb 4-1: USB disconnect, device number 65
[  755.263008][T14986] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  755.263032][T14986] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  755.263048][T14986] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  755.263064][T14986] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  755.263079][T14986] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  755.263093][T14986] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  755.263147][T14986] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1002982318
[  755.263166][T14986] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  755.263293][T14992] ubi31: background thread "ubi_bgt31d" started, PID 14992